Certificate

$ rpki-client -vvf rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/_7jr91F1lPQetjZXPZajVwaXSbk.cer
File:                     _7jr91F1lPQetjZXPZajVwaXSbk.cer (raw, json)
Hash identifier:          plr3pZqThg0BP5TUiRSAhlY8mFDy83nHmN64vOtwa1E=
Subject key identifier:   FF:B8:EB:F7:51:75:94:F4:1E:B6:36:57:3D:96:A3:57:06:97:49:B9
Authority key identifier: 74:01:65:A8:0D:10:71:97:0A:BC:09:C0:2B:71:C1:AC:7C:1D:6E:0E
Certificate issuer:       /CN=A90DC5BE/serialNumber=740165A80D1071970ABC09C02B71C1AC7C1D6E0E
Certificate serial:       7DA8
Authority info access:    rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
Manifest:                 rsync://rpki.apnic.net/member_repository/A9191136/03C4287A9AA911F095AA0480C4F9AE02/_7jr91F1lPQetjZXPZajVwaXSbk.mft
caRepository:             rsync://rpki.apnic.net/member_repository/A9191136/03C4287A9AA911F095AA0480C4F9AE02/
Notify URL:               https://rrdp.apnic.net/notification.xml
Certificate not before:   Fri 26 Jun 2026 13:49:46 +0000
Certificate not after:    Thu 30 Sep 2027 00:00:00 +0000
Subordinate resources:    IP: 165.99.250.0/23
Validation:               OK
Signature path:           rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 24 Jul 2026 19:50:32 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 32168 (0x7da8)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A90DC5BE, serialNumber=740165A80D1071970ABC09C02B71C1AC7C1D6E0E
        Validity
            Not Before: Jun 26 13:49:46 2026 GMT
            Not After : Sep 30 00:00:00 2027 GMT
        Subject: CN=A9191136, serialNumber=FFB8EBF7517594F41EB636573D96A357069749B9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:da:9f:f6:80:92:e4:11:3f:d7:57:ec:76:7a:96:
                    de:35:fd:4d:13:20:b5:43:76:4c:dc:b0:48:24:0d:
                    97:89:c6:61:00:9f:17:89:87:3c:04:01:fb:4f:5a:
                    7b:ee:d3:22:23:32:52:a7:39:ef:d2:ea:20:d8:68:
                    7f:e2:a2:3e:b2:31:00:33:16:bd:64:76:d2:c7:08:
                    64:68:71:37:56:17:ee:0f:1f:b9:79:36:e1:0c:37:
                    3e:87:f4:ee:4d:d5:29:e1:2b:8b:ed:06:24:8f:50:
                    ad:34:f6:f9:79:14:5e:29:64:76:90:83:3e:e3:b1:
                    89:cd:37:2d:39:89:89:7d:d7:e0:4b:cd:96:ea:5f:
                    fe:b6:91:9f:50:e4:c4:a9:af:ec:ea:0c:fd:6f:4d:
                    e2:2e:d4:3d:10:7d:b1:de:3d:2a:2f:0b:39:ed:69:
                    62:fb:d0:5a:36:88:60:d5:3b:f0:36:8e:b5:e9:a2:
                    c0:a4:c9:ee:d2:ac:b2:a4:8c:ee:c1:99:3a:ad:98:
                    5f:5f:7d:44:87:7a:8b:8c:79:85:c6:86:f5:51:88:
                    96:57:82:f4:43:e6:0d:b9:91:f8:2e:e3:74:10:ad:
                    0c:9e:b7:97:c3:8a:74:65:b9:6a:ae:a7:ff:97:85:
                    56:94:41:1e:3d:29:49:ce:a5:c1:17:f9:0f:ab:a4:
                    85:cf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FF:B8:EB:F7:51:75:94:F4:1E:B6:36:57:3D:96:A3:57:06:97:49:B9
            X509v3 Authority Key Identifier:
                keyid:74:01:65:A8:0D:10:71:97:0A:BC:09:C0:2B:71:C1:AC:7C:1D:6E:0E

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                CA Repository - URI:rsync://rpki.apnic.net/member_repository/A9191136/03C4287A9AA911F095AA0480C4F9AE02/
                RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A9191136/03C4287A9AA911F095AA0480C4F9AE02/_7jr91F1lPQetjZXPZajVwaXSbk.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  165.99.250.0/23

    Signature Algorithm: sha256WithRSAEncryption
         7d:8b:15:e5:45:ae:8f:c0:13:93:36:ad:25:fb:25:f5:b9:1c:
         45:88:ec:6b:bb:6e:5e:3d:50:87:ab:12:30:3e:1f:9b:ee:eb:
         61:d0:aa:09:fd:08:37:1e:14:23:49:f0:e1:0f:6b:fe:13:2c:
         79:b6:b3:c2:25:39:83:52:3b:50:3d:b9:e0:72:08:19:c5:4e:
         c2:17:1f:4b:98:a4:4f:a9:b3:e9:da:e2:05:f7:e1:fb:e8:5e:
         2c:70:2e:20:dc:ee:d3:cf:11:c1:7e:1a:a3:6b:59:05:92:17:
         ef:37:03:86:8d:a1:6c:6e:df:39:44:9b:07:a7:8a:72:63:ff:
         13:c0:60:a2:40:e1:ac:5d:8f:18:98:e9:5e:73:44:2c:11:a3:
         62:83:d4:d1:af:58:9f:cb:af:f9:50:4b:84:14:8a:a1:b1:10:
         24:73:d7:91:96:07:e3:48:b8:2a:da:e5:f1:ef:86:e3:f9:bd:
         c0:2f:40:de:e6:fd:fa:6f:7d:c0:3e:da:00:e7:61:34:da:cd:
         63:6a:23:d6:5c:91:d9:a7:a1:c5:8d:35:4d:e8:53:50:94:19:
         bf:6d:24:b2:21:76:5b:67:d0:27:3d:d9:ff:93:75:fe:cf:0b:
         23:d7:43:5d:c1:12:c7:82:6c:a6:57:ea:eb:21:5b:50:c9:bb:
         24:b5:de:be
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 18 02:19:53 2026 by rpki-client