Certificate

$ rpki-client -vvf rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/-bspsKvoSef-GA4znkscKCNoxSE.cer
File:                     -bspsKvoSef-GA4znkscKCNoxSE.cer (raw, json)
Hash identifier:          +js7fVdJ+DUSBZKjaGcr6E9qGy09k2I+6Y27diyGmo0=
Subject key identifier:   F9:BB:29:B0:AB:E8:49:E7:FE:18:0E:33:9E:4B:1C:28:23:68:C5:21
Authority key identifier: 74:01:65:A8:0D:10:71:97:0A:BC:09:C0:2B:71:C1:AC:7C:1D:6E:0E
Certificate issuer:       /CN=A90DC5BE/serialNumber=740165A80D1071970ABC09C02B71C1AC7C1D6E0E
Certificate serial:       7419
Authority info access:    rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
Manifest:                 rsync://rpki.apnic.net/member_repository/A913E8F3/0A04F4E2549411E9B597E571C4F9AE02/-bspsKvoSef-GA4znkscKCNoxSE.mft
caRepository:             rsync://rpki.apnic.net/member_repository/A913E8F3/0A04F4E2549411E9B597E571C4F9AE02/
Notify URL:               https://rrdp.apnic.net/notification.xml
Certificate not before:   Tue 17 Feb 2026 12:48:31 +0000
Certificate not after:    Sat 01 May 2027 00:00:00 +0000
Subordinate resources:    IP: 143.92.112.0/20
                          IP: 148.222.64.0/20
                          IP: 148.222.84.0/22
                          IP: 148.222.92.0/24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 27 Feb 2026 02:50:12 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 29721 (0x7419)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A90DC5BE, serialNumber=740165A80D1071970ABC09C02B71C1AC7C1D6E0E
        Validity
            Not Before: Feb 17 12:48:31 2026 GMT
            Not After : May  1 00:00:00 2027 GMT
        Subject: CN=A913E8F3, serialNumber=F9BB29B0ABE849E7FE180E339E4B1C282368C521
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:be:05:7e:96:70:d8:83:fa:5b:a9:38:fe:9e:
                    98:dd:01:1b:e9:da:ab:52:2e:c3:1f:6c:56:75:af:
                    50:74:5a:86:5e:a4:60:c0:d6:73:ad:6a:80:16:2b:
                    af:04:bd:ff:b2:da:43:f7:fa:0e:1a:15:b9:d6:08:
                    84:79:f7:da:01:1f:37:9a:15:d4:1c:e8:dc:2f:05:
                    07:42:67:b6:02:e3:ba:3d:23:dd:1c:b9:b0:24:b5:
                    0d:d8:7d:7f:b6:8b:73:20:57:05:12:a9:94:f2:29:
                    0c:35:5b:2d:5b:ab:62:28:bf:42:5b:ea:d1:3f:6b:
                    a3:dd:2d:d4:ac:fc:6a:fd:d5:c4:30:0d:ac:e1:bf:
                    a5:a5:0d:32:75:94:9b:4e:3e:a4:f6:23:5c:7a:40:
                    01:78:80:b2:80:04:95:ab:31:63:59:3c:66:53:73:
                    4a:f6:eb:d0:2f:e9:47:f7:cd:02:45:e0:0c:50:24:
                    fc:21:64:36:97:a1:6a:d2:e5:ac:19:8d:f4:91:64:
                    aa:ed:db:99:ee:49:08:73:78:9b:67:83:4a:e6:6f:
                    f5:09:36:11:da:0b:f2:3a:e3:5d:80:3d:c6:9f:32:
                    c7:1e:5c:b2:09:2a:d0:e9:3a:6c:56:81:e9:d6:cd:
                    38:12:11:85:27:15:7f:a6:55:94:ab:8a:03:c8:29:
                    f1:81
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F9:BB:29:B0:AB:E8:49:E7:FE:18:0E:33:9E:4B:1C:28:23:68:C5:21
            X509v3 Authority Key Identifier:
                keyid:74:01:65:A8:0D:10:71:97:0A:BC:09:C0:2B:71:C1:AC:7C:1D:6E:0E

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                CA Repository - URI:rsync://rpki.apnic.net/member_repository/A913E8F3/0A04F4E2549411E9B597E571C4F9AE02/
                RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A913E8F3/0A04F4E2549411E9B597E571C4F9AE02/-bspsKvoSef-GA4znkscKCNoxSE.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  143.92.112.0/20
                  148.222.64.0/20
                  148.222.84.0/22
                  148.222.92.0/24

    Signature Algorithm: sha256WithRSAEncryption
         9f:86:f7:19:57:b1:94:36:e8:48:9e:73:f0:58:9c:5d:07:e0:
         20:37:c9:64:05:91:13:39:87:3a:00:23:59:a4:2b:d3:13:aa:
         ad:12:41:8a:6f:be:c3:d6:5a:d4:10:83:ce:ef:d8:95:42:ca:
         a5:c4:5b:44:f0:ba:fd:95:3e:fa:2a:e7:c6:10:81:ef:11:dc:
         1b:b6:ca:bb:dc:c1:41:8e:6a:0c:5c:59:96:6a:bd:c3:b4:2e:
         20:fc:85:f2:6d:3c:69:37:54:3c:82:e1:c1:8c:6f:9f:45:1f:
         b9:b5:55:d5:d9:1f:27:e7:2b:5e:81:4c:fa:7e:3f:44:9b:ec:
         74:07:99:26:91:3f:1a:51:0b:6e:62:37:e7:d1:d6:7a:d7:5f:
         c6:34:b3:ce:a8:3d:8a:ad:05:11:8e:bb:a3:7f:d3:d7:7d:87:
         ea:e5:40:ff:90:15:3a:3a:0f:a5:bc:55:27:c5:6e:7f:99:02:
         88:09:0e:f8:ef:e3:bb:55:cf:1d:71:fb:a2:a4:54:11:1b:34:
         a0:5a:50:20:2a:58:2c:4e:4c:e8:1b:02:9f:4d:54:1b:98:a3:
         88:16:4a:cb:ce:b4:14:65:82:94:10:a1:7e:0d:18:e1:02:32:
         8a:3e:cb:6d:af:e5:a3:aa:fd:16:1a:0c:b3:85:d3:fd:62:f9:
         22:ec:50:b0
-----BEGIN CERTIFICATE-----
MIIGDzCCBPegAwIBAgICdBkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAwwIQTkw
REM1QkUxMTAvBgNVBAUTKDc0MDE2NUE4MEQxMDcxOTcwQUJDMDlDMDJCNzFDMUFD
N0MxRDZFMEUwHhcNMjYwMjE3MTI0ODMxWhcNMjcwNTAxMDAwMDAwWjBGMREwDwYD
VQQDDAhBOTEzRThGMzExMC8GA1UEBRMoRjlCQjI5QjBBQkU4NDlFN0ZFMTgwRTMz
OUU0QjFDMjgyMzY4QzUyMTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEB
ALy+BX6WcNiD+lupOP6emN0BG+naq1Iuwx9sVnWvUHRahl6kYMDWc61qgBYrrwS9
/7LaQ/f6DhoVudYIhHn32gEfN5oV1Bzo3C8FB0JntgLjuj0j3Ry5sCS1Ddh9f7aL
cyBXBRKplPIpDDVbLVurYii/Qlvq0T9ro90t1Kz8av3VxDANrOG/paUNMnWUm04+
pPYjXHpAAXiAsoAElasxY1k8ZlNzSvbr0C/pR/fNAkXgDFAk/CFkNpehatLlrBmN
9JFkqu3bme5JCHN4m2eDSuZv9Qk2EdoL8jrjXYA9xp8yxx5csgkq0Ok6bFaB6dbN
OBIRhScVf6ZVlKuKA8gp8YECAwEAAaOCAwUwggMBMB0GA1UdDgQWBBT5uymwq+hJ
5/4YDjOeSxwoI2jFITAfBgNVHSMEGDAWgBR0AWWoDRBxlwq8CcArccGsfB1uDjAO
BgNVHQ8BAf8EBAMCAQYwDwYDVR0TAQH/BAUwAwEB/zBzBgNVHR8EbDBqMGigZqBk
hmJyc3luYzovL3Jwa2kuYXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRGMjAxRDY2
MTFFMjhBQzg4MzdDNzJGRDFGRjIvZEFGbHFBMFFjWmNLdkFuQUszSEJySHdkYmc0
LmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5h
cG5pYy5uZXQvcmVwb3NpdG9yeS85ODA2NTJFMEI3N0UxMUU3QTk2QTM5NTIxQTRG
NEZCNC9kQUZscUEwUWNaY0t2QW5BSzNIQnJId2RiZzQuY2VyMEoGA1UdIAEB/wRA
MD4wPAYIKwYBBQUHDgIwMDAuBggrBgEFBQcCARYiaHR0cHM6Ly93d3cuYXBuaWMu
bmV0L1JQS0kvQ1BTLnBkZjCCASgGCCsGAQUFBwELBIIBGjCCARYwXwYIKwYBBQUH
MAWGU3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
M0U4RjMvMEEwNEY0RTI1NDk0MTFFOUI1OTdFNTcxQzRGOUFFMDIvMH4GCCsGAQUF
BzAKhnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5
MTNFOEYzLzBBMDRGNEUyNTQ5NDExRTlCNTk3RTU3MUM0RjlBRTAyLy1ic3BzS3Zv
U2VmLUdBNHpua3NjS0NOb3hTRS5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJk
cC5hcG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAxBggrBgEFBQcBBwEB/wQiMCAw
HgQCAAEwGAMEBI9ccAMEBJTeQAMEApTeVAMEAJTeXDANBgkqhkiG9w0BAQsFAAOC
AQEAn4b3GVexlDboSJ5z8FicXQfgIDfJZAWREzmHOgAjWaQr0xOqrRJBim++w9Za
1BCDzu/YlULKpcRbRPC6/ZU++irnxhCB7xHcG7bKu9zBQY5qDFxZlmq9w7QuIPyF
8m08aTdUPILhwYxvn0UfubVV1dkfJ+crXoFM+n4/RJvsdAeZJpE/GlELbmI359HW
etdfxjSzzqg9iq0FEY67o3/T132H6uVA/5AVOjoPpbxVJ8Vuf5kCiAkO+O/ju1XP
HXH7oqRUERs0oFpQICpYLE5M6BsCn01UG5ijiBZKy860FGWClBChfg0Y4QIyij7L
ba/lo6r9FhoMs4XT/WL5IuxQsA==
-----END CERTIFICATE-----
Generated at Fri Feb 20 05:57:42 2026 by rpki-client