Certificate

$ rpki-client -vvf rpki.apnic.net/repository/B4A1BEA61D6611E2B2CD8B7C72FD1FF2/5x-HDnK9Im57-jqrGpGKtGIybF8.cer
File:                     5x-HDnK9Im57-jqrGpGKtGIybF8.cer (raw, json)
Hash identifier:          Bd/goy5yGEAJSuUTpPjEEoTLLlOno7n/yKKnsLU9Ymo=
Subject key identifier:   E7:1F:87:0E:72:BD:22:6E:7B:FA:3A:AB:1A:91:8A:B4:62:32:6C:5F
Authority key identifier: 96:A8:5E:F4:B8:CA:F5:D4:C3:5A:15:7F:4E:12:5E:E4:94:BA:F9:39
Certificate issuer:       /CN=A90DC5BE/serialNumber=96A85EF4B8CAF5D4C35A157F4E125EE494BAF939
Certificate serial:       4A97
Authority info access:    rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/lqhe9LjK9dTDWhV_ThJe5JS6-Tk.cer
Manifest:                 rsync://rpki.apnic.net/member_repository/A91964B3/55E1558E3FE911F18DB2AF097EEE528E/5x-HDnK9Im57-jqrGpGKtGIybF8.mft
caRepository:             rsync://rpki.apnic.net/member_repository/A91964B3/55E1558E3FE911F18DB2AF097EEE528E/
Notify URL:               https://rrdp.apnic.net/notification.xml
Certificate not before:   Mon 15 Jun 2026 23:29:06 +0000
Certificate not after:    Tue 02 Mar 2027 00:00:00 +0000
Subordinate resources:    IP: 177.4.96.0/20
                          IP: 177.6.32.0/20
                          IP: 177.177.32.0/20
                          IP: 177.177.112.0/20
                          IP: 177.203.80.0/20
                          IP: 177.203.160.0/20
                          IP: 186.242.160.0/19
                          IP: 186.244.160.0/19
Validation:               OK
Signature path:           rsync://rpki.apnic.net/repository/B4A1BEA61D6611E2B2CD8B7C72FD1FF2/lqhe9LjK9dTDWhV_ThJe5JS6-Tk.crl
                          rsync://rpki.apnic.net/repository/B4A1BEA61D6611E2B2CD8B7C72FD1FF2/lqhe9LjK9dTDWhV_ThJe5JS6-Tk.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/lqhe9LjK9dTDWhV_ThJe5JS6-Tk.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 31 Jul 2026 02:50:24 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 19095 (0x4a97)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A90DC5BE, serialNumber=96A85EF4B8CAF5D4C35A157F4E125EE494BAF939
        Validity
            Not Before: Jun 15 23:29:06 2026 GMT
            Not After : Mar  2 00:00:00 2027 GMT
        Subject: CN=A91964B3, serialNumber=E71F870E72BD226E7BFA3AAB1A918AB462326C5F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:b0:49:f9:41:64:dc:a7:df:cb:23:ca:66:07:
                    29:a7:91:aa:3a:aa:3e:30:81:6e:b0:21:db:6f:c7:
                    27:71:4d:ef:b3:9d:1f:63:fd:88:11:be:da:ac:70:
                    b5:d2:e0:dd:f8:9f:ff:9b:bb:37:45:ab:5c:a3:0d:
                    fb:8b:da:23:b2:67:92:37:ae:57:42:45:ad:bf:93:
                    a4:fe:3f:98:c4:d4:6c:b3:60:dc:f9:21:ac:e2:fd:
                    c3:5a:bb:60:70:5b:50:b0:c1:36:83:73:fb:fc:7f:
                    1f:d3:bb:4a:b2:12:17:b9:85:3e:59:43:7b:87:4c:
                    b0:5a:90:ed:e4:f6:d7:39:20:e4:e1:f4:aa:b8:29:
                    7f:96:bd:b3:2c:8c:5c:9b:8d:5e:74:03:04:8c:f2:
                    db:a8:3f:20:9c:37:99:b2:c3:73:f7:2a:76:6f:dd:
                    47:e7:df:8e:e1:b0:11:84:0b:46:20:7a:31:51:dd:
                    d9:e7:47:16:14:b2:ba:b8:52:34:37:ed:fe:88:1a:
                    dd:b6:36:56:60:de:8b:ee:7e:6f:1c:5c:d0:8e:6a:
                    03:cf:6b:1d:d5:08:3b:5e:ff:d5:91:de:23:aa:c7:
                    b1:ab:e3:e2:69:9a:f2:f4:ce:e6:9c:78:19:08:f0:
                    ed:a9:6b:a0:47:45:58:aa:d4:1b:f3:7c:ce:41:e3:
                    ac:57
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E7:1F:87:0E:72:BD:22:6E:7B:FA:3A:AB:1A:91:8A:B4:62:32:6C:5F
            X509v3 Authority Key Identifier:
                keyid:96:A8:5E:F4:B8:CA:F5:D4:C3:5A:15:7F:4E:12:5E:E4:94:BA:F9:39

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/repository/B4A1BEA61D6611E2B2CD8B7C72FD1FF2/lqhe9LjK9dTDWhV_ThJe5JS6-Tk.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/lqhe9LjK9dTDWhV_ThJe5JS6-Tk.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                CA Repository - URI:rsync://rpki.apnic.net/member_repository/A91964B3/55E1558E3FE911F18DB2AF097EEE528E/
                RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A91964B3/55E1558E3FE911F18DB2AF097EEE528E/5x-HDnK9Im57-jqrGpGKtGIybF8.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.4.96.0/20
                  177.6.32.0/20
                  177.177.32.0/20
                  177.177.112.0/20
                  177.203.80.0/20
                  177.203.160.0/20
                  186.242.160.0/19
                  186.244.160.0/19

    Signature Algorithm: sha256WithRSAEncryption
         ac:a5:55:f1:43:e3:aa:a6:56:ef:61:60:dd:e1:c3:09:5b:1d:
         00:25:11:85:d0:c2:b0:24:f7:07:6d:50:c5:ca:ba:97:24:46:
         2f:f5:3b:e5:0d:79:1d:5d:14:28:b4:4e:6d:a2:ec:5c:c4:21:
         1f:6b:88:cd:14:3d:e9:69:11:69:32:b5:05:6a:f2:ac:c0:db:
         8b:47:98:59:c7:c1:95:5a:ff:7c:52:cd:d5:22:82:f0:62:71:
         4d:b2:f2:9d:01:f5:0e:06:1c:14:e7:73:11:90:46:d8:02:0e:
         ed:7f:dd:43:44:b7:a4:46:3f:c0:31:cc:af:7a:17:38:c1:c8:
         67:f2:0c:62:85:84:0a:aa:fa:87:d9:14:3d:23:01:66:c6:2d:
         c8:9f:05:24:db:5c:b8:c6:1e:eb:f7:65:de:6c:05:61:cd:54:
         6c:a9:af:9a:82:a9:a9:40:af:d0:4b:b2:1e:2f:ea:d3:0f:5f:
         c7:47:19:56:75:bc:a2:ca:70:1c:b0:d1:f0:c4:f6:58:ed:53:
         30:92:f9:00:52:34:0f:ec:78:02:bf:af:60:be:8c:91:e0:8c:
         3f:8a:2a:06:57:88:fc:7b:d8:00:16:d6:b4:37:10:51:fd:9f:
         26:53:2a:a2:53:4f:c8:41:e0:a3:c4:04:a3:1f:cd:be:9a:da:
         d0:7b:43:ed
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 06:24:20 2026 by rpki-client