Certificate

$ rpki-client -vvf rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/8iz473at_fLPnv7b7BITSIY1b00.cer
File:                     8iz473at_fLPnv7b7BITSIY1b00.cer (raw, json)
Hash identifier:          api3SebOKpCVA4GihyC0i0KnZEhMz1OeB1LdiuOsKMM=
Subject key identifier:   F2:2C:F8:EF:76:AD:FD:F2:CF:9E:FE:DB:EC:12:13:48:86:35:6F:4D
Authority key identifier: 74:01:65:A8:0D:10:71:97:0A:BC:09:C0:2B:71:C1:AC:7C:1D:6E:0E
Certificate issuer:       /CN=A90DC5BE/serialNumber=740165A80D1071970ABC09C02B71C1AC7C1D6E0E
Certificate serial:       7E80
Authority info access:    rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
Manifest:                 rsync://rpki.apnic.net/member_repository/A91E1604/09A112343CEB11EF94E24F59C4F9AE02/8iz473at_fLPnv7b7BITSIY1b00.mft
caRepository:             rsync://rpki.apnic.net/member_repository/A91E1604/09A112343CEB11EF94E24F59C4F9AE02/
Notify URL:               https://rrdp.apnic.net/notification.xml
Certificate not before:   Wed 08 Jul 2026 14:45:39 +0000
Certificate not after:    Thu 30 Sep 2027 00:00:00 +0000
Subordinate resources:    IP: 160.22.184.0/23
Validation:               OK
Signature path:           rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 24 Jul 2026 19:50:32 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 32384 (0x7e80)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A90DC5BE, serialNumber=740165A80D1071970ABC09C02B71C1AC7C1D6E0E
        Validity
            Not Before: Jul  8 14:45:39 2026 GMT
            Not After : Sep 30 00:00:00 2027 GMT
        Subject: CN=A91E1604, serialNumber=F22CF8EF76ADFDF2CF9EFEDBEC12134886356F4D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:2b:85:66:2a:a8:62:11:d5:93:a7:eb:82:36:
                    94:db:3b:44:99:f7:20:f2:fd:f4:84:6e:61:21:d0:
                    ee:1b:19:ce:9c:84:b0:27:9e:95:20:83:2c:7d:78:
                    e7:52:7c:95:d8:55:a0:06:25:3c:26:ae:2a:d5:ae:
                    81:dd:c5:39:0b:2c:76:51:00:1d:fb:2e:83:7f:80:
                    80:aa:dc:f8:f6:9b:d5:f9:55:a5:80:bb:ec:75:3a:
                    44:05:90:1a:28:84:05:76:34:c7:ca:68:39:9d:3e:
                    6b:35:6d:4a:33:30:ce:e3:c2:93:a5:05:ce:08:29:
                    c3:93:b0:ac:41:9c:64:1f:ce:56:7a:c2:e9:4c:9e:
                    f8:b5:69:9a:bb:64:ca:c0:fd:70:69:1a:8f:3c:4f:
                    8e:a6:4a:76:49:35:0e:2e:26:ca:39:a8:bb:96:a3:
                    ab:a4:75:77:cf:df:51:7a:44:1f:aa:15:e1:15:b7:
                    4f:0a:53:10:49:15:6f:56:be:35:bb:54:49:67:a0:
                    1a:3f:12:b6:79:2d:a2:67:c4:4f:57:3e:d0:dd:07:
                    66:6e:94:47:9e:d4:11:9a:fc:32:61:ef:b0:14:44:
                    2f:21:dd:25:3e:11:71:19:b3:38:a6:67:3b:9e:59:
                    30:0c:d0:21:92:e6:64:2d:2a:ba:60:c5:71:67:04:
                    e7:11
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F2:2C:F8:EF:76:AD:FD:F2:CF:9E:FE:DB:EC:12:13:48:86:35:6F:4D
            X509v3 Authority Key Identifier:
                keyid:74:01:65:A8:0D:10:71:97:0A:BC:09:C0:2B:71:C1:AC:7C:1D:6E:0E

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                CA Repository - URI:rsync://rpki.apnic.net/member_repository/A91E1604/09A112343CEB11EF94E24F59C4F9AE02/
                RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A91E1604/09A112343CEB11EF94E24F59C4F9AE02/8iz473at_fLPnv7b7BITSIY1b00.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  160.22.184.0/23

    Signature Algorithm: sha256WithRSAEncryption
         18:90:14:a3:2a:44:49:b9:15:47:4e:b9:26:b0:c7:60:fa:3e:
         fe:a5:3d:ea:e9:49:9e:85:be:96:d6:3f:3d:ad:62:3c:66:d1:
         1d:53:cf:9a:44:39:17:d6:0f:e5:c3:01:82:31:81:55:64:c3:
         3c:00:55:cb:9e:c4:cf:5e:a5:f8:17:78:e7:be:99:15:2f:d8:
         aa:b9:5e:94:91:8e:10:72:9b:aa:ee:18:3f:8b:c6:bf:ca:b3:
         97:de:e2:cb:fb:4b:fe:2f:a4:ea:5c:d0:29:c7:f3:af:dd:36:
         37:50:3d:5b:3e:b8:e9:98:89:73:96:e7:fe:7c:b2:c9:5e:5a:
         78:f9:88:f8:ce:6e:d2:47:4f:72:1a:13:00:09:a3:af:f0:09:
         7e:52:76:5d:8f:72:b1:a8:a1:67:ea:ee:b7:32:dc:a6:0a:2f:
         b7:1c:0e:69:06:f4:9e:7a:66:2c:99:1b:1a:dc:4f:2d:6c:86:
         ea:ba:f0:16:02:6e:f5:53:7e:d9:96:70:a8:e6:73:da:f4:fe:
         a2:a8:bd:5a:f7:55:de:d3:1e:62:ad:74:44:62:f5:37:ec:66:
         44:60:dc:20:e6:5e:fa:a6:a7:96:ba:1b:af:5b:e4:2c:02:71:
         5b:56:c4:c2:92:70:81:bd:ce:7d:aa:23:ff:3f:2d:61:9a:8d:
         fd:b7:33:ee
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 18 02:18:35 2026 by rpki-client