Certificate

$ rpki-client -vvf rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-Dcw_Tkbb492_vMXbtufxvVUHkA.cer
File:                     -Dcw_Tkbb492_vMXbtufxvVUHkA.cer (raw, json)
Hash identifier:          Uprj8eo/DiwmYJO0kSw8R/ODGQ+mFwBsC9DpldzrTBw=
Subject key identifier:   F8:37:30:FD:39:1B:6F:8F:76:FE:F3:17:6E:DB:9F:C6:F5:54:1E:40
Authority key identifier: 0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
Certificate issuer:       /CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Certificate serial:       028BBC
Authority info access:    rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
Manifest:                 rsync://rpki.apnic.net/member_repository/A913621A/282242F01D6D11E2B4C0E6AD08B02CD2/-Dcw_Tkbb492_vMXbtufxvVUHkA.mft
caRepository:             rsync://rpki.apnic.net/member_repository/A913621A/282242F01D6D11E2B4C0E6AD08B02CD2/
Notify URL:               https://rrdp.apnic.net/notification.xml
Certificate not before:   Mon 02 Feb 2026 12:48:36 +0000
Certificate not after:    Sat 01 May 2027 00:00:00 +0000
Subordinate resources:    AS: 38901
                          AS: 131178
                          AS: 137066
                          AS: 138429
                          IP: 27.96.84.0/22
                          IP: 43.245.32.0/22
                          IP: 43.252.16.0/22
                          IP: 45.115.80.0/22
                          IP: 45.115.208.0/22
                          IP: 45.118.76.0/22
                          IP: 49.156.0.0/22
                          IP: 58.97.192.0 -- 58.97.231.255
                          IP: 103.9.188.0/22
                          IP: 103.12.160.0/22
                          IP: 103.30.196.0/22
                          IP: 110.74.192.0/19
                          IP: 113.130.124.0/22
                          IP: 119.82.248.0/21
                          IP: 163.47.12.0/22
                          IP: 163.47.172.0/22
                          IP: 202.58.96.0/22
                          IP: 221.120.160.0/22
                          IP: 2400:4880::/32
                          IP: 2404:300::/32
Validation:               OK
Signature path:           rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 26 Feb 2026 15:55:56 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 166844 (0x28bbc)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A90DC5BE, serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
        Validity
            Not Before: Feb  2 12:48:36 2026 GMT
            Not After : May  1 00:00:00 2027 GMT
        Subject: CN=A913621A, serialNumber=F83730FD391B6F8F76FEF3176EDB9FC6F5541E40
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:85:4e:6e:f7:91:51:41:d2:12:0d:3f:95:63:
                    45:9e:ca:b4:0b:6a:2a:2f:99:72:98:e5:f3:42:35:
                    28:5e:68:2a:2b:02:55:3b:80:47:37:b6:eb:13:c2:
                    fc:00:8e:cd:a0:51:8a:f4:f9:e4:46:4c:27:26:04:
                    3a:e3:de:32:d9:d4:5a:36:d8:fe:87:84:bb:2c:de:
                    c9:f3:be:0d:14:ae:96:de:dc:bd:13:9d:0b:01:52:
                    25:6e:08:71:5c:05:65:96:8c:a3:8f:22:4e:09:91:
                    f7:50:93:5b:7d:02:67:e2:f1:7f:01:a5:a0:84:e5:
                    b1:52:e0:b2:c4:39:43:8a:a7:d2:c0:2e:d4:9e:e3:
                    a8:c3:ef:a5:07:6c:58:09:c2:be:92:40:f4:5c:84:
                    fc:f2:da:ca:17:22:83:2f:d0:ca:2f:6b:13:1f:7c:
                    eb:c8:c8:49:43:e1:20:1d:09:31:4a:1c:71:98:37:
                    e3:5d:b8:df:03:11:f3:09:bc:8d:ce:fe:29:e8:4c:
                    c9:38:64:73:6b:a1:6c:21:08:39:46:1b:46:19:f0:
                    7f:ab:c1:38:e7:0c:75:9f:67:44:c6:07:10:6c:1c:
                    ec:90:ed:50:c0:42:f7:79:df:d0:95:54:8d:c4:8b:
                    29:99:de:e9:3d:39:f1:bb:10:a9:87:30:32:dc:19:
                    25:d5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F8:37:30:FD:39:1B:6F:8F:76:FE:F3:17:6E:DB:9F:C6:F5:54:1E:40
            X509v3 Authority Key Identifier:
                keyid:0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                CA Repository - URI:rsync://rpki.apnic.net/member_repository/A913621A/282242F01D6D11E2B4C0E6AD08B02CD2/
                RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A913621A/282242F01D6D11E2B4C0E6AD08B02CD2/-Dcw_Tkbb492_vMXbtufxvVUHkA.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  38901
                  131178
                  137066
                  138429

            sbgp-ipAddrBlock: critical
                IPv4:
                  27.96.84.0/22
                  43.245.32.0/22
                  43.252.16.0/22
                  45.115.80.0/22
                  45.115.208.0/22
                  45.118.76.0/22
                  49.156.0.0/22
                  58.97.192.0-58.97.231.255
                  103.9.188.0/22
                  103.12.160.0/22
                  103.30.196.0/22
                  110.74.192.0/19
                  113.130.124.0/22
                  119.82.248.0/21
                  163.47.12.0/22
                  163.47.172.0/22
                  202.58.96.0/22
                  221.120.160.0/22
                IPv6:
                  2400:4880::/32
                  2404:300::/32

    Signature Algorithm: sha256WithRSAEncryption
         07:62:8a:a3:41:e9:14:6e:a2:92:38:b5:60:7c:a1:92:b5:d5:
         16:f3:de:25:87:1b:80:c0:af:37:3b:65:ce:5e:d5:0e:43:13:
         c9:4a:db:ad:6a:41:c0:b5:a5:bd:0e:18:32:b6:a6:af:69:c9:
         05:e4:48:6a:f0:8a:71:24:9c:1f:f0:ec:80:28:dd:1b:ee:42:
         11:de:72:3f:96:8a:d3:68:1f:5d:ff:dd:69:5d:95:92:90:bd:
         73:2a:ba:c6:9a:2c:c2:bc:c0:01:6b:a8:af:56:89:1e:c7:10:
         fb:72:6d:be:f1:20:ce:62:6e:73:c6:4e:a4:dd:46:6b:cf:2c:
         c0:dd:32:4c:fb:79:f8:88:84:56:52:b2:ee:e7:06:76:f6:4f:
         97:6f:a0:bd:02:ca:73:82:58:fb:b5:bf:78:b9:4e:de:e1:59:
         4a:fd:12:dd:d1:25:c6:7d:dd:9a:2e:a6:2e:bb:89:a9:a7:53:
         71:a1:0c:84:03:6a:92:4e:c1:44:37:5f:74:8c:10:0c:3d:c0:
         fa:63:7f:ca:b2:a1:47:5e:1d:74:e9:7b:8c:50:92:5e:4d:86:
         76:2b:e0:62:4c:79:88:6c:8f:37:4b:4e:a2:04:92:1d:11:6e:
         16:74:a3:d2:6f:77:69:07:3a:94:23:94:be:a2:da:1a:00:ca:
         9e:c5:05:ba
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 19 18:49:30 2026 by rpki-client