Certificate

$ rpki-client -vvf rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/VC3eAu1c1aeKWFAwa556fpn8Jgs.cer
File:                     VC3eAu1c1aeKWFAwa556fpn8Jgs.cer (raw, json)
Hash identifier:          9QZSy6u7iqp4M+t99xRfzHU7gW1XM/p48fRM7/clswM=
Subject key identifier:   54:2D:DE:02:ED:5C:D5:A7:8A:58:50:30:6B:9E:7A:7E:99:FC:26:0B
Authority key identifier: 0C:FC:E7:78:57:FC:F0:1F:39:D9:9A:62:B4:AA:62:E6:15:9E:76:F8
Certificate issuer:       /CN=A90DC5BE/serialNumber=0CFCE77857FCF01F39D99A62B4AA62E6159E76F8
Certificate serial:       5057
Authority info access:    rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DPzneFf88B852ZpitKpi5hWedvg.cer
Manifest:                 rsync://rpki.apnic.net/member_repository/A913CB06/8A4D76BE07E411F1A34718A5213D8C67/VC3eAu1c1aeKWFAwa556fpn8Jgs.mft
caRepository:             rsync://rpki.apnic.net/member_repository/A913CB06/8A4D76BE07E411F1A34718A5213D8C67/
Notify URL:               https://rrdp.apnic.net/notification.xml
Certificate not before:   Thu 12 Feb 2026 07:29:22 +0000
Certificate not after:    Fri 28 May 2027 00:00:00 +0000
Subordinate resources:    IP: 151.158.146.0/23
Validation:               OK
Signature path:           rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.crl
                          rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DPzneFf88B852ZpitKpi5hWedvg.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 26 Feb 2026 14:50:27 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 20567 (0x5057)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A90DC5BE, serialNumber=0CFCE77857FCF01F39D99A62B4AA62E6159E76F8
        Validity
            Not Before: Feb 12 07:29:22 2026 GMT
            Not After : May 28 00:00:00 2027 GMT
        Subject: CN=A913CB06, serialNumber=542DDE02ED5CD5A78A5850306B9E7A7E99FC260B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:9b:b7:b3:af:16:65:ce:8e:24:dc:98:35:41:
                    b2:ed:cf:d6:16:bd:c3:b2:c1:43:75:9e:e9:50:15:
                    7f:b6:74:a6:c3:41:c0:b4:3e:77:bb:26:05:de:7d:
                    cf:0c:ee:fc:88:20:7d:ec:1b:1d:1d:2d:04:0f:73:
                    3b:57:81:52:7f:dc:3d:70:6f:d5:33:b8:93:71:98:
                    00:dd:25:8a:86:c0:6d:f6:95:cd:3c:72:08:7b:bd:
                    ef:d1:81:37:e2:8d:81:45:95:59:ad:7f:54:45:09:
                    cb:e7:a2:db:38:f9:03:45:35:ef:b7:9a:40:91:b9:
                    d8:0f:aa:83:b8:02:72:40:a0:e7:83:c1:4b:1f:a9:
                    e0:cb:da:15:5b:be:3f:15:84:49:33:3f:62:e0:82:
                    4b:c3:6b:d6:52:25:e2:a2:36:e7:6f:fb:85:7e:29:
                    7c:de:76:4e:33:e2:b7:d9:0d:bb:7d:6d:17:71:c3:
                    8c:2c:3b:2c:b5:7c:5d:7a:85:6c:5c:d0:f7:80:a3:
                    0e:45:0b:5f:d4:95:40:08:ff:60:86:65:8d:90:fc:
                    84:df:7c:32:87:78:19:ff:70:6b:24:ac:05:df:b8:
                    c1:b2:b3:ff:f3:b4:05:39:17:c5:de:51:f7:9b:a5:
                    0b:85:d5:1c:70:43:5a:00:4c:75:e0:d7:ce:cb:c0:
                    eb:c9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                54:2D:DE:02:ED:5C:D5:A7:8A:58:50:30:6B:9E:7A:7E:99:FC:26:0B
            X509v3 Authority Key Identifier:
                keyid:0C:FC:E7:78:57:FC:F0:1F:39:D9:9A:62:B4:AA:62:E6:15:9E:76:F8

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DPzneFf88B852ZpitKpi5hWedvg.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                CA Repository - URI:rsync://rpki.apnic.net/member_repository/A913CB06/8A4D76BE07E411F1A34718A5213D8C67/
                RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A913CB06/8A4D76BE07E411F1A34718A5213D8C67/VC3eAu1c1aeKWFAwa556fpn8Jgs.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  151.158.146.0/23

    Signature Algorithm: sha256WithRSAEncryption
         94:bd:30:42:5f:a9:fd:b0:55:0b:6f:e8:17:70:a0:2d:96:2f:
         53:f0:f5:b7:cc:d2:6f:50:20:79:97:89:fa:09:18:9b:e4:7d:
         8d:d9:7c:20:90:71:f0:99:91:85:33:97:cf:27:2d:70:15:7f:
         72:40:bf:bf:47:63:13:31:c2:df:d4:01:6d:52:4c:c9:af:30:
         28:6a:43:9d:82:bf:df:04:e4:76:d5:81:ac:36:b6:a3:66:82:
         8c:3a:17:8c:68:6b:6c:8f:33:3b:fe:d2:d7:3d:50:6a:d6:93:
         76:a3:b4:2c:0f:63:5a:67:fc:ec:04:75:0a:b4:1d:97:fd:c4:
         fd:e4:81:1d:c5:e6:bd:f9:ad:64:a1:ec:55:4c:d6:e8:98:ed:
         3e:f9:b2:33:0d:9e:68:c1:ad:54:90:28:15:f9:4d:f7:6e:1f:
         80:a3:02:40:2d:4d:e4:6a:24:5b:b2:96:b4:af:11:a7:8f:99:
         e6:89:b6:0a:5e:3a:64:1e:63:ba:a0:db:eb:c3:ab:2b:a2:04:
         4c:d6:20:15:d1:b6:13:14:36:64:a6:de:6a:08:60:e9:34:58:
         f9:96:d8:4f:19:b2:d7:98:b4:f7:0f:30:6e:f1:24:c5:1e:10:
         a9:2b:f5:ac:30:8f:9c:b3:aa:47:4c:56:21:5e:d4:6a:2b:8a:
         fa:92:c2:1a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Feb 20 03:28:46 2026 by rpki-client