Certificate

$ rpki-client -vvf rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/RbGOIJ7P3aXO14z52YENYR5tQSQ.cer
File:                     RbGOIJ7P3aXO14z52YENYR5tQSQ.cer (raw, json)
Hash identifier:          TqVDiS6PDTozJrj1DvM8Ff9dQ7IaRHz2h5Kjac5Nvq0=
Subject key identifier:   45:B1:8E:20:9E:CF:DD:A5:CE:D7:8C:F9:D9:81:0D:61:1E:6D:41:24
Authority key identifier: 74:01:65:A8:0D:10:71:97:0A:BC:09:C0:2B:71:C1:AC:7C:1D:6E:0E
Certificate issuer:       /CN=A90DC5BE/serialNumber=740165A80D1071970ABC09C02B71C1AC7C1D6E0E
Certificate serial:       7D5B
Authority info access:    rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
Manifest:                 rsync://rpki.apnic.net/member_repository/A9113BB0/9FFDAB76323A11F0BF9E1D36C4F9AE02/RbGOIJ7P3aXO14z52YENYR5tQSQ.mft
caRepository:             rsync://rpki.apnic.net/member_repository/A9113BB0/9FFDAB76323A11F0BF9E1D36C4F9AE02/
Notify URL:               https://rrdp.apnic.net/notification.xml
Certificate not before:   Sun 21 Jun 2026 12:22:50 +0000
Certificate not after:    Tue 31 Aug 2027 00:00:00 +0000
Subordinate resources:    IP: 165.99.74.0/23
Validation:               OK
Signature path:           rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 24 Jul 2026 19:50:32 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 32091 (0x7d5b)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A90DC5BE, serialNumber=740165A80D1071970ABC09C02B71C1AC7C1D6E0E
        Validity
            Not Before: Jun 21 12:22:50 2026 GMT
            Not After : Aug 31 00:00:00 2027 GMT
        Subject: CN=A9113BB0, serialNumber=45B18E209ECFDDA5CED78CF9D9810D611E6D4124
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9e:fa:b5:ed:70:ef:18:14:9c:fa:5d:3e:57:d7:
                    c1:bc:10:05:2d:5a:3a:b0:06:1a:9e:f6:ea:27:d3:
                    69:e9:bf:1d:be:2c:cf:2b:66:ae:ba:fd:d4:b8:21:
                    96:04:fd:54:44:bc:81:47:3f:8c:ad:a8:92:b9:74:
                    af:9d:16:c6:6d:37:20:b3:fc:01:56:14:45:17:22:
                    4d:eb:cb:a2:b2:a6:a1:96:c9:29:8e:1f:46:c8:ca:
                    64:78:31:91:e0:5b:58:49:15:6a:6d:f8:ed:2a:41:
                    be:71:d0:21:f8:ae:98:0d:cc:9b:cf:26:50:53:9b:
                    93:72:db:76:f3:a2:c3:94:bd:70:e1:a7:95:a4:7a:
                    f5:3b:89:f8:68:6e:f7:be:99:53:db:67:98:56:ce:
                    13:d8:8f:c4:28:c0:24:97:f6:de:88:3a:cf:cd:c9:
                    fd:7b:24:1f:75:b4:8b:5d:89:83:d5:0e:33:d2:36:
                    12:ca:2a:15:4c:ee:aa:1c:12:43:1d:ad:bf:56:ae:
                    15:9c:16:81:7a:c4:27:4c:8a:b4:45:db:52:41:f3:
                    da:3c:c2:a2:40:cc:03:16:ce:40:9d:a4:fb:82:fd:
                    d9:35:5c:4a:0d:15:9f:a3:bc:9e:2f:3b:a0:52:bb:
                    58:24:04:a4:76:6b:5a:69:4b:1f:b6:c0:c2:5f:41:
                    84:ef
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                45:B1:8E:20:9E:CF:DD:A5:CE:D7:8C:F9:D9:81:0D:61:1E:6D:41:24
            X509v3 Authority Key Identifier:
                keyid:74:01:65:A8:0D:10:71:97:0A:BC:09:C0:2B:71:C1:AC:7C:1D:6E:0E

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                CA Repository - URI:rsync://rpki.apnic.net/member_repository/A9113BB0/9FFDAB76323A11F0BF9E1D36C4F9AE02/
                RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A9113BB0/9FFDAB76323A11F0BF9E1D36C4F9AE02/RbGOIJ7P3aXO14z52YENYR5tQSQ.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  165.99.74.0/23

    Signature Algorithm: sha256WithRSAEncryption
         6d:1e:cb:7f:e2:95:be:d9:fb:6e:ca:88:44:0b:62:18:04:e8:
         30:b7:cd:0e:47:27:2c:ad:d8:5e:de:13:a3:a5:ca:01:d5:c7:
         a0:35:3a:15:ec:94:f5:71:00:75:b1:b9:78:4b:f9:b2:66:e9:
         a9:c3:2f:17:5f:0e:21:c3:5f:02:ef:7d:de:17:ec:23:b6:a4:
         11:a9:66:d2:74:ca:2f:00:06:cc:2a:73:bf:c1:0c:67:7a:b5:
         f8:ed:4a:e9:ed:53:7f:b1:2a:e2:f8:49:c6:6b:b7:e1:d3:4e:
         31:0b:66:cf:2c:2f:08:75:a6:1f:85:c7:47:4e:a3:a5:21:a4:
         6c:96:2d:9b:98:9d:c6:bb:aa:8f:41:63:83:b5:c9:09:b6:2f:
         c2:40:69:33:f9:53:77:b5:57:7c:6d:49:a3:3f:b7:cb:68:75:
         0e:c3:58:66:7f:48:fd:91:4c:29:e5:e3:b7:b3:30:3c:7c:d9:
         6d:5a:9d:8e:5b:de:92:8c:e0:89:f2:8e:a7:b7:65:d9:60:7d:
         cf:99:96:e2:c9:36:9d:78:e6:f5:db:9e:ef:55:ca:b3:82:75:
         a6:80:26:e2:da:dc:5f:61:e5:1c:d4:14:53:93:af:8f:10:2e:
         d0:59:6d:1b:c6:dd:d3:2c:a3:5a:e2:c0:b4:d9:96:99:07:98:
         61:ba:3c:96
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 18 02:19:56 2026 by rpki-client