Certificate

$ rpki-client -vvf rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/M4rb8cC2l609XDM4P-XhuFzxgck.cer
File:                     M4rb8cC2l609XDM4P-XhuFzxgck.cer (raw, json)
Hash identifier:          GhNt6tCGF3Eu7yHPKG3qlYCPbKsJw11uRfjn10izHvM=
Subject key identifier:   33:8A:DB:F1:C0:B6:97:AD:3D:5C:33:38:3F:E5:E1:B8:5C:F1:81:C9
Authority key identifier: 74:01:65:A8:0D:10:71:97:0A:BC:09:C0:2B:71:C1:AC:7C:1D:6E:0E
Certificate issuer:       /CN=A90DC5BE/serialNumber=740165A80D1071970ABC09C02B71C1AC7C1D6E0E
Certificate serial:       7EC8
Authority info access:    rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
Manifest:                 rsync://rpki.apnic.net/member_repository/A919852D/E1006B88803E11F1916EF3D76CA30FBC/M4rb8cC2l609XDM4P-XhuFzxgck.mft
caRepository:             rsync://rpki.apnic.net/member_repository/A919852D/E1006B88803E11F1916EF3D76CA30FBC/
Notify URL:               https://rrdp.apnic.net/notification.xml
Certificate not before:   Wed 15 Jul 2026 11:18:22 +0000
Certificate not after:    Sun 31 Oct 2027 00:00:00 +0000
Subordinate resources:    IP: 160.236.96.0/23
Validation:               OK
Signature path:           rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 24 Jul 2026 19:50:32 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 32456 (0x7ec8)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A90DC5BE, serialNumber=740165A80D1071970ABC09C02B71C1AC7C1D6E0E
        Validity
            Not Before: Jul 15 11:18:22 2026 GMT
            Not After : Oct 31 00:00:00 2027 GMT
        Subject: CN=A919852D, serialNumber=338ADBF1C0B697AD3D5C33383FE5E1B85CF181C9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:c2:d7:89:ec:7e:b9:41:3d:04:7b:a0:49:da:
                    ce:7b:90:b1:d8:26:2b:ac:cd:93:80:d2:4e:2f:39:
                    07:b4:fd:e7:09:d8:e0:60:33:9a:f9:a1:72:2d:3f:
                    60:20:ca:c4:7d:11:d9:a4:06:ba:36:de:8f:58:97:
                    29:b2:02:8f:8e:19:bb:de:96:2b:65:b1:ad:7a:2b:
                    2f:f7:c2:ba:5d:8b:b8:de:e1:3c:f7:9f:8d:85:1e:
                    4c:cb:27:91:58:83:36:42:ce:72:30:06:1a:b4:1a:
                    5d:c3:ba:76:fd:00:87:3f:13:d8:c6:d8:6a:aa:69:
                    d7:7a:1d:71:68:cf:f3:7b:c7:65:b1:37:31:41:23:
                    c3:97:ce:ff:af:c7:d7:a3:fa:6a:b2:ef:d5:c6:8e:
                    7d:1e:11:7d:88:b5:76:09:e6:8d:3f:27:e2:fb:f8:
                    e5:89:2b:08:5e:c6:6d:0a:b4:b2:58:52:40:2a:54:
                    81:57:f9:9d:fe:81:4e:1b:05:c1:71:e8:5f:f3:38:
                    15:b2:aa:96:34:8f:88:00:32:a1:33:15:bd:32:04:
                    73:98:de:54:3b:5d:e1:fd:b6:bd:80:e4:79:b5:b1:
                    b1:dd:69:5d:8b:00:f7:0a:4f:27:dc:ae:b4:de:03:
                    d4:b0:34:54:cc:97:8d:c8:c7:71:76:cf:e1:b2:5d:
                    b7:cd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                33:8A:DB:F1:C0:B6:97:AD:3D:5C:33:38:3F:E5:E1:B8:5C:F1:81:C9
            X509v3 Authority Key Identifier:
                keyid:74:01:65:A8:0D:10:71:97:0A:BC:09:C0:2B:71:C1:AC:7C:1D:6E:0E

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                CA Repository - URI:rsync://rpki.apnic.net/member_repository/A919852D/E1006B88803E11F1916EF3D76CA30FBC/
                RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A919852D/E1006B88803E11F1916EF3D76CA30FBC/M4rb8cC2l609XDM4P-XhuFzxgck.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  160.236.96.0/23

    Signature Algorithm: sha256WithRSAEncryption
         b0:1a:38:5b:44:67:ff:99:63:e7:4f:65:09:e7:6f:4b:f5:20:
         a9:68:8f:a0:c0:37:4c:e4:60:6d:b2:d4:68:f4:1a:42:01:4d:
         f3:a6:b6:84:f3:1f:89:64:ab:87:79:6f:4e:b1:a0:7a:3c:f3:
         a7:1f:97:76:a0:13:19:de:5e:06:ef:73:93:a5:41:77:a2:08:
         28:c7:12:30:24:75:61:02:bc:c9:27:ac:c8:9a:82:81:b3:c0:
         38:f4:07:8d:b0:2e:60:86:0f:d2:5e:e0:ba:8b:fa:d3:35:f2:
         b5:4b:d2:ff:e3:98:d0:f5:50:63:e4:3e:ce:a0:36:ce:40:f2:
         eb:73:29:25:ff:f5:57:26:30:9c:2a:f5:6b:fe:71:56:38:11:
         04:00:0c:12:43:26:9d:89:77:23:ca:ae:b3:01:c0:7c:e8:5f:
         b3:0c:28:c5:37:1b:c2:69:cc:12:36:16:44:2f:50:f6:8a:b3:
         e6:ef:1e:fc:58:76:94:bc:0b:98:0c:47:0e:cc:5a:02:d5:55:
         ac:85:a2:b0:9a:49:a8:89:d2:3e:62:8b:48:6b:9d:50:9b:63:
         8e:df:76:9c:77:61:0c:f9:0b:9f:d6:f4:1a:a0:be:db:c2:e1:
         52:32:45:2a:3e:2c:f4:fc:71:9a:ab:22:bb:2b:83:81:47:ee:
         f5:c9:a2:65
-----BEGIN CERTIFICATE-----
MIIF/TCCBOWgAwIBAgICfsgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkw
REM1QkUxMTAvBgNVBAUTKDc0MDE2NUE4MEQxMDcxOTcwQUJDMDlDMDJCNzFDMUFD
N0MxRDZFMEUwHhcNMjYwNzE1MTExODIyWhcNMjcxMDMxMDAwMDAwWjBGMREwDwYD
VQQDEwhBOTE5ODUyRDExMC8GA1UEBRMoMzM4QURCRjFDMEI2OTdBRDNENUMzMzM4
M0ZFNUUxQjg1Q0YxODFDOTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEB
ALbC14nsfrlBPQR7oEnaznuQsdgmK6zNk4DSTi85B7T95wnY4GAzmvmhci0/YCDK
xH0R2aQGujbej1iXKbICj44Zu96WK2WxrXorL/fCul2LuN7hPPefjYUeTMsnkViD
NkLOcjAGGrQaXcO6dv0Ahz8T2MbYaqpp13odcWjP83vHZbE3MUEjw5fO/6/H16P6
arLv1caOfR4RfYi1dgnmjT8n4vv45YkrCF7GbQq0slhSQCpUgVf5nf6BThsFwXHo
X/M4FbKqljSPiAAyoTMVvTIEc5jeVDtd4f22vYDkebWxsd1pXYsA9wpPJ9yutN4D
1LA0VMyXjcjHcXbP4bJdt80CAwEAAaOCAvMwggLvMB0GA1UdDgQWBBQzitvxwLaX
rT1cMzg/5eG4XPGByTAfBgNVHSMEGDAWgBR0AWWoDRBxlwq8CcArccGsfB1uDjAO
BgNVHQ8BAf8EBAMCAQYwDwYDVR0TAQH/BAUwAwEB/zBzBgNVHR8EbDBqMGigZqBk
hmJyc3luYzovL3Jwa2kuYXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRGMjAxRDY2
MTFFMjhBQzg4MzdDNzJGRDFGRjIvZEFGbHFBMFFjWmNLdkFuQUszSEJySHdkYmc0
LmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5h
cG5pYy5uZXQvcmVwb3NpdG9yeS85ODA2NTJFMEI3N0UxMUU3QTk2QTM5NTIxQTRG
NEZCNC9kQUZscUEwUWNaY0t2QW5BSzNIQnJId2RiZzQuY2VyMEoGA1UdIAEB/wRA
MD4wPAYIKwYBBQUHDgIwMDAuBggrBgEFBQcCARYiaHR0cHM6Ly93d3cuYXBuaWMu
bmV0L1JQS0kvQ1BTLnBkZjCCASgGCCsGAQUFBwELBIIBGjCCARYwXwYIKwYBBQUH
MAWGU3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
OTg1MkQvRTEwMDZCODg4MDNFMTFGMTkxNkVGM0Q3NkNBMzBGQkMvMH4GCCsGAQUF
BzAKhnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5
MTk4NTJEL0UxMDA2Qjg4ODAzRTExRjE5MTZFRjNENzZDQTMwRkJDL000cmI4Y0My
bDYwOVhETTRQLVhodUZ6eGdjay5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJk
cC5hcG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAfBggrBgEFBQcBBwEB/wQQMA4w
DAQCAAEwBgMEAaDsYDANBgkqhkiG9w0BAQsFAAOCAQEAsBo4W0Rn/5lj509lCedv
S/UgqWiPoMA3TORgbbLUaPQaQgFN86a2hPMfiWSrh3lvTrGgejzzpx+XdqATGd5e
Bu9zk6VBd6IIKMcSMCR1YQK8ySesyJqCgbPAOPQHjbAuYIYP0l7guov60zXytUvS
/+OY0PVQY+Q+zqA2zkDy63MpJf/1VyYwnCr1a/5xVjgRBAAMEkMmnYl3I8quswHA
fOhfswwoxTcbwmnMEjYWRC9Q9oqz5u8e/Fh2lLwLmAxHDsxaAtVVrIWisJpJqInS
PmKLSGudUJtjjt92nHdhDPkLn9b0GqC+28LhUjJFKj4s9PxxmqsiuyuDgUfu9cmi
ZQ==
-----END CERTIFICATE-----
Generated at Sat Jul 18 02:16:34 2026 by rpki-client