Certificate

$ rpki-client -vvvf rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/usyV7haoNg4u685zU3tvmszfLq0.cer
File:                     usyV7haoNg4u685zU3tvmszfLq0.cer (raw, json)
Hash identifier:          qwBuPPBa5mjx1H0DFMgE83qLA7S5hNqmQnaI95T/GcQ=
Subject key identifier:   BA:CC:95:EE:16:A8:36:0E:2E:EB:CE:73:53:7B:6F:9A:CC:DF:2E:AD
Authority key identifier: 74:01:65:A8:0D:10:71:97:0A:BC:09:C0:2B:71:C1:AC:7C:1D:6E:0E
Certificate issuer:       /CN=A90DC5BE/serialNumber=740165A80D1071970ABC09C02B71C1AC7C1D6E0E
Certificate serial:       83B8
Authority info access:    rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
Manifest:                 rsync://rpki.apnic.net/member_repository/A914D3B0/EED5B8F2E48B11F092BBAF6E446F56BC/usyV7haoNg4u685zU3tvmszfLq0.mft
caRepository:             rsync://rpki.apnic.net/member_repository/A914D3B0/EED5B8F2E48B11F092BBAF6E446F56BC/
Notify URL:               https://rrdp.apnic.net/notification.xml
Certificate not before:   Mon 19 Oct 2026 12:50:20 +0000
Certificate not after:    Mon 31 Jan 2028 00:00:00 +0000
Subordinate resources:    IP: 138.252.174.0/23
Validation:               OK
Signature path:           rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 05 Nov 2026 14:06:55 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 33720 (0x83b8)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A90DC5BE, serialNumber=740165A80D1071970ABC09C02B71C1AC7C1D6E0E
        Validity
            Not Before: Oct 19 12:50:20 2026 GMT
            Not After : Jan 31 00:00:00 2028 GMT
        Subject: CN=A914D3B0, serialNumber=BACC95EE16A8360E2EEBCE73537B6F9ACCDF2EAD
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:67:3d:a1:c9:7a:91:d3:63:8c:7f:df:09:d8:
                    f7:fb:12:c9:03:32:f2:64:c3:6a:68:2e:34:28:7c:
                    1c:04:6d:cd:24:ec:e4:e4:8e:49:f0:ec:43:2c:fb:
                    5f:ee:d5:92:29:fd:c1:e5:0a:ea:33:40:87:ba:10:
                    37:46:26:52:28:89:de:9b:ea:1b:c2:ca:27:42:34:
                    01:3e:5f:c6:98:bc:28:ae:8c:38:8e:a3:17:21:a9:
                    eb:39:90:8c:fe:97:ca:72:45:00:45:be:74:20:55:
                    fe:62:90:c0:fa:7f:0a:ae:49:db:bd:22:86:0c:c5:
                    f3:f0:56:61:b9:8a:89:e3:ed:bb:a2:e6:96:d5:b6:
                    ce:07:4f:23:35:da:4f:a6:59:1a:59:b4:04:84:d4:
                    0d:77:1c:35:a9:dd:e2:37:29:c8:41:c3:b6:29:11:
                    c2:70:a3:1b:20:99:c2:82:16:da:a6:6b:38:46:c2:
                    fb:3d:b5:30:8c:b1:b4:35:bd:f0:a2:a5:29:39:b7:
                    7e:c2:1c:95:14:11:a4:ef:a9:b0:28:78:c4:55:64:
                    70:c8:8a:46:6c:85:53:42:53:ad:26:3e:bd:98:a6:
                    37:5e:b5:11:df:48:c7:0b:38:86:02:dc:6a:14:19:
                    e7:13:84:cc:d1:fc:cc:35:d6:74:46:41:9c:10:48:
                    61:07
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BA:CC:95:EE:16:A8:36:0E:2E:EB:CE:73:53:7B:6F:9A:CC:DF:2E:AD
            X509v3 Authority Key Identifier:
                keyid:74:01:65:A8:0D:10:71:97:0A:BC:09:C0:2B:71:C1:AC:7C:1D:6E:0E

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                CA Repository - URI:rsync://rpki.apnic.net/member_repository/A914D3B0/EED5B8F2E48B11F092BBAF6E446F56BC/
                RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A914D3B0/EED5B8F2E48B11F092BBAF6E446F56BC/usyV7haoNg4u685zU3tvmszfLq0.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  138.252.174.0/23

    Signature Algorithm: sha256WithRSAEncryption
         6a:21:34:af:af:54:9a:97:cb:7e:c5:67:aa:95:c2:0d:48:ca:
         47:f5:c2:af:e8:ed:96:64:81:94:da:d1:58:e5:fe:e7:da:a5:
         f2:d6:11:76:69:cd:8c:55:cc:06:1f:79:c7:c2:a3:1c:ea:1b:
         49:67:d5:57:ba:14:dd:36:3a:fb:6f:8a:5a:84:c0:90:aa:7c:
         55:ad:47:07:63:ac:98:af:41:c5:15:03:c7:6d:bb:cf:e2:dd:
         a7:eb:6b:da:11:10:5e:bd:79:8a:9b:ac:e1:72:2e:ad:37:84:
         d9:e7:95:69:45:b1:20:e7:8a:00:0a:dc:a3:b4:d1:09:b7:3e:
         5c:78:e6:43:c3:85:22:03:fe:f1:cd:1f:8b:77:b6:8d:6f:85:
         93:f9:dd:97:de:73:02:f6:bb:d7:57:b0:10:46:6b:fb:64:79:
         ba:41:45:c6:91:c8:1a:d3:d1:b5:7e:ee:3b:6e:f6:e3:5c:4e:
         47:88:81:fe:bd:9e:dc:33:5d:39:73:75:8b:2c:0e:01:53:f6:
         e4:9d:c1:f7:e7:1d:27:c2:8a:3d:c3:fa:b1:59:f4:44:b0:e4:
         f6:08:58:e6:06:68:15:17:ef:d2:e9:09:77:04:33:82:36:a9:
         dd:a6:3d:19:ad:80:6b:c4:66:71:1a:54:1f:df:7f:9b:79:11:
         af:dc:6d:98
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 29 16:01:54 2026 by rpki-client