Certificate

$ rpki-client -vvf rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/EbDkrf-4HKGqhOwIVoKc2DoGVeA.cer
File:                     EbDkrf-4HKGqhOwIVoKc2DoGVeA.cer (raw, json)
Hash identifier:          JiHjM4Wnrlx+UOpRYbfMNEyRi4pocAoDzIflAhXXwfM=
Subject key identifier:   11:B0:E4:AD:FF:B8:1C:A1:AA:84:EC:08:56:82:9C:D8:3A:06:55:E0
Authority key identifier: 74:01:65:A8:0D:10:71:97:0A:BC:09:C0:2B:71:C1:AC:7C:1D:6E:0E
Certificate issuer:       /CN=A90DC5BE/serialNumber=740165A80D1071970ABC09C02B71C1AC7C1D6E0E
Certificate serial:       7DDC
Authority info access:    rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
Manifest:                 rsync://rpki.apnic.net/member_repository/A91DDB11/6DB10EB8743511F1B2DFA29865A30FBC/EbDkrf-4HKGqhOwIVoKc2DoGVeA.mft
caRepository:             rsync://rpki.apnic.net/member_repository/A91DDB11/6DB10EB8743511F1B2DFA29865A30FBC/
Notify URL:               https://rrdp.apnic.net/notification.xml
Certificate not before:   Tue 30 Jun 2026 14:55:46 +0000
Certificate not after:    Thu 30 Sep 2027 00:00:00 +0000
Subordinate resources:    IP: 160.236.41.0/24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 24 Jul 2026 19:50:32 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 32220 (0x7ddc)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A90DC5BE, serialNumber=740165A80D1071970ABC09C02B71C1AC7C1D6E0E
        Validity
            Not Before: Jun 30 14:55:46 2026 GMT
            Not After : Sep 30 00:00:00 2027 GMT
        Subject: CN=A91DDB11, serialNumber=11B0E4ADFFB81CA1AA84EC0856829CD83A0655E0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:99:57:22:35:1d:4c:ec:cf:52:00:0e:9f:35:1b:
                    e1:06:47:fa:7a:e8:75:91:d0:d9:70:45:b8:ba:a6:
                    68:68:eb:a0:24:01:76:db:37:9c:50:02:98:cc:a0:
                    ca:7b:cd:29:96:5b:2d:b8:d0:2a:77:dc:02:d9:9a:
                    e6:88:a5:db:1e:43:dc:9f:7d:86:4f:05:70:35:bd:
                    74:80:61:78:cb:78:4b:86:91:cc:fe:95:f8:27:c1:
                    88:e5:ca:b0:db:52:11:17:dc:72:15:2c:ff:c2:86:
                    e5:7d:8f:52:29:3f:f4:7f:a0:f1:a6:b1:18:1f:20:
                    ee:0d:41:71:6a:1b:8b:4e:7f:32:9b:f7:7e:ba:1b:
                    0c:ff:d8:14:98:cd:de:1d:91:ad:bb:ae:e4:a4:ab:
                    16:0b:02:4c:de:8b:67:24:f3:cc:c2:df:e5:e7:ee:
                    9a:1d:9b:2f:c7:fa:ae:82:76:f4:c3:18:44:9e:44:
                    fd:1b:1b:32:96:c1:08:6f:6e:9d:27:c0:00:85:eb:
                    9d:68:74:b4:e5:d9:9f:bd:2c:a1:71:f3:94:fe:60:
                    e8:9d:58:2b:86:02:7f:6a:d7:be:23:2f:33:7e:c1:
                    1d:b6:5c:20:35:8e:66:90:83:9a:f0:d3:96:ff:5d:
                    d8:1a:71:b9:72:76:e0:a4:fc:d4:2a:87:21:ef:25:
                    c7:e3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                11:B0:E4:AD:FF:B8:1C:A1:AA:84:EC:08:56:82:9C:D8:3A:06:55:E0
            X509v3 Authority Key Identifier:
                keyid:74:01:65:A8:0D:10:71:97:0A:BC:09:C0:2B:71:C1:AC:7C:1D:6E:0E

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                CA Repository - URI:rsync://rpki.apnic.net/member_repository/A91DDB11/6DB10EB8743511F1B2DFA29865A30FBC/
                RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A91DDB11/6DB10EB8743511F1B2DFA29865A30FBC/EbDkrf-4HKGqhOwIVoKc2DoGVeA.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  160.236.41.0/24

    Signature Algorithm: sha256WithRSAEncryption
         01:42:e2:3b:0a:ae:2b:b1:b2:be:bc:5d:33:da:68:df:67:66:
         77:71:85:5a:43:2c:4d:5b:bb:f2:84:fe:cd:9c:5b:37:64:fb:
         ef:55:b1:06:2b:20:25:36:f2:2b:ad:29:25:6a:cd:24:a3:73:
         25:a4:f5:f7:bc:ee:92:dd:38:80:45:50:3c:96:ab:fb:37:91:
         0b:20:35:ba:bc:7b:fe:2f:9f:2c:65:a2:c5:d4:62:e1:b0:8a:
         ba:ef:a1:3e:18:40:a9:3b:a9:a3:e4:74:6e:e1:7c:a5:8c:b2:
         17:a5:a3:3e:bb:03:41:7d:50:73:10:46:6e:04:b8:d0:a4:de:
         ac:e2:d9:de:16:b1:2a:93:3a:be:ba:74:fe:86:d7:55:40:b0:
         57:5c:b6:6f:dd:5b:40:b0:b9:08:b7:37:69:aa:91:8a:31:79:
         84:61:d5:fc:00:79:5e:4a:b7:29:b8:22:5b:d0:47:db:3f:7c:
         10:df:91:05:9e:30:7e:9a:46:23:59:b9:c1:24:d4:24:04:b2:
         74:92:39:2e:7f:30:73:15:6f:c3:7b:e2:33:46:7b:31:85:d7:
         f8:12:97:87:f5:7c:cf:5a:85:8d:c3:ea:57:db:1e:ad:2b:99:
         97:7c:a5:d8:92:80:89:91:28:7b:e3:78:eb:39:77:9a:98:4a:
         c3:6d:b4:4f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 18 02:16:34 2026 by rpki-client