Certificate

$ rpki-client -vvf rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/g4n9Rv74flk96Bz_3N8guiynYB4.cer
File:                     g4n9Rv74flk96Bz_3N8guiynYB4.cer (raw, json)
Hash identifier:          sRPlcdj4sjZkDJ10ziUk1seg3TU65hdv/5p8nUJDENw=
Subject key identifier:   83:89:FD:46:FE:F8:7E:59:3D:E8:1C:FF:DC:DF:20:BA:2C:A7:60:1E
Authority key identifier: 0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
Certificate issuer:       /CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Certificate serial:       0283C0
Authority info access:    rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
Manifest:                 rsync://rpki.apnic.net/member_repository/A91475BA/D4F08EE6DAE911EA92CE345AC4F9AE02/g4n9Rv74flk96Bz_3N8guiynYB4.mft
caRepository:             rsync://rpki.apnic.net/member_repository/A91475BA/D4F08EE6DAE911EA92CE345AC4F9AE02/
Notify URL:               https://rrdp.apnic.net/notification.xml
Certificate not before:   Mon 05 Jan 2026 12:57:46 +0000
Certificate not after:    Wed 31 Mar 2027 00:00:00 +0000
Subordinate resources:    AS: 9744
                          AS: 137984
                          IP: 103.127.24.0/22
                          IP: 2404:1a40::/32
Validation:               OK
Signature path:           rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 26 Feb 2026 15:55:56 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 164800 (0x283c0)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A90DC5BE, serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
        Validity
            Not Before: Jan  5 12:57:46 2026 GMT
            Not After : Mar 31 00:00:00 2027 GMT
        Subject: CN=A91475BA, serialNumber=8389FD46FEF87E593DE81CFFDCDF20BA2CA7601E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9e:0d:33:3e:44:85:3d:75:61:20:5a:4d:8f:33:
                    4b:aa:27:f4:41:2f:8b:4c:f9:b9:16:c2:5d:c8:9c:
                    1f:72:ce:b0:b9:08:59:ce:81:9d:f0:69:09:d2:db:
                    d0:c4:00:67:65:93:00:1b:19:82:8a:76:8b:4f:9a:
                    55:5e:b1:26:67:a5:72:8e:e7:de:f5:fc:0c:0b:24:
                    34:9f:17:a1:eb:7b:64:71:68:e6:4b:84:a8:3a:68:
                    a8:0e:a9:38:28:c6:7f:1a:13:3c:b1:24:c5:09:7b:
                    8d:92:37:41:a6:50:da:f0:9f:b5:ae:3b:73:a3:4a:
                    e3:0b:ae:58:b5:52:a2:e5:fe:8c:b7:6e:3e:60:ea:
                    12:07:d0:f8:17:8b:10:6e:e7:68:bd:ab:82:cc:ba:
                    6f:e2:25:38:f5:fd:61:7a:02:ac:c5:30:b5:6f:2b:
                    7d:20:7d:b5:c5:73:72:10:b3:cf:78:14:30:41:5f:
                    d4:82:86:6b:5a:96:37:b6:8c:0b:23:19:28:53:ec:
                    05:f9:07:44:8a:16:c6:1f:59:af:f9:e7:bb:c4:19:
                    ac:3d:00:db:2f:4f:06:91:c4:a6:c9:66:06:37:56:
                    95:a7:73:1d:36:e6:05:52:e6:0b:d4:bf:be:87:e4:
                    98:35:af:a4:30:fc:5b:94:b5:d2:a9:2d:27:22:fe:
                    d6:93
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                83:89:FD:46:FE:F8:7E:59:3D:E8:1C:FF:DC:DF:20:BA:2C:A7:60:1E
            X509v3 Authority Key Identifier:
                keyid:0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                CA Repository - URI:rsync://rpki.apnic.net/member_repository/A91475BA/D4F08EE6DAE911EA92CE345AC4F9AE02/
                RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A91475BA/D4F08EE6DAE911EA92CE345AC4F9AE02/g4n9Rv74flk96Bz_3N8guiynYB4.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  9744
                  137984

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.127.24.0/22
                IPv6:
                  2404:1a40::/32

    Signature Algorithm: sha256WithRSAEncryption
         60:e5:60:8e:55:e7:3f:83:46:5b:aa:39:38:8d:c5:5d:1d:f3:
         d7:83:11:32:44:6b:df:a3:3b:7d:86:ad:be:37:ee:30:05:05:
         d2:9c:3a:b9:a2:f4:11:d6:fa:af:50:41:d6:36:52:ac:06:fe:
         35:3e:5c:d1:a9:d8:33:27:1d:ae:4e:c8:89:34:a8:81:0a:3d:
         eb:34:e9:4e:43:73:47:71:ef:f7:8d:26:bf:b2:b5:f9:67:b3:
         71:b8:de:a5:78:57:c2:b2:cc:3e:08:a9:54:07:d2:f8:2d:e1:
         e6:53:4a:82:84:c1:6d:f0:3c:0a:18:20:54:38:0f:9c:7f:d5:
         97:66:5d:e8:86:25:91:9e:3c:47:f2:3f:d1:94:35:c0:c5:3a:
         6b:57:1e:35:bc:e5:82:1d:9e:fa:1e:ff:93:ad:47:5b:74:1d:
         e2:4b:a3:50:74:81:f9:fa:8b:8e:85:ca:ee:75:fa:cc:1e:ed:
         23:eb:f8:54:2d:d2:6f:b8:11:5e:fb:6e:b7:50:21:7d:ce:59:
         cf:52:e4:f3:8e:7a:7e:3c:ff:80:e1:16:5d:a6:4a:00:fa:05:
         59:0f:bb:c6:e9:14:7b:de:74:8e:ac:5e:df:f6:f8:3c:67:91:
         e2:e1:99:66:5d:a0:e9:74:d9:da:e5:58:86:d9:00:6d:9a:4b:
         fb:51:63:88
-----BEGIN CERTIFICATE-----
MIIGLTCCBRWgAwIBAgIDAoPAMA0GCSqGSIb3DQEBCwUAMEYxETAPBgNVBAMTCEE5
MERDNUJFMTEwLwYDVQQFEygwRTY1QTRGNUZEMzZCNUJENjhFQjNDOTIzNDA4OTc4
QzkwN0FBNzlGMB4XDTI2MDEwNTEyNTc0NloXDTI3MDMzMTAwMDAwMFowRjERMA8G
A1UEAwwIQTkxNDc1QkExMTAvBgNVBAUTKDgzODlGRDQ2RkVGODdFNTkzREU4MUNG
RkRDREYyMEJBMkNBNzYwMUUwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB
AQCeDTM+RIU9dWEgWk2PM0uqJ/RBL4tM+bkWwl3InB9yzrC5CFnOgZ3waQnS29DE
AGdlkwAbGYKKdotPmlVesSZnpXKO5971/AwLJDSfF6Hre2RxaOZLhKg6aKgOqTgo
xn8aEzyxJMUJe42SN0GmUNrwn7WuO3OjSuMLrli1UqLl/oy3bj5g6hIH0PgXixBu
52i9q4LMum/iJTj1/WF6AqzFMLVvK30gfbXFc3IQs894FDBBX9SChmtalje2jAsj
GShT7AX5B0SKFsYfWa/557vEGaw9ANsvTwaRxKbJZgY3VpWncx025gVS5gvUv76H
5Jg1r6Qw/FuUtdKpLSci/taTAgMBAAGjggMiMIIDHjAdBgNVHQ4EFgQUg4n9Rv74
flk96Bz/3N8guiynYB4wHwYDVR0jBBgwFoAUDmWk9f02tb1o6zySNAiXjJB6p58w
DgYDVR0PAQH/BAQDAgEGMA8GA1UdEwEB/wQFMAMBAf8wcwYDVR0fBGwwajBooGag
ZIZicnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2
NjExRTJCQjQ2OEY3QzcyRkQxRkYyL0RtV2s5ZjAydGIxbzZ6eVNOQWlYakpCNnA1
OC5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L3JlcG9zaXRvcnkvOTgwNjUyRTBCNzdFMTFFN0E5NkEzOTUyMUE0
RjRGQjQvRG1XazlmMDJ0YjFvNnp5U05BaVhqSkI2cDU4LmNlcjBKBgNVHSABAf8E
QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj
Lm5ldC9SUEtJL0NQUy5wZGYwggEoBggrBgEFBQcBCwSCARowggEWMF8GCCsGAQUF
BzAFhlNyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5
MTQ3NUJBL0Q0RjA4RUU2REFFOTExRUE5MkNFMzQ1QUM0RjlBRTAyLzB+BggrBgEF
BQcwCoZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9B
OTE0NzVCQS9ENEYwOEVFNkRBRTkxMUVBOTJDRTM0NUFDNEY5QUUwMi9nNG45UnY3
NGZsazk2QnpfM044Z3VpeW5ZQjQubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3Jy
ZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwHgYIKwYBBQUHAQgBAf8EDzAN
oAswCQICJhACAwIbADAuBggrBgEFBQcBBwEB/wQfMB0wDAQCAAEwBgMEAmd/GDAN
BAIAAjAHAwUAJAQaQDANBgkqhkiG9w0BAQsFAAOCAQEAYOVgjlXnP4NGW6o5OI3F
XR3z14MRMkRr36M7fYatvjfuMAUF0pw6uaL0Edb6r1BB1jZSrAb+NT5c0anYMycd
rk7IiTSogQo96zTpTkNzR3Hv940mv7K1+WezcbjepXhXwrLMPgipVAfS+C3h5lNK
goTBbfA8ChggVDgPnH/Vl2Zd6IYlkZ48R/I/0ZQ1wMU6a1ceNbzlgh2e+h7/k61H
W3Qd4kujUHSB+fqLjoXK7nX6zB7tI+v4VC3Sb7gRXvtut1Ahfc5Zz1Lk8456fjz/
gOEWXaZKAPoFWQ+7xukUe950jqxe3/b4PGeR4uGZZl2g6XTZ2uVYhtkAbZpL+1Fj
iA==
-----END CERTIFICATE-----
Generated at Thu Feb 19 21:53:10 2026 by rpki-client