Certificate

$ rpki-client -vvf rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/MUIxLklxwu35BoX7-ycBqtETRho.cer
File:                     MUIxLklxwu35BoX7-ycBqtETRho.cer (raw, json)
Hash identifier:          meOoTFDtopOv38tlqef3YIzyD7Kw/1Bdlp+kQWOlMTY=
Subject key identifier:   31:42:31:2E:49:71:C2:ED:F9:06:85:FB:FB:27:01:AA:D1:13:46:1A
Authority key identifier: 74:01:65:A8:0D:10:71:97:0A:BC:09:C0:2B:71:C1:AC:7C:1D:6E:0E
Certificate issuer:       /CN=A90DC5BE/serialNumber=740165A80D1071970ABC09C02B71C1AC7C1D6E0E
Certificate serial:       7BED
Authority info access:    rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
Manifest:                 rsync://rpki.apnic.net/member_repository/A91F0500/B33401AC583811F1AD247216B0833773/MUIxLklxwu35BoX7-ycBqtETRho.mft
caRepository:             rsync://rpki.apnic.net/member_repository/A91F0500/B33401AC583811F1AD247216B0833773/
Notify URL:               https://rrdp.apnic.net/notification.xml
Certificate not before:   Mon 25 May 2026 12:53:22 +0000
Certificate not after:    Tue 31 Aug 2027 00:00:00 +0000
Subordinate resources:    IP: 162.4.188.0/23
Validation:               OK
Signature path:           rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 09 Jun 2026 15:18:53 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 31725 (0x7bed)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A90DC5BE, serialNumber=740165A80D1071970ABC09C02B71C1AC7C1D6E0E
        Validity
            Not Before: May 25 12:53:22 2026 GMT
            Not After : Aug 31 00:00:00 2027 GMT
        Subject: CN=A91F0500, serialNumber=3142312E4971C2EDF90685FBFB2701AAD113461A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d3:83:bf:15:87:01:c0:36:ee:2d:34:ac:40:b2:
                    29:69:53:94:9c:7c:c5:44:75:c5:08:68:cb:22:f0:
                    6a:f1:40:82:da:65:36:d3:66:91:92:49:ef:46:f5:
                    77:9f:37:b0:1b:2c:75:f2:ef:6b:56:bc:4c:c9:75:
                    a8:4b:78:c0:15:06:4b:50:d5:fc:32:e3:c4:20:a6:
                    b0:07:18:d1:97:c4:52:4f:cf:2a:e1:44:3f:ad:70:
                    ba:56:e4:ce:c1:f2:c6:43:80:e6:5b:75:01:88:29:
                    d1:d8:b5:63:28:1f:61:67:00:0c:4b:bf:90:8b:5a:
                    5a:e1:27:53:3f:43:29:c6:02:b9:ed:c1:e7:0e:11:
                    0c:7b:b1:c9:03:5a:37:e7:7d:9b:82:6d:59:99:5a:
                    6e:fb:db:45:74:13:78:d1:c4:02:7a:9d:07:0f:34:
                    00:22:89:a8:25:79:66:9d:e3:8f:5f:ec:ed:d7:f2:
                    04:a8:56:20:03:fe:df:5f:43:0a:3e:54:07:f7:68:
                    8e:e3:92:e1:fd:ad:d7:53:8d:df:52:5c:cb:b0:a1:
                    76:19:f7:73:51:9c:b0:7a:6a:02:02:56:38:ee:ad:
                    c1:2d:4c:f8:79:55:77:1a:3d:b9:b9:4d:3c:30:53:
                    9e:89:d5:97:6b:3b:00:77:4e:94:32:82:c9:93:74:
                    96:55
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                31:42:31:2E:49:71:C2:ED:F9:06:85:FB:FB:27:01:AA:D1:13:46:1A
            X509v3 Authority Key Identifier:
                keyid:74:01:65:A8:0D:10:71:97:0A:BC:09:C0:2B:71:C1:AC:7C:1D:6E:0E

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                CA Repository - URI:rsync://rpki.apnic.net/member_repository/A91F0500/B33401AC583811F1AD247216B0833773/
                RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A91F0500/B33401AC583811F1AD247216B0833773/MUIxLklxwu35BoX7-ycBqtETRho.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  162.4.188.0/23

    Signature Algorithm: sha256WithRSAEncryption
         8e:64:9c:0c:67:e0:d0:1e:98:04:55:11:75:ba:24:37:e7:cb:
         4c:e7:c3:1b:76:0e:be:ca:c9:3b:0b:20:76:f3:91:ef:7a:6d:
         67:6c:21:01:d7:3b:38:6b:e5:0e:d1:9d:63:3c:b5:53:c9:61:
         8b:82:2e:f7:27:09:c8:5b:f7:f4:c1:0d:fe:da:9a:d1:70:73:
         8c:1e:c4:3e:b0:82:69:37:f7:23:40:47:12:e0:8c:bd:4c:b3:
         49:d8:01:0e:2c:79:eb:e1:37:e9:df:c5:48:0a:fc:df:c7:b4:
         e8:7e:58:08:c1:64:eb:33:24:8d:b3:66:ca:ad:39:c6:e5:96:
         ed:08:49:3c:dd:f7:d6:45:23:ee:64:17:fb:c7:5b:21:d1:3c:
         27:44:f9:fb:8f:23:fb:ec:cb:24:4e:54:65:9c:cc:8e:bf:e7:
         96:a2:19:6a:2f:6e:05:8e:10:dd:dd:fe:95:40:46:d9:2b:fe:
         f4:c0:88:7e:c9:39:a8:60:73:77:7b:bd:12:18:55:69:3d:3f:
         ae:8a:96:71:69:ad:a1:08:cb:b7:09:08:25:7e:e9:17:75:52:
         e6:40:5a:88:61:0d:4d:ca:e2:d7:1e:e8:d4:a3:3c:d1:42:d9:
         c6:55:2b:a9:50:67:30:eb:63:a3:08:8c:59:eb:96:25:03:c0:
         05:4d:1f:69
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 2 21:10:28 2026 by rpki-client