Certificate

$ rpki-client -vvf rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/oXIQwPgrRl5webuW88SZw_xMCog.cer
File:                     oXIQwPgrRl5webuW88SZw_xMCog.cer (raw, json)
Hash identifier:          1pVNyZefo7Gfvyay8cB9v6Ldvqov+lPtx37XIdUsles=
Subject key identifier:   A1:72:10:C0:F8:2B:46:5E:70:79:BB:96:F3:C4:99:C3:FC:4C:0A:88
Authority key identifier: 74:01:65:A8:0D:10:71:97:0A:BC:09:C0:2B:71:C1:AC:7C:1D:6E:0E
Certificate issuer:       /CN=A90DC5BE/serialNumber=740165A80D1071970ABC09C02B71C1AC7C1D6E0E
Certificate serial:       7E04
Authority info access:    rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
Manifest:                 rsync://rpki.apnic.net/member_repository/A91E208A/70E5A220760511F1B63166DF79A30FBC/oXIQwPgrRl5webuW88SZw_xMCog.mft
caRepository:             rsync://rpki.apnic.net/member_repository/A91E208A/70E5A220760511F1B63166DF79A30FBC/
Notify URL:               https://rrdp.apnic.net/notification.xml
Certificate not before:   Thu 02 Jul 2026 11:02:01 +0000
Certificate not after:    Sun 31 Oct 2027 00:00:00 +0000
Subordinate resources:    IP: 160.236.58.0/23
Validation:               OK
Signature path:           rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 12 Jul 2026 02:50:13 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 32260 (0x7e04)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A90DC5BE, serialNumber=740165A80D1071970ABC09C02B71C1AC7C1D6E0E
        Validity
            Not Before: Jul  2 11:02:01 2026 GMT
            Not After : Oct 31 00:00:00 2027 GMT
        Subject: CN=A91E208A, serialNumber=A17210C0F82B465E7079BB96F3C499C3FC4C0A88
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d6:57:47:19:4e:16:8f:77:90:47:77:49:7e:c2:
                    89:a2:28:2e:6b:29:c2:9d:1e:57:45:6b:ca:1e:bf:
                    31:c6:39:e7:56:a2:a1:56:6b:c9:57:88:bf:91:90:
                    6a:18:3d:52:cd:c9:b1:63:27:9c:93:29:32:08:82:
                    b4:78:96:60:44:e6:b5:99:c0:4a:91:05:9c:75:49:
                    94:58:5d:eb:54:3b:55:73:f8:f9:72:16:1d:f6:38:
                    57:77:13:40:1a:55:ca:fe:6e:b4:ef:d7:5c:86:96:
                    c2:eb:df:97:66:8b:a4:3a:9c:78:a6:7e:5e:d2:63:
                    6d:ae:07:d1:11:83:8d:82:9a:7d:45:ef:0a:1a:1c:
                    5a:86:28:54:f7:8a:c7:c7:38:33:5c:19:c2:ca:95:
                    cd:8a:bf:c6:3e:2d:9b:a4:ad:92:35:31:89:7d:f6:
                    8d:32:bf:de:41:41:40:5e:3d:b5:27:73:1a:6a:4e:
                    9e:32:87:a6:ec:99:cf:da:d3:e3:11:d6:62:72:24:
                    c4:cd:24:03:3c:82:fb:df:bf:a4:2a:d8:ef:e9:82:
                    79:50:d0:ed:ff:8e:43:c5:80:2d:cb:9a:30:76:c9:
                    5c:ab:a4:43:fe:b1:9b:2f:91:45:a8:b4:d1:e0:1a:
                    f5:a8:c6:e5:a8:8c:8c:77:ed:d5:c0:18:92:a8:28:
                    22:2d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A1:72:10:C0:F8:2B:46:5E:70:79:BB:96:F3:C4:99:C3:FC:4C:0A:88
            X509v3 Authority Key Identifier:
                keyid:74:01:65:A8:0D:10:71:97:0A:BC:09:C0:2B:71:C1:AC:7C:1D:6E:0E

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                CA Repository - URI:rsync://rpki.apnic.net/member_repository/A91E208A/70E5A220760511F1B63166DF79A30FBC/
                RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A91E208A/70E5A220760511F1B63166DF79A30FBC/oXIQwPgrRl5webuW88SZw_xMCog.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  160.236.58.0/23

    Signature Algorithm: sha256WithRSAEncryption
         46:6b:54:f0:fb:f4:3d:68:10:fa:cc:e6:d5:90:fd:ff:14:25:
         60:e0:55:66:54:bc:74:0e:f1:44:b7:da:00:8a:b2:75:0f:0f:
         7a:95:a8:2f:59:d1:b8:d0:09:4f:3d:8b:5b:d9:64:bd:1d:39:
         b4:ce:9d:10:30:74:50:1e:41:83:6e:58:90:1c:22:a6:92:b3:
         f2:08:2f:ee:a6:3d:bb:d0:0d:82:6b:15:75:f3:8a:b1:67:49:
         a8:21:9f:05:44:90:07:5a:0d:33:e4:08:1a:bc:8f:d9:18:54:
         a5:9b:2f:e9:6f:47:41:d4:62:7d:f3:b3:63:a8:2c:a3:fd:1f:
         6c:a5:ee:67:93:5f:ae:e4:fe:d9:6b:df:01:b4:d5:79:3f:9f:
         28:2b:a4:a8:a4:bf:18:f2:dd:97:6c:89:00:1f:34:a2:95:02:
         09:d5:a1:f4:65:d3:32:b4:d7:74:d8:5a:74:ff:e0:39:bb:23:
         4c:cf:da:cf:70:7f:ca:5d:35:0e:09:66:c0:9f:0e:2c:ad:41:
         e7:82:79:d3:27:86:ee:ea:41:cf:b6:25:51:6c:70:e8:fe:d4:
         56:88:c7:fd:9f:5c:bd:65:ba:bb:9e:fa:e1:8c:0c:d8:bd:ae:
         a2:c0:c9:20:47:7a:85:9b:2e:ce:b4:8d:c0:44:59:ea:07:45:
         7f:dc:87:d6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 5 11:14:23 2026 by rpki-client