Certificate

$ rpki-client -vvvf rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/BejGeyhlieCN1T6NfF_LGa17nWI.cer
File:                     BejGeyhlieCN1T6NfF_LGa17nWI.cer (raw, json)
Hash identifier:          xpZXykdFRUvG4OJdhqwaNFSwntrwszDWe1RiUkIMviw=
Subject key identifier:   05:E8:C6:7B:28:65:89:E0:8D:D5:3E:8D:7C:5F:CB:19:AD:7B:9D:62
Authority key identifier: 74:01:65:A8:0D:10:71:97:0A:BC:09:C0:2B:71:C1:AC:7C:1D:6E:0E
Certificate issuer:       /CN=A90DC5BE/serialNumber=740165A80D1071970ABC09C02B71C1AC7C1D6E0E
Certificate serial:       7FB4
Authority info access:    rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
Manifest:                 rsync://rpki.apnic.net/member_repository/A91930DA/1C06C24E8BEE11F1A8488A7A3911F970/BejGeyhlieCN1T6NfF_LGa17nWI.mft
caRepository:             rsync://rpki.apnic.net/member_repository/A91930DA/1C06C24E8BEE11F1A8488A7A3911F970/
Notify URL:               https://rrdp.apnic.net/notification.xml
Certificate not before:   Thu 30 Jul 2026 08:10:26 +0000
Certificate not after:    Sun 31 Oct 2027 00:00:00 +0000
Subordinate resources:    IP: 160.236.166.0/23
Validation:               OK
Signature path:           rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 02 Sep 2026 14:50:13 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 32692 (0x7fb4)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A90DC5BE, serialNumber=740165A80D1071970ABC09C02B71C1AC7C1D6E0E
        Validity
            Not Before: Jul 30 08:10:26 2026 GMT
            Not After : Oct 31 00:00:00 2027 GMT
        Subject: CN=A91930DA, serialNumber=05E8C67B286589E08DD53E8D7C5FCB19AD7B9D62
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:df:ff:db:e9:4f:72:bc:52:e4:7b:8c:72:e6:
                    a9:15:bf:36:58:4d:31:b4:5b:55:23:8f:51:3b:c5:
                    e5:69:79:0f:d5:e4:c6:b6:90:c8:ca:3b:76:d3:56:
                    a1:78:30:c1:f7:d8:e1:b9:01:03:f1:e5:f5:1a:9b:
                    5a:e8:d2:2a:c3:23:9f:94:90:45:df:95:78:ea:12:
                    fb:14:76:33:82:77:a4:ff:93:5a:37:cf:55:bb:b9:
                    59:af:0e:42:fe:46:4f:6c:92:bf:e1:60:42:2f:9d:
                    28:dc:28:04:2f:fc:64:01:98:f5:e3:15:89:fa:f8:
                    8d:43:ee:49:c1:2a:5a:13:a1:40:b3:53:1b:43:d2:
                    8e:55:c3:d0:db:aa:12:4e:a6:bb:c1:aa:63:13:f4:
                    4a:fd:55:33:97:73:6d:fd:4d:97:5d:6c:7d:68:cb:
                    85:54:43:63:9f:c8:b0:e1:a4:c9:9f:ab:4a:c1:85:
                    f2:37:c8:93:31:b5:ea:38:8a:84:27:ee:d7:ec:65:
                    75:90:5d:c9:07:87:c1:03:e5:69:e8:59:d8:15:61:
                    54:16:72:dd:6f:b3:1e:f5:17:77:32:fb:24:19:c9:
                    e8:4d:b8:e4:6c:5e:4a:46:30:80:80:a3:a8:5a:01:
                    77:af:d6:e7:5b:3d:78:f3:d2:59:5c:9a:a9:e2:af:
                    6d:eb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                05:E8:C6:7B:28:65:89:E0:8D:D5:3E:8D:7C:5F:CB:19:AD:7B:9D:62
            X509v3 Authority Key Identifier:
                keyid:74:01:65:A8:0D:10:71:97:0A:BC:09:C0:2B:71:C1:AC:7C:1D:6E:0E

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                CA Repository - URI:rsync://rpki.apnic.net/member_repository/A91930DA/1C06C24E8BEE11F1A8488A7A3911F970/
                RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A91930DA/1C06C24E8BEE11F1A8488A7A3911F970/BejGeyhlieCN1T6NfF_LGa17nWI.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  160.236.166.0/23

    Signature Algorithm: sha256WithRSAEncryption
         c1:1c:7c:b6:83:62:b8:93:3e:e2:a3:c7:08:bd:e6:8a:3c:6e:
         2f:12:e1:5f:9d:48:8e:e0:73:fd:6e:98:ef:97:81:23:94:12:
         1b:b7:16:04:d2:fb:3b:52:31:4f:93:e4:e4:d1:dd:8c:dc:70:
         50:49:9d:5f:75:14:33:ce:78:55:be:4a:6d:71:5a:e6:da:6b:
         0f:8c:3a:af:c4:74:c8:05:99:1a:57:08:45:1c:b4:d4:5c:c0:
         aa:24:56:db:25:bf:d6:53:f9:aa:6b:94:f0:28:07:bb:33:d3:
         13:15:a9:ba:19:c2:1a:17:f6:a1:f9:72:ca:e0:48:85:ae:7d:
         76:b2:6a:2e:76:bb:ed:d6:b9:af:d7:f7:b7:27:c0:ee:90:18:
         0e:d8:dd:bb:e5:1b:f6:87:bd:7b:9e:33:e9:6d:fd:66:f5:32:
         7e:21:b1:b4:c4:c2:8f:d6:00:38:c7:25:a8:d6:04:cc:12:02:
         4f:27:ff:f9:14:a0:29:e9:36:c1:c2:22:d5:7c:e0:38:e8:2d:
         0a:6b:25:1e:7b:ca:aa:df:66:d6:e1:2a:7c:ce:d0:98:ee:55:
         fd:f8:70:fe:d7:91:a5:a9:46:12:6f:e7:37:16:53:4e:20:17:
         b9:58:9e:96:67:92:ff:a9:58:69:23:9b:0a:8d:66:f6:c2:3b:
         de:da:01:00
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 26 17:23:39 2026 by rpki-client