Certificate

$ rpki-client -vvvf rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/V4hJyblKNVp2IKl0eXPSG77aP1M.cer
File:                     V4hJyblKNVp2IKl0eXPSG77aP1M.cer (raw, json)
Hash identifier:          FCdI+IIFP+nPxWGGfVnXGINW3CBG6uMzfDI+tv0Y03E=
Subject key identifier:   57:88:49:C9:B9:4A:35:5A:76:20:A9:74:79:73:D2:1B:BE:DA:3F:53
Authority key identifier: 74:01:65:A8:0D:10:71:97:0A:BC:09:C0:2B:71:C1:AC:7C:1D:6E:0E
Certificate issuer:       /CN=A90DC5BE/serialNumber=740165A80D1071970ABC09C02B71C1AC7C1D6E0E
Certificate serial:       7FFC
Authority info access:    rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
Manifest:                 rsync://rpki.apnic.net/member_repository/A91410C5/D109EBD0572E11F095F7FE48C4F9AE02/V4hJyblKNVp2IKl0eXPSG77aP1M.mft
caRepository:             rsync://rpki.apnic.net/member_repository/A91410C5/D109EBD0572E11F095F7FE48C4F9AE02/
Notify URL:               https://rrdp.apnic.net/notification.xml
Certificate not before:   Sun 02 Aug 2026 13:11:16 +0000
Certificate not after:    Thu 30 Sep 2027 00:00:00 +0000
Subordinate resources:    IP: 165.99.254.0/23
Validation:               OK
Signature path:           rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 24 Sep 2026 23:01:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 32764 (0x7ffc)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A90DC5BE, serialNumber=740165A80D1071970ABC09C02B71C1AC7C1D6E0E
        Validity
            Not Before: Aug  2 13:11:16 2026 GMT
            Not After : Sep 30 00:00:00 2027 GMT
        Subject: CN=A91410C5, serialNumber=578849C9B94A355A7620A9747973D21BBEDA3F53
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:d9:9d:b1:80:55:40:75:04:6e:56:60:d8:7c:
                    47:72:ec:7e:76:29:1c:d9:44:20:00:1b:da:7f:c6:
                    1d:8a:70:85:b2:e2:c4:da:9c:65:db:cf:3c:c0:83:
                    2c:f9:b9:f0:ca:eb:ad:5f:c4:a5:97:ef:75:24:2b:
                    1a:c1:18:52:68:2c:a5:87:18:3d:a2:96:49:23:fe:
                    60:bc:ac:4c:f9:0e:95:24:9f:fe:ac:a8:11:f0:3e:
                    80:b9:6f:8b:72:7b:3e:5e:92:9e:2b:da:95:4f:3e:
                    83:c5:b2:b7:93:66:34:c1:46:c8:24:3f:d8:65:89:
                    e7:a7:b9:42:45:35:67:22:24:c1:71:43:4a:ac:c3:
                    ea:59:8f:ef:a7:aa:15:9c:a5:8d:ea:53:31:a6:02:
                    d1:06:69:56:ef:6d:00:b3:29:b7:f1:db:a2:b3:7a:
                    21:79:94:4e:bb:aa:46:a2:af:a0:de:f6:bf:00:f2:
                    1d:f9:f7:4f:15:3b:3d:22:52:99:6d:81:53:8a:a6:
                    2b:16:8a:7e:94:b8:db:bc:f8:f1:33:9c:2b:e6:1f:
                    90:3d:ec:63:ce:f4:6c:eb:57:79:75:ee:f5:8c:fe:
                    1c:9f:4c:32:61:5e:2c:3b:39:42:83:db:8e:5b:e3:
                    1f:0d:d4:a4:bb:80:ac:77:be:1d:01:72:4a:bb:81:
                    fc:15
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                57:88:49:C9:B9:4A:35:5A:76:20:A9:74:79:73:D2:1B:BE:DA:3F:53
            X509v3 Authority Key Identifier:
                keyid:74:01:65:A8:0D:10:71:97:0A:BC:09:C0:2B:71:C1:AC:7C:1D:6E:0E

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                CA Repository - URI:rsync://rpki.apnic.net/member_repository/A91410C5/D109EBD0572E11F095F7FE48C4F9AE02/
                RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A91410C5/D109EBD0572E11F095F7FE48C4F9AE02/V4hJyblKNVp2IKl0eXPSG77aP1M.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  165.99.254.0/23

    Signature Algorithm: sha256WithRSAEncryption
         38:85:fc:04:38:1a:2b:6c:d9:e3:4a:06:5d:fb:08:56:a2:78:
         30:8f:a2:f4:90:9f:93:c4:5f:2d:30:d2:8d:5c:da:f1:5f:19:
         4c:45:01:e6:c7:cf:4d:f5:d9:d2:ca:c2:1e:a8:b7:32:af:20:
         37:0b:4c:f6:52:ce:c5:ea:1e:49:43:93:0c:d8:5c:8e:d4:16:
         49:b0:b9:80:ea:4f:f8:dc:02:c5:10:ad:47:cf:0f:5f:8e:d0:
         a9:60:9e:eb:9b:56:af:01:ba:b6:31:63:9d:87:33:3f:35:11:
         f3:f5:3c:5a:9c:76:7e:fe:23:a9:c8:7f:82:c1:d6:77:0d:d0:
         08:4e:e0:31:ad:3b:b7:e8:3b:d2:f5:f6:0f:0e:cd:b1:17:c7:
         ab:16:b1:0b:94:99:8d:eb:1c:0f:af:9d:35:f9:1a:d9:23:ce:
         b0:e2:33:03:de:49:c0:89:6f:92:ea:96:36:5a:03:02:11:99:
         fd:d5:3d:22:3f:03:ce:63:11:68:d6:79:77:42:e0:fe:13:1c:
         18:2f:31:f6:fe:37:e3:df:c5:ab:14:8a:47:a0:98:56:cd:74:
         bc:48:7a:40:e8:35:65:9c:6b:e7:e5:74:bf:8b:20:33:9f:9b:
         9a:b7:c1:3a:16:7e:9a:6c:dd:62:de:f1:c5:94:bd:12:48:12:
         fd:bd:1c:85
-----BEGIN CERTIFICATE-----
MIIF/TCCBOWgAwIBAgICf/wwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkw
REM1QkUxMTAvBgNVBAUTKDc0MDE2NUE4MEQxMDcxOTcwQUJDMDlDMDJCNzFDMUFD
N0MxRDZFMEUwHhcNMjYwODAyMTMxMTE2WhcNMjcwOTMwMDAwMDAwWjBGMREwDwYD
VQQDEwhBOTE0MTBDNTExMC8GA1UEBRMoNTc4ODQ5QzlCOTRBMzU1QTc2MjBBOTc0
Nzk3M0QyMUJCRURBM0Y1MzCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEB
AL/ZnbGAVUB1BG5WYNh8R3LsfnYpHNlEIAAb2n/GHYpwhbLixNqcZdvPPMCDLPm5
8MrrrV/EpZfvdSQrGsEYUmgspYcYPaKWSSP+YLysTPkOlSSf/qyoEfA+gLlvi3J7
Pl6SnivalU8+g8Wyt5NmNMFGyCQ/2GWJ56e5QkU1ZyIkwXFDSqzD6lmP76eqFZyl
jepTMaYC0QZpVu9tALMpt/HborN6IXmUTruqRqKvoN72vwDyHfn3TxU7PSJSmW2B
U4qmKxaKfpS427z48TOcK+YfkD3sY870bOtXeXXu9Yz+HJ9MMmFeLDs5QoPbjlvj
Hw3UpLuArHe+HQFySruB/BUCAwEAAaOCAvMwggLvMB0GA1UdDgQWBBRXiEnJuUo1
WnYgqXR5c9Ibvto/UzAfBgNVHSMEGDAWgBR0AWWoDRBxlwq8CcArccGsfB1uDjAO
BgNVHQ8BAf8EBAMCAQYwDwYDVR0TAQH/BAUwAwEB/zBzBgNVHR8EbDBqMGigZqBk
hmJyc3luYzovL3Jwa2kuYXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRGMjAxRDY2
MTFFMjhBQzg4MzdDNzJGRDFGRjIvZEFGbHFBMFFjWmNLdkFuQUszSEJySHdkYmc0
LmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5h
cG5pYy5uZXQvcmVwb3NpdG9yeS85ODA2NTJFMEI3N0UxMUU3QTk2QTM5NTIxQTRG
NEZCNC9kQUZscUEwUWNaY0t2QW5BSzNIQnJId2RiZzQuY2VyMEoGA1UdIAEB/wRA
MD4wPAYIKwYBBQUHDgIwMDAuBggrBgEFBQcCARYiaHR0cHM6Ly93d3cuYXBuaWMu
bmV0L1JQS0kvQ1BTLnBkZjCCASgGCCsGAQUFBwELBIIBGjCCARYwXwYIKwYBBQUH
MAWGU3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
NDEwQzUvRDEwOUVCRDA1NzJFMTFGMDk1RjdGRTQ4QzRGOUFFMDIvMH4GCCsGAQUF
BzAKhnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5
MTQxMEM1L0QxMDlFQkQwNTcyRTExRjA5NUY3RkU0OEM0RjlBRTAyL1Y0aEp5YmxL
TlZwMklLbDBlWFBTRzc3YVAxTS5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJk
cC5hcG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAfBggrBgEFBQcBBwEB/wQQMA4w
DAQCAAEwBgMEAaVj/jANBgkqhkiG9w0BAQsFAAOCAQEAOIX8BDgaK2zZ40oGXfsI
VqJ4MI+i9JCfk8RfLTDSjVza8V8ZTEUB5sfPTfXZ0srCHqi3Mq8gNwtM9lLOxeoe
SUOTDNhcjtQWSbC5gOpP+NwCxRCtR88PX47QqWCe65tWrwG6tjFjnYczPzUR8/U8
Wpx2fv4jqch/gsHWdw3QCE7gMa07t+g70vX2Dw7NsRfHqxaxC5SZjescD6+dNfka
2SPOsOIzA95JwIlvkuqWNloDAhGZ/dU9Ij8DzmMRaNZ5d0Lg/hMcGC8x9v4349/F
qxSKR6CYVs10vEh6QOg1ZZxr5+V0v4sgM5+bmrfBOhZ+mmzdYt7xxZS9EkgS/b0c
hQ==
-----END CERTIFICATE-----
Generated at Sat Sep 19 03:37:28 2026 by rpki-client