Certificate

$ rpki-client -vvf rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6EferVwP7UnjOjtiJO_z5OzaQZY.cer
File:                     6EferVwP7UnjOjtiJO_z5OzaQZY.cer (raw, json)
Hash identifier:          Vtc1IvdMocLRrQl380+2DxVt67oqmRZ5T03UjxCly2M=
Subject key identifier:   E8:47:DE:AD:5C:0F:ED:49:E3:3A:3B:62:24:EF:F3:E4:EC:DA:41:96
Authority key identifier: 0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
Certificate issuer:       /CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Certificate serial:       028CEB
Authority info access:    rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
Manifest:                 rsync://rpki.apnic.net/member_repository/A91F2573/A90ED326129A11EB95939F30C4F9AE02/6EferVwP7UnjOjtiJO_z5OzaQZY.mft
caRepository:             rsync://rpki.apnic.net/member_repository/A91F2573/A90ED326129A11EB95939F30C4F9AE02/
Notify URL:               https://rrdp.apnic.net/notification.xml
Certificate not before:   Tue 03 Feb 2026 14:32:45 +0000
Certificate not after:    Sat 01 May 2027 00:00:00 +0000
Subordinate resources:    AS: 56035
                          IP: 110.173.228.0/22
                          IP: 120.88.0.0/23
                          IP: 2406:4200::/32
Validation:               OK
Signature path:           rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 26 Feb 2026 15:55:56 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 167147 (0x28ceb)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A90DC5BE, serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
        Validity
            Not Before: Feb  3 14:32:45 2026 GMT
            Not After : May  1 00:00:00 2027 GMT
        Subject: CN=A91F2573, serialNumber=E847DEAD5C0FED49E33A3B6224EFF3E4ECDA4196
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:98:23:c0:1a:53:df:54:9e:d4:df:29:92:bb:61:
                    bb:38:65:29:12:ce:10:92:ec:68:01:b1:f9:9b:4d:
                    26:7a:bb:71:a5:98:fe:a5:81:bf:45:6c:b5:d2:77:
                    17:9d:ba:57:ca:75:22:41:43:62:a3:7d:6d:2a:16:
                    f2:93:da:f0:58:35:7d:5b:40:b8:04:1d:97:68:03:
                    e3:a9:7e:b3:7e:34:c7:68:4a:65:9a:1c:4b:fb:11:
                    51:d6:20:f2:fa:57:8a:aa:3d:ca:63:69:f8:b7:d7:
                    ca:8e:00:dd:c1:b9:a0:b9:bc:d2:71:c2:3b:f5:c5:
                    4d:ec:26:6e:72:71:5c:6c:4f:ba:79:66:04:23:16:
                    5b:13:6f:47:a6:4c:6f:08:5f:77:11:e6:b6:94:33:
                    1c:d7:cb:07:00:ed:e8:d7:ce:f2:df:32:cc:78:e5:
                    29:5d:1b:e7:e1:b7:22:bc:f7:49:23:35:46:e2:5a:
                    90:ed:0e:cd:7d:f1:41:ab:2b:d0:03:3e:04:ad:1e:
                    e0:b2:5a:ea:15:3d:18:ee:09:b5:1c:37:c1:f3:c9:
                    a4:9a:fb:4e:df:de:1f:ec:d3:71:4d:f2:1c:89:5b:
                    b6:01:1e:1f:02:34:a2:3c:6b:7e:29:b2:59:08:d9:
                    3f:54:51:51:37:6c:71:44:c5:1e:f2:65:78:07:3d:
                    d0:b3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E8:47:DE:AD:5C:0F:ED:49:E3:3A:3B:62:24:EF:F3:E4:EC:DA:41:96
            X509v3 Authority Key Identifier:
                keyid:0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                CA Repository - URI:rsync://rpki.apnic.net/member_repository/A91F2573/A90ED326129A11EB95939F30C4F9AE02/
                RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A91F2573/A90ED326129A11EB95939F30C4F9AE02/6EferVwP7UnjOjtiJO_z5OzaQZY.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  56035

            sbgp-ipAddrBlock: critical
                IPv4:
                  110.173.228.0/22
                  120.88.0.0/23
                IPv6:
                  2406:4200::/32

    Signature Algorithm: sha256WithRSAEncryption
         11:04:2d:b7:32:92:30:f8:e7:ad:94:2e:11:46:4f:d4:62:75:
         88:24:83:60:e0:fe:15:2f:f0:6a:f2:a0:be:a0:6b:99:67:04:
         6c:84:b2:72:f0:f2:16:af:c7:ca:29:6b:4f:fc:9c:22:98:cf:
         94:2e:a5:3e:65:13:56:e5:3d:0d:66:29:fa:96:22:89:d0:a2:
         5a:60:69:6b:fe:f7:59:62:99:bf:04:fb:e2:20:a2:8a:fc:1d:
         3b:18:31:6e:60:b8:4a:ce:33:37:d5:65:2d:13:3d:c7:f1:a1:
         4a:b7:67:28:be:18:c7:26:07:c7:56:38:f4:b0:9e:07:ca:72:
         94:26:c9:a7:c5:f9:13:f1:3c:a9:5a:75:f4:95:6c:6b:29:79:
         34:d5:3f:52:b4:15:40:9f:4d:52:dd:58:e8:60:23:72:2a:4e:
         f9:1a:6d:1e:7d:23:bd:26:86:04:c6:3e:23:13:94:17:7a:75:
         cf:45:a1:6c:f6:89:d5:08:4c:34:48:77:42:ef:19:99:a8:9d:
         58:f4:9a:ea:e7:ff:bb:e8:e9:ef:41:9c:57:66:86:0f:2d:0f:
         e6:a8:93:8d:ba:ec:26:4c:57:cd:09:6e:52:3a:c8:a2:a8:c1:
         20:69:05:90:09:19:dc:ac:33:f8:9e:e4:96:87:92:2d:4c:ad:
         aa:de:9c:33
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 19 18:19:03 2026 by rpki-client