Certificate

$ rpki-client -vvvf rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/5ufJDHY2LUCc0cpsRLrINSTV8C4.cer
File:                     5ufJDHY2LUCc0cpsRLrINSTV8C4.cer (raw, json)
Hash identifier:          PLNlFBfhvmRvqCwZWbN+ypYbX6gAXVFR1cEo6HS1HEE=
Subject key identifier:   E6:E7:C9:0C:76:36:2D:40:9C:D1:CA:6C:44:BA:C8:35:24:D5:F0:2E
Authority key identifier: 74:01:65:A8:0D:10:71:97:0A:BC:09:C0:2B:71:C1:AC:7C:1D:6E:0E
Certificate issuer:       /CN=A90DC5BE/serialNumber=740165A80D1071970ABC09C02B71C1AC7C1D6E0E
Certificate serial:       804F
Authority info access:    rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
Manifest:                 rsync://rpki.apnic.net/member_repository/A9111C7F/1C31F5F090ED11F1903363874A11F970/5ufJDHY2LUCc0cpsRLrINSTV8C4.mft
caRepository:             rsync://rpki.apnic.net/member_repository/A9111C7F/1C31F5F090ED11F1903363874A11F970/
Notify URL:               https://rrdp.apnic.net/notification.xml
Certificate not before:   Wed 05 Aug 2026 16:45:52 +0000
Certificate not after:    Thu 30 Sep 2027 00:00:00 +0000
Subordinate resources:    IP: 160.236.98.0/23
Validation:               OK
Signature path:           rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 02 Sep 2026 04:20:16 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 32847 (0x804f)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A90DC5BE, serialNumber=740165A80D1071970ABC09C02B71C1AC7C1D6E0E
        Validity
            Not Before: Aug  5 16:45:52 2026 GMT
            Not After : Sep 30 00:00:00 2027 GMT
        Subject: CN=A9111C7F, serialNumber=E6E7C90C76362D409CD1CA6C44BAC83524D5F02E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d1:9e:98:a5:36:e6:56:29:f8:a6:63:09:43:32:
                    3f:0f:e1:b6:16:6b:28:51:8e:43:cc:40:84:c1:73:
                    42:2f:30:ec:a4:20:6c:c1:5a:ca:70:2f:60:fa:66:
                    b7:cb:d9:bb:7b:90:d3:59:c2:43:de:6f:45:a0:08:
                    ae:cd:8c:70:f9:1d:f2:00:0b:5f:24:18:16:1f:b3:
                    ac:fa:b2:86:61:58:38:5c:4f:14:33:30:aa:ac:36:
                    cf:ee:fd:79:f9:af:89:c8:79:b1:de:e7:70:bb:aa:
                    f1:3e:57:df:9c:78:8a:4a:89:c6:39:7c:ef:da:d3:
                    ff:9e:95:57:c8:de:c0:97:a1:da:ab:ec:e3:aa:b8:
                    5b:e5:6b:ea:4b:40:e6:6e:81:8a:eb:68:84:f2:ec:
                    16:4a:6c:0a:19:59:2a:a8:8d:03:ca:c9:4f:84:5e:
                    1d:fd:f7:7a:8d:bc:7f:79:12:61:81:56:c0:32:3f:
                    6c:9f:b1:9a:1c:1c:6f:a9:d0:8b:bd:a3:19:61:a7:
                    05:c4:24:ab:c8:5c:ef:fb:1c:1d:bd:44:4b:3a:39:
                    1a:d7:46:8a:73:ad:e4:14:60:1a:84:14:29:f4:2a:
                    02:43:34:4d:e1:b4:00:df:bf:a8:09:cf:96:bb:21:
                    aa:3e:19:c1:b6:73:56:9d:ef:a5:d7:f9:8f:2b:16:
                    b6:b5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E6:E7:C9:0C:76:36:2D:40:9C:D1:CA:6C:44:BA:C8:35:24:D5:F0:2E
            X509v3 Authority Key Identifier:
                keyid:74:01:65:A8:0D:10:71:97:0A:BC:09:C0:2B:71:C1:AC:7C:1D:6E:0E

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                CA Repository - URI:rsync://rpki.apnic.net/member_repository/A9111C7F/1C31F5F090ED11F1903363874A11F970/
                RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A9111C7F/1C31F5F090ED11F1903363874A11F970/5ufJDHY2LUCc0cpsRLrINSTV8C4.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  160.236.98.0/23

    Signature Algorithm: sha256WithRSAEncryption
         07:39:94:f9:52:6d:e1:4c:c3:0e:69:b4:fc:9d:75:9d:11:0f:
         1f:70:a8:40:a5:f9:2a:0f:36:ef:12:2f:00:12:c5:25:54:96:
         ea:3d:28:27:e1:f8:1f:a0:16:ad:c7:af:9b:38:91:66:83:b1:
         5a:f9:de:94:1a:ab:89:fb:eb:cf:22:67:70:c2:82:75:97:8e:
         b8:e2:34:00:ae:1c:90:34:de:17:6e:ec:42:86:34:c3:f7:71:
         54:e8:af:47:b1:11:88:af:69:e4:9e:37:9c:4a:7d:9b:4c:b5:
         fd:55:12:b6:39:b5:a4:f1:52:d0:aa:d6:67:83:00:b9:05:a0:
         5a:d0:87:8d:57:62:64:00:c6:1f:2c:77:c3:ad:18:c0:3f:2b:
         0d:8d:d1:3a:f5:39:9e:69:0c:c5:4a:e1:51:36:58:46:ec:b3:
         6a:43:a6:a4:e9:7f:9f:20:36:49:15:00:94:0c:42:ff:38:57:
         89:ec:84:71:57:bb:58:e7:db:0c:f3:86:23:e5:4c:c8:a9:6f:
         37:8e:4b:49:97:60:7d:a9:a5:dd:a3:33:72:fd:65:9d:85:cd:
         5e:86:76:71:0f:29:13:b7:7e:c5:98:c8:8f:e4:cf:08:98:8d:
         8c:ae:16:38:db:5d:ef:67:ed:49:6d:aa:d0:ae:70:1a:a6:c8:
         a9:e0:d6:a6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 26 06:59:20 2026 by rpki-client