Certificate

$ rpki-client -vvf rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QRBhvlydJMUpvH1WmJtK0sE40SM.cer
File:                     QRBhvlydJMUpvH1WmJtK0sE40SM.cer (raw, json)
Hash identifier:          r4POFevzY8ig18cX2xdBwPu5IJpmOzV48pGaPwjXaR4=
Subject key identifier:   41:10:61:BE:5C:9D:24:C5:29:BC:7D:56:98:9B:4A:D2:C1:38:D1:23
Authority key identifier: 0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
Certificate issuer:       /CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Certificate serial:       028E5C
Authority info access:    rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
Manifest:                 rsync://rpki.apnic.net/member_repository/A9161A95/947618862BD911F0AB443122C4F9AE02/QRBhvlydJMUpvH1WmJtK0sE40SM.mft
caRepository:             rsync://rpki.apnic.net/member_repository/A9161A95/947618862BD911F0AB443122C4F9AE02/
Notify URL:               https://rrdp.apnic.net/notification.xml
Certificate not before:   Tue 10 Feb 2026 13:09:50 +0000
Certificate not after:    Sat 01 May 2027 00:00:00 +0000
Subordinate resources:    AS: 153548
                          IP: 2001:df4:f4c0::/48
Validation:               OK
Signature path:           rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 26 Feb 2026 14:50:15 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 167516 (0x28e5c)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A90DC5BE, serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
        Validity
            Not Before: Feb 10 13:09:50 2026 GMT
            Not After : May  1 00:00:00 2027 GMT
        Subject: CN=A9161A95, serialNumber=411061BE5C9D24C529BC7D56989B4AD2C138D123
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e9:8a:55:dc:34:87:d2:30:f3:ad:35:76:72:9b:
                    3a:5b:df:79:b0:ce:78:17:bd:41:16:68:c8:25:70:
                    0e:6c:e7:ec:b9:4e:52:43:c6:9a:a7:f0:cc:d7:c9:
                    60:27:50:51:b5:e5:40:a9:62:19:6e:74:54:b4:f3:
                    d7:54:07:b4:79:b8:e8:dc:f0:0e:c2:ab:a5:cf:85:
                    dd:22:16:8a:35:58:fd:1e:2c:56:77:44:e1:4b:77:
                    c8:5b:2c:4e:ab:15:ed:bf:76:d2:06:ef:f9:60:2b:
                    33:b4:b4:7b:e6:46:08:0c:8a:3d:b1:70:cc:19:29:
                    6e:c7:0b:5e:63:64:4e:7d:1c:e0:c1:6e:48:fa:de:
                    1e:1d:3c:47:8f:66:54:e9:9b:53:79:62:2e:d9:56:
                    5a:d4:65:85:92:1f:76:b1:cc:f7:c0:c4:c2:3d:5c:
                    f5:1f:b4:50:53:c5:6f:7b:e0:9d:ec:33:ae:b3:cc:
                    ae:1d:79:7d:f7:d8:79:44:8d:6c:ca:d4:b2:60:cd:
                    2c:6b:67:4d:b6:79:9a:0b:2c:0b:6f:8e:9f:4d:8e:
                    06:ab:98:96:b6:f4:29:21:61:fe:50:67:e8:d6:53:
                    3f:9e:ea:7b:33:ac:2f:b6:92:3d:1e:41:76:61:c1:
                    19:b5:25:8c:79:36:00:97:55:06:71:fe:04:80:29:
                    61:8f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                41:10:61:BE:5C:9D:24:C5:29:BC:7D:56:98:9B:4A:D2:C1:38:D1:23
            X509v3 Authority Key Identifier:
                keyid:0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                CA Repository - URI:rsync://rpki.apnic.net/member_repository/A9161A95/947618862BD911F0AB443122C4F9AE02/
                RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A9161A95/947618862BD911F0AB443122C4F9AE02/QRBhvlydJMUpvH1WmJtK0sE40SM.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  153548

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:df4:f4c0::/48

    Signature Algorithm: sha256WithRSAEncryption
         c5:cb:e7:cd:d2:ee:97:d3:f8:1e:4e:cf:53:c6:b9:d2:68:b8:
         96:9f:9e:86:9e:ff:79:e0:1e:6c:42:95:7f:08:24:f2:5d:ee:
         4b:fc:a9:9d:7e:8c:39:62:9e:e0:17:0f:7d:74:b9:3c:c9:05:
         0e:c9:50:34:15:1d:b0:2f:f3:4d:03:96:71:b4:4d:71:14:25:
         08:de:2b:c2:92:9f:a4:bf:b7:63:7c:d5:30:c2:c3:cd:9a:66:
         01:7b:16:41:a5:b2:4d:39:80:7b:0a:e8:1d:e3:c8:c2:55:64:
         80:6f:e9:57:86:fe:73:87:37:be:48:8d:95:c9:33:86:2d:0e:
         75:19:f7:b8:02:2c:41:40:82:89:3b:8d:37:a5:98:f0:1c:db:
         c6:1a:0e:02:dd:8e:b5:e7:fe:fa:a8:3e:bc:01:f8:5e:1d:43:
         60:c4:21:15:54:1e:87:85:2d:33:8d:fd:11:ea:2d:02:71:40:
         fb:0e:76:a6:b5:89:e0:34:2b:73:82:3a:d5:a1:15:5e:d9:bf:
         e4:b3:44:58:74:09:01:0e:97:aa:ec:b4:d9:da:27:c9:28:c1:
         cc:77:55:a5:0f:71:d4:62:86:47:34:17:2c:6e:a5:e4:fb:9d:
         55:90:f0:b1:5e:b1:2c:3a:d0:34:39:95:1c:d7:1d:c1:07:56:
         3d:fc:3a:ac
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 19 16:39:17 2026 by rpki-client