Certificate

$ rpki-client -vvf rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/tIZeO-nFadK5Pyw1HKsk0VBqrA0.cer
File:                     tIZeO-nFadK5Pyw1HKsk0VBqrA0.cer (raw, json)
Hash identifier:          K773z+lBN6yDdqIMAoJgzWZomyM9x9NK1FXUC+cFSNI=
Subject key identifier:   B4:86:5E:3B:E9:C5:69:D2:B9:3F:2C:35:1C:AB:24:D1:50:6A:AC:0D
Authority key identifier: 74:01:65:A8:0D:10:71:97:0A:BC:09:C0:2B:71:C1:AC:7C:1D:6E:0E
Certificate issuer:       /CN=A90DC5BE/serialNumber=740165A80D1071970ABC09C02B71C1AC7C1D6E0E
Certificate serial:       73FF
Authority info access:    rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
Manifest:                 rsync://rpki.apnic.net/member_repository/A9197CBD/3570DF2EB11411EE95E74365C4F9AE02/tIZeO-nFadK5Pyw1HKsk0VBqrA0.mft
caRepository:             rsync://rpki.apnic.net/member_repository/A9197CBD/3570DF2EB11411EE95E74365C4F9AE02/
Notify URL:               https://rrdp.apnic.net/notification.xml
Certificate not before:   Sun 15 Feb 2026 03:39:53 +0000
Certificate not after:    Sat 01 May 2027 00:00:00 +0000
Subordinate resources:    IP: 157.10.174.0/23
Validation:               OK
Signature path:           rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 27 Feb 2026 02:50:12 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 29695 (0x73ff)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A90DC5BE, serialNumber=740165A80D1071970ABC09C02B71C1AC7C1D6E0E
        Validity
            Not Before: Feb 15 03:39:53 2026 GMT
            Not After : May  1 00:00:00 2027 GMT
        Subject: CN=A9197CBD, serialNumber=B4865E3BE9C569D2B93F2C351CAB24D1506AAC0D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:6a:40:13:1e:bf:8b:56:62:00:9e:22:86:b2:
                    c8:18:f0:d1:07:87:87:9b:62:75:f1:58:b6:ff:95:
                    80:97:52:5c:9e:ca:74:2c:18:65:ec:2e:ee:13:cb:
                    bd:8a:0a:13:91:73:e9:c4:bb:4a:4a:e8:a0:bc:5e:
                    b6:70:82:1b:75:9f:67:aa:31:6c:b1:fd:f0:fd:b8:
                    ae:61:67:64:07:ba:c5:f3:c4:68:8a:0c:bd:61:e2:
                    f9:4a:fb:b0:05:f6:a5:15:54:82:27:9f:22:65:d8:
                    78:f6:f2:63:89:ee:16:36:40:78:d5:a8:b3:8f:28:
                    46:35:ef:e9:79:fb:33:f2:88:14:43:6a:fe:69:89:
                    af:07:d3:38:57:dd:ae:28:ae:35:17:5f:b2:56:55:
                    a7:17:b6:5a:07:42:d7:b5:89:07:cc:93:4a:4e:05:
                    a4:e1:90:7a:bf:c3:72:da:cf:af:b9:cd:df:f3:d9:
                    8f:2a:84:43:f3:76:55:c9:dd:3b:98:a4:21:3e:e1:
                    d5:f0:f6:eb:97:01:f6:60:b8:24:90:5d:9f:82:8d:
                    9f:3d:b1:a8:d4:32:18:83:61:10:2d:8c:fc:81:d6:
                    e9:cd:d3:10:dd:08:0d:bf:c3:3b:41:01:80:97:54:
                    ab:6b:9d:71:b8:91:27:47:d1:11:0f:59:25:4e:65:
                    4a:9f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B4:86:5E:3B:E9:C5:69:D2:B9:3F:2C:35:1C:AB:24:D1:50:6A:AC:0D
            X509v3 Authority Key Identifier:
                keyid:74:01:65:A8:0D:10:71:97:0A:BC:09:C0:2B:71:C1:AC:7C:1D:6E:0E

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                CA Repository - URI:rsync://rpki.apnic.net/member_repository/A9197CBD/3570DF2EB11411EE95E74365C4F9AE02/
                RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A9197CBD/3570DF2EB11411EE95E74365C4F9AE02/tIZeO-nFadK5Pyw1HKsk0VBqrA0.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  157.10.174.0/23

    Signature Algorithm: sha256WithRSAEncryption
         73:f8:21:f1:f3:b4:cc:38:d9:a4:28:db:11:58:09:1e:e9:f9:
         1f:16:65:82:48:e1:8f:7a:4e:9f:c5:2c:ea:0c:fd:0d:40:80:
         5a:26:76:a3:3f:af:e1:cc:26:84:8f:ca:92:56:a3:c5:82:ca:
         ed:fd:79:18:0a:5c:ce:0c:53:96:70:60:83:2c:50:2b:52:4c:
         6d:31:a2:ae:f3:0a:12:85:40:ee:51:11:71:90:9d:74:6f:cb:
         f2:cb:60:6c:2c:d9:59:21:d7:f8:2f:a8:48:fd:b9:b5:d2:f6:
         b5:7f:2e:fe:f3:98:ad:ab:61:8d:2c:26:c1:fe:31:9b:91:90:
         34:0b:bf:8b:55:68:26:ae:58:0e:21:36:e6:3c:be:b4:6a:a7:
         ad:8d:0e:d2:05:b1:d3:4b:08:ed:86:40:8a:5a:a4:ca:bd:10:
         33:c2:9e:02:5b:9f:76:32:aa:26:99:63:1e:70:c4:04:84:c8:
         67:71:ca:eb:7f:a5:00:1c:72:1c:96:6e:b0:61:83:4d:bc:78:
         19:60:bb:fc:2d:d7:32:0c:b3:7a:aa:6c:fe:b5:5a:20:5a:70:
         c7:a6:f1:88:e3:d0:b4:d1:80:03:dd:56:58:57:ef:bb:1c:f1:
         84:ce:32:6f:c2:c4:91:cb:c2:f1:bb:f3:1e:0b:a0:1f:61:5c:
         82:02:76:7a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Feb 20 05:00:32 2026 by rpki-client