Certificate

$ rpki-client -vvf rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/n7vSMFYWjRpRfpltxW9mSm7lLqU.cer
File:                     n7vSMFYWjRpRfpltxW9mSm7lLqU.cer (raw, json)
Hash identifier:          ph8ZgxTQvg5TiTpHJ4T72ITz7hK9T4dwPpgRXLe0jvc=
Subject key identifier:   9F:BB:D2:30:56:16:8D:1A:51:7E:99:6D:C5:6F:66:4A:6E:E5:2E:A5
Authority key identifier: 74:01:65:A8:0D:10:71:97:0A:BC:09:C0:2B:71:C1:AC:7C:1D:6E:0E
Certificate issuer:       /CN=A90DC5BE/serialNumber=740165A80D1071970ABC09C02B71C1AC7C1D6E0E
Certificate serial:       7B3E
Authority info access:    rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
Manifest:                 rsync://rpki.apnic.net/member_repository/A9189D79/381CA75C24DB11F1B1F5BBA5AC833773/n7vSMFYWjRpRfpltxW9mSm7lLqU.mft
caRepository:             rsync://rpki.apnic.net/member_repository/A9189D79/381CA75C24DB11F1B1F5BBA5AC833773/
Notify URL:               https://rrdp.apnic.net/notification.xml
Certificate not before:   Mon 11 May 2026 13:43:14 +0000
Certificate not after:    Fri 30 Jul 2027 00:00:00 +0000
Subordinate resources:    IP: 146.88.84.0/22
                          IP: 198.148.192.0/22
Validation:               OK
Signature path:           rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 19 May 2026 14:50:26 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 31550 (0x7b3e)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A90DC5BE, serialNumber=740165A80D1071970ABC09C02B71C1AC7C1D6E0E
        Validity
            Not Before: May 11 13:43:14 2026 GMT
            Not After : Jul 30 00:00:00 2027 GMT
        Subject: CN=A9189D79, serialNumber=9FBBD23056168D1A517E996DC56F664A6EE52EA5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:96:6e:ee:c1:9f:8b:fe:6f:a5:34:03:0c:18:f3:
                    bf:fe:8a:16:4b:1d:1b:e1:8e:0b:ff:61:3e:72:93:
                    f6:0d:30:dd:70:32:7b:89:27:89:ea:9e:0d:eb:6d:
                    60:0a:6e:6a:03:b5:da:6e:63:5b:58:75:e0:e2:96:
                    ac:34:27:b3:37:a7:19:90:cc:63:22:ac:6e:c2:02:
                    56:aa:e9:ab:e3:17:0b:68:60:9e:b8:57:5d:2f:12:
                    a4:06:52:48:91:83:8f:df:2e:4a:14:a5:71:db:f8:
                    21:82:b6:a4:07:6c:c2:48:63:e7:fc:87:8e:e2:e5:
                    34:56:86:11:bd:3d:f9:e3:e2:1b:9e:cc:67:ab:b1:
                    a5:22:1c:48:08:3a:08:bd:95:b9:8b:3f:6f:71:e1:
                    85:cb:cf:ad:e4:2d:6e:74:62:45:fb:6c:6e:7b:c4:
                    40:66:d0:08:72:f4:c3:18:9b:ee:bc:2b:f6:cc:07:
                    f1:f1:4a:0e:f7:96:d6:85:69:8c:ae:17:39:17:6a:
                    4c:33:20:45:6e:ee:00:fb:98:dc:b8:4d:68:f2:16:
                    48:e1:26:08:f2:72:a7:4f:92:23:0e:ac:40:09:37:
                    4a:ca:69:51:93:4e:b8:93:c1:c2:1e:f5:3f:3d:28:
                    28:1b:fb:06:29:15:d7:0e:13:c1:12:17:03:c5:88:
                    d7:83
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9F:BB:D2:30:56:16:8D:1A:51:7E:99:6D:C5:6F:66:4A:6E:E5:2E:A5
            X509v3 Authority Key Identifier:
                keyid:74:01:65:A8:0D:10:71:97:0A:BC:09:C0:2B:71:C1:AC:7C:1D:6E:0E

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                CA Repository - URI:rsync://rpki.apnic.net/member_repository/A9189D79/381CA75C24DB11F1B1F5BBA5AC833773/
                RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A9189D79/381CA75C24DB11F1B1F5BBA5AC833773/n7vSMFYWjRpRfpltxW9mSm7lLqU.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  146.88.84.0/22
                  198.148.192.0/22

    Signature Algorithm: sha256WithRSAEncryption
         53:99:5f:57:08:f5:8b:7a:8c:e5:2d:67:3c:f4:29:bb:06:19:
         07:d6:c8:89:94:65:1c:c0:98:9d:af:ab:c5:44:0c:6e:77:f2:
         a2:c1:4b:60:ce:7d:14:0d:84:d6:2d:9c:24:48:34:85:8b:bc:
         0a:41:05:83:65:72:73:2a:26:4a:52:06:bd:08:7c:de:d0:fb:
         d9:a3:18:85:c8:e9:6d:2f:0f:2f:68:47:bc:a2:b6:84:65:b4:
         f6:21:74:8a:25:ff:dc:0f:00:5a:e7:d7:5e:4b:8d:12:72:fe:
         54:c7:a9:ec:7e:f3:e8:64:a9:46:5f:a0:8a:65:78:dd:da:40:
         99:36:34:55:19:8e:05:5b:20:82:2f:aa:8d:b0:13:bc:cf:c4:
         bf:73:fe:38:cd:16:83:71:c9:95:ba:e1:48:94:d9:57:02:bc:
         c0:6c:ce:b6:16:d1:b3:54:a8:d0:db:28:1e:26:3a:b3:7f:d0:
         81:06:23:42:f5:3d:eb:b9:71:c6:78:77:13:c5:7d:71:ed:a7:
         a2:7f:44:4e:cb:0f:26:5e:68:ff:02:8a:b9:15:6e:79:69:d4:
         e3:aa:78:9c:51:59:6c:32:d1:a5:a8:4d:de:5e:28:3d:bb:9a:
         cb:9b:c4:72:27:25:34:11:2a:94:46:bb:91:f5:ce:d7:62:0d:
         7a:41:7b:5c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 01:29:27 2026 by rpki-client