Certificate

$ rpki-client -vvf rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/bCx8FCiea7W3J1sapr_foCJ7kIY.cer
File:                     bCx8FCiea7W3J1sapr_foCJ7kIY.cer (raw, json)
Hash identifier:          Hk87zEmTBj91ukYEwhlw9uo5J5U3B9HLFTliAguwoio=
Subject key identifier:   6C:2C:7C:14:28:9E:6B:B5:B7:27:5B:1A:A6:BF:DF:A0:22:7B:90:86
Authority key identifier: 74:01:65:A8:0D:10:71:97:0A:BC:09:C0:2B:71:C1:AC:7C:1D:6E:0E
Certificate issuer:       /CN=A90DC5BE/serialNumber=740165A80D1071970ABC09C02B71C1AC7C1D6E0E
Certificate serial:       7424
Authority info access:    rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
Manifest:                 rsync://rpki.apnic.net/member_repository/A913120A/DAF81C4486F911EFB096510CC4F9AE02/bCx8FCiea7W3J1sapr_foCJ7kIY.mft
caRepository:             rsync://rpki.apnic.net/member_repository/A913120A/DAF81C4486F911EFB096510CC4F9AE02/
Notify URL:               https://rrdp.apnic.net/notification.xml
Certificate not before:   Wed 18 Feb 2026 12:41:48 +0000
Certificate not after:    Sun 31 Jan 2027 00:00:00 +0000
Subordinate resources:    IP: 160.187.238.0/23
Validation:               OK
Signature path:           rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 26 Feb 2026 14:50:12 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 29732 (0x7424)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A90DC5BE, serialNumber=740165A80D1071970ABC09C02B71C1AC7C1D6E0E
        Validity
            Not Before: Feb 18 12:41:48 2026 GMT
            Not After : Jan 31 00:00:00 2027 GMT
        Subject: CN=A913120A, serialNumber=6C2C7C14289E6BB5B7275B1AA6BFDFA0227B9086
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:49:e5:7b:ab:2c:2a:49:fa:ca:33:68:ca:27:
                    2f:8a:2c:f5:4d:f8:26:20:57:53:4a:5e:ae:80:b6:
                    bd:b9:9e:6c:7a:a6:b0:d4:e0:6e:33:57:56:6f:36:
                    92:c9:f1:0e:e2:87:ec:2b:4c:f9:1a:0b:08:d6:2e:
                    51:0e:bf:e2:53:0c:f6:c1:0c:ed:f2:79:ff:88:54:
                    7d:85:08:52:8f:de:4e:87:87:c6:f7:46:b4:c7:1e:
                    4f:8c:16:58:84:ab:d6:8c:77:0c:30:59:2b:c6:a4:
                    b4:9c:87:c3:18:63:76:fb:d6:4b:7a:85:4e:f2:2f:
                    1f:59:ec:a7:46:13:6e:7d:9b:a5:aa:58:c5:0d:9d:
                    c8:86:33:35:3a:e6:20:2b:b9:32:7a:41:77:1d:bd:
                    ea:18:5d:a5:9e:2a:27:71:ee:02:cd:71:ce:87:4a:
                    0d:e0:f9:cd:70:c5:76:ac:b8:c8:9e:80:e0:c8:48:
                    05:7b:1a:e6:e6:bc:ec:1d:a7:18:57:c6:21:03:56:
                    5f:85:47:73:f1:30:f5:67:2d:58:b0:27:cb:77:07:
                    05:b9:f8:26:b0:06:09:a0:d8:c5:d1:c3:c2:da:d6:
                    72:9a:f5:79:01:74:3e:d0:73:75:a3:3d:31:1b:82:
                    85:38:36:d9:9f:e8:42:41:98:82:a3:cb:2a:f6:8c:
                    74:45
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6C:2C:7C:14:28:9E:6B:B5:B7:27:5B:1A:A6:BF:DF:A0:22:7B:90:86
            X509v3 Authority Key Identifier:
                keyid:74:01:65:A8:0D:10:71:97:0A:BC:09:C0:2B:71:C1:AC:7C:1D:6E:0E

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                CA Repository - URI:rsync://rpki.apnic.net/member_repository/A913120A/DAF81C4486F911EFB096510CC4F9AE02/
                RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A913120A/DAF81C4486F911EFB096510CC4F9AE02/bCx8FCiea7W3J1sapr_foCJ7kIY.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  160.187.238.0/23

    Signature Algorithm: sha256WithRSAEncryption
         41:56:75:22:a2:4d:b2:90:f9:39:e5:8e:92:ba:a6:c4:e6:1e:
         05:ad:a8:ea:78:3f:67:7f:8e:1e:2f:8f:6c:91:33:74:5c:fb:
         0a:5b:8d:87:d7:3f:b4:8a:c9:bd:b6:de:91:e9:99:79:bc:d2:
         e5:43:2f:2f:7f:62:bf:b6:56:df:2c:95:6a:fe:20:df:98:cd:
         1e:fb:b0:3c:1c:46:4d:08:60:16:25:38:3d:b7:b1:46:8d:de:
         ee:37:39:96:08:a6:83:c1:b1:86:d6:7d:cd:34:06:27:33:bf:
         e8:e1:30:97:4a:28:b9:34:40:8c:f4:64:50:84:ab:3a:10:fb:
         ed:cc:e1:d8:94:a1:3e:01:07:a1:ab:74:5a:b8:b1:b3:35:ca:
         b6:4f:80:01:66:b1:f5:b5:81:8d:2a:17:d9:0e:3f:5b:3a:9d:
         d5:c2:a7:bb:68:1b:c3:cb:97:db:ae:81:7e:ee:9c:59:c6:cc:
         b5:ed:77:5e:b3:59:60:1a:5f:a7:a7:c7:79:1b:34:0f:5c:14:
         5e:a3:d3:b8:1c:dc:76:71:e9:1d:5a:8d:0d:ff:cd:ec:4a:5a:
         7c:40:35:56:95:b4:b0:af:2e:5d:27:f1:e4:92:be:a1:21:6f:
         27:4b:c5:29:1f:a3:9e:9a:41:24:d6:80:8d:9b:4b:49:29:dc:
         ee:1d:fa:3b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Feb 20 01:51:23 2026 by rpki-client