Certificate

$ rpki-client -vvf rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/gmqoO74CQNE5BqurRkMX6eercO8.cer
File:                     gmqoO74CQNE5BqurRkMX6eercO8.cer (raw, json)
Hash identifier:          Lr3mH19Vh1YbbTkNuadr+obN/RVx6RR+lW3CKIvn7H0=
Subject key identifier:   82:6A:A8:3B:BE:02:40:D1:39:06:AB:AB:46:43:17:E9:E7:AB:70:EF
Authority key identifier: 74:01:65:A8:0D:10:71:97:0A:BC:09:C0:2B:71:C1:AC:7C:1D:6E:0E
Certificate issuer:       /CN=A90DC5BE/serialNumber=740165A80D1071970ABC09C02B71C1AC7C1D6E0E
Certificate serial:       6805
Authority info access:    rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
Manifest:                 rsync://rpki.apnic.net/member_repository/A916C473/F57D23305DDF11F0A5BFD66FC4F9AE02/gmqoO74CQNE5BqurRkMX6eercO8.mft
caRepository:             rsync://rpki.apnic.net/member_repository/A916C473/F57D23305DDF11F0A5BFD66FC4F9AE02/
Notify URL:               https://rrdp.apnic.net/notification.xml
Certificate not before:   Thu 10 Jul 2025 22:48:18 +0000
Certificate not after:    Sat 31 Oct 2026 00:00:00 +0000
Subordinate resources:    IP: 165.101.176.0/23
Validation:               OK
Signature path:           rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 27 Jul 2025 14:50:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 26629 (0x6805)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A90DC5BE, serialNumber=740165A80D1071970ABC09C02B71C1AC7C1D6E0E
        Validity
            Not Before: Jul 10 22:48:18 2025 GMT
            Not After : Oct 31 00:00:00 2026 GMT
        Subject: CN=A916C473, serialNumber=826AA83BBE0240D13906ABAB464317E9E7AB70EF
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:91:2d:92:a7:41:b1:d0:74:6d:2a:27:76:37:
                    4e:21:69:9b:98:9b:fc:19:1a:71:79:0a:dd:ee:31:
                    39:d8:23:fa:30:37:9e:c9:8d:45:95:77:bd:d1:44:
                    b7:79:8f:92:0f:40:07:58:8e:b3:8a:00:d5:55:21:
                    8f:a9:03:de:be:cb:14:98:79:74:76:2c:44:ad:10:
                    41:a0:36:98:4c:d9:cc:be:db:7d:d9:92:ea:39:60:
                    a8:f6:76:6e:dd:cf:e7:33:ca:67:ce:c3:bb:9a:ec:
                    8d:92:1d:c6:69:4e:13:dc:3f:d9:fe:7e:2a:3d:9b:
                    4c:9d:f0:08:eb:82:85:2c:78:c4:6e:34:71:5d:cc:
                    f1:02:1e:01:75:ea:b1:73:b1:77:10:16:34:e6:4c:
                    8c:b4:af:62:d4:09:60:c5:e6:4f:d1:29:0f:e7:a9:
                    77:cf:76:2d:58:be:3b:b3:f8:58:57:f7:d2:53:7e:
                    cb:03:66:57:62:33:a6:31:3d:b7:28:bd:4d:3e:f1:
                    ff:ce:2b:96:f8:fa:1f:54:6f:65:38:51:61:61:c2:
                    bb:8d:47:dc:22:14:fe:6a:0f:ed:c7:16:3c:b5:67:
                    34:16:4c:3d:83:24:85:22:29:ee:c7:12:55:86:d9:
                    81:ca:13:60:46:5a:bb:d2:6b:4f:e7:1a:7f:cd:65:
                    6d:cb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                82:6A:A8:3B:BE:02:40:D1:39:06:AB:AB:46:43:17:E9:E7:AB:70:EF
            X509v3 Authority Key Identifier:
                keyid:74:01:65:A8:0D:10:71:97:0A:BC:09:C0:2B:71:C1:AC:7C:1D:6E:0E

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                CA Repository - URI:rsync://rpki.apnic.net/member_repository/A916C473/F57D23305DDF11F0A5BFD66FC4F9AE02/
                RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A916C473/F57D23305DDF11F0A5BFD66FC4F9AE02/gmqoO74CQNE5BqurRkMX6eercO8.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  165.101.176.0/23

    Signature Algorithm: sha256WithRSAEncryption
         71:1c:df:60:21:22:67:22:7c:19:19:aa:7c:ee:0d:ea:ef:6a:
         d4:17:27:bd:4c:cd:d4:7d:f3:f7:82:00:ca:c8:c7:6f:d6:24:
         69:b0:31:c9:76:9e:96:cf:24:e3:c4:9c:21:f2:c4:12:39:ed:
         22:02:d7:d9:b8:e1:47:dc:90:ff:82:bf:94:c6:c6:43:11:4c:
         e7:1e:73:03:33:b6:84:cb:32:db:fb:fc:64:64:eb:f2:10:c0:
         c0:fd:55:ec:0d:98:14:8d:d9:0c:a0:73:eb:c5:05:f7:17:fe:
         f7:8e:b6:df:08:43:b5:80:09:9d:26:42:39:d6:79:10:46:13:
         ff:df:eb:79:bb:5a:66:23:06:62:1d:d7:ad:e6:2b:ee:6c:31:
         75:bb:98:2a:85:c9:7b:de:1e:87:d5:88:87:d2:b6:0d:02:a2:
         63:0c:1c:af:0c:7d:16:f1:80:ad:15:f2:9a:08:37:63:d8:f0:
         a4:20:46:fa:8b:41:9b:43:e9:ec:13:87:54:da:21:95:f6:99:
         b4:88:fc:70:31:3a:9c:47:58:1e:1c:5a:eb:00:a2:e7:b7:27:
         cf:bb:e6:df:04:9a:f8:ff:be:73:aa:ae:a4:ef:0d:af:a8:21:
         e8:ae:02:3c:98:65:55:9f:ed:a6:d8:36:2d:34:ab:90:ab:9d:
         4d:b2:b9:d2
-----BEGIN CERTIFICATE-----
MIIF/TCCBOWgAwIBAgICaAUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkw
REM1QkUxMTAvBgNVBAUTKDc0MDE2NUE4MEQxMDcxOTcwQUJDMDlDMDJCNzFDMUFD
N0MxRDZFMEUwHhcNMjUwNzEwMjI0ODE4WhcNMjYxMDMxMDAwMDAwWjBGMREwDwYD
VQQDEwhBOTE2QzQ3MzExMC8GA1UEBRMoODI2QUE4M0JCRTAyNDBEMTM5MDZBQkFC
NDY0MzE3RTlFN0FCNzBFRjCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEB
AMqRLZKnQbHQdG0qJ3Y3TiFpm5ib/BkacXkK3e4xOdgj+jA3nsmNRZV3vdFEt3mP
kg9AB1iOs4oA1VUhj6kD3r7LFJh5dHYsRK0QQaA2mEzZzL7bfdmS6jlgqPZ2bt3P
5zPKZ87Du5rsjZIdxmlOE9w/2f5+Kj2bTJ3wCOuChSx4xG40cV3M8QIeAXXqsXOx
dxAWNOZMjLSvYtQJYMXmT9EpD+epd892LVi+O7P4WFf30lN+ywNmV2IzpjE9tyi9
TT7x/84rlvj6H1RvZThRYWHCu41H3CIU/moP7ccWPLVnNBZMPYMkhSIp7scSVYbZ
gcoTYEZau9JrT+caf81lbcsCAwEAAaOCAvMwggLvMB0GA1UdDgQWBBSCaqg7vgJA
0TkGq6tGQxfp56tw7zAfBgNVHSMEGDAWgBR0AWWoDRBxlwq8CcArccGsfB1uDjAO
BgNVHQ8BAf8EBAMCAQYwDwYDVR0TAQH/BAUwAwEB/zBzBgNVHR8EbDBqMGigZqBk
hmJyc3luYzovL3Jwa2kuYXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRGMjAxRDY2
MTFFMjhBQzg4MzdDNzJGRDFGRjIvZEFGbHFBMFFjWmNLdkFuQUszSEJySHdkYmc0
LmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5h
cG5pYy5uZXQvcmVwb3NpdG9yeS85ODA2NTJFMEI3N0UxMUU3QTk2QTM5NTIxQTRG
NEZCNC9kQUZscUEwUWNaY0t2QW5BSzNIQnJId2RiZzQuY2VyMEoGA1UdIAEB/wRA
MD4wPAYIKwYBBQUHDgIwMDAuBggrBgEFBQcCARYiaHR0cHM6Ly93d3cuYXBuaWMu
bmV0L1JQS0kvQ1BTLnBkZjCCASgGCCsGAQUFBwELBIIBGjCCARYwXwYIKwYBBQUH
MAWGU3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
NkM0NzMvRjU3RDIzMzA1RERGMTFGMEE1QkZENjZGQzRGOUFFMDIvMH4GCCsGAQUF
BzAKhnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5
MTZDNDczL0Y1N0QyMzMwNURERjExRjBBNUJGRDY2RkM0RjlBRTAyL2dtcW9PNzRD
UU5FNUJxdXJSa01YNmVlcmNPOC5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJk
cC5hcG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAfBggrBgEFBQcBBwEB/wQQMA4w
DAQCAAEwBgMEAaVlsDANBgkqhkiG9w0BAQsFAAOCAQEAcRzfYCEiZyJ8GRmqfO4N
6u9q1BcnvUzN1H3z94IAysjHb9YkabAxyXaels8k48ScIfLEEjntIgLX2bjhR9yQ
/4K/lMbGQxFM5x5zAzO2hMsy2/v8ZGTr8hDAwP1V7A2YFI3ZDKBz68UF9xf+9462
3whDtYAJnSZCOdZ5EEYT/9/rebtaZiMGYh3XreYr7mwxdbuYKoXJe94eh9WIh9K2
DQKiYwwcrwx9FvGArRXymgg3Y9jwpCBG+otBm0Pp7BOHVNohlfaZtIj8cDE6nEdY
Hhxa6wCi57cnz7vm3wSa+P++c6qupO8Nr6gh6K4CPJhlVZ/tptg2LTSrkKudTbK5
0g==
-----END CERTIFICATE-----
Generated at Sun Jul 20 16:13:55 2025 by rpki-client