Certificate

$ rpki-client -vvf rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/AEu7wBxXH6cPIOpEBQBX2dyeutI.cer
File:                     AEu7wBxXH6cPIOpEBQBX2dyeutI.cer (raw, json)
Hash identifier:          sIFq4bUqD/yOrqY0WlO4QhCQI8WmcvfpOQcJg0ZOZAE=
Subject key identifier:   00:4B:BB:C0:1C:57:1F:A7:0F:20:EA:44:05:00:57:D9:DC:9E:BA:D2
Authority key identifier: 0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
Certificate issuer:       /CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Certificate serial:       028DD7
Authority info access:    rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
Manifest:                 rsync://rpki.apnic.net/member_repository/A91326B3/CE9F16FEE69111EEBF058932C4F9AE02/AEu7wBxXH6cPIOpEBQBX2dyeutI.mft
caRepository:             rsync://rpki.apnic.net/member_repository/A91326B3/CE9F16FEE69111EEBF058932C4F9AE02/
Notify URL:               https://rrdp.apnic.net/notification.xml
Certificate not before:   Sat 07 Feb 2026 03:54:05 +0000
Certificate not after:    Sat 01 May 2027 00:00:00 +0000
Subordinate resources:    AS: 152458
                          IP: 2001:df3:7140::/48
Validation:               OK
Signature path:           rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 26 Feb 2026 12:25:57 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 167383 (0x28dd7)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A90DC5BE, serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
        Validity
            Not Before: Feb  7 03:54:05 2026 GMT
            Not After : May  1 00:00:00 2027 GMT
        Subject: CN=A91326B3, serialNumber=004BBBC01C571FA70F20EA44050057D9DC9EBAD2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:85:ba:2b:80:e1:8e:7e:93:30:a6:7f:4f:4e:
                    d9:e8:60:63:9c:a6:f7:55:22:d9:17:ae:e5:28:16:
                    0a:06:8c:f9:7f:e9:42:02:68:12:77:55:60:4b:82:
                    a5:cc:40:53:85:2f:37:19:a8:b2:6f:cd:ec:45:7c:
                    bf:51:e2:d3:a9:50:3b:2b:2c:aa:69:37:d8:08:94:
                    63:6e:85:5f:73:0c:6d:9d:43:26:f8:53:5e:2c:c4:
                    a1:a9:4a:9a:53:ab:87:8d:62:da:69:8d:e9:36:25:
                    b0:34:d3:54:57:e6:7e:78:40:f5:34:c6:7d:19:3b:
                    c1:b4:08:76:e3:19:85:9a:55:7a:cf:9a:18:72:5e:
                    21:8b:fe:c2:f5:05:07:4b:43:44:55:99:0c:f4:a4:
                    4a:f2:9f:19:16:71:e6:7a:85:2e:e6:5d:24:d9:2d:
                    49:de:8d:12:8d:63:90:e4:32:6d:10:e3:e3:45:1a:
                    48:a7:5d:9e:25:27:0b:45:f8:a5:b7:4f:11:61:3e:
                    d7:e4:e3:4b:bb:e3:66:ff:56:52:e6:3c:0f:0b:27:
                    0e:71:53:6b:ac:83:06:95:d5:56:be:58:65:97:50:
                    5b:48:d4:9a:7a:ee:4a:d5:3e:9a:f4:0f:ba:24:4c:
                    47:55:e2:46:ad:fd:ae:bd:af:49:53:d4:7c:f3:df:
                    db:5b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                00:4B:BB:C0:1C:57:1F:A7:0F:20:EA:44:05:00:57:D9:DC:9E:BA:D2
            X509v3 Authority Key Identifier:
                keyid:0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                CA Repository - URI:rsync://rpki.apnic.net/member_repository/A91326B3/CE9F16FEE69111EEBF058932C4F9AE02/
                RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A91326B3/CE9F16FEE69111EEBF058932C4F9AE02/AEu7wBxXH6cPIOpEBQBX2dyeutI.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  152458

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:df3:7140::/48

    Signature Algorithm: sha256WithRSAEncryption
         34:60:c3:bc:40:ad:35:4a:b5:2c:5c:26:27:28:52:7b:0b:ac:
         2d:44:c1:ef:c5:68:25:cf:fa:a8:56:a9:b1:d0:12:5f:07:9c:
         b7:c7:e4:57:06:6e:95:ff:7f:cb:47:6b:af:a2:35:68:60:70:
         9c:e9:7c:96:83:61:87:32:0b:3b:40:4e:fb:db:9c:d6:93:96:
         e1:ad:93:92:22:00:61:e5:0c:a6:34:0c:07:2c:0d:45:eb:e0:
         c9:59:64:e0:63:ab:ce:07:30:a6:b7:a1:d4:83:59:c6:f9:84:
         ee:3d:f7:82:ae:5a:58:62:b4:e3:b2:c3:e0:d7:ba:35:7a:12:
         44:5a:6c:7a:66:6f:41:23:9c:ad:ff:38:35:11:05:7f:58:23:
         b0:54:4d:56:1b:76:b0:28:d5:39:42:67:04:3e:28:90:6c:fa:
         49:9c:cc:98:e6:65:92:af:85:1f:ab:89:dd:97:24:03:0c:42:
         40:e2:c5:fe:31:39:7e:c5:b7:e3:3b:da:a5:ae:37:0b:4d:ff:
         75:67:99:ed:3a:80:87:6f:3f:50:83:3e:66:d3:d1:50:9d:6f:
         01:d3:5e:ae:e3:1b:97:30:2e:4e:56:ca:8d:e5:69:82:a4:a0:
         8e:28:91:5e:1c:d1:81:cb:b1:76:9c:ea:c3:b2:33:ea:85:fe:
         13:be:23:0c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 19 15:06:06 2026 by rpki-client