Certificate

$ rpki-client -vvf rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/Sr9max48bHEsS0dwG_3RV94Djy8.cer
File:                     Sr9max48bHEsS0dwG_3RV94Djy8.cer (raw, json)
Hash identifier:          Wrc4owefGtrU7IGXXtBp9CYOOI8pJOQnIfnjV46cylU=
Subject key identifier:   4A:BF:66:6B:1E:3C:6C:71:2C:4B:47:70:1B:FD:D1:57:DE:03:8F:2F
Authority key identifier: 74:01:65:A8:0D:10:71:97:0A:BC:09:C0:2B:71:C1:AC:7C:1D:6E:0E
Certificate issuer:       /CN=A90DC5BE/serialNumber=740165A80D1071970ABC09C02B71C1AC7C1D6E0E
Certificate serial:       7A83
Authority info access:    rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
Manifest:                 rsync://rpki.apnic.net/member_repository/A911EED9/242E0BBA43A711F1A59112E093833773/Sr9max48bHEsS0dwG_3RV94Djy8.mft
caRepository:             rsync://rpki.apnic.net/member_repository/A911EED9/242E0BBA43A711F1A59112E093833773/
Notify URL:               https://rrdp.apnic.net/notification.xml
Certificate not before:   Wed 29 Apr 2026 08:41:02 +0000
Certificate not after:    Thu 01 Jul 2027 00:00:00 +0000
Subordinate resources:    IP: 162.4.48.0/23
Validation:               OK
Signature path:           rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 19 May 2026 14:50:26 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 31363 (0x7a83)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A90DC5BE, serialNumber=740165A80D1071970ABC09C02B71C1AC7C1D6E0E
        Validity
            Not Before: Apr 29 08:41:02 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=A911EED9, serialNumber=4ABF666B1E3C6C712C4B47701BFDD157DE038F2F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:62:5a:01:58:c8:b0:8a:db:98:1b:4e:f5:2a:
                    52:1b:70:b1:67:f6:d1:83:4a:b3:de:76:d4:db:0e:
                    97:5c:1e:c6:71:24:e8:47:1c:a8:d9:65:a0:6c:72:
                    cc:78:84:fe:b4:26:45:d6:29:19:0f:27:b5:22:56:
                    33:fb:07:89:7a:24:40:5f:62:c0:ac:52:14:02:e8:
                    6c:73:e8:65:17:e1:d8:55:08:a6:86:ac:76:eb:4c:
                    85:a3:cc:e1:5f:b1:26:e1:6b:c6:d1:20:cd:5b:00:
                    89:94:ad:9d:c4:11:2e:a0:93:57:22:98:ab:69:40:
                    d8:29:42:40:17:74:cf:63:86:70:72:71:e8:3a:1d:
                    9f:a4:0f:06:21:b7:11:fb:ca:b0:92:32:75:d2:6c:
                    aa:12:c3:a9:b5:49:45:8b:0d:99:ad:69:ef:71:c3:
                    d6:06:3f:bd:24:2a:71:dd:eb:3e:08:0c:fd:91:a9:
                    83:ab:db:b4:96:fa:c5:cf:c6:73:98:cd:3f:1e:1b:
                    da:cd:d8:32:eb:7c:a7:c3:13:42:ea:20:a9:89:74:
                    6b:98:ce:c8:d2:f8:ed:ff:16:dc:5e:c3:93:e8:c7:
                    5a:08:66:5a:7a:3e:49:4a:92:4c:bd:22:1b:53:89:
                    26:bb:4c:79:91:0d:6a:bf:c8:68:f0:5d:3b:db:79:
                    9e:1d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4A:BF:66:6B:1E:3C:6C:71:2C:4B:47:70:1B:FD:D1:57:DE:03:8F:2F
            X509v3 Authority Key Identifier:
                keyid:74:01:65:A8:0D:10:71:97:0A:BC:09:C0:2B:71:C1:AC:7C:1D:6E:0E

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                CA Repository - URI:rsync://rpki.apnic.net/member_repository/A911EED9/242E0BBA43A711F1A59112E093833773/
                RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A911EED9/242E0BBA43A711F1A59112E093833773/Sr9max48bHEsS0dwG_3RV94Djy8.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  162.4.48.0/23

    Signature Algorithm: sha256WithRSAEncryption
         43:75:57:37:9a:2b:ca:2a:79:a9:9d:32:6c:eb:ec:7c:e2:1f:
         7a:1a:01:27:c8:57:5f:02:9e:4b:05:9c:d1:8b:f8:2f:9d:c1:
         30:c0:38:53:ad:93:49:e9:6d:18:1c:c5:68:1a:71:93:e3:9c:
         6c:bf:ce:6f:96:48:20:26:97:10:b2:4a:98:c6:b2:83:96:70:
         93:ea:32:01:b6:c5:99:24:45:b0:98:f6:65:a6:c0:e5:af:ff:
         9c:07:eb:7e:1e:bb:6f:85:ec:ec:14:d3:17:25:89:09:09:f0:
         a9:d2:f8:46:85:cc:6d:e5:d4:f0:6b:c4:c6:9f:a1:f5:87:3d:
         ef:47:67:a2:8d:4e:89:4d:d4:87:72:42:bd:e5:58:79:a1:cf:
         3e:68:a3:51:de:68:64:38:06:1f:b2:f0:a7:f8:27:dc:c6:dd:
         5e:14:03:9c:68:11:70:76:12:e7:46:1a:a1:4e:5a:63:60:56:
         f1:ed:d6:d0:1a:de:06:00:7b:62:59:62:77:41:a0:7a:7d:e7:
         91:d7:be:ee:d9:dd:24:89:c3:1a:2d:8b:b1:53:2a:0f:09:fe:
         b9:65:4b:bc:63:9b:4c:1e:8e:b4:4a:49:47:be:49:a1:76:f3:
         cf:4f:de:37:9d:d5:05:de:43:b6:bc:3b:81:fd:2f:55:01:6b:
         dc:c5:ba:76
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 01:42:19 2026 by rpki-client