Certificate

$ rpki-client -vvf rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/nUVn--JSxmFkKqM-eASKhxf6fLM.cer
File:                     nUVn--JSxmFkKqM-eASKhxf6fLM.cer (raw, json)
Hash identifier:          XIxSe2IVR79s+tSaplISU649KNsrusfzVcXLPoCgh/g=
Subject key identifier:   9D:45:67:FB:E2:52:C6:61:64:2A:A3:3E:78:04:8A:87:17:FA:7C:B3
Authority key identifier: 74:01:65:A8:0D:10:71:97:0A:BC:09:C0:2B:71:C1:AC:7C:1D:6E:0E
Certificate issuer:       /CN=A90DC5BE/serialNumber=740165A80D1071970ABC09C02B71C1AC7C1D6E0E
Certificate serial:       7F0F
Authority info access:    rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
Manifest:                 rsync://rpki.apnic.net/member_repository/A9173FAC/AFF563E6101811F080BCC348C4F9AE02/nUVn--JSxmFkKqM-eASKhxf6fLM.mft
caRepository:             rsync://rpki.apnic.net/member_repository/A9173FAC/AFF563E6101811F080BCC348C4F9AE02/
Notify URL:               https://rrdp.apnic.net/notification.xml
Certificate not before:   Tue 21 Jul 2026 07:58:45 +0000
Certificate not after:    Thu 30 Sep 2027 00:00:00 +0000
Subordinate resources:    IP: 160.187.132.0/24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 30 Jul 2026 16:01:24 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 32527 (0x7f0f)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A90DC5BE, serialNumber=740165A80D1071970ABC09C02B71C1AC7C1D6E0E
        Validity
            Not Before: Jul 21 07:58:45 2026 GMT
            Not After : Sep 30 00:00:00 2027 GMT
        Subject: CN=A9173FAC, serialNumber=9D4567FBE252C661642AA33E78048A8717FA7CB3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d3:df:e1:72:f4:a9:87:68:e0:09:5b:94:e0:24:
                    da:9a:6a:31:63:30:47:a8:23:3f:71:51:08:15:8c:
                    9e:42:7f:1d:55:98:04:6f:e1:43:82:2a:60:5b:3d:
                    86:c1:21:88:30:07:3e:38:7d:b7:4f:e1:80:37:b8:
                    1d:b6:85:f5:4a:42:dc:de:24:ce:c7:90:00:85:61:
                    ab:fd:4d:51:52:08:d2:28:18:50:04:6d:eb:62:bf:
                    d5:7a:a1:68:5a:b2:a1:66:f5:9a:db:60:e1:f1:b8:
                    0a:16:f4:b5:cd:cd:66:83:f4:bd:30:9b:58:5a:03:
                    1b:ec:60:c1:0d:82:91:5c:10:ea:a8:f7:d0:89:07:
                    64:b2:f7:7d:32:28:50:4b:26:b3:ff:01:2e:ff:91:
                    9e:1e:a7:e6:3e:fa:44:f8:36:18:e8:2f:0f:a0:79:
                    38:f7:0c:fb:9d:94:6f:b2:8a:1a:87:94:fc:40:9c:
                    ba:61:ff:e9:1c:aa:37:53:4e:ff:c5:88:b2:9d:fb:
                    99:c9:38:fe:05:13:10:15:e6:39:16:4c:cf:87:72:
                    7c:26:8e:8a:1b:38:2d:ce:b0:e4:50:65:ad:03:25:
                    81:f0:37:1a:0c:0d:91:47:6e:13:a7:a1:db:52:db:
                    fc:9c:b8:ca:4e:37:77:0a:b2:aa:3e:77:fe:6c:4a:
                    aa:27
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9D:45:67:FB:E2:52:C6:61:64:2A:A3:3E:78:04:8A:87:17:FA:7C:B3
            X509v3 Authority Key Identifier:
                keyid:74:01:65:A8:0D:10:71:97:0A:BC:09:C0:2B:71:C1:AC:7C:1D:6E:0E

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                CA Repository - URI:rsync://rpki.apnic.net/member_repository/A9173FAC/AFF563E6101811F080BCC348C4F9AE02/
                RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A9173FAC/AFF563E6101811F080BCC348C4F9AE02/nUVn--JSxmFkKqM-eASKhxf6fLM.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  160.187.132.0/24

    Signature Algorithm: sha256WithRSAEncryption
         ad:ef:6a:1e:14:5c:f7:69:45:14:3a:9d:3f:f5:01:a2:cb:57:
         26:50:82:9d:aa:f8:3d:c4:c8:f0:0b:48:30:6c:b6:0f:7e:79:
         a0:3b:e5:5e:d2:59:95:53:33:5e:d5:6d:28:9d:0b:97:cd:2e:
         ae:89:a1:9b:e1:ad:8e:1b:1e:ab:9e:4f:69:77:5e:c1:29:10:
         37:f4:b9:63:db:42:40:0b:bb:26:dc:db:b0:4d:2d:ef:78:73:
         e2:7b:b5:b8:a7:5d:39:31:44:94:d9:bf:f1:c6:e8:d0:ac:28:
         78:16:2f:9a:9a:41:0e:39:99:9f:d9:54:0f:a4:8e:19:92:fe:
         d3:31:5b:ad:fc:b7:fc:b0:90:3f:09:89:87:a1:30:c4:81:e3:
         b5:8d:21:71:05:db:33:b4:1e:81:02:08:39:46:76:49:ac:9e:
         45:84:19:3b:c7:09:4c:25:27:68:c7:be:2c:93:38:e0:ff:c5:
         0b:57:c9:14:c0:7f:79:0d:c7:c2:4e:7c:0a:38:73:94:e3:ac:
         9f:fd:11:c9:7d:0a:74:2f:78:c8:23:49:0a:60:91:91:bb:3b:
         b7:06:39:6d:ed:b8:c1:6f:a5:7c:de:95:2c:eb:c2:2e:f4:7f:
         19:7c:29:b0:5f:94:79:a0:0d:28:f9:36:e0:3e:b2:df:e2:34:
         02:55:64:9e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 23 22:41:47 2026 by rpki-client