Certificate

$ rpki-client -vvf rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7R5jxMqFIE7LrSbOLJRiZF4LHK0.cer
File:                     7R5jxMqFIE7LrSbOLJRiZF4LHK0.cer (raw, json)
Hash identifier:          V1gPi+a2qQVfLRWyb1CHIVaS02CirV3bDP99EyrZYjg=
Subject key identifier:   ED:1E:63:C4:CA:85:20:4E:CB:AD:26:CE:2C:94:62:64:5E:0B:1C:AD
Authority key identifier: 0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
Certificate issuer:       /CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Certificate serial:       028C46
Authority info access:    rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
Manifest:                 rsync://rpki.apnic.net/member_repository/A91F8806/39D087AAD69811EEA544B438C4F9AE02/7R5jxMqFIE7LrSbOLJRiZF4LHK0.mft
caRepository:             rsync://rpki.apnic.net/member_repository/A91F8806/39D087AAD69811EEA544B438C4F9AE02/
Notify URL:               https://rrdp.apnic.net/notification.xml
Certificate not before:   Mon 02 Feb 2026 15:07:10 +0000
Certificate not after:    Tue 02 Jun 2026 00:00:00 +0000
Subordinate resources:    AS: 4779
                          AS: 9821
                          AS: 132483
                          AS: 132792 -- 132796
                          AS: 132904
                          AS: 136028
                          IP: 103.80.140.0/22
                          IP: 202.90.128.0/19
                          IP: 203.211.56.0/22
                          IP: 2001:d18::/32
Validation:               OK
Signature path:           rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 26 Feb 2026 15:55:56 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 166982 (0x28c46)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A90DC5BE, serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
        Validity
            Not Before: Feb  2 15:07:10 2026 GMT
            Not After : Jun  2 00:00:00 2026 GMT
        Subject: CN=A91F8806, serialNumber=ED1E63C4CA85204ECBAD26CE2C9462645E0B1CAD
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d7:08:17:e6:e2:fe:85:5d:8d:bc:60:65:b6:b3:
                    99:1f:66:c2:40:6f:1a:a1:09:22:68:d8:7b:49:4e:
                    d8:38:6f:f9:7d:19:a4:da:84:28:30:f8:12:a0:a0:
                    df:3a:bc:26:fe:7d:b7:17:6d:87:ea:69:3d:b1:f9:
                    1d:e6:53:02:78:16:7d:ae:81:33:22:33:03:59:c7:
                    45:d1:13:41:c6:1b:18:a4:b4:b7:f3:97:b9:78:15:
                    0d:42:30:9f:ec:84:e4:3a:89:7a:a8:df:9f:81:0b:
                    75:1c:7c:b7:e0:97:77:44:71:4d:d3:3d:24:60:56:
                    dc:22:1d:08:ca:db:57:f7:15:bb:88:7d:8a:73:d7:
                    ef:43:3b:93:5d:fd:70:90:ac:c7:7b:1a:5d:b5:bb:
                    81:33:87:eb:61:57:10:a4:4e:43:67:26:6e:a1:4d:
                    bf:f8:a3:bf:78:2b:26:9e:bc:20:ba:ad:6a:d1:c8:
                    73:7b:4a:80:02:a1:f0:bb:2e:6f:c9:d8:08:b5:69:
                    f0:94:d3:98:04:75:20:05:f1:eb:ed:9a:97:da:99:
                    82:2f:43:71:ad:1e:54:fd:9e:ce:bf:e9:11:16:38:
                    df:57:ea:04:ce:f8:49:31:4c:47:e8:05:73:cc:b6:
                    28:39:18:7d:de:ca:1b:21:5d:51:5b:46:0a:7b:90:
                    2f:f9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                ED:1E:63:C4:CA:85:20:4E:CB:AD:26:CE:2C:94:62:64:5E:0B:1C:AD
            X509v3 Authority Key Identifier:
                keyid:0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                CA Repository - URI:rsync://rpki.apnic.net/member_repository/A91F8806/39D087AAD69811EEA544B438C4F9AE02/
                RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A91F8806/39D087AAD69811EEA544B438C4F9AE02/7R5jxMqFIE7LrSbOLJRiZF4LHK0.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  4779
                  9821
                  132483
                  132792-132796
                  132904
                  136028

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.80.140.0/22
                  202.90.128.0/19
                  203.211.56.0/22
                IPv6:
                  2001:d18::/32

    Signature Algorithm: sha256WithRSAEncryption
         9c:af:f4:b4:8d:f1:ff:36:1a:74:75:a9:13:1f:fa:e3:32:44:
         5d:57:8d:4b:5e:bc:d8:1d:8c:f4:ea:66:79:39:3b:ca:13:b6:
         a4:d6:a4:d3:d0:78:f7:13:5f:d3:b6:49:de:be:c3:37:67:04:
         d8:f4:f1:33:91:6c:f6:93:60:98:06:8f:e2:bf:9e:b5:76:35:
         73:3a:fa:df:6f:af:98:ab:e6:9d:18:de:a7:ad:04:19:08:c7:
         62:7f:c9:78:97:dc:7d:a3:16:fb:b8:4c:de:b9:bc:bc:29:f5:
         b8:93:fc:8c:c8:52:a8:4d:24:cb:f2:35:a5:47:c3:86:8e:57:
         fe:1c:cc:e0:0d:96:be:72:f3:99:88:26:0b:5d:b4:bd:1e:66:
         50:c5:f9:27:e1:62:e3:e9:ec:2f:f5:fc:d2:13:b3:6d:d8:95:
         7a:96:2f:83:52:9f:02:cc:f6:11:35:78:74:a8:88:5e:23:86:
         eb:47:96:90:d0:17:2d:8e:1f:4f:24:38:e1:e6:12:49:6b:e4:
         91:c8:e5:20:f4:d4:02:01:64:02:91:05:13:67:29:b4:c3:e5:
         41:d6:91:c7:30:8c:63:41:9e:c0:d7:d9:31:95:68:40:49:00:
         5c:e2:86:92:9f:b7:11:38:81:02:9c:be:00:01:67:3d:6d:13:
         5c:83:96:54
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 19 18:16:50 2026 by rpki-client