Certificate

$ rpki-client -vvf rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/3Hp9C5oBv4XomicX87lm2Z5F9-c.cer
File:                     3Hp9C5oBv4XomicX87lm2Z5F9-c.cer (raw, json)
Hash identifier:          wgOQvk/tZyEWQVLZ+0wxiGxTsO/kS448rA3/DRa+FeA=
Subject key identifier:   DC:7A:7D:0B:9A:01:BF:85:E8:9A:27:17:F3:B9:66:D9:9E:45:F7:E7
Authority key identifier: 74:01:65:A8:0D:10:71:97:0A:BC:09:C0:2B:71:C1:AC:7C:1D:6E:0E
Certificate issuer:       /CN=A90DC5BE/serialNumber=740165A80D1071970ABC09C02B71C1AC7C1D6E0E
Certificate serial:       7E88
Authority info access:    rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
Manifest:                 rsync://rpki.apnic.net/member_repository/A9198A90/4D83954C7B9311F1A6E76D196FA30FBC/3Hp9C5oBv4XomicX87lm2Z5F9-c.mft
caRepository:             rsync://rpki.apnic.net/member_repository/A9198A90/4D83954C7B9311F1A6E76D196FA30FBC/
Notify URL:               https://rrdp.apnic.net/notification.xml
Certificate not before:   Thu 09 Jul 2026 12:40:06 +0000
Certificate not after:    Tue 31 Aug 2027 00:00:00 +0000
Subordinate resources:    IP: 162.4.155.0/24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 24 Jul 2026 19:50:32 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 32392 (0x7e88)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A90DC5BE, serialNumber=740165A80D1071970ABC09C02B71C1AC7C1D6E0E
        Validity
            Not Before: Jul  9 12:40:06 2026 GMT
            Not After : Aug 31 00:00:00 2027 GMT
        Subject: CN=A9198A90, serialNumber=DC7A7D0B9A01BF85E89A2717F3B966D99E45F7E7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:74:3e:c8:10:88:5d:05:51:e5:b2:9b:ca:cc:
                    47:16:33:0f:58:da:6d:57:d8:53:16:8c:b1:28:4b:
                    3d:67:06:e6:38:0d:1d:84:97:6a:6f:e7:b4:c7:d0:
                    f7:a4:75:9f:16:2b:44:1b:e7:67:55:16:22:3b:c7:
                    d5:2b:7b:24:94:3d:03:9a:99:53:f3:ad:4c:48:0b:
                    29:45:15:e7:27:1f:1e:03:da:bb:db:e2:57:99:a7:
                    7a:ef:a8:8f:08:67:f7:a8:52:98:78:1a:2c:c6:91:
                    43:54:77:9d:a8:58:72:62:10:ce:80:44:05:06:8e:
                    7d:14:32:4a:f9:c7:cb:a9:3c:6c:a8:7c:c4:26:73:
                    00:ab:0b:03:66:30:88:1f:72:fb:f0:da:2d:9d:a5:
                    42:28:23:ae:95:d5:37:cf:3c:dc:ba:5c:2f:16:8d:
                    1f:08:54:07:af:7d:5a:c4:f7:27:68:2e:cd:9b:12:
                    24:13:74:53:11:31:05:fe:ad:e1:67:98:17:de:d7:
                    10:76:b2:57:22:aa:59:32:ca:c3:fd:84:1e:41:71:
                    3e:c2:cd:56:3b:65:ba:40:f2:7c:83:a3:58:45:b5:
                    ca:77:d2:45:a4:7c:a6:85:75:53:e4:a6:6f:56:42:
                    a5:29:b9:4b:86:5a:32:7d:35:86:1c:6d:23:56:4c:
                    92:31
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DC:7A:7D:0B:9A:01:BF:85:E8:9A:27:17:F3:B9:66:D9:9E:45:F7:E7
            X509v3 Authority Key Identifier:
                keyid:74:01:65:A8:0D:10:71:97:0A:BC:09:C0:2B:71:C1:AC:7C:1D:6E:0E

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                CA Repository - URI:rsync://rpki.apnic.net/member_repository/A9198A90/4D83954C7B9311F1A6E76D196FA30FBC/
                RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A9198A90/4D83954C7B9311F1A6E76D196FA30FBC/3Hp9C5oBv4XomicX87lm2Z5F9-c.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  162.4.155.0/24

    Signature Algorithm: sha256WithRSAEncryption
         0d:47:94:dc:8b:f5:c3:93:c3:86:3b:92:55:69:3b:90:04:20:
         22:c9:21:b4:f4:45:5b:e0:20:e2:23:2b:eb:11:79:46:17:7e:
         9d:ff:3b:d2:c0:9d:c6:06:11:ce:a2:0f:be:95:de:1d:94:f0:
         27:94:dd:2d:6c:c3:9e:52:51:0d:dc:33:31:f1:18:7d:1f:2b:
         ba:95:9b:7e:e9:db:d3:cb:db:ae:fb:80:4e:f9:15:ae:bc:81:
         e4:c6:9d:ce:fb:28:61:3e:cc:ad:6d:6d:36:cb:71:4a:ca:27:
         f7:31:00:46:fd:03:30:43:67:9d:73:42:a4:7f:e9:f6:81:1e:
         3a:a1:17:4a:82:57:88:e2:3e:1c:aa:ed:a5:c5:b4:c8:8a:1f:
         6b:bf:a1:cb:ee:e9:86:e0:a7:be:84:3f:db:f6:0c:82:78:f2:
         45:a0:af:45:5e:d2:28:92:3b:df:18:b1:2e:5f:dc:d0:60:b0:
         25:27:34:48:fc:e6:5b:3c:9e:14:88:ab:71:e8:d4:ec:7c:3d:
         d3:b2:32:c2:d7:b4:d0:0b:3f:19:a3:d0:4f:2e:48:23:33:d3:
         20:ef:f1:b1:35:1c:a5:40:66:ba:c3:85:54:89:8c:71:29:eb:
         12:51:9c:a2:9d:27:2b:2c:b9:12:19:06:24:a8:09:66:0c:4e:
         cc:7e:9d:22
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 18 02:16:34 2026 by rpki-client