Certificate

$ rpki-client -vvvf rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/62HLzdtR6alUgo8dcysrkQCwBE8.cer
File:                     62HLzdtR6alUgo8dcysrkQCwBE8.cer (raw, json)
Hash identifier:          9i5VlL2ClW8sh0FQoRpZQx++P2qoCE/Yvh9tSsiMv3Y=
Subject key identifier:   EB:61:CB:CD:DB:51:E9:A9:54:82:8F:1D:73:2B:2B:91:00:B0:04:4F
Authority key identifier: 74:01:65:A8:0D:10:71:97:0A:BC:09:C0:2B:71:C1:AC:7C:1D:6E:0E
Certificate issuer:       /CN=A90DC5BE/serialNumber=740165A80D1071970ABC09C02B71C1AC7C1D6E0E
Certificate serial:       7F97
Authority info access:    rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
Manifest:                 rsync://rpki.apnic.net/member_repository/A9129F26/710FE4848B0111F19365C7626D11F970/62HLzdtR6alUgo8dcysrkQCwBE8.mft
caRepository:             rsync://rpki.apnic.net/member_repository/A9129F26/710FE4848B0111F19365C7626D11F970/
Notify URL:               https://rrdp.apnic.net/notification.xml
Certificate not before:   Wed 29 Jul 2026 03:56:17 +0000
Certificate not after:    Sun 31 Oct 2027 00:00:00 +0000
Subordinate resources:    IP: 160.236.182.0/23
Validation:               OK
Signature path:           rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 01 Sep 2026 14:50:13 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 32663 (0x7f97)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A90DC5BE, serialNumber=740165A80D1071970ABC09C02B71C1AC7C1D6E0E
        Validity
            Not Before: Jul 29 03:56:17 2026 GMT
            Not After : Oct 31 00:00:00 2027 GMT
        Subject: CN=A9129F26, serialNumber=EB61CBCDDB51E9A954828F1D732B2B9100B0044F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9e:91:ed:fe:7b:e6:ad:0c:df:43:64:86:b1:29:
                    f0:56:9d:08:75:be:f7:e2:11:10:7d:71:5b:b4:a3:
                    98:df:9c:ca:99:4e:14:83:a1:18:61:16:05:7e:29:
                    77:be:9d:f9:87:02:d2:27:36:af:a5:b6:da:1a:c5:
                    a1:64:44:4e:17:c5:00:2b:64:13:f5:17:c8:d1:c1:
                    c0:9e:c3:7e:9e:7d:6d:5e:25:f0:83:21:9c:d4:ce:
                    d1:5c:8c:04:ad:cc:da:3f:cc:65:dd:79:0a:92:50:
                    00:0d:3b:80:69:d5:a3:42:b9:b0:11:f0:95:13:e4:
                    72:96:1c:7c:da:df:14:da:47:a6:63:12:7e:67:3c:
                    22:f8:03:01:ac:c0:39:ba:41:1f:b9:87:d5:d4:d8:
                    69:fc:fd:3b:f5:e0:b7:e3:57:b4:ee:11:6f:e0:13:
                    a9:13:aa:cd:e9:9d:2c:4f:2d:0e:90:f1:90:87:d0:
                    9e:57:5d:f3:95:c8:c5:db:51:c0:8d:3f:8e:b0:93:
                    0c:ea:ca:e4:7e:38:ad:e4:b9:3b:a2:67:09:ba:b0:
                    1d:4d:06:93:24:84:94:48:1f:15:0f:0c:6a:d3:79:
                    f0:a0:29:39:7e:64:5c:68:9b:4e:e3:08:66:89:f6:
                    65:9c:94:30:8e:09:d2:90:5a:f2:c1:46:2e:e9:f7:
                    a8:75
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EB:61:CB:CD:DB:51:E9:A9:54:82:8F:1D:73:2B:2B:91:00:B0:04:4F
            X509v3 Authority Key Identifier:
                keyid:74:01:65:A8:0D:10:71:97:0A:BC:09:C0:2B:71:C1:AC:7C:1D:6E:0E

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                CA Repository - URI:rsync://rpki.apnic.net/member_repository/A9129F26/710FE4848B0111F19365C7626D11F970/
                RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A9129F26/710FE4848B0111F19365C7626D11F970/62HLzdtR6alUgo8dcysrkQCwBE8.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  160.236.182.0/23

    Signature Algorithm: sha256WithRSAEncryption
         bf:51:cd:fb:7e:f5:b5:32:45:ae:27:73:ab:a1:4c:f1:30:64:
         f3:b0:9e:16:8e:72:f2:f5:34:51:29:92:e9:bf:7f:a0:03:a4:
         90:87:1e:89:9d:3f:6b:6b:60:51:f8:a7:f2:84:48:51:5b:b6:
         de:9d:4c:64:0a:3b:ad:dd:f5:b9:04:d0:0d:ca:03:59:1f:b1:
         fe:0d:91:b2:a9:64:df:96:a4:1c:4c:ce:da:68:7c:ea:ae:f1:
         45:12:06:c0:b2:30:cd:27:f4:32:b4:35:1a:c0:33:c0:27:96:
         95:ce:54:f1:a7:80:98:f4:2a:84:a6:1f:ec:3f:d1:5e:d6:68:
         41:d1:28:00:2e:85:bc:44:ec:be:f6:07:72:ad:cd:52:b2:25:
         3d:58:d5:90:f5:10:72:c9:91:db:b7:e0:0c:ec:9e:9e:17:b8:
         a6:d5:cf:74:19:36:a6:80:8c:2f:6f:99:45:c8:26:cf:40:f6:
         3f:89:e3:7c:df:d5:3a:8c:9e:29:a4:e4:ed:f9:3b:9a:21:df:
         65:1d:41:52:56:fc:1d:9b:fa:95:67:68:ac:b0:81:74:38:d5:
         cf:55:b3:bd:4a:45:8c:8c:bb:9e:e5:b6:9b:e2:8e:6f:1f:23:
         a5:c5:5d:b2:e9:d5:0c:52:7b:d7:a6:82:43:20:56:76:e7:f3:
         32:5a:98:5f
-----BEGIN CERTIFICATE-----
MIIF/TCCBOWgAwIBAgICf5cwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkw
REM1QkUxMTAvBgNVBAUTKDc0MDE2NUE4MEQxMDcxOTcwQUJDMDlDMDJCNzFDMUFD
N0MxRDZFMEUwHhcNMjYwNzI5MDM1NjE3WhcNMjcxMDMxMDAwMDAwWjBGMREwDwYD
VQQDEwhBOTEyOUYyNjExMC8GA1UEBRMoRUI2MUNCQ0REQjUxRTlBOTU0ODI4RjFE
NzMyQjJCOTEwMEIwMDQ0RjCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEB
AJ6R7f575q0M30NkhrEp8FadCHW+9+IREH1xW7SjmN+cyplOFIOhGGEWBX4pd76d
+YcC0ic2r6W22hrFoWREThfFACtkE/UXyNHBwJ7Dfp59bV4l8IMhnNTO0VyMBK3M
2j/MZd15CpJQAA07gGnVo0K5sBHwlRPkcpYcfNrfFNpHpmMSfmc8IvgDAazAObpB
H7mH1dTYafz9O/Xgt+NXtO4Rb+ATqROqzemdLE8tDpDxkIfQnldd85XIxdtRwI0/
jrCTDOrK5H44reS5O6JnCbqwHU0GkySElEgfFQ8MatN58KApOX5kXGibTuMIZon2
ZZyUMI4J0pBa8sFGLun3qHUCAwEAAaOCAvMwggLvMB0GA1UdDgQWBBTrYcvN21Hp
qVSCjx1zKyuRALAETzAfBgNVHSMEGDAWgBR0AWWoDRBxlwq8CcArccGsfB1uDjAO
BgNVHQ8BAf8EBAMCAQYwDwYDVR0TAQH/BAUwAwEB/zBzBgNVHR8EbDBqMGigZqBk
hmJyc3luYzovL3Jwa2kuYXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRGMjAxRDY2
MTFFMjhBQzg4MzdDNzJGRDFGRjIvZEFGbHFBMFFjWmNLdkFuQUszSEJySHdkYmc0
LmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5h
cG5pYy5uZXQvcmVwb3NpdG9yeS85ODA2NTJFMEI3N0UxMUU3QTk2QTM5NTIxQTRG
NEZCNC9kQUZscUEwUWNaY0t2QW5BSzNIQnJId2RiZzQuY2VyMEoGA1UdIAEB/wRA
MD4wPAYIKwYBBQUHDgIwMDAuBggrBgEFBQcCARYiaHR0cHM6Ly93d3cuYXBuaWMu
bmV0L1JQS0kvQ1BTLnBkZjCCASgGCCsGAQUFBwELBIIBGjCCARYwXwYIKwYBBQUH
MAWGU3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
MjlGMjYvNzEwRkU0ODQ4QjAxMTFGMTkzNjVDNzYyNkQxMUY5NzAvMH4GCCsGAQUF
BzAKhnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5
MTI5RjI2LzcxMEZFNDg0OEIwMTExRjE5MzY1Qzc2MjZEMTFGOTcwLzYySEx6ZHRS
NmFsVWdvOGRjeXNya1FDd0JFOC5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJk
cC5hcG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAfBggrBgEFBQcBBwEB/wQQMA4w
DAQCAAEwBgMEAaDstjANBgkqhkiG9w0BAQsFAAOCAQEAv1HN+371tTJFridzq6FM
8TBk87CeFo5y8vU0USmS6b9/oAOkkIceiZ0/a2tgUfin8oRIUVu23p1MZAo7rd31
uQTQDcoDWR+x/g2Rsqlk35akHEzO2mh86q7xRRIGwLIwzSf0MrQ1GsAzwCeWlc5U
8aeAmPQqhKYf7D/RXtZoQdEoAC6FvETsvvYHcq3NUrIlPVjVkPUQcsmR27fgDOye
nhe4ptXPdBk2poCML2+ZRcgmz0D2P4njfN/VOoyeKaTk7fk7miHfZR1BUlb8HZv6
lWdorLCBdDjVz1WzvUpFjIy7nuW2m+KObx8jpcVdsunVDFJ716aCQyBWdufzMlqY
Xw==
-----END CERTIFICATE-----
Generated at Tue Aug 25 20:36:30 2026 by rpki-client