Certificate

$ rpki-client -vvf rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PnrrKf5aoynEr0n-NgOYf_HoWJg.cer
File:                     PnrrKf5aoynEr0n-NgOYf_HoWJg.cer (raw, json)
Hash identifier:          NtolLintBqgRjLzEoSLXean3Cpf59iXeLfEZP3uTRjk=
Subject key identifier:   3E:7A:EB:29:FE:5A:A3:29:C4:AF:49:FE:36:03:98:7F:F1:E8:58:98
Authority key identifier: 0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
Certificate issuer:       /CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Certificate serial:       028E52
Authority info access:    rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
Manifest:                 rsync://rpki.apnic.net/member_repository/A912465F/5560CDAA064711F1B4BAFBC52D3D8C67/PnrrKf5aoynEr0n-NgOYf_HoWJg.mft
caRepository:             rsync://rpki.apnic.net/member_repository/A912465F/5560CDAA064711F1B4BAFBC52D3D8C67/
Notify URL:               https://rrdp.apnic.net/notification.xml
Certificate not before:   Tue 10 Feb 2026 06:11:31 +0000
Certificate not after:    Sat 01 May 2027 00:00:00 +0000
Subordinate resources:    AS: 154489
                          IP: 2001:df6:b0c0::/48
Validation:               OK
Signature path:           rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 26 Feb 2026 10:47:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 167506 (0x28e52)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A90DC5BE, serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
        Validity
            Not Before: Feb 10 06:11:31 2026 GMT
            Not After : May  1 00:00:00 2027 GMT
        Subject: CN=A912465F, serialNumber=3E7AEB29FE5AA329C4AF49FE3603987FF1E85898
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:db:a3:bb:fa:53:e4:8b:42:5c:43:59:2c:d4:
                    95:7a:1a:ee:d0:7b:18:04:a5:90:b0:c1:09:c2:51:
                    e1:a7:e7:5f:1a:4b:f1:67:a7:b5:20:26:ee:fc:52:
                    d0:40:96:e0:de:5b:b8:d6:79:d7:f2:4f:f8:fa:31:
                    95:e4:3a:df:74:88:3d:05:da:a5:15:c7:a0:33:ab:
                    45:a1:b3:54:4e:da:e9:c4:1f:1f:fa:75:d8:bc:ac:
                    b2:6b:79:59:fb:d0:c1:e5:bb:ed:3f:6d:c5:a6:77:
                    8c:fe:ea:df:35:9e:e9:b8:ab:22:bf:72:a7:a7:98:
                    bb:20:17:5b:36:23:65:fc:19:de:58:5d:a4:eb:c9:
                    81:55:64:be:29:6c:ca:90:1d:57:f8:01:f5:07:7d:
                    56:4c:11:2e:c3:e3:a5:50:e6:f0:53:5e:ca:6d:92:
                    1d:02:e9:ef:64:27:6a:b4:23:c2:ca:c8:1a:05:65:
                    f2:be:4e:ce:74:4e:8b:72:a2:4e:28:a0:b3:e2:ea:
                    b3:f5:b4:b9:98:87:9e:2b:72:be:2d:df:b2:c6:31:
                    db:69:3f:32:b1:57:56:64:33:5d:8a:41:2f:bc:82:
                    66:0c:ab:ff:f9:72:0a:f0:5e:67:a8:4b:73:78:62:
                    d7:79:1f:63:4e:56:29:88:d8:78:da:60:8d:d2:56:
                    08:2b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3E:7A:EB:29:FE:5A:A3:29:C4:AF:49:FE:36:03:98:7F:F1:E8:58:98
            X509v3 Authority Key Identifier:
                keyid:0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                CA Repository - URI:rsync://rpki.apnic.net/member_repository/A912465F/5560CDAA064711F1B4BAFBC52D3D8C67/
                RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A912465F/5560CDAA064711F1B4BAFBC52D3D8C67/PnrrKf5aoynEr0n-NgOYf_HoWJg.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  154489

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:df6:b0c0::/48

    Signature Algorithm: sha256WithRSAEncryption
         87:c5:d5:e8:19:74:8f:ec:a1:45:12:ca:c4:4d:18:3d:54:c9:
         2b:d1:73:c8:30:86:00:e8:7c:3e:0e:e7:95:e8:e3:42:2b:e8:
         3d:24:06:40:c9:e2:86:57:01:44:c1:ed:ad:3b:9f:09:45:50:
         b0:aa:62:df:42:06:17:dd:bc:77:5e:6c:c3:6a:5b:ad:48:8c:
         bb:30:00:c0:a5:86:f5:ea:7c:57:6d:54:48:d1:60:bb:3d:2f:
         8d:90:16:40:2b:17:30:83:0a:51:da:21:6d:12:2b:a9:14:8e:
         e7:06:c4:68:b7:ea:64:4d:ab:ff:f8:61:92:3b:59:19:53:78:
         ea:52:22:0e:cf:d2:80:95:4b:f3:ec:d6:1c:46:a5:86:9c:fe:
         b9:ff:ae:02:b7:d3:9d:91:97:21:3f:2d:ed:9d:44:7a:58:82:
         b8:b5:b8:4b:96:b3:3b:0b:f8:a8:c4:b8:07:18:d3:07:f1:36:
         a2:c9:fb:9f:4e:b8:04:ce:05:8d:5a:66:44:29:70:a2:f1:a1:
         0f:a9:61:2b:b9:92:d9:00:43:f7:75:ac:ec:a6:2b:3b:51:e3:
         d4:d5:51:c3:f1:4b:2c:58:94:b4:7d:a2:e9:a2:5c:c0:fa:4a:
         86:21:34:ea:ec:0d:e5:86:a9:9f:0f:7a:d0:b1:e6:45:f3:56:
         6a:8b:11:42
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 19 13:28:55 2026 by rpki-client