Certificate

$ rpki-client -vvf rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/MMyksEtKl3tmj8LUAhfFAIOkmBQ.cer
File:                     MMyksEtKl3tmj8LUAhfFAIOkmBQ.cer (raw, json)
Hash identifier:          IJdOQ1OblPf3CeYw2OS7oyi0SzPsG96t5eAbYx+ktbE=
Subject key identifier:   30:CC:A4:B0:4B:4A:97:7B:66:8F:C2:D4:02:17:C5:00:83:A4:98:14
Authority key identifier: 74:01:65:A8:0D:10:71:97:0A:BC:09:C0:2B:71:C1:AC:7C:1D:6E:0E
Certificate issuer:       /CN=A90DC5BE/serialNumber=740165A80D1071970ABC09C02B71C1AC7C1D6E0E
Certificate serial:       7AD6
Authority info access:    rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
Manifest:                 rsync://rpki.apnic.net/member_repository/A9174A0F/34AF0738478911F19E2C1BF59A833773/MMyksEtKl3tmj8LUAhfFAIOkmBQ.mft
caRepository:             rsync://rpki.apnic.net/member_repository/A9174A0F/34AF0738478911F19E2C1BF59A833773/
Notify URL:               https://rrdp.apnic.net/notification.xml
Certificate not before:   Mon 04 May 2026 07:16:48 +0000
Certificate not after:    Thu 01 Jul 2027 00:00:00 +0000
Subordinate resources:    IP: 167.179.34.0/24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 19 May 2026 14:50:26 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 31446 (0x7ad6)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A90DC5BE, serialNumber=740165A80D1071970ABC09C02B71C1AC7C1D6E0E
        Validity
            Not Before: May  4 07:16:48 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=A9174A0F, serialNumber=30CCA4B04B4A977B668FC2D40217C50083A49814
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:90:2a:0e:37:0a:16:a3:7a:56:b9:55:a2:09:13:
                    59:97:ff:12:c6:1e:9c:d7:a9:4b:6d:91:87:d6:9f:
                    be:34:6e:f8:fa:d0:6a:b0:c6:42:ee:6e:7b:a7:8a:
                    b1:e4:56:b1:8d:76:bf:91:a2:05:ff:73:36:ed:26:
                    d9:7b:69:c6:87:9e:1c:aa:dd:f5:e7:9c:fa:ae:71:
                    10:07:f7:23:9c:73:29:7f:bb:b8:6c:3b:0a:ab:4e:
                    92:46:94:41:8d:a7:92:02:d4:10:19:82:71:37:c8:
                    67:75:ae:ce:b2:df:d2:a8:5e:3b:e2:e8:57:71:d1:
                    0c:30:75:05:4f:d7:1d:af:b6:ad:39:9a:37:e7:2b:
                    fd:a5:d3:3b:dc:02:53:8f:08:ed:0f:8b:09:a7:d1:
                    af:91:a0:9c:cf:de:50:9a:c6:f6:e8:4b:84:e8:e7:
                    f7:30:db:fa:7d:de:fa:e1:93:52:e9:b1:39:9f:6f:
                    e7:1c:f6:ec:70:ea:c2:47:be:5e:3a:cc:64:b1:8c:
                    ba:f9:11:b6:80:20:25:43:38:40:2b:1b:6b:8d:3e:
                    96:94:cf:35:21:04:3f:d5:fa:81:9a:f8:62:d0:cf:
                    76:6e:8d:9f:40:cf:fa:7b:16:8e:1a:b8:6f:0a:8e:
                    58:0b:39:c3:46:ee:41:56:c4:8e:23:77:c4:a1:c8:
                    8c:77
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                30:CC:A4:B0:4B:4A:97:7B:66:8F:C2:D4:02:17:C5:00:83:A4:98:14
            X509v3 Authority Key Identifier:
                keyid:74:01:65:A8:0D:10:71:97:0A:BC:09:C0:2B:71:C1:AC:7C:1D:6E:0E

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                CA Repository - URI:rsync://rpki.apnic.net/member_repository/A9174A0F/34AF0738478911F19E2C1BF59A833773/
                RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A9174A0F/34AF0738478911F19E2C1BF59A833773/MMyksEtKl3tmj8LUAhfFAIOkmBQ.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  167.179.34.0/24

    Signature Algorithm: sha256WithRSAEncryption
         34:fc:bc:36:b7:af:e1:8a:59:0b:40:12:19:3a:fe:5d:dd:8f:
         c3:70:96:b1:f8:a9:7c:a6:1a:91:5f:dd:6b:95:94:8a:01:56:
         91:3e:25:e4:7b:da:a1:83:41:3f:bd:ff:52:30:4b:6e:ec:64:
         52:3e:82:7e:da:6b:9d:21:e7:18:86:c3:f8:83:04:3c:58:36:
         2d:60:88:b6:a8:97:3b:29:df:4b:b3:ec:82:41:82:8c:06:d5:
         b9:38:9d:40:a8:dc:13:2c:9b:a7:98:ae:78:ea:0f:01:97:74:
         7b:3c:df:2c:da:6c:ef:38:77:de:61:56:d0:6e:dc:20:d5:ae:
         ed:b3:8d:5b:37:be:b5:f1:82:5c:0d:46:92:26:c4:a7:14:bb:
         d1:f9:6e:0f:37:73:8b:f1:cc:a0:e1:69:13:82:f5:06:55:8f:
         00:8f:b8:0a:8b:62:97:1f:35:8a:84:5f:17:6e:09:82:d8:21:
         ac:42:6f:85:60:b6:c5:69:72:87:dc:92:2d:c2:da:f2:d7:8e:
         5f:eb:55:cf:19:00:6c:19:4c:35:7e:49:53:33:18:c9:98:37:
         61:cc:89:62:81:d3:b6:fe:6a:92:9c:e6:5a:b7:5b:43:ff:d1:
         e3:f1:8a:96:f9:7a:3e:66:1f:87:15:1f:03:ba:ae:90:cf:85:
         a2:22:cf:0d
-----BEGIN CERTIFICATE-----
MIIF/TCCBOWgAwIBAgICetYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkw
REM1QkUxMTAvBgNVBAUTKDc0MDE2NUE4MEQxMDcxOTcwQUJDMDlDMDJCNzFDMUFD
N0MxRDZFMEUwHhcNMjYwNTA0MDcxNjQ4WhcNMjcwNzAxMDAwMDAwWjBGMREwDwYD
VQQDEwhBOTE3NEEwRjExMC8GA1UEBRMoMzBDQ0E0QjA0QjRBOTc3QjY2OEZDMkQ0
MDIxN0M1MDA4M0E0OTgxNDCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEB
AJAqDjcKFqN6VrlVogkTWZf/EsYenNepS22Rh9afvjRu+PrQarDGQu5ue6eKseRW
sY12v5GiBf9zNu0m2XtpxoeeHKrd9eec+q5xEAf3I5xzKX+7uGw7CqtOkkaUQY2n
kgLUEBmCcTfIZ3WuzrLf0qheO+LoV3HRDDB1BU/XHa+2rTmaN+cr/aXTO9wCU48I
7Q+LCafRr5GgnM/eUJrG9uhLhOjn9zDb+n3e+uGTUumxOZ9v5xz27HDqwke+XjrM
ZLGMuvkRtoAgJUM4QCsba40+lpTPNSEEP9X6gZr4YtDPdm6Nn0DP+nsWjhq4bwqO
WAs5w0buQVbEjiN3xKHIjHcCAwEAAaOCAvMwggLvMB0GA1UdDgQWBBQwzKSwS0qX
e2aPwtQCF8UAg6SYFDAfBgNVHSMEGDAWgBR0AWWoDRBxlwq8CcArccGsfB1uDjAO
BgNVHQ8BAf8EBAMCAQYwDwYDVR0TAQH/BAUwAwEB/zBzBgNVHR8EbDBqMGigZqBk
hmJyc3luYzovL3Jwa2kuYXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRGMjAxRDY2
MTFFMjhBQzg4MzdDNzJGRDFGRjIvZEFGbHFBMFFjWmNLdkFuQUszSEJySHdkYmc0
LmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5h
cG5pYy5uZXQvcmVwb3NpdG9yeS85ODA2NTJFMEI3N0UxMUU3QTk2QTM5NTIxQTRG
NEZCNC9kQUZscUEwUWNaY0t2QW5BSzNIQnJId2RiZzQuY2VyMEoGA1UdIAEB/wRA
MD4wPAYIKwYBBQUHDgIwMDAuBggrBgEFBQcCARYiaHR0cHM6Ly93d3cuYXBuaWMu
bmV0L1JQS0kvQ1BTLnBkZjCCASgGCCsGAQUFBwELBIIBGjCCARYwXwYIKwYBBQUH
MAWGU3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
NzRBMEYvMzRBRjA3Mzg0Nzg5MTFGMTlFMkMxQkY1OUE4MzM3NzMvMH4GCCsGAQUF
BzAKhnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5
MTc0QTBGLzM0QUYwNzM4NDc4OTExRjE5RTJDMUJGNTlBODMzNzczL01NeWtzRXRL
bDN0bWo4TFVBaGZGQUlPa21CUS5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJk
cC5hcG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAfBggrBgEFBQcBBwEB/wQQMA4w
DAQCAAEwBgMEAKezIjANBgkqhkiG9w0BAQsFAAOCAQEANPy8Nrev4YpZC0ASGTr+
Xd2Pw3CWsfipfKYakV/da5WUigFWkT4l5HvaoYNBP73/UjBLbuxkUj6CftprnSHn
GIbD+IMEPFg2LWCItqiXOynfS7PsgkGCjAbVuTidQKjcEyybp5iueOoPAZd0ezzf
LNps7zh33mFW0G7cINWu7bONWze+tfGCXA1GkibEpxS70fluDzdzi/HMoOFpE4L1
BlWPAI+4Cotilx81ioRfF24JgtghrEJvhWC2xWlyh9ySLcLa8teOX+tVzxkAbBlM
NX5JUzMYyZg3YcyJYoHTtv5qkpzmWrdbQ//R4/GKlvl6PmYfhxUfA7qukM+FoiLP
DQ==
-----END CERTIFICATE-----
Generated at Wed May 13 01:42:15 2026 by rpki-client