Certificate

$ rpki-client -vvvf rpki.apnic.net/repository/B4A1BEA61D6611E2B2CD8B7C72FD1FF2/V3LjuCeMtseqvXrPnvViq1k8LoI.cer
File:                     V3LjuCeMtseqvXrPnvViq1k8LoI.cer (raw, json)
Hash identifier:          uTIB3+FuzPn41PDJrwadajxN3utd2Fi1QwKcnYkDfkM=
Subject key identifier:   57:72:E3:B8:27:8C:B6:C7:AA:BD:7A:CF:9E:F5:62:AB:59:3C:2E:82
Authority key identifier: 96:A8:5E:F4:B8:CA:F5:D4:C3:5A:15:7F:4E:12:5E:E4:94:BA:F9:39
Certificate issuer:       /CN=A90DC5BE/serialNumber=96A85EF4B8CAF5D4C35A157F4E125EE494BAF939
Certificate serial:       4BA0
Authority info access:    rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/lqhe9LjK9dTDWhV_ThJe5JS6-Tk.cer
Manifest:                 rsync://rpki.apnic.net/member_repository/A914699C/D66B8FD6A7E911F19F6A8274A6EE528E/V3LjuCeMtseqvXrPnvViq1k8LoI.mft
caRepository:             rsync://rpki.apnic.net/member_repository/A914699C/D66B8FD6A7E911F19F6A8274A6EE528E/
Notify URL:               https://rrdp.apnic.net/notification.xml
Certificate not before:   Thu 03 Sep 2026 22:50:22 +0000
Certificate not after:    Fri 30 Jul 2027 00:00:00 +0000
Subordinate resources:    IP: 191.124.0.0/16
Validation:               OK
Signature path:           rsync://rpki.apnic.net/repository/B4A1BEA61D6611E2B2CD8B7C72FD1FF2/lqhe9LjK9dTDWhV_ThJe5JS6-Tk.crl
                          rsync://rpki.apnic.net/repository/B4A1BEA61D6611E2B2CD8B7C72FD1FF2/lqhe9LjK9dTDWhV_ThJe5JS6-Tk.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/lqhe9LjK9dTDWhV_ThJe5JS6-Tk.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 11 Sep 2026 14:50:25 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 19360 (0x4ba0)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A90DC5BE, serialNumber=96A85EF4B8CAF5D4C35A157F4E125EE494BAF939
        Validity
            Not Before: Sep  3 22:50:22 2026 GMT
            Not After : Jul 30 00:00:00 2027 GMT
        Subject: CN=A914699C, serialNumber=5772E3B8278CB6C7AABD7ACF9EF562AB593C2E82
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:94:d6:4e:48:7b:44:34:db:9a:fb:5f:21:7b:
                    f3:4b:3b:25:61:58:6a:28:62:86:00:6b:bf:72:36:
                    a0:8a:91:cd:b1:9c:a1:c1:37:14:52:84:67:ed:3c:
                    7f:a6:cf:b0:63:a7:13:7e:6d:42:74:fd:2e:fe:8e:
                    0e:37:a7:45:56:4e:a3:6b:df:b1:b1:59:38:6a:89:
                    03:86:a3:4a:3e:ab:c4:8c:a2:9e:85:92:91:5c:e2:
                    2e:3d:29:da:e0:14:c0:6c:6c:40:3e:34:f1:56:ca:
                    fe:68:a5:87:89:96:8f:80:cc:6a:b7:9d:46:f3:e8:
                    f8:3b:10:e2:ac:6a:83:85:f1:22:b4:c5:4b:7a:63:
                    e6:a0:78:ab:a6:7f:3d:06:73:c4:eb:f0:d5:71:f7:
                    eb:b8:65:94:9a:40:85:12:90:d7:67:ea:40:85:2e:
                    14:ce:86:b0:55:62:f7:c6:45:2e:53:2f:f3:a6:ac:
                    85:eb:01:95:dc:0a:bb:35:74:e3:17:50:8d:17:c5:
                    39:52:01:06:27:d4:27:62:a2:ed:75:62:cb:0e:b7:
                    b8:62:ba:ce:96:17:09:79:ba:60:db:fe:f9:57:6b:
                    a7:f8:d2:26:59:13:0b:cc:d8:b0:bd:1c:db:c9:00:
                    31:71:cc:cd:1a:fc:a1:1e:2c:11:e5:ac:5c:f6:99:
                    6a:49
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                57:72:E3:B8:27:8C:B6:C7:AA:BD:7A:CF:9E:F5:62:AB:59:3C:2E:82
            X509v3 Authority Key Identifier:
                keyid:96:A8:5E:F4:B8:CA:F5:D4:C3:5A:15:7F:4E:12:5E:E4:94:BA:F9:39

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/repository/B4A1BEA61D6611E2B2CD8B7C72FD1FF2/lqhe9LjK9dTDWhV_ThJe5JS6-Tk.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/lqhe9LjK9dTDWhV_ThJe5JS6-Tk.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                CA Repository - URI:rsync://rpki.apnic.net/member_repository/A914699C/D66B8FD6A7E911F19F6A8274A6EE528E/
                RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A914699C/D66B8FD6A7E911F19F6A8274A6EE528E/V3LjuCeMtseqvXrPnvViq1k8LoI.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  191.124.0.0/16

    Signature Algorithm: sha256WithRSAEncryption
         15:ae:b8:cd:0a:b1:bf:18:d5:33:ca:cf:4b:64:a2:06:84:cf:
         b3:1a:73:83:df:a6:56:d7:68:2b:64:ca:76:35:37:6b:06:a1:
         f3:77:4c:d3:7a:63:3d:b4:b4:84:b2:e8:10:9d:dc:75:57:80:
         35:76:8d:1e:d3:b3:d9:f3:62:f6:ac:1c:20:05:93:2a:38:eb:
         1d:cc:13:da:45:96:8f:1c:34:03:c0:09:d6:55:49:7e:8b:88:
         37:1d:c0:cc:0c:35:43:a4:10:9e:5c:0e:f1:b7:09:11:08:af:
         63:fb:e2:e1:08:ab:15:dc:40:cc:35:81:0e:fd:0c:c7:35:da:
         95:b6:f4:99:6b:26:05:9a:e1:85:05:3e:7c:72:3c:0c:a5:ae:
         90:fd:f3:83:f6:09:25:89:44:b1:ee:2c:15:41:fd:55:cd:54:
         1f:86:ae:60:a7:32:4b:e8:af:f6:72:ea:50:e3:35:8e:dd:80:
         f8:85:83:eb:f3:7f:31:5a:08:9d:c7:72:23:e4:6e:7f:ec:0c:
         77:a2:08:bf:88:23:3e:bd:bf:0a:b9:4d:23:02:d4:f0:92:9a:
         13:4e:57:fb:88:f3:cb:98:12:c8:5b:b0:cc:65:6f:ad:f6:29:
         a7:33:32:49:27:90:4d:56:b3:3c:17:c0:b5:16:5c:b4:9e:ef:
         d1:4b:86:25
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 5 03:48:54 2026 by rpki-client