Certificate

$ rpki-client -vvf rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/4goGuYVhP9oaaujHZ7pLjX9yQFs.cer
File:                     4goGuYVhP9oaaujHZ7pLjX9yQFs.cer (raw, json)
Hash identifier:          2j6ID5nUtOaNN17GYytT2PI/Ct6A6oS1RasA1kgdjBs=
Subject key identifier:   E2:0A:06:B9:85:61:3F:DA:1A:6A:E8:C7:67:BA:4B:8D:7F:72:40:5B
Authority key identifier: 74:01:65:A8:0D:10:71:97:0A:BC:09:C0:2B:71:C1:AC:7C:1D:6E:0E
Certificate issuer:       /CN=A90DC5BE/serialNumber=740165A80D1071970ABC09C02B71C1AC7C1D6E0E
Certificate serial:       7E6A
Authority info access:    rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
Manifest:                 rsync://rpki.apnic.net/member_repository/A918B2BC/F089B9F07A8611F1ABF6630798A30FBC/4goGuYVhP9oaaujHZ7pLjX9yQFs.mft
caRepository:             rsync://rpki.apnic.net/member_repository/A918B2BC/F089B9F07A8611F1ABF6630798A30FBC/
Notify URL:               https://rrdp.apnic.net/notification.xml
Certificate not before:   Wed 08 Jul 2026 04:39:05 +0000
Certificate not after:    Thu 30 Sep 2027 00:00:00 +0000
Subordinate resources:    IP: 162.4.210.0/23
Validation:               OK
Signature path:           rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 24 Jul 2026 19:50:32 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 32362 (0x7e6a)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A90DC5BE, serialNumber=740165A80D1071970ABC09C02B71C1AC7C1D6E0E
        Validity
            Not Before: Jul  8 04:39:05 2026 GMT
            Not After : Sep 30 00:00:00 2027 GMT
        Subject: CN=A918B2BC, serialNumber=E20A06B985613FDA1A6AE8C767BA4B8D7F72405B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:33:3d:9d:04:45:46:94:9f:6f:17:88:c5:0f:
                    99:51:0c:21:1a:e2:8a:66:71:b1:aa:39:37:ec:b7:
                    91:09:14:6a:18:52:8a:1a:61:4f:1b:a9:85:33:8a:
                    54:80:2e:89:60:a6:43:72:20:91:1a:1a:22:15:86:
                    19:5b:1a:86:2b:1d:53:34:c8:95:b2:43:a5:4f:4f:
                    31:9c:32:5a:e7:31:9b:4d:2f:e7:b6:c5:f4:af:8a:
                    49:46:81:03:19:27:69:49:3b:5d:38:ea:61:c3:8a:
                    5f:ec:83:42:cd:fd:82:4e:c6:5d:fe:f6:f2:b8:93:
                    67:a3:02:37:50:ab:db:d8:ef:d7:3a:b0:87:8f:59:
                    36:2f:33:ad:96:70:6f:77:24:55:8b:e1:97:8f:03:
                    d1:7c:b9:7f:b8:a0:2b:b0:fd:f5:0c:84:f0:72:a8:
                    60:2f:36:70:dc:e9:9e:6e:f1:48:1f:2b:5d:bd:2e:
                    44:e8:48:a5:41:ea:40:06:f1:89:93:45:58:0c:a3:
                    00:05:e4:99:01:1c:2a:05:6d:dd:d4:ad:13:99:3f:
                    62:68:e5:24:73:9a:ea:5e:dc:1e:b9:b7:b3:06:fd:
                    5c:a3:e9:99:2d:36:cb:a2:89:c0:29:41:39:58:cb:
                    3e:1f:e1:95:27:e8:d9:70:aa:0b:2e:25:8f:42:8b:
                    63:db
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E2:0A:06:B9:85:61:3F:DA:1A:6A:E8:C7:67:BA:4B:8D:7F:72:40:5B
            X509v3 Authority Key Identifier:
                keyid:74:01:65:A8:0D:10:71:97:0A:BC:09:C0:2B:71:C1:AC:7C:1D:6E:0E

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                CA Repository - URI:rsync://rpki.apnic.net/member_repository/A918B2BC/F089B9F07A8611F1ABF6630798A30FBC/
                RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A918B2BC/F089B9F07A8611F1ABF6630798A30FBC/4goGuYVhP9oaaujHZ7pLjX9yQFs.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  162.4.210.0/23

    Signature Algorithm: sha256WithRSAEncryption
         6a:67:c9:aa:0a:3d:91:d8:20:a5:6a:23:ef:08:4a:a5:c0:a5:
         a9:b8:3e:f2:c2:71:0a:88:ef:5f:af:19:d0:16:d9:74:fa:88:
         49:fd:13:5c:69:f5:1b:47:3c:79:85:45:8c:81:9f:51:48:de:
         4e:35:10:1f:83:30:ad:7d:35:0e:b0:71:ed:3d:5b:5a:b3:1e:
         49:28:dd:a0:14:d2:dc:0e:6d:6a:98:ce:1c:ff:e7:17:d3:34:
         b4:b4:f4:1e:aa:11:7f:43:e9:d6:74:63:4c:6b:22:81:6f:a0:
         0c:a1:17:29:ef:5c:dd:54:f2:7d:71:cf:02:e0:5d:2a:a6:5e:
         46:be:61:62:8e:fc:93:bd:2e:c8:0d:3e:4b:36:4b:a0:a9:b9:
         94:36:a7:2f:91:e6:7b:2e:28:70:d2:f5:3f:e7:60:72:3f:06:
         ce:b9:0d:2c:af:4b:05:1c:b7:75:1f:9a:2c:d6:1d:3e:db:5f:
         b1:49:e4:8c:d8:b7:7b:d3:da:ba:3a:a8:86:51:89:09:09:64:
         4c:71:3f:39:69:35:69:03:bd:e6:d3:1f:dc:05:eb:85:78:e8:
         9d:46:8f:ad:db:39:8c:a4:9f:5c:87:23:49:b9:a5:37:42:15:
         86:73:32:c7:c3:b1:f7:9b:96:dd:39:d3:75:a1:a5:62:ed:a7:
         a9:8a:7c:0a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 18 02:16:35 2026 by rpki-client