Certificate

$ rpki-client -vvf rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GaBDgZn9_iTc-FZipIvbV1Hhtdk.cer
File:                     GaBDgZn9_iTc-FZipIvbV1Hhtdk.cer (raw, json)
Hash identifier:          u+EENNSdZtVArkBFSlwEP7b9540Pr66HSJ008+gsQgg=
Subject key identifier:   19:A0:43:81:99:FD:FE:24:DC:F8:56:62:A4:8B:DB:57:51:E1:B5:D9
Authority key identifier: 0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
Certificate issuer:       /CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Certificate serial:       028E1A
Authority info access:    rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
Manifest:                 rsync://rpki.apnic.net/member_repository/A918842E/6199BD545DEE11F08FAA2B6DC4F9AE02/GaBDgZn9_iTc-FZipIvbV1Hhtdk.mft
caRepository:             rsync://rpki.apnic.net/member_repository/A918842E/6199BD545DEE11F08FAA2B6DC4F9AE02/
Notify URL:               https://rrdp.apnic.net/notification.xml
Certificate not before:   Mon 09 Feb 2026 06:58:57 +0000
Certificate not after:    Sat 01 May 2027 00:00:00 +0000
Subordinate resources:    AS: 138477
                          IP: 103.108.186.0/24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 26 Feb 2026 13:09:13 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 167450 (0x28e1a)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A90DC5BE, serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
        Validity
            Not Before: Feb  9 06:58:57 2026 GMT
            Not After : May  1 00:00:00 2027 GMT
        Subject: CN=A918842E, serialNumber=19A0438199FDFE24DCF85662A48BDB5751E1B5D9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:89:c2:eb:d9:a0:27:5f:c2:23:02:6c:7a:a3:
                    3f:ba:c2:cd:4e:c0:63:22:54:f5:c7:35:a4:4c:b6:
                    86:f8:6b:aa:28:14:40:63:4c:35:7b:f9:92:4c:81:
                    19:4f:ea:f8:3f:f6:10:98:ca:66:3b:58:97:53:a8:
                    21:9e:60:e5:a5:25:f2:5d:c9:8a:2f:13:0a:14:e0:
                    68:ae:6c:70:5b:69:17:e4:fc:c6:18:43:56:2d:c4:
                    74:65:a4:81:ae:70:7b:14:ab:de:bc:00:de:e2:fd:
                    d6:34:00:f5:a2:fa:5f:fb:92:67:61:c8:c0:bc:95:
                    40:a2:cf:f4:63:02:4d:48:9f:37:c1:15:f6:a7:04:
                    af:6b:a1:e3:ff:7d:58:5b:1f:68:a6:1f:de:6c:bb:
                    26:3c:c4:9d:c2:33:c7:3f:f8:14:56:6c:2a:d4:4e:
                    38:69:71:dc:14:a2:9c:11:18:0c:5f:34:e8:9c:9a:
                    c0:a0:c6:7f:e2:ca:6a:db:2f:54:7a:ef:4f:04:10:
                    91:79:c3:c0:5a:95:0a:46:09:e4:5c:1f:32:18:6d:
                    ef:3b:15:72:41:b7:c4:56:44:40:e6:ec:52:bc:fc:
                    08:dd:d5:9d:c4:d7:3a:28:db:e1:91:8f:12:ea:49:
                    aa:83:2f:d3:73:b9:76:35:43:02:5c:94:56:26:ea:
                    50:69
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                19:A0:43:81:99:FD:FE:24:DC:F8:56:62:A4:8B:DB:57:51:E1:B5:D9
            X509v3 Authority Key Identifier:
                keyid:0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                CA Repository - URI:rsync://rpki.apnic.net/member_repository/A918842E/6199BD545DEE11F08FAA2B6DC4F9AE02/
                RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A918842E/6199BD545DEE11F08FAA2B6DC4F9AE02/GaBDgZn9_iTc-FZipIvbV1Hhtdk.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  138477

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.108.186.0/24

    Signature Algorithm: sha256WithRSAEncryption
         9d:9d:6c:b7:6b:64:c6:eb:4a:71:fa:cd:bd:a5:92:6c:a2:0d:
         6f:f0:8d:9f:fd:c8:49:35:8c:3a:51:35:61:c5:3d:18:76:52:
         0f:92:de:d5:94:48:f1:91:1d:fe:87:b8:17:bd:58:39:c3:23:
         5d:0a:96:41:7c:29:84:08:dc:11:36:26:3a:12:11:21:15:9f:
         da:b5:a3:fe:43:d0:19:96:f2:70:10:be:87:98:a6:d1:2f:d3:
         06:1e:c8:91:50:64:56:a3:f9:2f:d2:4b:de:1e:d5:c8:e7:6a:
         b9:f9:3a:37:e9:6a:3c:f9:f6:63:3f:c3:cf:8b:6f:13:54:76:
         23:c1:33:55:96:ba:81:08:bd:d0:57:2d:f4:2d:f6:43:c2:f1:
         dc:48:2f:8e:75:f2:bf:8a:87:71:d6:7a:5a:6d:83:c0:0c:33:
         07:96:9a:7b:f5:00:51:84:21:66:f6:c8:fb:9c:92:e2:dc:ed:
         44:a4:4a:81:01:4e:e0:fe:4d:82:46:18:ee:83:83:c9:13:30:
         23:d7:4d:92:84:60:73:8e:d1:5d:a3:a2:78:c9:27:e6:a1:93:
         8a:fd:41:6e:6e:0c:77:b4:77:37:2e:ba:63:f8:80:d5:6b:3c:
         8d:19:31:45:c5:ae:cd:ff:32:e0:75:32:82:b8:72:14:a2:90:
         ef:83:3b:d1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 19 15:05:51 2026 by rpki-client