Certificate

$ rpki-client -vvf rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/UgupTND7nnwUDfvAzFi5PPVMIvM.cer
File:                     UgupTND7nnwUDfvAzFi5PPVMIvM.cer (raw, json)
Hash identifier:          FADFkhDme1RgqhqvntRGM0Z2Y2TlJiCGwD2mxw5CcPc=
Subject key identifier:   52:0B:A9:4C:D0:FB:9E:7C:14:0D:FB:C0:CC:58:B9:3C:F5:4C:22:F3
Authority key identifier: 74:01:65:A8:0D:10:71:97:0A:BC:09:C0:2B:71:C1:AC:7C:1D:6E:0E
Certificate issuer:       /CN=A90DC5BE/serialNumber=740165A80D1071970ABC09C02B71C1AC7C1D6E0E
Certificate serial:       6A1C
Authority info access:    rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
Manifest:                 rsync://rpki.apnic.net/member_repository/A91F8981/1CF6CD746C7F11EF914D7D57C4F9AE02/UgupTND7nnwUDfvAzFi5PPVMIvM.mft
caRepository:             rsync://rpki.apnic.net/member_repository/A91F8981/1CF6CD746C7F11EF914D7D57C4F9AE02/
Notify URL:               https://rrdp.apnic.net/notification.xml
Certificate not before:   Thu 21 Aug 2025 20:59:02 +0000
Certificate not after:    Sat 31 Oct 2026 00:00:00 +0000
Subordinate resources:    IP: 160.30.26.0/23
Validation:               OK
Signature path:           rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 30 Aug 2025 06:10:13 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 27164 (0x6a1c)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A90DC5BE, serialNumber=740165A80D1071970ABC09C02B71C1AC7C1D6E0E
        Validity
            Not Before: Aug 21 20:59:02 2025 GMT
            Not After : Oct 31 00:00:00 2026 GMT
        Subject: CN=A91F8981, serialNumber=520BA94CD0FB9E7C140DFBC0CC58B93CF54C22F3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:7a:2a:18:c3:c6:8a:4f:25:fd:39:e3:9e:24:
                    d8:cb:fd:41:05:32:ea:bf:ad:16:7e:c6:00:0d:dd:
                    b9:36:80:49:67:9f:1d:d8:39:82:16:cb:6f:f8:1d:
                    3b:e3:45:3a:06:87:99:4a:96:33:f4:29:13:fe:79:
                    0b:ff:c3:17:e6:91:96:64:e2:e9:78:9d:7c:64:f2:
                    56:8c:c7:9b:57:cb:8a:e5:cb:b1:cd:76:50:4c:9c:
                    5d:f5:ea:b9:06:95:d4:c1:ec:66:30:2c:5e:a5:05:
                    98:64:2f:66:33:6b:a5:91:de:35:71:15:7c:01:a7:
                    61:e0:56:53:ce:0c:bc:df:43:d3:b1:1e:66:49:8b:
                    09:d3:92:01:9d:c1:f3:cd:5f:6b:38:2a:e9:c1:da:
                    6c:af:a1:f8:8a:68:97:bc:c1:f1:cb:b2:d9:ab:83:
                    36:bf:88:f5:fc:b5:60:ab:64:06:5e:85:89:c2:89:
                    51:5a:a7:a1:9e:30:d2:66:cd:ec:c6:7e:aa:d0:09:
                    52:e6:98:ce:7d:ed:d8:72:6f:e2:c6:0a:e3:a9:ad:
                    d1:cb:8b:5a:a5:b2:c5:38:b3:34:f1:0a:92:59:86:
                    45:55:8e:c1:28:a7:00:30:7e:8e:d0:f5:fe:b2:27:
                    3a:f4:a4:0f:f2:75:5d:d3:d6:75:d4:1d:9a:bd:2b:
                    a4:07
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                52:0B:A9:4C:D0:FB:9E:7C:14:0D:FB:C0:CC:58:B9:3C:F5:4C:22:F3
            X509v3 Authority Key Identifier:
                keyid:74:01:65:A8:0D:10:71:97:0A:BC:09:C0:2B:71:C1:AC:7C:1D:6E:0E

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                CA Repository - URI:rsync://rpki.apnic.net/member_repository/A91F8981/1CF6CD746C7F11EF914D7D57C4F9AE02/
                RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A91F8981/1CF6CD746C7F11EF914D7D57C4F9AE02/UgupTND7nnwUDfvAzFi5PPVMIvM.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  160.30.26.0/23

    Signature Algorithm: sha256WithRSAEncryption
         b5:16:ee:69:11:6e:af:11:02:d4:eb:a6:3c:70:4a:09:21:45:
         6c:a4:f8:72:af:ae:46:02:26:af:37:52:5b:0a:82:d8:00:f2:
         12:c1:4c:1e:b4:d6:a7:ef:26:4a:10:64:40:c5:f3:10:e2:be:
         c9:ed:3e:79:ef:9e:16:2e:7a:75:c3:62:4f:6d:7c:d3:74:19:
         7c:63:b5:b7:ad:e1:d1:86:89:70:b2:bb:00:69:fb:c5:01:7d:
         a8:f5:5e:57:2b:d1:81:b0:32:bb:74:ff:69:4d:f8:61:4c:9a:
         89:04:d3:de:e0:46:46:61:12:b8:6c:5c:bb:ae:3d:07:73:8f:
         ab:6b:0b:6a:df:9d:94:b6:e4:fb:f4:f3:d8:0f:f8:67:22:c8:
         e0:8a:94:6a:5b:a9:50:43:39:91:6c:33:9f:44:06:1a:b2:2d:
         16:b3:3f:9a:bc:63:ba:69:4f:c1:6f:05:1c:e7:67:3c:fa:21:
         1f:18:09:c9:44:80:84:51:d1:5e:a5:ad:9a:fd:e1:57:af:b7:
         1b:bd:3d:dd:db:7e:21:e1:4c:68:0e:e2:d9:9c:55:22:84:2d:
         fc:f2:2c:11:bd:cc:a8:07:31:ad:f1:49:83:d4:c5:a4:2c:63:
         dd:2f:78:d5:48:1d:82:12:1c:b9:a1:28:a5:bf:06:85:ab:c2:
         e6:0b:d9:ff
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 09:05:59 2025 by rpki-client