Certificate

$ rpki-client -vvf rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/bvj-zvM56m3paYzCxfWGRc9l794.cer
File:                     bvj-zvM56m3paYzCxfWGRc9l794.cer (raw, json)
Hash identifier:          V3+Dtr/3k3jOG242BsCoBJ940rDZqivPPR78/CUP0xE=
Subject key identifier:   6E:F8:FE:CE:F3:39:EA:6D:E9:69:8C:C2:C5:F5:86:45:CF:65:EF:DE
Authority key identifier: 74:01:65:A8:0D:10:71:97:0A:BC:09:C0:2B:71:C1:AC:7C:1D:6E:0E
Certificate issuer:       /CN=A90DC5BE/serialNumber=740165A80D1071970ABC09C02B71C1AC7C1D6E0E
Certificate serial:       6C06
Authority info access:    rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
Manifest:                 rsync://rpki.apnic.net/member_repository/A9196F7C/07F34F08A4B211F0B84C1343C4F9AE02/bvj-zvM56m3paYzCxfWGRc9l794.mft
caRepository:             rsync://rpki.apnic.net/member_repository/A9196F7C/07F34F08A4B211F0B84C1343C4F9AE02/
Notify URL:               https://rrdp.apnic.net/notification.xml
Certificate not before:   Thu 09 Oct 2025 01:48:24 +0000
Certificate not after:    Thu 30 Jul 2026 00:00:00 +0000
Subordinate resources:    IP: 157.85.92.0/22
Validation:               OK
Signature path:           rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 25 Oct 2025 14:09:22 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 27654 (0x6c06)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A90DC5BE, serialNumber=740165A80D1071970ABC09C02B71C1AC7C1D6E0E
        Validity
            Not Before: Oct  9 01:48:24 2025 GMT
            Not After : Jul 30 00:00:00 2026 GMT
        Subject: CN=A9196F7C, serialNumber=6EF8FECEF339EA6DE9698CC2C5F58645CF65EFDE
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d6:f0:48:2d:fd:4e:c6:93:aa:8b:f2:93:47:a1:
                    c0:49:3b:25:fa:7c:0c:b0:6c:35:98:d0:43:42:55:
                    89:03:47:bf:a4:8d:0f:9f:ba:a2:87:2e:59:0b:3d:
                    3b:28:99:b3:06:b8:51:54:a9:1a:a9:bb:ea:e6:5d:
                    b5:02:a1:e3:a8:90:26:1d:ea:18:ee:2a:1d:05:54:
                    d6:a5:99:4e:d6:3f:df:5a:3b:28:f7:2f:0a:ca:a3:
                    57:77:f3:cd:cd:83:31:6e:9b:4b:5b:23:1b:9d:62:
                    a9:79:52:c8:6b:86:dd:81:a1:87:b2:89:a7:7e:48:
                    dd:13:42:50:e7:ce:c3:92:83:2a:ff:6f:7c:3e:43:
                    64:d1:ff:06:45:fd:f5:35:b3:22:a6:54:20:73:64:
                    c0:de:d6:7d:46:1b:8d:11:f3:1b:5c:d4:3e:1b:40:
                    b5:0f:41:a5:e3:d1:d5:60:12:07:3e:c2:80:49:7c:
                    cd:bb:47:d5:83:89:b4:33:5a:29:43:73:6c:68:6a:
                    b4:9a:73:fd:40:e7:63:b0:3d:41:1d:85:34:f4:bc:
                    96:be:46:f4:f0:6a:89:cc:7e:39:90:a1:e0:61:0a:
                    7f:0b:8c:04:3d:ac:2d:b6:ab:79:bc:20:00:db:47:
                    99:28:80:22:39:22:0b:84:1f:9b:e5:5a:26:82:13:
                    73:55
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6E:F8:FE:CE:F3:39:EA:6D:E9:69:8C:C2:C5:F5:86:45:CF:65:EF:DE
            X509v3 Authority Key Identifier:
                keyid:74:01:65:A8:0D:10:71:97:0A:BC:09:C0:2B:71:C1:AC:7C:1D:6E:0E

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                CA Repository - URI:rsync://rpki.apnic.net/member_repository/A9196F7C/07F34F08A4B211F0B84C1343C4F9AE02/
                RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A9196F7C/07F34F08A4B211F0B84C1343C4F9AE02/bvj-zvM56m3paYzCxfWGRc9l794.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  157.85.92.0/22

    Signature Algorithm: sha256WithRSAEncryption
         b7:e7:c2:92:37:dc:44:ad:19:9c:64:ce:87:15:a4:84:b1:58:
         a4:9c:80:73:22:a9:d8:71:62:0c:dd:10:71:ce:50:6c:b4:9f:
         4c:7c:54:57:13:7c:65:ac:a2:89:e2:cb:6c:38:6d:a4:79:c7:
         6b:10:f9:de:10:a2:e9:0c:9f:61:3e:13:5e:a7:1d:1b:1e:80:
         d9:ea:dc:ec:0c:94:12:12:7f:a0:cc:37:65:e4:ae:bb:69:83:
         39:7d:2c:8f:02:ea:00:f8:7a:ee:cc:ad:b3:ab:0b:78:ce:4b:
         f4:82:99:06:e1:e5:6b:3e:42:b6:ea:b9:84:9d:24:a7:2f:61:
         54:21:cc:77:ae:ac:1b:c8:82:cc:9a:22:9b:0b:02:d5:5c:30:
         9b:3d:82:e8:88:c9:2d:38:00:f7:5c:66:29:7d:dd:e6:de:1b:
         f0:f4:ec:46:88:ec:44:ec:b4:63:55:7c:58:a4:39:cc:81:35:
         1f:cc:0f:24:0f:c0:f9:98:6e:1a:ba:b9:a6:7c:e4:57:1b:d4:
         96:b3:b5:9d:ce:50:26:d8:93:ba:eb:21:a2:40:89:88:3c:b9:
         11:a9:2a:89:af:e7:7c:13:d1:d4:7f:29:5b:c5:6f:f6:dd:0a:
         7c:d6:f5:0b:8c:ee:fc:e4:88:ab:e4:41:24:1e:67:92:ed:11:
         3e:55:7a:e4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 18 15:52:54 2025 by rpki-client