Certificate

$ rpki-client -vvvf rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/0Uee9gNB457KFy5DdkQ6Rxl1y-8.cer
File:                     0Uee9gNB457KFy5DdkQ6Rxl1y-8.cer (raw, json)
Hash identifier:          X9IoW93Qr3LwaL5b43MT6HldWuZs/0dh8sJU1Vvzry8=
Subject key identifier:   D1:47:9E:F6:03:41:E3:9E:CA:17:2E:43:76:44:3A:47:19:75:CB:EF
Authority key identifier: 74:01:65:A8:0D:10:71:97:0A:BC:09:C0:2B:71:C1:AC:7C:1D:6E:0E
Certificate issuer:       /CN=A90DC5BE/serialNumber=740165A80D1071970ABC09C02B71C1AC7C1D6E0E
Certificate serial:       8074
Authority info access:    rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
Manifest:                 rsync://rpki.apnic.net/member_repository/A91D1691/482BA1729D2411E7861A226BC4F9AE02/0Uee9gNB457KFy5DdkQ6Rxl1y-8.mft
caRepository:             rsync://rpki.apnic.net/member_repository/A91D1691/482BA1729D2411E7861A226BC4F9AE02/
Notify URL:               https://rrdp.apnic.net/notification.xml
Certificate not before:   Fri 07 Aug 2026 13:51:24 +0000
Certificate not after:    Sun 31 Oct 2027 00:00:00 +0000
Subordinate resources:    IP: 162.253.16.0/22
Validation:               OK
Signature path:           rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 12 Sep 2026 02:50:13 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 32884 (0x8074)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A90DC5BE, serialNumber=740165A80D1071970ABC09C02B71C1AC7C1D6E0E
        Validity
            Not Before: Aug  7 13:51:24 2026 GMT
            Not After : Oct 31 00:00:00 2027 GMT
        Subject: CN=A91D1691, serialNumber=D1479EF60341E39ECA172E4376443A471975CBEF
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e6:c8:b5:94:30:25:47:0c:34:a5:c1:00:a9:4a:
                    39:83:b4:f9:bf:3d:aa:aa:e4:e2:4f:af:f4:a5:63:
                    b2:26:6d:2e:2c:26:c3:95:e1:52:17:56:66:cf:71:
                    99:f4:60:53:e5:70:c8:b3:6c:83:12:e0:88:8b:33:
                    c7:f7:19:8b:fa:54:21:a8:a7:94:a4:e8:6e:fd:d5:
                    e9:28:fe:4b:f3:36:c5:10:0d:c0:fe:15:38:f1:02:
                    3a:0d:ca:6f:fb:2d:a6:93:c7:0b:1d:0d:0f:13:a3:
                    e2:1c:58:cc:07:c2:04:bc:46:f6:41:94:e9:29:c1:
                    2a:6a:4d:cd:39:e8:02:8f:e3:81:86:e5:c1:df:75:
                    d3:ed:a1:93:31:72:be:63:d5:cd:c5:09:32:03:03:
                    91:e7:da:8b:5f:73:59:83:34:58:e1:9c:70:57:2d:
                    69:a2:98:19:f3:cc:e2:62:c3:5c:39:eb:30:dd:48:
                    20:58:3f:7a:da:15:5d:ce:00:1e:9c:53:6e:23:0a:
                    d2:c4:78:63:3d:fc:18:dd:53:88:68:eb:66:a3:92:
                    9f:86:3f:04:a0:d8:ee:70:18:a4:ba:50:bd:b2:72:
                    83:b7:73:bf:b5:5d:cb:ab:12:21:b7:76:d9:18:22:
                    43:e1:fe:df:48:8d:1c:21:a4:56:72:78:a4:06:99:
                    57:c9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D1:47:9E:F6:03:41:E3:9E:CA:17:2E:43:76:44:3A:47:19:75:CB:EF
            X509v3 Authority Key Identifier:
                keyid:74:01:65:A8:0D:10:71:97:0A:BC:09:C0:2B:71:C1:AC:7C:1D:6E:0E

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                CA Repository - URI:rsync://rpki.apnic.net/member_repository/A91D1691/482BA1729D2411E7861A226BC4F9AE02/
                RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A91D1691/482BA1729D2411E7861A226BC4F9AE02/0Uee9gNB457KFy5DdkQ6Rxl1y-8.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  162.253.16.0/22

    Signature Algorithm: sha256WithRSAEncryption
         03:8a:86:3a:72:d4:89:8b:b7:bd:c6:42:c3:cf:27:2d:d9:a1:
         d8:8b:b6:70:29:33:81:e7:d6:9e:71:b5:12:5f:49:c8:22:bd:
         03:7a:82:bc:34:03:c4:17:d4:34:8f:fb:d3:b7:bd:6f:e8:e0:
         ee:3c:b8:d4:16:42:6c:33:27:31:a2:3b:a5:16:b2:03:22:25:
         7f:d1:c1:64:8f:69:ff:c8:2b:c9:f9:0c:b5:b4:12:52:66:f1:
         a2:1b:4f:2e:a6:55:e8:81:32:a6:05:37:ad:21:8a:ef:a2:91:
         f3:e3:f1:25:67:c7:0c:69:4c:31:4f:72:32:4f:20:02:77:d7:
         77:ef:b8:27:15:98:74:cb:09:c5:a1:47:93:82:1e:af:d5:6f:
         2f:25:8a:c5:fe:a1:87:88:7c:bb:e3:fa:ab:41:3c:ff:42:cc:
         45:46:12:e7:ca:db:42:18:cc:6d:8f:e4:f8:60:b0:32:b6:6b:
         a9:8e:29:18:55:91:46:20:d6:d2:e5:c8:6b:37:18:b1:52:4c:
         40:70:a6:0f:24:b7:51:8b:12:38:95:82:ba:7a:b5:57:b1:a8:
         9c:08:02:ee:82:c9:d4:27:86:f2:e9:82:b0:93:79:91:24:2f:
         ad:a7:63:9a:28:37:af:8c:84:cf:36:73:b0:2d:e4:e6:48:1f:
         c0:a9:63:2a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 5 05:18:25 2026 by rpki-client