Certificate

$ rpki-client -vvvf rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/e5ztyDKAKKdFbpxBS7d9r-vOdl8.cer
File:                     e5ztyDKAKKdFbpxBS7d9r-vOdl8.cer (raw, json)
Hash identifier:          DjNBu4KA6x1B22OkKh/geSPn4blRFnTbZhUG88ydVio=
Subject key identifier:   7B:9C:ED:C8:32:80:28:A7:45:6E:9C:41:4B:B7:7D:AF:EB:CE:76:5F
Authority key identifier: 74:01:65:A8:0D:10:71:97:0A:BC:09:C0:2B:71:C1:AC:7C:1D:6E:0E
Certificate issuer:       /CN=A90DC5BE/serialNumber=740165A80D1071970ABC09C02B71C1AC7C1D6E0E
Certificate serial:       8180
Authority info access:    rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
Manifest:                 rsync://rpki.apnic.net/member_repository/A916D36A/C6DD51B4736F11EE917D0334C4F9AE02/e5ztyDKAKKdFbpxBS7d9r-vOdl8.mft
caRepository:             rsync://rpki.apnic.net/member_repository/A916D36A/C6DD51B4736F11EE917D0334C4F9AE02/
Notify URL:               https://rrdp.apnic.net/notification.xml
Certificate not before:   Sat 29 Aug 2026 13:04:39 +0000
Certificate not after:    Thu 30 Sep 2027 00:00:00 +0000
Subordinate resources:    IP: 161.121.128.0/19
Validation:               OK
Signature path:           rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 07 Sep 2026 07:12:22 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 33152 (0x8180)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A90DC5BE, serialNumber=740165A80D1071970ABC09C02B71C1AC7C1D6E0E
        Validity
            Not Before: Aug 29 13:04:39 2026 GMT
            Not After : Sep 30 00:00:00 2027 GMT
        Subject: CN=A916D36A, serialNumber=7B9CEDC8328028A7456E9C414BB77DAFEBCE765F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:d2:99:e3:e8:9e:3a:55:3d:3c:48:b0:4c:3f:
                    96:b0:0f:dd:31:9b:8e:76:29:db:6d:01:bc:9c:8f:
                    15:75:1b:31:5b:30:ea:1e:b1:2e:c8:69:4a:70:c1:
                    57:18:e7:64:a3:f3:5d:e4:1a:6e:a9:4e:1a:fd:d9:
                    ed:41:30:74:10:e5:61:b6:4f:31:64:24:59:97:48:
                    63:4d:08:67:71:6a:8b:86:c9:2b:c0:81:30:f2:fa:
                    7b:e1:74:7d:1a:d6:b9:ad:0a:35:5a:65:8b:d3:76:
                    96:e1:db:fa:a7:15:a5:24:ff:84:4a:e1:2e:7b:ad:
                    30:10:2d:bb:09:62:8f:51:6b:cd:bf:4d:ea:c1:03:
                    7d:90:d0:3c:b1:a2:83:2e:71:14:04:ca:bd:5b:5f:
                    12:5f:25:55:e0:cf:88:ca:3d:92:70:f8:c1:b7:bc:
                    3f:39:75:76:3e:10:1d:f5:7b:4b:bc:f9:1c:19:e7:
                    4c:66:fb:74:0c:88:6a:88:82:9d:87:07:81:b2:46:
                    1f:01:62:e0:4f:55:51:21:29:50:71:0f:78:9c:86:
                    b8:25:cc:51:97:a1:92:c0:f3:00:37:52:c5:34:03:
                    d3:1a:d3:49:a7:ca:3f:d3:72:9b:d2:de:04:69:12:
                    c0:e4:ae:c8:e9:6e:14:26:49:58:8c:10:81:28:20:
                    b3:85
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7B:9C:ED:C8:32:80:28:A7:45:6E:9C:41:4B:B7:7D:AF:EB:CE:76:5F
            X509v3 Authority Key Identifier:
                keyid:74:01:65:A8:0D:10:71:97:0A:BC:09:C0:2B:71:C1:AC:7C:1D:6E:0E

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                CA Repository - URI:rsync://rpki.apnic.net/member_repository/A916D36A/C6DD51B4736F11EE917D0334C4F9AE02/
                RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A916D36A/C6DD51B4736F11EE917D0334C4F9AE02/e5ztyDKAKKdFbpxBS7d9r-vOdl8.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  161.121.128.0/19

    Signature Algorithm: sha256WithRSAEncryption
         a2:83:2b:cb:ae:52:11:90:09:e7:55:24:66:6b:28:ae:73:3c:
         c1:60:f2:eb:b9:eb:82:c2:dd:a5:54:96:7e:f2:c6:0d:05:92:
         a7:10:09:4e:13:da:ac:8e:a1:f9:b7:ad:d9:38:b3:9f:10:70:
         09:1b:a9:a6:bc:0b:cd:0f:d3:91:18:66:11:fe:5e:d9:ff:e4:
         33:75:aa:5a:6b:f9:17:a5:99:a6:c2:cd:f9:bd:cb:1d:1a:4b:
         4f:cb:20:a8:9c:31:fc:d5:4a:72:66:90:14:9a:6e:83:4b:39:
         21:22:43:11:2c:46:81:3e:19:c4:1c:52:72:d7:75:5d:23:86:
         2f:68:3e:4d:33:38:0c:60:f2:db:59:c9:6b:1b:ee:d8:1b:35:
         5e:15:f1:af:91:4a:22:02:55:86:a6:d1:80:a2:82:d7:97:42:
         a3:55:41:e6:ee:70:16:4a:b0:35:ed:a4:18:ec:42:99:8c:91:
         d0:a2:6a:e4:12:5c:59:61:42:cf:4b:bb:23:5d:0b:76:a9:67:
         99:da:53:42:bc:54:1b:7f:f8:1a:ed:04:b8:74:cb:94:4c:21:
         f2:44:87:b1:ac:b2:81:94:d0:72:7b:aa:e6:f1:a7:30:7b:f5:
         78:42:ed:6e:9b:53:f8:fa:61:bf:2e:07:8b:4d:a3:c0:c2:99:
         96:fe:91:f3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 31 12:57:13 2026 by rpki-client