Certificate

$ rpki-client -vvf rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/P9f1Vfx9b8I1OaOmIe8tBI1MfMc.cer
File:                     P9f1Vfx9b8I1OaOmIe8tBI1MfMc.cer (raw, json)
Hash identifier:          db97dWMOCCfBjVjSUuV5iP3Blez1J9NSMiebNx5b0V4=
Subject key identifier:   3F:D7:F5:55:FC:7D:6F:C2:35:39:A3:A6:21:EF:2D:04:8D:4C:7C:C7
Authority key identifier: 0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
Certificate issuer:       /CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Certificate serial:       028EF7
Authority info access:    rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
Manifest:                 rsync://rpki.apnic.net/member_repository/A91C4A80/29EC73BAE4EF11EFB714E56CC4F9AE02/P9f1Vfx9b8I1OaOmIe8tBI1MfMc.mft
caRepository:             rsync://rpki.apnic.net/member_repository/A91C4A80/29EC73BAE4EF11EFB714E56CC4F9AE02/
Notify URL:               https://rrdp.apnic.net/notification.xml
Certificate not before:   Thu 12 Feb 2026 14:05:23 +0000
Certificate not after:    Sat 01 May 2027 00:00:00 +0000
Subordinate resources:    AS: 133940
                          IP: 103.49.19.0/24
                          IP: 2001:df6:4100::/48
Validation:               OK
Signature path:           rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 26 Feb 2026 15:55:56 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 167671 (0x28ef7)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A90DC5BE, serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
        Validity
            Not Before: Feb 12 14:05:23 2026 GMT
            Not After : May  1 00:00:00 2027 GMT
        Subject: CN=A91C4A80, serialNumber=3FD7F555FC7D6FC23539A3A621EF2D048D4C7CC7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:cf:10:c1:3f:20:75:4b:e2:b2:ab:81:84:64:
                    28:17:ae:d0:62:cd:bb:0b:25:86:61:e2:1a:66:7f:
                    40:87:65:cd:e5:0b:8b:89:c3:04:dd:af:5d:ca:6a:
                    66:92:b3:53:e5:53:fb:4a:77:f7:45:1f:b2:fb:66:
                    59:46:d9:73:2b:b8:0f:c4:ba:67:58:99:93:8e:8f:
                    c7:17:80:6b:7e:b4:15:b6:99:66:09:e3:fb:72:d1:
                    83:7f:a7:f7:8e:52:44:22:57:e1:0c:7b:89:cb:aa:
                    61:2b:3e:ce:fc:00:f7:04:a7:c6:4c:3c:ac:71:91:
                    79:1d:d7:7e:d0:84:de:5a:4b:b9:4d:9c:90:26:be:
                    dd:52:51:cf:a4:dc:cf:37:34:c5:29:19:e4:74:19:
                    27:17:b9:59:05:d1:b2:5c:73:a5:e0:92:7e:64:f1:
                    fa:ac:fb:1b:9f:43:e6:22:42:cc:5b:1d:45:82:12:
                    71:ad:18:45:6a:97:29:91:09:de:2e:0f:8b:48:a2:
                    31:1e:5b:89:70:59:e5:1b:67:d9:7b:7d:04:c1:ff:
                    1a:84:50:ef:25:03:f8:d1:b6:a4:4d:63:ed:3d:5b:
                    2d:cb:8e:e4:90:44:65:4f:3e:38:da:07:80:42:3e:
                    49:0f:71:0b:a3:91:96:dc:76:a6:5d:6b:c3:5a:2b:
                    1a:43
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3F:D7:F5:55:FC:7D:6F:C2:35:39:A3:A6:21:EF:2D:04:8D:4C:7C:C7
            X509v3 Authority Key Identifier:
                keyid:0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                CA Repository - URI:rsync://rpki.apnic.net/member_repository/A91C4A80/29EC73BAE4EF11EFB714E56CC4F9AE02/
                RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A91C4A80/29EC73BAE4EF11EFB714E56CC4F9AE02/P9f1Vfx9b8I1OaOmIe8tBI1MfMc.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  133940

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.49.19.0/24
                IPv6:
                  2001:df6:4100::/48

    Signature Algorithm: sha256WithRSAEncryption
         25:9c:ea:72:75:49:3a:9d:fe:c1:0d:e1:80:1f:fb:cf:69:17:
         a7:8f:a7:bd:e8:d0:d1:d4:37:b5:ff:76:0f:d6:50:81:c2:b7:
         8b:12:19:47:61:e4:76:18:b9:90:7b:99:a3:b3:c6:57:ab:ae:
         c6:35:c1:43:6a:6f:e1:2b:fc:de:d6:96:fd:f1:70:58:c6:e5:
         fe:c4:c1:b8:a8:f4:7f:7f:e4:00:ed:10:69:53:f6:a1:8c:78:
         3f:d4:70:13:38:73:62:00:ff:fd:0e:73:89:ac:f3:2d:cc:7c:
         9a:f0:1f:2a:a5:0a:00:7f:de:24:73:37:7d:3b:cd:45:90:a0:
         3a:b1:ed:35:db:e9:d3:12:06:a0:f5:44:a5:87:32:e3:59:f1:
         e7:04:b8:47:66:30:0e:ca:f6:d8:da:7d:51:21:18:b3:ee:b0:
         45:dd:bc:55:c8:01:fa:92:4a:37:f8:4d:46:08:8b:cf:03:e2:
         70:ad:d5:51:0d:21:d3:7d:2e:e8:40:8d:14:bb:54:dc:f0:a6:
         07:1e:3d:93:9e:7c:d6:2d:5a:03:18:e4:be:e1:fe:2c:fb:09:
         09:4e:23:74:49:1a:fa:0f:28:e2:1a:73:24:f2:d3:19:c7:a7:
         ee:05:59:8b:06:89:42:c5:34:5f:b3:0b:33:cc:dc:25:52:b1:
         05:44:b9:25
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Thu Feb 19 18:16:12 2026 by rpki-client