Certificate

$ rpki-client -vvf rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/CXELW2Z0njOdEkzebWbONmrMq7A.cer
File:                     CXELW2Z0njOdEkzebWbONmrMq7A.cer (raw, json)
Hash identifier:          bV3D4cO5wRiyZiutSWT12GRx/trOaAkNyxlAk2gUFz8=
Subject key identifier:   09:71:0B:5B:66:74:9E:33:9D:12:4C:DE:6D:66:CE:36:6A:CC:AB:B0
Authority key identifier: 74:01:65:A8:0D:10:71:97:0A:BC:09:C0:2B:71:C1:AC:7C:1D:6E:0E
Certificate issuer:       /CN=A90DC5BE/serialNumber=740165A80D1071970ABC09C02B71C1AC7C1D6E0E
Certificate serial:       6BAF
Authority info access:    rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
Manifest:                 rsync://rpki.apnic.net/member_repository/A91E3F3C/A0D49CC89E9E11F090FF0D4FC4F9AE02/CXELW2Z0njOdEkzebWbONmrMq7A.mft
caRepository:             rsync://rpki.apnic.net/member_repository/A91E3F3C/A0D49CC89E9E11F090FF0D4FC4F9AE02/
Notify URL:               https://rrdp.apnic.net/notification.xml
Certificate not before:   Wed 01 Oct 2025 08:14:24 +0000
Certificate not after:    Tue 01 Dec 2026 00:00:00 +0000
Subordinate resources:    IP: 160.222.152.0/21
Validation:               OK
Signature path:           rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 25 Oct 2025 14:09:22 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 27567 (0x6baf)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A90DC5BE, serialNumber=740165A80D1071970ABC09C02B71C1AC7C1D6E0E
        Validity
            Not Before: Oct  1 08:14:24 2025 GMT
            Not After : Dec  1 00:00:00 2026 GMT
        Subject: CN=A91E3F3C, serialNumber=09710B5B66749E339D124CDE6D66CE366ACCABB0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:4b:d3:6e:46:80:fa:1b:0d:bf:dc:3c:87:0f:
                    cd:97:02:c2:b7:5d:c7:06:f7:aa:92:82:40:5e:65:
                    e0:a5:6a:31:ac:47:33:c2:1a:e0:0c:0c:06:81:d9:
                    ba:5f:99:3e:f9:36:87:18:3b:7d:7f:8a:46:1f:6e:
                    aa:dc:4b:c2:a4:68:f4:4e:f2:70:99:9f:af:ee:16:
                    e2:8a:e5:9b:8e:a5:0e:f2:eb:d0:10:44:db:3f:07:
                    af:dc:5d:2d:40:43:ad:c1:78:a3:01:a5:f8:75:c8:
                    36:f1:b1:82:7c:45:2d:81:bd:9f:9a:29:3e:19:4e:
                    61:dd:20:58:f2:53:aa:34:b6:d6:23:ec:f7:00:f1:
                    9f:e7:af:24:c9:e5:1e:e5:d5:d8:c5:fb:f2:5f:c5:
                    93:87:59:d0:b6:57:cc:ba:4e:20:01:22:82:52:78:
                    48:17:9d:63:f5:15:2b:f7:00:0e:12:f1:01:f7:39:
                    1d:7c:9c:a6:93:ea:98:e8:0b:61:1b:a4:40:6f:17:
                    d2:ed:12:6f:e9:44:93:32:79:6a:a1:36:e3:84:93:
                    6d:b2:41:12:74:61:e2:68:4f:01:5e:85:60:c0:b1:
                    5d:cb:bf:90:dd:81:22:81:d5:53:74:63:a8:ff:5b:
                    a2:66:8a:55:6a:e6:60:82:3b:e1:4a:85:f0:50:9a:
                    49:af
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                09:71:0B:5B:66:74:9E:33:9D:12:4C:DE:6D:66:CE:36:6A:CC:AB:B0
            X509v3 Authority Key Identifier:
                keyid:74:01:65:A8:0D:10:71:97:0A:BC:09:C0:2B:71:C1:AC:7C:1D:6E:0E

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                CA Repository - URI:rsync://rpki.apnic.net/member_repository/A91E3F3C/A0D49CC89E9E11F090FF0D4FC4F9AE02/
                RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A91E3F3C/A0D49CC89E9E11F090FF0D4FC4F9AE02/CXELW2Z0njOdEkzebWbONmrMq7A.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  160.222.152.0/21

    Signature Algorithm: sha256WithRSAEncryption
         4f:cc:3d:3b:13:e4:a7:00:c1:97:c9:37:91:57:da:ba:12:30:
         24:e1:ea:1c:24:7f:23:83:dc:54:34:5a:36:fc:6d:49:3c:98:
         c1:d9:67:7f:01:69:4b:37:f0:87:a5:89:11:d0:b1:9b:f0:25:
         09:e3:57:ac:ad:00:cb:f4:3b:4e:e5:3e:e7:a6:d4:07:79:93:
         0e:de:e3:65:96:f0:70:d0:ad:63:f6:c6:ec:42:a1:e6:c4:6c:
         51:50:79:f8:39:ea:8a:d7:43:d9:f3:09:a8:db:34:0b:01:3e:
         16:84:b3:cf:6d:1a:4e:48:f0:8a:a7:e6:a9:ef:71:dc:a3:94:
         3f:23:b6:59:14:98:13:e8:a7:6d:6d:a1:28:e9:ec:fc:01:e4:
         aa:04:42:a6:3a:97:9d:d5:a3:d6:d8:0f:e4:f9:fd:57:38:da:
         58:b4:ea:6d:5c:11:98:40:68:0a:9c:13:b2:b2:8d:a7:7d:9c:
         e3:7d:17:f1:58:2b:ac:55:ba:43:f1:2c:02:04:df:48:38:f3:
         f6:ad:af:d0:a3:18:f9:c1:9d:d2:3f:0d:e6:46:d3:b8:cf:78:
         06:b7:54:43:66:a8:6d:7f:fd:35:9b:b8:f6:68:df:9f:79:fc:
         d6:03:68:09:7f:2f:b7:cd:e4:d5:43:f8:be:11:30:88:11:ba:
         74:d1:09:1f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 18 15:50:03 2025 by rpki-client