Certificate

$ rpki-client -vvvf rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/WKIeeyP68huJ00Jw61b3RJwjmYY.cer
File:                     WKIeeyP68huJ00Jw61b3RJwjmYY.cer (raw, json)
Hash identifier:          ZfMjaqkQ0HSjVmKHq3OAOInpoTXH6mT730CHmGhSJT8=
Subject key identifier:   58:A2:1E:7B:23:FA:F2:1B:89:D3:42:70:EB:56:F7:44:9C:23:99:86
Authority key identifier: 74:01:65:A8:0D:10:71:97:0A:BC:09:C0:2B:71:C1:AC:7C:1D:6E:0E
Certificate issuer:       /CN=A90DC5BE/serialNumber=740165A80D1071970ABC09C02B71C1AC7C1D6E0E
Certificate serial:       7FFE
Authority info access:    rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
Manifest:                 rsync://rpki.apnic.net/member_repository/A91656C7/85DEDAD850A511F0B2D1DE4FC4F9AE02/WKIeeyP68huJ00Jw61b3RJwjmYY.mft
caRepository:             rsync://rpki.apnic.net/member_repository/A91656C7/85DEDAD850A511F0B2D1DE4FC4F9AE02/
Notify URL:               https://rrdp.apnic.net/notification.xml
Certificate not before:   Sun 02 Aug 2026 13:41:32 +0000
Certificate not after:    Thu 30 Sep 2027 00:00:00 +0000
Subordinate resources:    IP: 165.101.58.0/24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 30 Aug 2026 14:50:13 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 32766 (0x7ffe)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A90DC5BE, serialNumber=740165A80D1071970ABC09C02B71C1AC7C1D6E0E
        Validity
            Not Before: Aug  2 13:41:32 2026 GMT
            Not After : Sep 30 00:00:00 2027 GMT
        Subject: CN=A91656C7, serialNumber=58A21E7B23FAF21B89D34270EB56F7449C239986
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d4:54:ae:f4:cd:6a:17:9e:ff:21:2b:83:fd:5f:
                    3b:75:e8:98:9c:04:8d:c8:4a:14:7b:37:32:eb:77:
                    e0:0b:b0:0d:63:59:d4:82:2b:97:40:d4:cb:b9:ec:
                    23:6e:81:2c:de:78:49:b5:7e:d7:26:0b:f9:a4:5f:
                    2c:66:1d:e5:2f:46:81:96:30:73:21:54:c5:a2:17:
                    6a:73:5e:80:61:39:6a:96:9c:e2:04:12:06:88:5d:
                    b0:c9:3b:eb:9d:81:59:8f:59:16:5f:4f:cc:b1:a3:
                    75:b7:ab:5e:32:a1:ee:65:7c:ae:30:a7:f9:c1:57:
                    f8:f2:43:5b:fe:7d:d2:66:12:c0:f9:bf:83:4e:cd:
                    8b:58:9f:bd:8a:9b:d4:6c:a0:a0:1e:db:18:5e:8e:
                    bf:e5:08:43:fd:89:80:fe:1c:c1:58:18:dc:74:33:
                    53:f8:19:22:d2:c1:c3:13:fa:97:a6:0c:8d:24:1e:
                    cb:ad:cb:e5:d9:f4:b4:11:bc:9e:23:d4:da:3d:da:
                    07:8c:c4:1b:d7:ef:4a:a3:66:9e:a2:0a:96:7f:36:
                    2d:cc:33:d1:de:74:29:1e:a7:de:55:c1:1b:6a:ba:
                    0b:84:b1:a4:e8:fb:2d:7a:a9:b3:de:3c:10:5d:8d:
                    3b:cd:d0:d8:78:d3:0d:fe:9a:39:59:85:79:aa:2f:
                    38:59
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                58:A2:1E:7B:23:FA:F2:1B:89:D3:42:70:EB:56:F7:44:9C:23:99:86
            X509v3 Authority Key Identifier:
                keyid:74:01:65:A8:0D:10:71:97:0A:BC:09:C0:2B:71:C1:AC:7C:1D:6E:0E

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                CA Repository - URI:rsync://rpki.apnic.net/member_repository/A91656C7/85DEDAD850A511F0B2D1DE4FC4F9AE02/
                RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A91656C7/85DEDAD850A511F0B2D1DE4FC4F9AE02/WKIeeyP68huJ00Jw61b3RJwjmYY.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  165.101.58.0/24

    Signature Algorithm: sha256WithRSAEncryption
         4e:9b:fb:d8:b7:f2:bb:66:b5:55:56:b8:7c:39:1a:5f:95:30:
         16:3e:a1:de:1d:2d:8f:b2:db:b2:9c:db:ef:2d:f2:19:9a:7f:
         a8:71:39:5c:6c:ac:53:1a:37:0e:c0:eb:19:d9:32:d6:67:0d:
         d4:c4:3c:d0:c6:73:c1:58:e6:da:04:56:88:64:74:ed:f2:28:
         07:79:c9:8c:15:5a:bc:4d:13:32:48:4b:9e:ab:f7:2e:c9:bb:
         fe:8c:36:31:3d:be:6e:47:aa:5a:4e:95:c8:e9:3c:d2:77:4e:
         ae:3c:93:af:70:da:71:f0:28:ac:04:6f:af:10:bd:7e:a1:ad:
         36:6d:bc:1d:5e:87:95:34:3e:80:b2:fb:d0:1e:a3:5b:57:2b:
         6f:12:c2:61:66:50:6b:6a:44:8b:b8:f0:71:13:5e:a3:68:ff:
         fa:27:cf:6a:f7:fd:9a:cb:af:1f:3e:65:76:95:97:ba:9a:46:
         19:63:73:ec:50:40:0c:49:0f:b0:ce:d2:ce:8e:b6:08:4d:22:
         a2:cb:ac:39:7a:3a:b7:88:8d:bc:e9:d2:be:69:d1:4d:55:05:
         0b:c9:87:94:c9:a6:e2:76:15:d2:c9:42:80:15:0f:f4:b0:7c:
         e3:cf:73:97:8a:6d:a6:4f:ce:c5:07:81:54:ae:d4:23:8d:7f:
         06:3f:97:74
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Aug 23 18:14:02 2026 by rpki-client