Certificate

$ rpki-client -vvf rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/no_7TgVT0H7Q35t9_tC1PETL_gQ.cer
File:                     no_7TgVT0H7Q35t9_tC1PETL_gQ.cer (raw, json)
Hash identifier:          UaiJsv9ofQxRu+YypqtODQGlc5zwJvoYYiEqBcaRSug=
Subject key identifier:   9E:8F:FB:4E:05:53:D0:7E:D0:DF:9B:7D:FE:D0:B5:3C:44:CB:FE:04
Authority key identifier: 74:01:65:A8:0D:10:71:97:0A:BC:09:C0:2B:71:C1:AC:7C:1D:6E:0E
Certificate issuer:       /CN=A90DC5BE/serialNumber=740165A80D1071970ABC09C02B71C1AC7C1D6E0E
Certificate serial:       7BDC
Authority info access:    rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
Manifest:                 rsync://rpki.apnic.net/member_repository/A91E10B0/00F8A278571F11F18340C26C91833773/no_7TgVT0H7Q35t9_tC1PETL_gQ.mft
caRepository:             rsync://rpki.apnic.net/member_repository/A91E10B0/00F8A278571F11F18340C26C91833773/
Notify URL:               https://rrdp.apnic.net/notification.xml
Certificate not before:   Sun 24 May 2026 03:16:54 +0000
Certificate not after:    Tue 31 Aug 2027 00:00:00 +0000
Subordinate resources:    IP: 162.4.174.0/23
Validation:               OK
Signature path:           rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 09 Jun 2026 15:18:53 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 31708 (0x7bdc)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A90DC5BE, serialNumber=740165A80D1071970ABC09C02B71C1AC7C1D6E0E
        Validity
            Not Before: May 24 03:16:54 2026 GMT
            Not After : Aug 31 00:00:00 2027 GMT
        Subject: CN=A91E10B0, serialNumber=9E8FFB4E0553D07ED0DF9B7DFED0B53C44CBFE04
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d2:8f:e5:3c:ed:cc:85:c2:c0:95:00:2c:bd:82:
                    0b:cb:67:d1:ca:00:41:ba:a2:3e:9e:cf:50:f9:ad:
                    76:50:c6:48:74:38:01:72:22:31:08:d1:23:11:76:
                    db:2c:92:a4:dc:eb:ed:cc:a7:41:74:38:66:a8:cf:
                    25:2e:6b:49:81:c8:ad:f1:5e:a5:99:ec:95:ed:ed:
                    69:cc:a3:a0:93:84:38:bd:8d:4c:c8:1b:1d:1e:8d:
                    d6:cb:8f:30:41:24:b0:42:06:bc:f9:ef:2f:25:cc:
                    33:50:3f:42:06:86:d7:87:40:54:21:ca:d2:6f:43:
                    9a:d6:72:64:e1:93:1e:38:f0:c2:ab:8c:c3:bd:ac:
                    88:31:56:14:ac:cc:e6:78:94:2e:33:46:1f:3b:8a:
                    fe:c6:3d:9b:46:82:33:45:61:b4:79:b3:45:cf:63:
                    e7:15:0f:7e:c3:52:4d:56:90:a2:95:e0:18:bb:a2:
                    86:2f:51:45:cc:00:06:c7:11:96:77:91:8c:56:b6:
                    5e:c9:80:8e:10:b2:38:fc:1a:32:e2:43:89:07:43:
                    d8:2b:f6:ae:e6:79:0e:1c:98:64:08:a8:31:e3:bc:
                    de:26:e9:f6:f4:ef:ff:6b:ab:07:bb:b0:4b:19:04:
                    5d:fc:33:02:bd:60:3f:58:9c:b6:5a:1a:82:50:35:
                    ca:15
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9E:8F:FB:4E:05:53:D0:7E:D0:DF:9B:7D:FE:D0:B5:3C:44:CB:FE:04
            X509v3 Authority Key Identifier:
                keyid:74:01:65:A8:0D:10:71:97:0A:BC:09:C0:2B:71:C1:AC:7C:1D:6E:0E

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                CA Repository - URI:rsync://rpki.apnic.net/member_repository/A91E10B0/00F8A278571F11F18340C26C91833773/
                RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A91E10B0/00F8A278571F11F18340C26C91833773/no_7TgVT0H7Q35t9_tC1PETL_gQ.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  162.4.174.0/23

    Signature Algorithm: sha256WithRSAEncryption
         0a:7a:25:6a:c0:c7:af:3c:62:1a:8e:90:7a:0e:39:4f:be:56:
         80:f8:9c:c5:76:66:a5:39:0a:31:cb:52:2c:77:9a:92:c0:e5:
         01:9c:20:23:60:92:38:73:02:ba:be:0a:b4:45:8e:99:76:2e:
         a4:f5:fe:fd:dc:86:3a:b0:6e:0d:a3:a1:07:2d:ff:75:c0:f6:
         73:bf:df:e1:6d:6c:83:9f:52:9a:72:ed:ea:9c:e5:8d:23:80:
         05:b5:e6:5d:69:78:a2:7d:33:8a:95:f5:ff:20:7e:c5:29:dc:
         69:a3:23:11:25:21:a8:b0:a8:8d:0e:b1:ce:d7:2b:06:70:4a:
         33:24:14:3b:8e:38:ff:0f:38:d2:71:8d:10:de:f4:77:14:ce:
         bb:fb:63:2d:17:0f:5f:ac:4a:c4:e0:93:60:5a:a8:3d:2d:c8:
         20:a5:9c:4e:57:14:64:a8:34:6d:b0:88:ea:96:38:8b:d1:d7:
         2d:bf:67:19:95:a2:7f:7b:e2:2b:d4:06:92:60:cd:83:b4:72:
         bc:ff:00:29:e7:28:f1:51:31:d3:1d:62:59:06:5e:89:ad:02:
         c0:d9:ee:c2:69:76:23:bb:e9:be:d4:17:87:80:ef:84:9f:a8:
         37:07:15:2d:fc:89:42:ed:31:55:e7:e1:2b:c5:73:0f:c6:0b:
         11:75:b3:06
-----BEGIN CERTIFICATE-----
MIIF/TCCBOWgAwIBAgICe9wwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkw
REM1QkUxMTAvBgNVBAUTKDc0MDE2NUE4MEQxMDcxOTcwQUJDMDlDMDJCNzFDMUFD
N0MxRDZFMEUwHhcNMjYwNTI0MDMxNjU0WhcNMjcwODMxMDAwMDAwWjBGMREwDwYD
VQQDEwhBOTFFMTBCMDExMC8GA1UEBRMoOUU4RkZCNEUwNTUzRDA3RUQwREY5QjdE
RkVEMEI1M0M0NENCRkUwNDCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEB
ANKP5TztzIXCwJUALL2CC8tn0coAQbqiPp7PUPmtdlDGSHQ4AXIiMQjRIxF22yyS
pNzr7cynQXQ4ZqjPJS5rSYHIrfFepZnsle3tacyjoJOEOL2NTMgbHR6N1suPMEEk
sEIGvPnvLyXMM1A/QgaG14dAVCHK0m9DmtZyZOGTHjjwwquMw72siDFWFKzM5niU
LjNGHzuK/sY9m0aCM0VhtHmzRc9j5xUPfsNSTVaQopXgGLuihi9RRcwABscRlneR
jFa2XsmAjhCyOPwaMuJDiQdD2Cv2ruZ5DhyYZAioMeO83ibp9vTv/2urB7uwSxkE
XfwzAr1gP1ictloaglA1yhUCAwEAAaOCAvMwggLvMB0GA1UdDgQWBBSej/tOBVPQ
ftDfm33+0LU8RMv+BDAfBgNVHSMEGDAWgBR0AWWoDRBxlwq8CcArccGsfB1uDjAO
BgNVHQ8BAf8EBAMCAQYwDwYDVR0TAQH/BAUwAwEB/zBzBgNVHR8EbDBqMGigZqBk
hmJyc3luYzovL3Jwa2kuYXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRGMjAxRDY2
MTFFMjhBQzg4MzdDNzJGRDFGRjIvZEFGbHFBMFFjWmNLdkFuQUszSEJySHdkYmc0
LmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5h
cG5pYy5uZXQvcmVwb3NpdG9yeS85ODA2NTJFMEI3N0UxMUU3QTk2QTM5NTIxQTRG
NEZCNC9kQUZscUEwUWNaY0t2QW5BSzNIQnJId2RiZzQuY2VyMEoGA1UdIAEB/wRA
MD4wPAYIKwYBBQUHDgIwMDAuBggrBgEFBQcCARYiaHR0cHM6Ly93d3cuYXBuaWMu
bmV0L1JQS0kvQ1BTLnBkZjCCASgGCCsGAQUFBwELBIIBGjCCARYwXwYIKwYBBQUH
MAWGU3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
RTEwQjAvMDBGOEEyNzg1NzFGMTFGMTgzNDBDMjZDOTE4MzM3NzMvMH4GCCsGAQUF
BzAKhnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5
MUUxMEIwLzAwRjhBMjc4NTcxRjExRjE4MzQwQzI2QzkxODMzNzczL25vXzdUZ1ZU
MEg3UTM1dDlfdEMxUEVUTF9nUS5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJk
cC5hcG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAfBggrBgEFBQcBBwEB/wQQMA4w
DAQCAAEwBgMEAaIErjANBgkqhkiG9w0BAQsFAAOCAQEACnolasDHrzxiGo6Qeg45
T75WgPicxXZmpTkKMctSLHeaksDlAZwgI2CSOHMCur4KtEWOmXYupPX+/dyGOrBu
DaOhBy3/dcD2c7/f4W1sg59SmnLt6pzljSOABbXmXWl4on0zipX1/yB+xSncaaMj
ESUhqLCojQ6xztcrBnBKMyQUO444/w840nGNEN70dxTOu/tjLRcPX6xKxOCTYFqo
PS3IIKWcTlcUZKg0bbCI6pY4i9HXLb9nGZWif3viK9QGkmDNg7RyvP8AKeco8VEx
0x1iWQZeia0CwNnuwml2I7vpvtQXh4DvhJ+oNwcVLfyJQu0xVefhK8VzD8YLEXWz
Bg==
-----END CERTIFICATE-----
Generated at Tue Jun 2 21:10:27 2026 by rpki-client