Certificate

$ rpki-client -vvf rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/V1pu0ww3OtQ00VpmXdoudk7Imso.cer
File:                     V1pu0ww3OtQ00VpmXdoudk7Imso.cer (raw, json)
Hash identifier:          T1xauinKtRpQwntLaVhCzN8nwelcJIaNvl0HKCP9DUA=
Subject key identifier:   57:5A:6E:D3:0C:37:3A:D4:34:D1:5A:66:5D:DA:2E:76:4E:C8:9A:CA
Authority key identifier: 74:01:65:A8:0D:10:71:97:0A:BC:09:C0:2B:71:C1:AC:7C:1D:6E:0E
Certificate issuer:       /CN=A90DC5BE/serialNumber=740165A80D1071970ABC09C02B71C1AC7C1D6E0E
Certificate serial:       6A85
Authority info access:    rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
Manifest:                 rsync://rpki.apnic.net/member_repository/A91827C5/D065ABB48AD911EF981C8283C4F9AE02/V1pu0ww3OtQ00VpmXdoudk7Imso.mft
caRepository:             rsync://rpki.apnic.net/member_repository/A91827C5/D065ABB48AD911EF981C8283C4F9AE02/
Notify URL:               https://rrdp.apnic.net/notification.xml
Certificate not before:   Sun 31 Aug 2025 07:02:04 +0000
Certificate not after:    Sat 31 Oct 2026 00:00:00 +0000
Subordinate resources:    IP: 160.30.104.0/23
Validation:               OK
Signature path:           rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 11 Sep 2025 03:16:03 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 27269 (0x6a85)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A90DC5BE, serialNumber=740165A80D1071970ABC09C02B71C1AC7C1D6E0E
        Validity
            Not Before: Aug 31 07:02:04 2025 GMT
            Not After : Oct 31 00:00:00 2026 GMT
        Subject: CN=A91827C5, serialNumber=575A6ED30C373AD434D15A665DDA2E764EC89ACA
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e2:e3:f8:31:a0:9b:ca:31:2e:53:9e:e3:be:30:
                    d0:dc:49:4f:ee:c0:d2:5d:51:fb:13:57:b5:d2:2d:
                    dc:0b:aa:7b:7c:9f:99:0b:b8:9b:3c:15:a3:45:c2:
                    4d:41:bf:45:b8:e5:e5:a4:bf:6e:c7:ef:22:e0:6c:
                    07:09:76:07:c1:e5:99:2e:3d:1c:1c:2d:f0:1a:0c:
                    29:fb:2d:ff:8a:d7:7a:83:6c:a1:a1:c8:74:e0:b1:
                    9c:29:3d:ac:e4:9a:04:1f:87:26:1f:bd:c4:3c:01:
                    7c:de:29:53:de:a2:ac:4c:d7:bd:1c:f6:91:18:c5:
                    3b:5b:1a:9d:a2:ef:40:60:07:c3:e6:20:c5:aa:79:
                    60:2b:3d:eb:2e:42:be:57:ec:a5:e6:a7:c7:65:dc:
                    95:1c:20:f6:0a:31:a4:c2:0e:78:fe:75:13:16:54:
                    2e:73:7f:6d:16:4c:8b:f1:42:9e:99:b2:44:d3:d5:
                    5f:b0:b7:90:cd:c0:7c:f4:be:12:29:42:c4:8a:e2:
                    dd:3a:e5:3c:e8:74:28:dc:3c:66:cf:d8:b3:21:cc:
                    bd:b0:48:cb:0c:c3:b5:5b:69:cc:7d:14:1a:2a:e4:
                    d8:2c:0b:7f:36:84:e1:52:4c:87:5d:0e:3a:44:dc:
                    ea:17:7b:ef:eb:cb:14:b8:02:f9:98:12:13:91:29:
                    55:95
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                57:5A:6E:D3:0C:37:3A:D4:34:D1:5A:66:5D:DA:2E:76:4E:C8:9A:CA
            X509v3 Authority Key Identifier:
                keyid:74:01:65:A8:0D:10:71:97:0A:BC:09:C0:2B:71:C1:AC:7C:1D:6E:0E

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                CA Repository - URI:rsync://rpki.apnic.net/member_repository/A91827C5/D065ABB48AD911EF981C8283C4F9AE02/
                RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A91827C5/D065ABB48AD911EF981C8283C4F9AE02/V1pu0ww3OtQ00VpmXdoudk7Imso.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  160.30.104.0/23

    Signature Algorithm: sha256WithRSAEncryption
         58:87:25:d3:ce:9b:5e:d2:f2:59:70:75:ec:75:72:63:38:22:
         51:41:e3:fb:6f:74:48:8c:43:c6:fc:c8:e5:34:dd:fe:be:1f:
         6c:a2:4e:22:3d:23:5d:83:39:fa:fb:bf:9d:6c:11:cc:a3:ed:
         62:8a:9e:d3:e1:37:a3:a5:9d:7a:ee:5d:d4:71:88:3a:d4:5c:
         58:94:ae:14:9b:4a:20:51:66:a5:09:1d:c9:53:bc:28:13:91:
         02:f7:d2:ae:ce:1a:fd:06:3d:ed:cd:34:c5:ce:87:dc:19:e0:
         4e:a4:d1:c7:fd:5d:70:30:53:67:b5:32:ee:64:e8:d9:74:03:
         f4:99:89:fa:6e:ca:33:43:0d:fb:ed:60:79:d4:69:63:79:ba:
         cf:a0:2f:68:96:1c:b7:5c:7f:f7:fb:ae:75:87:ea:99:41:3f:
         13:be:2c:4e:90:b1:6e:65:1d:35:fb:03:f2:e0:5b:84:e6:e5:
         95:86:bb:65:7e:f0:9b:65:1e:c1:e5:8f:f1:4e:68:4c:77:28:
         95:84:54:63:f5:98:ff:61:f8:62:29:a0:a8:38:84:fb:7f:2f:
         73:6f:fb:7b:5a:0a:07:aa:45:5e:9a:58:11:aa:36:4f:ca:bf:
         49:c0:7f:50:1a:a3:9f:bd:a0:65:ab:e8:bb:d1:e0:fc:5e:95:
         be:cb:b3:b1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 4 12:27:33 2025 by rpki-client