Certificate

$ rpki-client -vvf rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/kUEwRSpecDu47DyNiG5A8gWqYB4.cer
File:                     kUEwRSpecDu47DyNiG5A8gWqYB4.cer (raw, json)
Hash identifier:          PLNu7Qp+8OtqlSOh2x/MwM+Okzto4zggoQ5qUiOQCPc=
Subject key identifier:   91:41:30:45:2A:5E:70:3B:B8:EC:3C:8D:88:6E:40:F2:05:AA:60:1E
Authority key identifier: 74:01:65:A8:0D:10:71:97:0A:BC:09:C0:2B:71:C1:AC:7C:1D:6E:0E
Certificate issuer:       /CN=A90DC5BE/serialNumber=740165A80D1071970ABC09C02B71C1AC7C1D6E0E
Certificate serial:       7B57
Authority info access:    rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
Manifest:                 rsync://rpki.apnic.net/member_repository/A91274A4/6FD2A9EE4E8E11F18A60D3D6B6833773/kUEwRSpecDu47DyNiG5A8gWqYB4.mft
caRepository:             rsync://rpki.apnic.net/member_repository/A91274A4/6FD2A9EE4E8E11F18A60D3D6B6833773/
Notify URL:               https://rrdp.apnic.net/notification.xml
Certificate not before:   Wed 13 May 2026 05:41:54 +0000
Certificate not after:    Sun 31 Jan 2027 00:00:00 +0000
Subordinate resources:    IP: 160.222.0.0/18
Validation:               OK
Signature path:           rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 28 May 2026 09:08:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 31575 (0x7b57)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A90DC5BE, serialNumber=740165A80D1071970ABC09C02B71C1AC7C1D6E0E
        Validity
            Not Before: May 13 05:41:54 2026 GMT
            Not After : Jan 31 00:00:00 2027 GMT
        Subject: CN=A91274A4, serialNumber=914130452A5E703BB8EC3C8D886E40F205AA601E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:c2:04:81:eb:99:a3:bf:bf:a4:e7:9d:2c:1e:
                    4c:87:cb:63:7f:41:5b:aa:2d:6a:06:97:f6:b3:71:
                    00:34:8b:19:b9:63:7e:29:0f:24:35:b5:65:01:db:
                    e0:fc:7a:59:95:0b:e9:ff:92:50:cc:60:62:18:a2:
                    f6:e0:7a:3b:f7:89:c3:8a:4a:10:bf:ed:a6:c5:2d:
                    2c:15:ac:de:45:f4:c7:b5:c0:81:54:05:b9:6a:48:
                    72:0c:7a:42:12:e5:8a:72:9c:b0:21:a8:96:f1:4c:
                    b1:28:00:87:f5:0d:2d:6d:44:9c:ad:91:41:6c:1c:
                    76:23:d5:46:00:72:57:57:88:61:79:8c:57:6e:b4:
                    3a:ca:6e:1f:9d:fa:af:f4:bb:35:6b:06:82:cc:a1:
                    a2:fd:0d:ed:7d:d1:89:53:76:df:bd:86:ed:ad:3d:
                    68:be:d7:22:fd:78:9f:5b:77:a4:07:80:93:d3:80:
                    ef:4e:a7:42:b8:80:b3:8e:52:16:c4:90:30:ba:fe:
                    02:c9:29:99:4a:5c:ac:9b:dd:5a:e2:a3:35:9e:25:
                    ea:14:59:d0:ad:5d:b8:93:60:0e:21:4f:27:f7:44:
                    44:ef:81:47:62:0e:4b:d4:9d:1e:2d:21:eb:95:1f:
                    08:ec:b8:65:de:81:59:4c:93:cf:bb:bd:5f:4c:e9:
                    a8:e7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                91:41:30:45:2A:5E:70:3B:B8:EC:3C:8D:88:6E:40:F2:05:AA:60:1E
            X509v3 Authority Key Identifier:
                keyid:74:01:65:A8:0D:10:71:97:0A:BC:09:C0:2B:71:C1:AC:7C:1D:6E:0E

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                CA Repository - URI:rsync://rpki.apnic.net/member_repository/A91274A4/6FD2A9EE4E8E11F18A60D3D6B6833773/
                RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A91274A4/6FD2A9EE4E8E11F18A60D3D6B6833773/kUEwRSpecDu47DyNiG5A8gWqYB4.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  160.222.0.0/18

    Signature Algorithm: sha256WithRSAEncryption
         94:d0:53:42:bb:d3:2d:d6:2e:94:7d:03:55:1b:42:17:ac:c2:
         c2:20:0a:69:da:7f:2e:ae:6a:d2:f7:61:20:22:40:09:1e:1f:
         b6:01:14:3d:06:bf:7b:0e:e6:82:ac:7e:75:14:6b:58:48:93:
         87:d8:14:65:42:60:e9:b5:b5:b7:f6:2c:9d:a7:56:95:e6:6a:
         f4:8e:0c:f9:f1:34:73:de:fe:67:ea:48:7b:2b:4d:d2:24:84:
         54:2b:31:14:46:aa:b3:ac:53:fd:e1:b9:ba:de:12:e4:77:c4:
         04:4f:04:ca:c8:e9:86:07:c2:63:46:84:8d:75:96:95:45:7c:
         b8:0e:b0:f4:da:5a:7c:3b:91:76:b3:c9:b3:60:64:3e:6d:2b:
         3f:02:47:0e:0f:86:91:d2:27:9e:d4:92:38:b3:d0:ce:cd:2c:
         c0:1a:39:54:55:94:7a:ba:55:f8:26:7c:d6:c7:19:96:70:fd:
         d5:29:af:00:9c:47:23:2f:82:49:c1:e3:ab:17:92:e5:80:c8:
         0b:12:22:95:45:06:a3:60:b8:14:7a:20:0d:bc:a3:aa:d0:91:
         01:05:12:0d:1c:d2:93:b5:f1:0b:96:e1:7e:e3:44:23:c4:6e:
         ab:59:4a:a1:37:31:a2:f0:ec:27:f8:b3:3c:f2:53:be:e4:7a:
         72:5e:3c:27
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 21 13:55:59 2026 by rpki-client