Certificate

$ rpki-client -vvf rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1ppgVl8zchSc5uL8nnI9SQZ2doo.cer
File:                     1ppgVl8zchSc5uL8nnI9SQZ2doo.cer (raw, json)
Hash identifier:          P+m1k91y4MuWyHq2sjpntrdGIOT1+KCwYe8UK1apHVo=
Subject key identifier:   D6:9A:60:56:5F:33:72:14:9C:E6:E2:FC:9E:72:3D:49:06:76:76:8A
Authority key identifier: 0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
Certificate issuer:       /CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Certificate serial:       028FD0
Authority info access:    rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
Manifest:                 rsync://rpki.apnic.net/member_repository/A9185F7D/69753F581D9C11E2A6FBF08A08B02CD2/1ppgVl8zchSc5uL8nnI9SQZ2doo.mft
caRepository:             rsync://rpki.apnic.net/member_repository/A9185F7D/69753F581D9C11E2A6FBF08A08B02CD2/
Notify URL:               https://rrdp.apnic.net/notification.xml
Certificate not before:   Tue 17 Feb 2026 13:28:21 +0000
Certificate not after:    Sat 01 May 2027 00:00:00 +0000
Subordinate resources:    AS: 45537
                          IP: 202.58.126.0/24
                          IP: 2001:df6:9a00::/48
Validation:               OK
Signature path:           rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 26 Feb 2026 15:55:56 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 167888 (0x28fd0)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A90DC5BE, serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
        Validity
            Not Before: Feb 17 13:28:21 2026 GMT
            Not After : May  1 00:00:00 2027 GMT
        Subject: CN=A9185F7D, serialNumber=D69A60565F3372149CE6E2FC9E723D490676768A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d1:38:db:4c:3d:f2:70:3c:81:f4:d9:f7:42:5b:
                    1a:ae:ac:c6:bb:2e:d8:0d:0a:c9:ef:ea:6c:06:df:
                    c2:5b:ad:17:d3:2a:2f:6c:74:3c:75:08:5b:0f:cb:
                    12:22:98:95:12:b6:b1:14:6a:36:df:e6:18:78:ff:
                    ae:77:ac:71:84:ae:69:d0:16:19:7f:bc:e7:e6:8a:
                    4c:31:8d:4d:66:82:3e:c5:c0:bd:17:2e:cc:15:fe:
                    b4:8c:c6:4e:23:69:65:38:e7:02:e7:da:a1:23:0a:
                    e6:a4:af:fa:38:ad:84:dd:16:bd:c2:ef:fa:be:ad:
                    ab:3c:c7:00:1d:22:eb:c2:25:77:60:b0:be:0e:42:
                    97:21:4d:42:40:67:e2:a8:31:63:59:17:70:71:71:
                    89:3c:35:e5:7c:90:c4:de:c9:65:09:62:c7:bf:83:
                    fa:1d:9b:53:ec:3a:a9:ef:44:1f:41:5d:3f:b6:01:
                    44:40:b4:71:a3:9f:cb:d8:60:2c:cb:c1:b8:3e:64:
                    02:ec:46:ab:ae:1e:f8:47:3b:6b:2b:0c:80:e1:6f:
                    f6:ca:82:6f:b5:ec:8d:72:22:5e:b8:3b:8c:cb:29:
                    84:24:4b:97:dd:c6:32:59:54:04:d6:6e:41:63:94:
                    51:ee:a3:9b:f3:a2:75:28:b9:50:9f:13:fd:d6:aa:
                    72:f5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D6:9A:60:56:5F:33:72:14:9C:E6:E2:FC:9E:72:3D:49:06:76:76:8A
            X509v3 Authority Key Identifier:
                keyid:0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                CA Repository - URI:rsync://rpki.apnic.net/member_repository/A9185F7D/69753F581D9C11E2A6FBF08A08B02CD2/
                RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A9185F7D/69753F581D9C11E2A6FBF08A08B02CD2/1ppgVl8zchSc5uL8nnI9SQZ2doo.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  45537

            sbgp-ipAddrBlock: critical
                IPv4:
                  202.58.126.0/24
                IPv6:
                  2001:df6:9a00::/48

    Signature Algorithm: sha256WithRSAEncryption
         50:18:96:bd:40:55:d7:21:90:d1:a8:a4:c2:a8:7a:2a:97:c2:
         e7:92:0c:be:0a:42:5a:d9:6d:fe:6d:8c:25:c4:ef:7e:03:f5:
         57:4e:4c:de:21:21:d6:7f:1d:75:ea:51:5d:a0:78:be:ac:23:
         ec:7d:0e:3b:96:18:63:e1:5d:b7:44:aa:97:95:f6:e9:ca:fe:
         6b:80:50:20:3d:af:c6:00:c6:5c:25:0a:f3:8d:21:1a:f5:f5:
         35:04:11:1f:4d:b1:1f:46:91:31:10:97:3c:73:21:24:d4:cb:
         c6:2f:23:3a:0a:38:ff:c4:2e:87:5f:31:ef:43:78:ad:8e:3f:
         0e:b2:7a:f6:01:07:65:f3:b3:70:82:03:3e:53:ed:66:53:e9:
         04:3b:20:e2:11:f7:7f:39:fc:69:0d:03:d1:41:93:39:a0:d3:
         d6:32:9c:97:05:6a:21:9c:4d:59:38:f8:26:1c:49:21:65:2a:
         00:f1:18:8b:cf:5d:43:b7:9d:ca:6e:81:91:8a:12:26:f2:c3:
         01:ab:be:9a:ff:e5:58:c4:b8:17:ae:5b:79:7d:d9:70:51:5e:
         50:80:95:a2:48:1b:f7:fd:48:c3:1b:6a:ef:7e:0c:6b:75:96:
         9f:67:5a:a1:72:27:f2:65:63:e1:b8:68:a7:ed:24:88:32:9e:
         cd:76:aa:ae
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Thu Feb 19 19:57:51 2026 by rpki-client