Certificate

$ rpki-client -vvf rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/uzvV1-GZJNhitqQb80x_27vpHG0.cer
File:                     uzvV1-GZJNhitqQb80x_27vpHG0.cer (raw, json)
Hash identifier:          k329zLs72Moo96gXg9gyE3f2Mhtg+bz6NLP+uk6yJMU=
Subject key identifier:   BB:3B:D5:D7:E1:99:24:D8:62:B6:A4:1B:F3:4C:7F:DB:BB:E9:1C:6D
Authority key identifier: 74:01:65:A8:0D:10:71:97:0A:BC:09:C0:2B:71:C1:AC:7C:1D:6E:0E
Certificate issuer:       /CN=A90DC5BE/serialNumber=740165A80D1071970ABC09C02B71C1AC7C1D6E0E
Certificate serial:       7B55
Authority info access:    rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
Manifest:                 rsync://rpki.apnic.net/member_repository/A91CA735/C7F441C6639B11EF9B4D2A5DC4F9AE02/uzvV1-GZJNhitqQb80x_27vpHG0.mft
caRepository:             rsync://rpki.apnic.net/member_repository/A91CA735/C7F441C6639B11EF9B4D2A5DC4F9AE02/
Notify URL:               https://rrdp.apnic.net/notification.xml
Certificate not before:   Wed 13 May 2026 05:22:00 +0000
Certificate not after:    Fri 30 Jul 2027 00:00:00 +0000
Subordinate resources:    IP: 147.124.12.0/22
                          IP: 160.25.254.0/23
                          IP: 167.254.236.0/22
                          IP: 192.65.2.0/23
Validation:               OK
Signature path:           rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 09 Jun 2026 15:18:53 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 31573 (0x7b55)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A90DC5BE, serialNumber=740165A80D1071970ABC09C02B71C1AC7C1D6E0E
        Validity
            Not Before: May 13 05:22:00 2026 GMT
            Not After : Jul 30 00:00:00 2027 GMT
        Subject: CN=A91CA735, serialNumber=BB3BD5D7E19924D862B6A41BF34C7FDBBBE91C6D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:d7:a9:ef:35:b2:2c:b3:5b:10:a1:43:6e:b1:
                    61:7c:2a:2d:ff:e5:9f:ba:dd:21:4c:a5:a2:f8:57:
                    d2:0d:f6:37:b3:e5:39:f6:01:84:23:56:81:43:30:
                    53:28:09:55:d0:49:8b:97:9a:14:d0:ef:ac:a5:83:
                    1a:08:89:bd:46:c2:60:95:44:2e:df:e7:c0:46:29:
                    e3:96:ca:46:ad:97:ae:c8:3e:d8:f1:d7:99:a5:00:
                    a9:82:28:9d:cf:d0:6f:a7:92:8b:34:38:48:f8:28:
                    9d:4c:ab:fb:4c:cd:1a:de:e7:b6:4a:e5:90:0b:af:
                    11:aa:0a:dc:b3:f9:3c:b3:bf:f4:07:06:3e:8b:92:
                    5d:6c:9c:09:1b:d2:03:ad:3c:87:f2:11:c5:ff:94:
                    ce:3f:78:68:39:6f:5e:e1:8e:52:37:dd:d7:67:aa:
                    d2:20:7c:aa:d2:b1:96:1d:3d:c1:bd:34:1f:1b:07:
                    47:be:02:72:2a:27:46:1f:01:36:75:71:0a:ef:09:
                    fa:9e:aa:dc:ff:ef:7b:7b:b3:c4:20:de:42:ec:56:
                    5d:0d:01:ed:4f:2d:8b:9d:40:98:d3:7d:36:3f:a1:
                    62:2d:25:f1:3b:a9:c8:f1:b8:73:3a:cf:fa:64:13:
                    be:3d:58:be:8c:6c:44:de:3e:72:d0:ea:9a:5b:a8:
                    10:b7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BB:3B:D5:D7:E1:99:24:D8:62:B6:A4:1B:F3:4C:7F:DB:BB:E9:1C:6D
            X509v3 Authority Key Identifier:
                keyid:74:01:65:A8:0D:10:71:97:0A:BC:09:C0:2B:71:C1:AC:7C:1D:6E:0E

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                CA Repository - URI:rsync://rpki.apnic.net/member_repository/A91CA735/C7F441C6639B11EF9B4D2A5DC4F9AE02/
                RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A91CA735/C7F441C6639B11EF9B4D2A5DC4F9AE02/uzvV1-GZJNhitqQb80x_27vpHG0.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  147.124.12.0/22
                  160.25.254.0/23
                  167.254.236.0/22
                  192.65.2.0/23

    Signature Algorithm: sha256WithRSAEncryption
         04:7f:6f:0b:a2:3e:a1:6d:c6:8d:69:14:d1:e2:12:fd:b7:17:
         a5:33:bd:80:77:b8:8a:f3:12:6d:90:69:08:88:0a:4d:b8:a8:
         87:7e:13:fa:14:d8:0d:5b:2f:3a:fd:c9:09:6b:6d:a4:7d:3b:
         65:94:be:04:01:93:32:b6:ff:97:8d:da:e1:d0:65:e2:db:2c:
         d3:21:93:f8:f5:20:6f:87:ba:b8:51:f0:dd:65:49:97:c8:35:
         be:3a:82:fa:fe:2d:75:eb:d2:14:d8:97:ca:00:3c:5c:da:42:
         7a:9f:f4:98:b8:af:d5:f2:5b:8b:b6:5c:1f:45:1b:3a:c3:84:
         fd:94:98:da:54:2b:5b:30:54:f8:56:66:e4:e9:29:ef:16:7b:
         12:09:ad:62:cb:94:d0:39:c0:78:28:1a:bc:a9:67:d0:4e:f4:
         87:5c:21:48:d9:8e:e8:16:aa:5c:2f:2b:d9:8b:c7:5e:ad:44:
         58:51:90:96:93:a3:cd:27:30:6b:ef:b5:bd:cf:ca:95:76:b9:
         51:00:5b:a5:5b:b4:28:2b:49:dd:0c:e2:a4:78:1f:b8:64:a2:
         02:d7:a0:22:f2:b1:d5:61:66:af:61:27:d4:a6:41:5b:85:ed:
         ae:11:a2:43:66:f9:9e:ef:b5:c3:03:30:51:c7:4d:f9:fc:5c:
         71:74:90:10
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 2 21:13:07 2026 by rpki-client