Certificate

$ rpki-client -vvf rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5LOuPtIxeiPhm9egMr766tU3J9M.cer
File:                     5LOuPtIxeiPhm9egMr766tU3J9M.cer (raw, json)
Hash identifier:          b/j00mhzqnXULZFvsAmr+RwQXfP2K4FM1vUZTX03TO8=
Subject key identifier:   E4:B3:AE:3E:D2:31:7A:23:E1:9B:D7:A0:32:BE:FA:EA:D5:37:27:D3
Authority key identifier: 0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
Certificate issuer:       /CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Certificate serial:       028F8F
Authority info access:    rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
Manifest:                 rsync://rpki.apnic.net/member_repository/A91298E0/DC1EFB4A1D9011E2B57AE7F008B02CD2/5LOuPtIxeiPhm9egMr766tU3J9M.mft
caRepository:             rsync://rpki.apnic.net/member_repository/A91298E0/DC1EFB4A1D9011E2B57AE7F008B02CD2/
Notify URL:               https://rrdp.apnic.net/notification.xml
Certificate not before:   Mon 16 Feb 2026 12:38:43 +0000
Certificate not after:    Sat 01 May 2027 00:00:00 +0000
Subordinate resources:    AS: 24574
                          IP: 103.12.156.0/23
                          IP: 202.4.25.0/24
                          IP: 202.150.4.0/22
Validation:               OK
Signature path:           rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 26 Feb 2026 14:50:15 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 167823 (0x28f8f)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A90DC5BE, serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
        Validity
            Not Before: Feb 16 12:38:43 2026 GMT
            Not After : May  1 00:00:00 2027 GMT
        Subject: CN=A91298E0, serialNumber=E4B3AE3ED2317A23E19BD7A032BEFAEAD53727D3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:2c:97:98:e9:22:64:cb:4d:14:fa:19:cc:c6:
                    b0:ea:2c:96:26:60:99:a8:d8:59:fe:2c:8d:5c:c7:
                    73:16:4a:c3:f3:fb:ba:4c:cc:c6:3a:fa:ac:c7:44:
                    c2:e1:b9:7f:e4:df:3b:d8:05:e0:0e:46:a8:f7:ad:
                    e0:6b:5c:1c:6b:7c:1a:2e:2a:f1:34:2d:85:35:2d:
                    00:34:56:4f:10:55:5d:f8:e5:92:de:9e:53:4e:ca:
                    51:d5:ed:aa:44:a4:28:ee:4c:66:ea:07:88:0a:51:
                    44:4d:73:28:9c:b3:df:60:bd:a2:82:a4:34:e2:ce:
                    49:37:27:ce:37:bf:e8:1b:e3:28:e9:be:4c:fd:29:
                    e1:b4:c8:42:8d:eb:4a:17:a5:b3:10:55:88:34:8a:
                    12:30:e0:24:c2:36:15:1c:c0:b6:22:4e:39:5d:e9:
                    b0:90:21:04:e4:75:68:93:1a:a6:c0:79:30:45:62:
                    5a:c5:6b:04:b2:77:cc:7a:14:10:b9:bd:41:45:76:
                    06:e1:ce:c6:fc:43:58:08:f8:cc:e8:f3:94:ed:f7:
                    b4:99:42:ed:d1:4a:72:8d:43:b3:29:99:f0:a9:e7:
                    05:97:78:ff:03:53:99:2e:2c:ab:fd:b7:2a:05:fa:
                    fa:89:69:29:6f:97:2d:9b:34:67:d6:94:58:c3:2b:
                    07:71
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E4:B3:AE:3E:D2:31:7A:23:E1:9B:D7:A0:32:BE:FA:EA:D5:37:27:D3
            X509v3 Authority Key Identifier:
                keyid:0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                CA Repository - URI:rsync://rpki.apnic.net/member_repository/A91298E0/DC1EFB4A1D9011E2B57AE7F008B02CD2/
                RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A91298E0/DC1EFB4A1D9011E2B57AE7F008B02CD2/5LOuPtIxeiPhm9egMr766tU3J9M.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  24574

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.12.156.0/23
                  202.4.25.0/24
                  202.150.4.0/22

    Signature Algorithm: sha256WithRSAEncryption
         55:f1:e4:bd:df:ae:3b:b4:23:4d:94:36:63:45:c7:5f:02:6d:
         7d:a7:a6:bf:9e:7d:42:7a:fd:ff:c3:f2:37:04:15:f1:25:4c:
         74:dc:f5:9c:08:81:65:5b:37:98:ed:08:e0:f0:24:4d:e3:eb:
         1d:a9:9d:60:b6:44:bf:73:42:f3:2e:5c:d1:df:ec:89:ac:7d:
         49:92:3a:84:85:a0:1a:08:bd:f5:af:42:94:bf:92:a0:16:f1:
         ef:e1:e4:8b:c1:d6:00:f7:8d:b7:9e:09:23:da:ec:f9:fe:7f:
         12:59:e0:52:2b:a6:4f:13:d8:c8:bb:0a:bc:8b:e7:2e:77:b3:
         f6:ab:2e:51:31:95:e0:58:ca:ed:c5:49:fb:e3:4c:36:bd:ab:
         6c:e6:d5:64:20:3a:49:81:a7:70:a5:a5:70:25:a1:88:98:37:
         36:18:f4:72:3a:84:ee:5d:32:d7:ab:59:43:5d:0d:2a:36:e0:
         fd:4f:59:3a:41:8c:77:53:a3:5a:6b:6b:fd:ff:13:27:47:be:
         44:36:8b:19:56:df:1a:eb:08:63:32:37:09:ef:25:e3:6e:f9:
         19:8b:3a:ec:ec:08:c8:2a:d2:7b:c5:d8:49:80:0c:a0:a6:6e:
         b9:be:6f:88:57:35:f7:d3:2d:32:57:b1:0e:5b:a1:0c:9e:e1:
         7e:df:c9:b8
-----BEGIN CERTIFICATE-----
MIIGJTCCBQ2gAwIBAgIDAo+PMA0GCSqGSIb3DQEBCwUAMEYxETAPBgNVBAMMCEE5
MERDNUJFMTEwLwYDVQQFEygwRTY1QTRGNUZEMzZCNUJENjhFQjNDOTIzNDA4OTc4
QzkwN0FBNzlGMB4XDTI2MDIxNjEyMzg0M1oXDTI3MDUwMTAwMDAwMFowRjERMA8G
A1UEAwwIQTkxMjk4RTAxMTAvBgNVBAUTKEU0QjNBRTNFRDIzMTdBMjNFMTlCRDdB
MDMyQkVGQUVBRDUzNzI3RDMwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB
AQC5LJeY6SJky00U+hnMxrDqLJYmYJmo2Fn+LI1cx3MWSsPz+7pMzMY6+qzHRMLh
uX/k3zvYBeAORqj3reBrXBxrfBouKvE0LYU1LQA0Vk8QVV345ZLenlNOylHV7apE
pCjuTGbqB4gKUURNcyics99gvaKCpDTizkk3J843v+gb4yjpvkz9KeG0yEKN60oX
pbMQVYg0ihIw4CTCNhUcwLYiTjld6bCQIQTkdWiTGqbAeTBFYlrFawSyd8x6FBC5
vUFFdgbhzsb8Q1gI+Mzo85Tt97SZQu3RSnKNQ7MpmfCp5wWXeP8DU5kuLKv9tyoF
+vqJaSlvly2bNGfWlFjDKwdxAgMBAAGjggMaMIIDFjAdBgNVHQ4EFgQU5LOuPtIx
eiPhm9egMr766tU3J9MwHwYDVR0jBBgwFoAUDmWk9f02tb1o6zySNAiXjJB6p58w
DgYDVR0PAQH/BAQDAgEGMA8GA1UdEwEB/wQFMAMBAf8wcwYDVR0fBGwwajBooGag
ZIZicnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2
NjExRTJCQjQ2OEY3QzcyRkQxRkYyL0RtV2s5ZjAydGIxbzZ6eVNOQWlYakpCNnA1
OC5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L3JlcG9zaXRvcnkvOTgwNjUyRTBCNzdFMTFFN0E5NkEzOTUyMUE0
RjRGQjQvRG1XazlmMDJ0YjFvNnp5U05BaVhqSkI2cDU4LmNlcjBKBgNVHSABAf8E
QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj
Lm5ldC9SUEtJL0NQUy5wZGYwggEoBggrBgEFBQcBCwSCARowggEWMF8GCCsGAQUF
BzAFhlNyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5
MTI5OEUwL0RDMUVGQjRBMUQ5MDExRTJCNTdBRTdGMDA4QjAyQ0QyLzB+BggrBgEF
BQcwCoZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9B
OTEyOThFMC9EQzFFRkI0QTFEOTAxMUUyQjU3QUU3RjAwOEIwMkNEMi81TE91UHRJ
eGVpUGhtOWVnTXI3NjZ0VTNKOU0ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3Jy
ZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwGQYIKwYBBQUHAQgBAf8ECjAI
oAYwBAICX/4wKwYIKwYBBQUHAQcBAf8EHDAaMBgEAgABMBIDBAFnDJwDBADKBBkD
BALKlgQwDQYJKoZIhvcNAQELBQADggEBAFXx5L3frju0I02UNmNFx18CbX2npr+e
fUJ6/f/D8jcEFfElTHTc9ZwIgWVbN5jtCODwJE3j6x2pnWC2RL9zQvMuXNHf7Ims
fUmSOoSFoBoIvfWvQpS/kqAW8e/h5IvB1gD3jbeeCSPa7Pn+fxJZ4FIrpk8T2Mi7
CryL5y53s/arLlExleBYyu3FSfvjTDa9q2zm1WQgOkmBp3ClpXAloYiYNzYY9HI6
hO5dMterWUNdDSo24P1PWTpBjHdTo1pra/3/EydHvkQ2ixlW3xrrCGMyNwnvJeNu
+RmLOuzsCMgq0nvF2EmADKCmbrm+b4hXNffTLTJXsQ5boQye4X7fybg=
-----END CERTIFICATE-----
Generated at Thu Feb 19 17:26:04 2026 by rpki-client