Certificate

$ rpki-client -vvf rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/rjnJrCEn_qcOoyYOwW0giDxVdfU.cer
File:                     rjnJrCEn_qcOoyYOwW0giDxVdfU.cer (raw, json)
Hash identifier:          3pYqwh1pmtQEZYRIzEJALPXDx5DEfcKsccj45SDdbN4=
Subject key identifier:   AE:39:C9:AC:21:27:FE:A7:0E:A3:26:0E:C1:6D:20:88:3C:55:75:F5
Authority key identifier: 0C:FC:E7:78:57:FC:F0:1F:39:D9:9A:62:B4:AA:62:E6:15:9E:76:F8
Certificate issuer:       /CN=A90DC5BE/serialNumber=0CFCE77857FCF01F39D99A62B4AA62E6159E76F8
Certificate serial:       4FF0
Authority info access:    rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DPzneFf88B852ZpitKpi5hWedvg.cer
Manifest:                 rsync://rpki.apnic.net/member_repository/A915A8C3/FF947C84FDCF11F08AFC50016C6F56BC/rjnJrCEn_qcOoyYOwW0giDxVdfU.mft
caRepository:             rsync://rpki.apnic.net/member_repository/A915A8C3/FF947C84FDCF11F08AFC50016C6F56BC/
Notify URL:               https://rrdp.apnic.net/notification.xml
Certificate not before:   Fri 30 Jan 2026 11:37:07 +0000
Certificate not after:    Wed 31 Mar 2027 00:00:00 +0000
Subordinate resources:    IP: 151.158.112.0/23
Validation:               OK
Signature path:           rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.crl
                          rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DPzneFf88B852ZpitKpi5hWedvg.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 26 Feb 2026 14:50:27 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 20464 (0x4ff0)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A90DC5BE, serialNumber=0CFCE77857FCF01F39D99A62B4AA62E6159E76F8
        Validity
            Not Before: Jan 30 11:37:07 2026 GMT
            Not After : Mar 31 00:00:00 2027 GMT
        Subject: CN=A915A8C3, serialNumber=AE39C9AC2127FEA70EA3260EC16D20883C5575F5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:4d:8e:df:8c:57:7a:3b:c1:13:39:13:21:9e:
                    3c:0e:63:b2:73:58:0e:f0:9e:f6:62:31:24:35:04:
                    89:28:bd:97:ae:99:97:a2:c0:2a:89:24:83:f9:85:
                    49:b3:70:5b:19:47:92:64:b6:49:90:61:a6:7d:64:
                    73:fa:a3:83:78:84:02:cb:95:03:af:46:fc:df:27:
                    1d:7f:28:3e:d1:4e:b3:b6:82:57:fb:0d:a7:85:3b:
                    c5:78:a4:44:ec:6c:f5:84:51:36:60:5a:6e:78:f8:
                    39:34:12:e8:24:32:12:44:17:67:75:74:c8:10:33:
                    a0:69:fb:91:a2:13:fc:98:59:3a:e7:72:fc:ed:87:
                    89:5a:6c:33:7e:d9:55:95:1a:98:4f:75:dd:f3:02:
                    07:77:6e:c8:a8:72:da:1c:f6:7d:ce:a4:b8:ca:03:
                    c1:9b:f4:26:d3:08:a7:ce:a8:d4:54:65:1a:c5:64:
                    c3:8c:e4:89:43:e3:fe:aa:be:a0:ce:2a:2c:3b:4d:
                    df:5f:58:07:6d:ca:1a:0b:d8:f1:50:d8:b5:24:12:
                    91:9c:49:41:19:13:c1:1c:89:c8:49:32:12:4c:d8:
                    c7:bf:51:a1:7e:d7:5e:4e:1e:57:d0:ee:34:65:dd:
                    47:b2:9b:c9:0b:15:0c:33:f4:39:40:f8:ab:c9:ae:
                    0a:fb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AE:39:C9:AC:21:27:FE:A7:0E:A3:26:0E:C1:6D:20:88:3C:55:75:F5
            X509v3 Authority Key Identifier:
                keyid:0C:FC:E7:78:57:FC:F0:1F:39:D9:9A:62:B4:AA:62:E6:15:9E:76:F8

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DPzneFf88B852ZpitKpi5hWedvg.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                CA Repository - URI:rsync://rpki.apnic.net/member_repository/A915A8C3/FF947C84FDCF11F08AFC50016C6F56BC/
                RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A915A8C3/FF947C84FDCF11F08AFC50016C6F56BC/rjnJrCEn_qcOoyYOwW0giDxVdfU.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  151.158.112.0/23

    Signature Algorithm: sha256WithRSAEncryption
         42:f8:5a:6b:6a:30:0a:3b:15:ab:de:92:96:86:47:06:d2:dc:
         37:e0:ba:7c:92:4b:3e:1f:1e:09:bf:b9:4e:37:f5:7f:9a:28:
         e4:33:02:6d:7d:69:d7:bb:b3:9d:4d:7b:db:02:4d:e5:f4:22:
         e5:e4:89:a8:1f:6a:87:e4:c6:da:50:f1:93:f9:e2:80:63:15:
         40:01:35:41:db:7f:e4:2a:c1:65:ab:d5:d4:92:80:fe:ca:f9:
         3f:7c:4a:d6:1b:4d:0d:31:b7:d4:49:06:fa:7c:50:dc:cc:98:
         2f:a6:c5:de:8b:a7:47:bd:1b:54:12:4f:e2:2f:43:02:ec:c2:
         ee:85:0c:19:3d:84:4d:88:76:90:bd:ea:ab:d1:6b:12:5d:18:
         12:34:89:e3:18:37:fd:38:53:ce:4b:74:12:7d:02:4e:ad:3d:
         d8:d2:35:3d:84:c3:6b:83:2e:e4:08:a3:5a:7a:c4:10:8a:45:
         0e:14:4e:75:4e:eb:0f:76:e7:ae:55:0a:73:6b:17:3d:d4:86:
         7c:cb:cf:fc:ee:a7:07:4b:2c:73:b1:ae:44:9a:6c:e5:3f:80:
         58:24:77:a2:cc:13:f9:5d:7b:5b:09:b8:22:d8:9a:d8:5e:92:
         9f:65:1f:49:fb:57:d0:de:da:c7:25:73:f4:71:44:cb:42:6d:
         5a:21:51:f1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Feb 20 02:41:29 2026 by rpki-client