Certificate

$ rpki-client -vvf rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/BtTD6uQMf9AlUslwVVe7ElIwSxM.cer
File:                     BtTD6uQMf9AlUslwVVe7ElIwSxM.cer (raw, json)
Hash identifier:          ox9IZ8ufqeYug4IWbJz1Tg09Q6hXgfnlI9xhFe+Xj+A=
Subject key identifier:   06:D4:C3:EA:E4:0C:7F:D0:25:52:C9:70:55:57:BB:12:52:30:4B:13
Authority key identifier: 74:01:65:A8:0D:10:71:97:0A:BC:09:C0:2B:71:C1:AC:7C:1D:6E:0E
Certificate issuer:       /CN=A90DC5BE/serialNumber=740165A80D1071970ABC09C02B71C1AC7C1D6E0E
Certificate serial:       7D53
Authority info access:    rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
Manifest:                 rsync://rpki.apnic.net/member_repository/A9141292/FA8C3D766C4C11F1A8AAF10C6647A888/BtTD6uQMf9AlUslwVVe7ElIwSxM.mft
caRepository:             rsync://rpki.apnic.net/member_repository/A9141292/FA8C3D766C4C11F1A8AAF10C6647A888/
Notify URL:               https://rrdp.apnic.net/notification.xml
Certificate not before:   Sat 20 Jun 2026 02:08:54 +0000
Certificate not after:    Thu 30 Sep 2027 00:00:00 +0000
Subordinate resources:    IP: 160.236.12.0/24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 24 Jul 2026 19:50:32 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 32083 (0x7d53)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A90DC5BE, serialNumber=740165A80D1071970ABC09C02B71C1AC7C1D6E0E
        Validity
            Not Before: Jun 20 02:08:54 2026 GMT
            Not After : Sep 30 00:00:00 2027 GMT
        Subject: CN=A9141292, serialNumber=06D4C3EAE40C7FD02552C9705557BB1252304B13
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d1:1a:c5:37:8e:8f:26:f8:ce:86:21:2b:43:32:
                    12:3e:d3:6b:7b:a9:ba:f9:0f:f7:07:b9:09:d3:aa:
                    f9:3f:10:fa:86:4d:90:a8:18:9a:4c:a4:84:b1:69:
                    b8:40:86:48:20:fa:b1:93:fc:6f:4e:36:e4:b2:42:
                    a7:0f:1f:90:27:07:61:74:0c:c3:6e:2e:0c:aa:f1:
                    bf:13:12:43:c3:60:01:32:a8:d0:c9:f1:6f:18:19:
                    3d:20:04:67:cb:6e:1e:c8:a5:c1:f6:4c:f7:c2:ca:
                    58:91:c1:fb:b1:50:4a:7e:5f:e0:6e:b3:90:0b:01:
                    72:68:ec:30:58:35:ac:03:3e:f8:88:c5:6e:06:8a:
                    40:cd:47:7b:ef:8e:3e:c4:7a:0d:ed:f2:6a:20:51:
                    e2:0e:27:64:e7:02:ca:11:76:a4:72:a5:f6:9a:16:
                    e1:06:58:4b:e3:e4:5a:e0:74:a2:52:46:d2:f2:bc:
                    d9:d1:20:2e:9b:2f:75:17:c3:10:c5:bb:11:4f:48:
                    03:d0:09:ba:1e:00:8c:9a:8d:3d:7a:35:4a:22:b4:
                    60:5b:a6:d3:08:b4:a4:28:e8:5d:4c:65:c6:5d:2b:
                    94:34:47:f8:18:66:77:6d:c9:b2:c0:1b:f7:62:d5:
                    b8:ca:ef:2c:ea:e3:7a:ad:32:c6:06:0a:69:c6:29:
                    81:a9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                06:D4:C3:EA:E4:0C:7F:D0:25:52:C9:70:55:57:BB:12:52:30:4B:13
            X509v3 Authority Key Identifier:
                keyid:74:01:65:A8:0D:10:71:97:0A:BC:09:C0:2B:71:C1:AC:7C:1D:6E:0E

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                CA Repository - URI:rsync://rpki.apnic.net/member_repository/A9141292/FA8C3D766C4C11F1A8AAF10C6647A888/
                RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A9141292/FA8C3D766C4C11F1A8AAF10C6647A888/BtTD6uQMf9AlUslwVVe7ElIwSxM.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  160.236.12.0/24

    Signature Algorithm: sha256WithRSAEncryption
         75:9d:09:01:4d:b5:d7:ba:50:67:41:cd:d1:ea:5b:3e:c3:c9:
         a6:76:78:20:83:b9:55:eb:3d:25:97:25:4c:d4:d7:67:03:53:
         14:4d:b4:1e:88:c0:16:99:4a:f0:de:80:1b:51:61:fc:8f:7d:
         63:3e:45:06:45:7a:bb:37:5a:d6:c3:b3:0e:db:8e:9e:3b:3b:
         cd:ec:76:47:3e:f0:60:45:01:11:6e:b6:66:98:b4:64:f4:c4:
         6d:76:f6:2f:05:5a:ff:94:89:1a:6d:cf:60:d0:98:39:90:73:
         0f:d5:8d:06:27:be:23:82:77:ed:73:f9:18:9c:f6:b6:37:d2:
         b7:3a:30:10:5f:76:a7:90:c8:67:5b:7d:d6:9d:bb:f5:dd:21:
         0b:84:9d:7f:dd:23:6d:f4:7d:cf:98:c8:6b:a2:41:6b:63:4f:
         e0:fd:54:df:ac:00:3b:cf:41:51:b4:5d:27:51:f9:44:1d:cb:
         76:b0:c7:c3:6c:f8:23:aa:bf:7e:08:01:f4:41:b5:d6:a8:2f:
         65:f0:11:72:8b:1e:ca:b1:10:75:c0:b7:1b:ee:33:0c:c7:33:
         4c:4f:d7:8f:c8:51:b0:97:09:c2:34:78:33:7b:59:88:07:2b:
         e3:b6:e5:41:8f:49:3c:46:85:89:63:40:b9:8b:0a:12:e6:a9:
         c8:88:61:55
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 18 02:16:33 2026 by rpki-client