Certificate

$ rpki-client -vvf rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/qEG9xa-p6aCpW4hUYRPKdF7pY7U.cer
File:                     qEG9xa-p6aCpW4hUYRPKdF7pY7U.cer (raw, json)
Hash identifier:          8eg3Z9M7TXfl0l2NPaXfGS9WiWuxbj5g5F7GuS9Ccls=
Subject key identifier:   A8:41:BD:C5:AF:A9:E9:A0:A9:5B:88:54:61:13:CA:74:5E:E9:63:B5
Authority key identifier: 74:01:65:A8:0D:10:71:97:0A:BC:09:C0:2B:71:C1:AC:7C:1D:6E:0E
Certificate issuer:       /CN=A90DC5BE/serialNumber=740165A80D1071970ABC09C02B71C1AC7C1D6E0E
Certificate serial:       7B08
Authority info access:    rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
Manifest:                 rsync://rpki.apnic.net/member_repository/A91F5216/5CD5E7306E0811EDBEED6284C4F9AE02/qEG9xa-p6aCpW4hUYRPKdF7pY7U.mft
caRepository:             rsync://rpki.apnic.net/member_repository/A91F5216/5CD5E7306E0811EDBEED6284C4F9AE02/
Notify URL:               https://rrdp.apnic.net/notification.xml
Certificate not before:   Thu 07 May 2026 01:39:54 +0000
Certificate not after:    Thu 01 Jul 2027 00:00:00 +0000
Subordinate resources:    IP: 146.196.0.0/19
Validation:               OK
Signature path:           rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 19 May 2026 14:50:26 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 31496 (0x7b08)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A90DC5BE, serialNumber=740165A80D1071970ABC09C02B71C1AC7C1D6E0E
        Validity
            Not Before: May  7 01:39:54 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=A91F5216, serialNumber=A841BDC5AFA9E9A0A95B88546113CA745EE963B5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:26:1d:43:79:f3:d9:3c:bb:c9:d8:44:d5:81:
                    54:92:94:78:69:34:a9:a0:5d:50:4d:17:1e:4f:da:
                    76:15:5d:70:9f:ca:e0:7a:f2:65:cf:45:c3:bf:4c:
                    b6:56:26:56:be:48:11:6c:44:55:8d:d9:dc:da:bb:
                    2c:28:b5:65:33:8e:e1:a8:d6:8c:a6:88:4a:64:ac:
                    8e:96:af:96:8c:e1:83:07:5e:b8:b4:6f:bb:27:8c:
                    8c:42:98:46:ed:72:80:50:8a:0c:16:26:be:f1:64:
                    c1:cb:f9:e3:1f:57:d3:e5:6b:d9:ec:06:fa:32:34:
                    25:fd:9c:a6:64:e1:a0:5b:6d:50:b6:56:d0:a1:9c:
                    8c:24:52:32:37:6d:49:be:73:bb:d0:51:ae:9c:fc:
                    7c:63:98:8d:20:ac:7f:12:a8:26:8b:01:a1:c9:5f:
                    02:e5:06:2c:1d:03:2c:41:21:ee:0b:cd:20:c2:84:
                    35:e5:d1:04:19:6b:43:77:f9:58:a5:99:d1:39:3a:
                    ff:d8:cb:9a:6f:e6:29:08:a2:d0:b9:66:4c:4a:c9:
                    f4:00:b5:ad:03:f7:5d:e2:7f:f3:dd:07:61:c9:b2:
                    aa:a5:1d:88:7b:e5:5d:5f:19:39:3d:7e:bc:89:e5:
                    ed:cd:2f:32:c9:a0:b3:ec:da:1e:4a:18:1d:84:4b:
                    e8:4b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A8:41:BD:C5:AF:A9:E9:A0:A9:5B:88:54:61:13:CA:74:5E:E9:63:B5
            X509v3 Authority Key Identifier:
                keyid:74:01:65:A8:0D:10:71:97:0A:BC:09:C0:2B:71:C1:AC:7C:1D:6E:0E

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                CA Repository - URI:rsync://rpki.apnic.net/member_repository/A91F5216/5CD5E7306E0811EDBEED6284C4F9AE02/
                RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A91F5216/5CD5E7306E0811EDBEED6284C4F9AE02/qEG9xa-p6aCpW4hUYRPKdF7pY7U.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  146.196.0.0/19

    Signature Algorithm: sha256WithRSAEncryption
         21:27:6a:27:be:f7:1c:ad:74:44:2a:c2:c0:08:3d:85:f4:4e:
         3e:b1:aa:aa:a6:5b:d0:6d:e3:7a:93:d1:f3:c3:29:e7:1b:e6:
         ac:5c:9f:1c:2a:0c:56:5c:5a:c7:c2:ea:1b:2f:cc:f0:84:a2:
         8c:42:d4:fd:2b:d2:c0:ba:d8:a7:78:13:e8:60:96:3a:82:1a:
         83:c2:b1:06:b0:96:2e:1e:06:a8:ee:83:3b:b9:ff:03:4a:a2:
         30:ef:30:49:39:51:07:9c:ac:09:28:93:d6:53:79:d7:14:7d:
         54:8d:ff:d7:57:ff:49:93:b0:bc:25:eb:00:f2:92:59:0d:3f:
         d0:07:96:4d:45:21:53:6f:3a:c6:1e:6c:bb:39:68:63:81:21:
         33:d9:7f:84:14:3f:51:36:97:51:e3:96:1b:1c:7b:c8:a8:bd:
         c2:2b:e5:d1:ae:db:85:3a:06:73:a5:f8:d0:d8:93:3b:ea:10:
         e4:e8:a4:91:fc:04:82:e7:51:9e:b5:a0:87:87:aa:84:00:1b:
         33:29:99:1e:09:54:3d:9f:65:54:1c:bd:3e:db:ea:0d:a7:da:
         d3:36:6e:81:3c:ea:9e:db:1e:6c:d2:44:0d:7a:b1:98:49:ca:
         1c:26:5e:df:df:0b:af:f4:24:a5:04:b6:04:b4:da:0f:1b:5f:
         8d:4f:60:bf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 03:09:07 2026 by rpki-client