Certificate

$ rpki-client -vvf rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/bvj-zvM56m3paYzCxfWGRc9l794.cer
File:                     bvj-zvM56m3paYzCxfWGRc9l794.cer (raw, json)
Hash identifier:          Rukej5iOmatSHzxJ7dF5Tq3aoGgsnXuS8GqFy6tojho=
Subject key identifier:   6E:F8:FE:CE:F3:39:EA:6D:E9:69:8C:C2:C5:F5:86:45:CF:65:EF:DE
Authority key identifier: 74:01:65:A8:0D:10:71:97:0A:BC:09:C0:2B:71:C1:AC:7C:1D:6E:0E
Certificate issuer:       /CN=A90DC5BE/serialNumber=740165A80D1071970ABC09C02B71C1AC7C1D6E0E
Certificate serial:       7A68
Authority info access:    rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
Manifest:                 rsync://rpki.apnic.net/member_repository/A9196F7C/07F34F08A4B211F0B84C1343C4F9AE02/bvj-zvM56m3paYzCxfWGRc9l794.mft
caRepository:             rsync://rpki.apnic.net/member_repository/A9196F7C/07F34F08A4B211F0B84C1343C4F9AE02/
Notify URL:               https://rrdp.apnic.net/notification.xml
Certificate not before:   Tue 28 Apr 2026 13:50:23 +0000
Certificate not after:    Fri 30 Jul 2027 00:00:00 +0000
Subordinate resources:    IP: 157.85.80.0/20
Validation:               OK
Signature path:           rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 20 May 2026 05:22:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 31336 (0x7a68)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A90DC5BE, serialNumber=740165A80D1071970ABC09C02B71C1AC7C1D6E0E
        Validity
            Not Before: Apr 28 13:50:23 2026 GMT
            Not After : Jul 30 00:00:00 2027 GMT
        Subject: CN=A9196F7C, serialNumber=6EF8FECEF339EA6DE9698CC2C5F58645CF65EFDE
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d6:f0:48:2d:fd:4e:c6:93:aa:8b:f2:93:47:a1:
                    c0:49:3b:25:fa:7c:0c:b0:6c:35:98:d0:43:42:55:
                    89:03:47:bf:a4:8d:0f:9f:ba:a2:87:2e:59:0b:3d:
                    3b:28:99:b3:06:b8:51:54:a9:1a:a9:bb:ea:e6:5d:
                    b5:02:a1:e3:a8:90:26:1d:ea:18:ee:2a:1d:05:54:
                    d6:a5:99:4e:d6:3f:df:5a:3b:28:f7:2f:0a:ca:a3:
                    57:77:f3:cd:cd:83:31:6e:9b:4b:5b:23:1b:9d:62:
                    a9:79:52:c8:6b:86:dd:81:a1:87:b2:89:a7:7e:48:
                    dd:13:42:50:e7:ce:c3:92:83:2a:ff:6f:7c:3e:43:
                    64:d1:ff:06:45:fd:f5:35:b3:22:a6:54:20:73:64:
                    c0:de:d6:7d:46:1b:8d:11:f3:1b:5c:d4:3e:1b:40:
                    b5:0f:41:a5:e3:d1:d5:60:12:07:3e:c2:80:49:7c:
                    cd:bb:47:d5:83:89:b4:33:5a:29:43:73:6c:68:6a:
                    b4:9a:73:fd:40:e7:63:b0:3d:41:1d:85:34:f4:bc:
                    96:be:46:f4:f0:6a:89:cc:7e:39:90:a1:e0:61:0a:
                    7f:0b:8c:04:3d:ac:2d:b6:ab:79:bc:20:00:db:47:
                    99:28:80:22:39:22:0b:84:1f:9b:e5:5a:26:82:13:
                    73:55
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6E:F8:FE:CE:F3:39:EA:6D:E9:69:8C:C2:C5:F5:86:45:CF:65:EF:DE
            X509v3 Authority Key Identifier:
                keyid:74:01:65:A8:0D:10:71:97:0A:BC:09:C0:2B:71:C1:AC:7C:1D:6E:0E

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                CA Repository - URI:rsync://rpki.apnic.net/member_repository/A9196F7C/07F34F08A4B211F0B84C1343C4F9AE02/
                RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A9196F7C/07F34F08A4B211F0B84C1343C4F9AE02/bvj-zvM56m3paYzCxfWGRc9l794.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  157.85.80.0/20

    Signature Algorithm: sha256WithRSAEncryption
         7d:d9:31:88:bb:60:a2:4f:3c:24:b7:d6:f8:c0:e7:32:4e:87:
         83:42:3c:20:2d:f4:93:5f:08:5c:a8:83:08:a8:b8:ea:25:62:
         7f:66:b5:d1:fb:ec:44:88:76:d1:41:fe:25:50:30:35:81:1c:
         67:3a:a2:86:65:ac:51:e9:12:bc:06:f9:db:6a:73:b3:ad:16:
         c9:d4:04:f7:ee:26:89:c8:b9:14:4f:83:57:88:38:60:bb:06:
         d3:b4:21:f9:43:a3:79:c7:e0:87:01:51:e2:93:c8:3d:bc:92:
         aa:58:31:05:a0:31:1d:fa:7d:1e:fa:30:83:7d:92:e9:52:2f:
         b4:7e:f7:44:55:75:a0:91:2c:71:c3:7e:b0:7a:df:65:b2:fc:
         75:8c:46:98:97:aa:aa:5e:34:b2:43:0e:1d:2b:c4:1d:a5:70:
         8c:89:9f:12:15:7e:0c:21:7a:18:6a:24:86:07:37:43:22:c4:
         3a:4d:85:e9:b8:61:ec:5a:52:2f:1d:75:9c:ac:70:1c:44:08:
         8f:fa:d7:03:4b:da:f1:1a:92:cb:1c:69:7f:ab:89:d7:e7:48:
         9e:d1:19:dd:fc:6d:8d:fa:e6:b1:7a:1a:b0:ea:22:b1:92:20:
         0c:d5:20:57:ea:eb:fb:fb:16:1a:b1:89:f9:cf:af:74:3f:9a:
         a0:2d:93:e3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 08:13:37 2026 by rpki-client