Certificate

$ rpki-client -vvf rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/fqSkLLBXo92BKeSh4seYBQ_W1lc.cer
File:                     fqSkLLBXo92BKeSh4seYBQ_W1lc.cer (raw, json)
Hash identifier:          q1zwk1OJICjQeESW+LAPRVIJKcH0SrwPj9A/m2k4BkQ=
Subject key identifier:   7E:A4:A4:2C:B0:57:A3:DD:81:29:E4:A1:E2:C7:98:05:0F:D6:D6:57
Authority key identifier: 74:01:65:A8:0D:10:71:97:0A:BC:09:C0:2B:71:C1:AC:7C:1D:6E:0E
Certificate issuer:       /CN=A90DC5BE/serialNumber=740165A80D1071970ABC09C02B71C1AC7C1D6E0E
Certificate serial:       7A0B
Authority info access:    rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
Manifest:                 rsync://rpki.apnic.net/member_repository/A913C35A/161F7FE43DE511F1AD5235459C833773/fqSkLLBXo92BKeSh4seYBQ_W1lc.mft
caRepository:             rsync://rpki.apnic.net/member_repository/A913C35A/161F7FE43DE511F1AD5235459C833773/
Notify URL:               https://rrdp.apnic.net/notification.xml
Certificate not before:   Wed 22 Apr 2026 00:49:19 +0000
Certificate not after:    Fri 30 Jul 2027 00:00:00 +0000
Subordinate resources:    IP: 162.4.18.0/23
Validation:               OK
Signature path:           rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 19 May 2026 14:50:26 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 31243 (0x7a0b)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A90DC5BE, serialNumber=740165A80D1071970ABC09C02B71C1AC7C1D6E0E
        Validity
            Not Before: Apr 22 00:49:19 2026 GMT
            Not After : Jul 30 00:00:00 2027 GMT
        Subject: CN=A913C35A, serialNumber=7EA4A42CB057A3DD8129E4A1E2C798050FD6D657
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:5c:a7:16:f8:92:cc:39:e8:f6:3a:32:c3:4c:
                    ed:03:4d:e2:91:25:e3:8d:98:b7:6a:a5:58:ff:5b:
                    13:86:7a:e1:bb:81:0a:b0:ae:88:34:eb:23:20:7e:
                    b5:ae:f0:58:2c:e0:63:e5:14:b8:cb:94:3e:90:bf:
                    c2:6d:6f:a7:6f:76:25:90:70:a5:07:f1:01:4c:26:
                    77:ac:37:48:69:16:58:88:c3:1b:78:64:99:db:94:
                    09:9b:26:fe:2f:3f:a9:c5:d4:2a:f2:02:ef:7f:76:
                    82:d6:73:e1:91:e2:82:fb:15:29:6a:a6:69:eb:7c:
                    5c:16:70:9d:b6:3b:79:06:82:5d:6f:3a:f2:8c:81:
                    21:fb:d7:a4:c7:7d:5c:0b:7a:14:09:5e:2b:52:7f:
                    cf:b1:53:4d:e8:5e:aa:42:28:a4:08:c3:a3:e0:69:
                    f4:96:5e:f9:02:90:6a:22:cf:76:5d:f7:c6:bf:5e:
                    09:1c:f4:af:b9:86:9e:71:ce:ba:eb:26:1a:80:a0:
                    b5:30:31:60:16:24:01:fd:1e:be:97:f9:cc:e0:7a:
                    d9:38:bb:f3:d1:7a:89:d9:c8:c8:c6:5f:3b:f1:34:
                    75:d1:80:77:e8:3e:ce:9c:4e:4e:c4:00:be:3b:48:
                    83:c3:86:e2:9c:06:d9:37:71:52:80:7b:5b:5b:9b:
                    ac:d3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7E:A4:A4:2C:B0:57:A3:DD:81:29:E4:A1:E2:C7:98:05:0F:D6:D6:57
            X509v3 Authority Key Identifier:
                keyid:74:01:65:A8:0D:10:71:97:0A:BC:09:C0:2B:71:C1:AC:7C:1D:6E:0E

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                CA Repository - URI:rsync://rpki.apnic.net/member_repository/A913C35A/161F7FE43DE511F1AD5235459C833773/
                RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A913C35A/161F7FE43DE511F1AD5235459C833773/fqSkLLBXo92BKeSh4seYBQ_W1lc.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  162.4.18.0/23

    Signature Algorithm: sha256WithRSAEncryption
         62:72:07:63:97:23:7b:52:6e:6a:25:43:75:0f:46:99:ff:2c:
         0d:c3:b7:32:1b:61:0e:89:17:d4:c7:92:ec:62:ab:65:36:8a:
         da:d8:ec:9e:93:19:f8:f9:d9:c8:1a:df:ca:89:4f:ae:3f:4c:
         88:fc:d9:46:bb:20:b1:05:85:b1:a2:71:d0:03:b7:47:47:59:
         19:e9:48:5c:ea:49:94:a6:bd:2e:d1:6c:e1:e3:c7:f9:93:af:
         95:e3:b8:eb:e5:b9:01:f4:0f:ba:97:83:84:4b:65:c9:5a:d3:
         c8:5e:a2:bf:41:d6:02:43:ec:e4:ad:62:b9:96:85:77:16:19:
         e6:9f:ab:d2:1c:69:79:b1:96:4c:d3:1f:b8:f1:0d:a0:29:b0:
         e3:06:94:50:75:39:76:e2:e9:32:6f:3c:bb:ea:20:43:a7:29:
         05:41:cc:f7:2c:c2:97:4e:96:97:c8:1a:73:cf:8d:2e:8c:29:
         78:e9:e3:1a:52:0c:0e:47:4b:33:0d:24:22:65:df:9a:b5:8c:
         5e:bb:6d:ac:35:d0:76:ca:a9:cd:85:34:49:0e:2b:19:13:8e:
         5e:b6:32:73:80:ba:f0:64:84:65:88:c7:7b:99:b0:38:43:67:
         6b:28:f8:29:5f:b4:c2:27:82:53:2b:ac:2e:8b:cd:ea:df:09:
         f8:41:fd:79
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 02:25:39 2026 by rpki-client