Certificate

$ rpki-client -vvf rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/CqtotenM02zgL8fv_DHy08o52yc.cer
File:                     CqtotenM02zgL8fv_DHy08o52yc.cer (raw, json)
Hash identifier:          GtdJuvJjWmtd5TyzPzAF6jou4ENdIAeOHk2VkfFI4F0=
Subject key identifier:   0A:AB:68:B5:E9:CC:D3:6C:E0:2F:C7:EF:FC:31:F2:D3:CA:39:DB:27
Authority key identifier: 74:01:65:A8:0D:10:71:97:0A:BC:09:C0:2B:71:C1:AC:7C:1D:6E:0E
Certificate issuer:       /CN=A90DC5BE/serialNumber=740165A80D1071970ABC09C02B71C1AC7C1D6E0E
Certificate serial:       7ADA
Authority info access:    rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
Manifest:                 rsync://rpki.apnic.net/member_repository/A9163FDD/35AF6C5047B511F1A32F452AAB833773/CqtotenM02zgL8fv_DHy08o52yc.mft
caRepository:             rsync://rpki.apnic.net/member_repository/A9163FDD/35AF6C5047B511F1A32F452AAB833773/
Notify URL:               https://rrdp.apnic.net/notification.xml
Certificate not before:   Mon 04 May 2026 12:31:48 +0000
Certificate not after:    Fri 30 Jul 2027 00:00:00 +0000
Subordinate resources:    IP: 162.4.16.0/24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 19 May 2026 14:50:26 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 31450 (0x7ada)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A90DC5BE, serialNumber=740165A80D1071970ABC09C02B71C1AC7C1D6E0E
        Validity
            Not Before: May  4 12:31:48 2026 GMT
            Not After : Jul 30 00:00:00 2027 GMT
        Subject: CN=A9163FDD, serialNumber=0AAB68B5E9CCD36CE02FC7EFFC31F2D3CA39DB27
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:bb:42:ad:4c:89:7d:88:ab:a6:3b:53:97:b6:
                    15:05:b5:2d:f2:d4:16:af:bb:1c:7e:08:51:1e:7a:
                    35:17:cc:85:a1:6b:3b:f8:a7:b5:a2:a0:d6:04:ae:
                    fa:42:12:91:c0:92:a0:12:6e:6d:99:ee:74:ce:97:
                    52:31:17:93:85:99:57:58:b5:2a:8d:85:87:1d:15:
                    9c:ec:e7:8b:a6:56:eb:00:d9:95:09:91:37:b4:29:
                    89:be:00:fc:14:50:01:87:95:18:1c:fb:6b:b4:ef:
                    a5:59:aa:95:b4:20:16:82:42:12:c0:0e:d7:58:f2:
                    90:3d:1a:28:1c:28:c5:e7:68:fd:22:59:e3:66:0e:
                    98:1e:c9:46:7c:41:74:2e:0d:6a:1a:37:c6:aa:50:
                    49:f6:7d:25:c1:93:16:67:5d:59:23:0f:40:82:70:
                    b4:ab:5d:2e:3d:e5:af:6b:fb:88:5e:88:d2:3e:ec:
                    42:00:64:26:b3:a1:c8:1c:8d:07:17:7b:2e:3f:1f:
                    37:d9:5d:ee:28:4c:7f:12:92:01:89:72:4e:01:f5:
                    4a:db:b2:24:89:88:80:03:2f:d7:3e:a6:ff:91:2e:
                    bf:1b:ee:74:30:f4:e6:46:2a:8c:f9:9c:51:8c:0d:
                    cf:c6:ee:c5:6c:4f:88:7b:6f:29:46:b8:c5:3d:33:
                    47:cd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0A:AB:68:B5:E9:CC:D3:6C:E0:2F:C7:EF:FC:31:F2:D3:CA:39:DB:27
            X509v3 Authority Key Identifier:
                keyid:74:01:65:A8:0D:10:71:97:0A:BC:09:C0:2B:71:C1:AC:7C:1D:6E:0E

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                CA Repository - URI:rsync://rpki.apnic.net/member_repository/A9163FDD/35AF6C5047B511F1A32F452AAB833773/
                RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A9163FDD/35AF6C5047B511F1A32F452AAB833773/CqtotenM02zgL8fv_DHy08o52yc.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  162.4.16.0/24

    Signature Algorithm: sha256WithRSAEncryption
         27:74:80:6f:71:bd:5e:cf:be:16:63:33:d1:f2:38:d0:7d:9f:
         7a:eb:38:c1:47:07:e3:b9:12:ea:15:34:2f:67:29:d8:0a:82:
         23:c2:bb:94:68:0e:41:60:c2:88:d9:d4:d4:3f:8e:7a:da:44:
         37:44:d9:3f:14:27:dc:89:4e:81:5a:f8:6e:c2:38:1c:63:d8:
         7a:17:80:79:57:43:c7:07:b9:4e:38:9f:1d:26:34:97:2e:ea:
         63:3e:00:d6:93:85:98:0d:85:cc:6d:8a:cf:7c:1e:e8:60:dc:
         33:88:38:8e:ba:4e:e7:d4:21:43:8b:d7:83:6f:cf:de:cb:81:
         56:32:18:7c:75:9f:e6:cd:c7:08:b0:88:fc:f2:63:1a:b0:c4:
         72:7d:be:f4:1a:b0:5d:03:e8:e0:e6:22:10:df:bf:85:84:dd:
         15:7e:5a:7e:89:e3:2a:8b:55:c3:4e:33:10:1c:f4:d8:f6:ea:
         b5:bf:54:eb:9d:87:4c:11:cc:d6:37:26:40:18:29:de:a9:ff:
         79:7a:c8:82:67:e5:bc:bc:ca:80:69:8c:bd:66:5a:4c:9f:ac:
         13:ac:67:76:34:ca:8d:f0:ea:b7:a5:24:10:bf:4d:3c:1d:dc:
         e0:bd:e8:87:4c:c2:a5:f9:55:af:69:87:7e:53:ac:c5:62:b5:
         60:4a:8d:65
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 02:19:59 2026 by rpki-client