Certificate

$ rpki-client -vvf rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/jaLVp38m0NbVR89fVM32RoXD0wI.cer
File:                     jaLVp38m0NbVR89fVM32RoXD0wI.cer (raw, json)
Hash identifier:          oG6lIWoBk8Si2ZlEIBpS+fWgRXc0GpdDcqhGTLuGCxM=
Subject key identifier:   8D:A2:D5:A7:7F:26:D0:D6:D5:47:CF:5F:54:CD:F6:46:85:C3:D3:02
Authority key identifier: 74:01:65:A8:0D:10:71:97:0A:BC:09:C0:2B:71:C1:AC:7C:1D:6E:0E
Certificate issuer:       /CN=A90DC5BE/serialNumber=740165A80D1071970ABC09C02B71C1AC7C1D6E0E
Certificate serial:       7DE6
Authority info access:    rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
Manifest:                 rsync://rpki.apnic.net/member_repository/A91E5EB9/934FAB92751711F188B09F1E72A30FBC/jaLVp38m0NbVR89fVM32RoXD0wI.mft
caRepository:             rsync://rpki.apnic.net/member_repository/A91E5EB9/934FAB92751711F188B09F1E72A30FBC/
Notify URL:               https://rrdp.apnic.net/notification.xml
Certificate not before:   Wed 01 Jul 2026 06:39:19 +0000
Certificate not after:    Thu 30 Sep 2027 00:00:00 +0000
Subordinate resources:    IP: 160.236.50.0/23
Validation:               OK
Signature path:           rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 24 Jul 2026 19:50:32 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 32230 (0x7de6)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A90DC5BE, serialNumber=740165A80D1071970ABC09C02B71C1AC7C1D6E0E
        Validity
            Not Before: Jul  1 06:39:19 2026 GMT
            Not After : Sep 30 00:00:00 2027 GMT
        Subject: CN=A91E5EB9, serialNumber=8DA2D5A77F26D0D6D547CF5F54CDF64685C3D302
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:99:a5:d7:30:4d:48:bc:07:c0:f8:30:7d:12:b0:
                    90:99:ac:24:09:09:3c:4a:a3:f4:4b:ff:de:d5:05:
                    ba:a0:a9:04:81:b3:89:42:ae:24:7f:73:e2:d5:6e:
                    56:19:17:88:d5:3e:a8:84:63:54:af:0a:ec:44:da:
                    8a:f5:d3:c0:95:41:89:bf:4a:11:dc:96:f2:66:64:
                    1b:8e:04:b3:4f:72:05:67:24:0f:07:b5:cd:40:7a:
                    cb:dc:84:95:23:b6:97:f7:17:2d:11:49:4f:32:1e:
                    a4:b8:d1:bd:3e:44:e3:de:7c:7d:3f:f6:8d:5c:70:
                    b6:12:cd:65:60:36:ce:4b:78:81:e2:c7:de:e9:a2:
                    85:0e:0a:b8:c8:60:24:56:b3:8e:e6:6d:54:14:46:
                    3c:57:e6:ac:51:91:97:9a:22:12:a1:b8:28:7c:22:
                    73:f4:ce:cc:fe:ef:8e:89:b5:96:71:65:07:21:6c:
                    c1:58:58:cf:b3:73:d0:c7:23:00:ac:21:8a:62:a6:
                    12:32:0c:a0:1b:d1:7c:38:4b:a5:91:cc:2d:1c:fe:
                    9a:e6:36:97:50:b7:06:81:a5:62:90:4d:53:a3:f4:
                    d9:80:3b:80:38:78:5a:41:b8:67:13:83:6e:9e:bc:
                    81:ed:58:56:7c:0e:7e:39:bc:2a:51:a0:2e:7f:4f:
                    46:7d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8D:A2:D5:A7:7F:26:D0:D6:D5:47:CF:5F:54:CD:F6:46:85:C3:D3:02
            X509v3 Authority Key Identifier:
                keyid:74:01:65:A8:0D:10:71:97:0A:BC:09:C0:2B:71:C1:AC:7C:1D:6E:0E

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                CA Repository - URI:rsync://rpki.apnic.net/member_repository/A91E5EB9/934FAB92751711F188B09F1E72A30FBC/
                RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A91E5EB9/934FAB92751711F188B09F1E72A30FBC/jaLVp38m0NbVR89fVM32RoXD0wI.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  160.236.50.0/23

    Signature Algorithm: sha256WithRSAEncryption
         b8:23:42:81:0e:a2:c0:7f:78:99:f1:71:88:1a:ca:c9:e1:46:
         28:be:f0:c7:f8:82:f4:25:00:76:22:1a:4e:2b:56:d3:61:ca:
         43:6c:4d:d6:a1:d1:d6:8d:d9:f9:94:ba:c7:ec:c9:37:56:73:
         0f:ff:93:0f:ca:db:ca:33:19:6a:e7:fd:a3:24:63:2d:6f:c2:
         56:23:6d:7f:cf:f9:5f:cc:3f:48:eb:92:88:a8:90:5b:47:d2:
         71:61:50:2a:c5:6b:dd:2e:c0:b8:34:7f:d2:a0:18:0a:86:23:
         79:66:54:76:2c:8d:d6:85:b3:b9:99:23:42:9e:62:69:3c:30:
         36:3f:ea:72:c4:58:b8:a1:8a:be:e3:1f:59:3f:35:41:a4:a4:
         ca:20:7f:1f:f6:f3:c0:e4:fe:84:a6:c4:c2:af:97:41:b3:36:
         00:f9:6b:43:57:3b:b8:30:f8:76:72:9a:c4:c6:0f:32:61:19:
         6e:bd:c3:fe:bb:09:7a:85:f7:96:d1:a0:66:07:c6:ae:06:b2:
         0b:04:2c:62:11:1a:62:f9:d0:fe:89:c1:51:9a:ce:fc:8e:d7:
         ca:be:7f:6f:61:a1:38:1a:0e:54:22:35:ba:0d:1a:6a:df:60:
         af:41:14:b2:b6:b2:b7:47:e5:f3:d4:d9:28:35:3b:6f:86:89:
         8a:27:5a:ca
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 18 02:16:35 2026 by rpki-client