Certificate

$ rpki-client -vvf rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/piPcBe58I3DKREMQhN5RMh83pwQ.cer
File:                     piPcBe58I3DKREMQhN5RMh83pwQ.cer (raw, json)
Hash identifier:          nz/ujlKFmLi9mXQrVencQ+uNW3g1JBCgZIC/75XyVvw=
Subject key identifier:   A6:23:DC:05:EE:7C:23:70:CA:44:43:10:84:DE:51:32:1F:37:A7:04
Authority key identifier: 74:01:65:A8:0D:10:71:97:0A:BC:09:C0:2B:71:C1:AC:7C:1D:6E:0E
Certificate issuer:       /CN=A90DC5BE/serialNumber=740165A80D1071970ABC09C02B71C1AC7C1D6E0E
Certificate serial:       7B5B
Authority info access:    rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
Manifest:                 rsync://rpki.apnic.net/member_repository/A9146179/4BFD9BBCAA7C11EFA33BFD77C4F9AE02/piPcBe58I3DKREMQhN5RMh83pwQ.mft
caRepository:             rsync://rpki.apnic.net/member_repository/A9146179/4BFD9BBCAA7C11EFA33BFD77C4F9AE02/
Notify URL:               https://rrdp.apnic.net/notification.xml
Certificate not before:   Wed 13 May 2026 06:14:14 +0000
Certificate not after:    Tue 02 Mar 2027 00:00:00 +0000
Subordinate resources:    IP: 160.250.40.0/23
Validation:               OK
Signature path:           rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 09 Jun 2026 15:18:53 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 31579 (0x7b5b)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A90DC5BE, serialNumber=740165A80D1071970ABC09C02B71C1AC7C1D6E0E
        Validity
            Not Before: May 13 06:14:14 2026 GMT
            Not After : Mar  2 00:00:00 2027 GMT
        Subject: CN=A9146179, serialNumber=A623DC05EE7C2370CA44431084DE51321F37A704
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:26:eb:58:e7:46:b9:07:d7:90:73:a1:c0:cf:
                    91:26:e4:3c:09:08:cd:24:a9:6f:e2:4b:ed:4f:38:
                    4c:69:0a:54:90:0b:2e:e8:c8:1b:2e:b1:d6:fb:65:
                    6b:82:a2:65:90:6a:61:c5:38:96:86:59:26:c6:7d:
                    7c:01:ac:98:a6:b1:e9:b9:10:13:7a:6a:77:1f:77:
                    15:65:52:54:0a:44:3c:90:16:7c:ec:b5:29:4b:52:
                    ad:da:5b:80:7a:25:c2:7f:73:d6:bc:d2:0d:e6:09:
                    52:88:f0:f6:1f:74:26:a1:72:39:fc:1d:90:20:e9:
                    67:57:61:2f:c2:77:63:28:e0:cc:12:36:49:b3:95:
                    9d:c7:cf:29:d1:2f:c4:81:35:30:55:5b:63:61:42:
                    06:6a:71:49:86:88:6c:b3:e8:bf:96:33:27:61:75:
                    2e:c8:a4:46:f2:ef:3a:a1:8c:44:e0:cf:6c:7a:d7:
                    fd:32:cb:a2:c8:4f:2d:92:6a:a4:de:fc:9b:ab:13:
                    82:1d:1f:30:78:b7:50:2c:b9:88:a8:b8:f4:38:22:
                    90:5f:e0:37:55:42:25:46:d1:b8:88:2a:93:c0:1c:
                    4b:6f:7d:d4:c0:4f:ae:f5:1c:e9:45:19:a7:84:ce:
                    da:1b:6d:2d:3f:b4:a7:6b:71:17:47:18:75:f2:9a:
                    0b:93
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A6:23:DC:05:EE:7C:23:70:CA:44:43:10:84:DE:51:32:1F:37:A7:04
            X509v3 Authority Key Identifier:
                keyid:74:01:65:A8:0D:10:71:97:0A:BC:09:C0:2B:71:C1:AC:7C:1D:6E:0E

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                CA Repository - URI:rsync://rpki.apnic.net/member_repository/A9146179/4BFD9BBCAA7C11EFA33BFD77C4F9AE02/
                RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A9146179/4BFD9BBCAA7C11EFA33BFD77C4F9AE02/piPcBe58I3DKREMQhN5RMh83pwQ.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  160.250.40.0/23

    Signature Algorithm: sha256WithRSAEncryption
         65:2e:0d:d3:7e:5e:93:ab:f1:7a:b9:25:94:77:9c:dd:c7:9b:
         16:5f:22:fd:2f:34:ab:e6:b9:99:e1:33:51:94:23:70:37:6d:
         57:c4:9e:0c:e1:15:60:9a:7f:44:11:31:98:93:d7:45:03:1a:
         65:96:c9:35:80:84:40:94:99:07:b3:48:62:3b:88:54:8e:f8:
         18:e0:bf:c5:91:0e:04:66:79:35:7c:01:1d:cf:0e:cc:30:02:
         db:06:90:34:52:dd:5e:3e:b2:67:a1:24:63:11:95:33:c3:93:
         18:4a:7a:ea:81:43:18:1b:e7:cb:f0:6f:93:b9:ba:b8:e2:d5:
         f0:97:f9:6d:b2:dd:ed:17:4f:f5:7b:b6:fb:f8:36:7b:5e:d8:
         bd:3e:b6:82:1b:89:55:8b:06:f9:76:96:59:ee:d2:13:77:8b:
         cb:98:c9:2e:9d:be:03:b0:9b:f7:ca:98:6f:83:2e:e0:b8:29:
         04:fb:a4:fc:ba:f4:32:70:7a:cd:62:54:d7:3b:b6:4e:0b:02:
         b2:02:97:06:c8:31:7e:fe:d5:1a:03:87:1d:d9:99:a2:1c:9e:
         1d:f7:3b:62:67:9c:67:60:2b:b6:2a:91:50:b3:38:eb:91:8b:
         6b:73:06:74:65:50:c0:0f:63:d6:1b:5e:35:75:e8:c6:7f:13:
         15:7f:91:52
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 2 21:12:08 2026 by rpki-client