Certificate

$ rpki-client -vvf rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/S9XCMYZ-JzlRVcAceEizsByGBvI.cer
File:                     S9XCMYZ-JzlRVcAceEizsByGBvI.cer (raw, json)
Hash identifier:          7GbUUB0Iw3UwCrVWNLPDEGUtWduYvHq70ctKtUAkIEU=
Subject key identifier:   4B:D5:C2:31:86:7E:27:39:51:55:C0:1C:78:48:B3:B0:1C:86:06:F2
Authority key identifier: 0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
Certificate issuer:       /CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Certificate serial:       028F93
Authority info access:    rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
Manifest:                 rsync://rpki.apnic.net/member_repository/A914BBE1/9E66034C84C511ECA9861564C4F9AE02/S9XCMYZ-JzlRVcAceEizsByGBvI.mft
caRepository:             rsync://rpki.apnic.net/member_repository/A914BBE1/9E66034C84C511ECA9861564C4F9AE02/
Notify URL:               https://rrdp.apnic.net/notification.xml
Certificate not before:   Mon 16 Feb 2026 13:00:06 +0000
Certificate not after:    Sat 01 May 2027 00:00:00 +0000
Subordinate resources:    AS: 149491
                          IP: 103.181.24.0/23
                          IP: 2400:5760::/32
Validation:               OK
Signature path:           rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 26 Feb 2026 12:25:57 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 167827 (0x28f93)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A90DC5BE, serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
        Validity
            Not Before: Feb 16 13:00:06 2026 GMT
            Not After : May  1 00:00:00 2027 GMT
        Subject: CN=A914BBE1, serialNumber=4BD5C231867E27395155C01C7848B3B01C8606F2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9d:b3:c3:13:56:8f:3e:19:b9:4a:e3:85:2f:45:
                    31:c5:13:04:f0:a8:a9:e5:9c:dc:4e:ce:a6:92:0d:
                    5e:e5:23:0c:69:59:7c:1e:ee:bd:d7:7d:87:2d:33:
                    2a:fb:2d:a5:01:b3:60:e0:00:ca:bb:c1:b2:aa:e9:
                    89:b9:2e:c1:de:cc:51:5a:2d:b9:d2:9a:b6:ef:da:
                    21:d4:ad:2c:c4:2a:0a:ac:3b:14:4f:f7:3c:a7:af:
                    9d:23:5c:2c:29:5b:03:d8:01:ee:e1:a0:d8:88:1f:
                    08:d9:fd:e2:32:e1:a1:c4:68:ea:6b:b0:ae:5b:e5:
                    4d:2c:7e:4f:ca:27:20:d3:b9:0f:70:a4:de:d1:13:
                    dd:a7:2f:4f:de:91:7f:e3:51:d1:cf:86:85:92:59:
                    f4:e3:b4:b6:c5:67:09:18:f7:4d:56:31:34:3b:13:
                    73:b4:b2:be:5c:c4:f9:ad:cc:fe:e3:55:e2:c9:72:
                    35:ed:64:9c:9a:c3:f3:de:fe:32:9e:db:e3:b5:d3:
                    f7:78:04:f8:b2:c1:da:01:84:f4:26:c3:4b:7b:01:
                    98:78:4c:2b:88:17:08:30:c4:5b:8c:a6:fb:75:e1:
                    1f:f3:cd:23:54:1e:4f:63:0c:76:ec:30:f0:9d:a7:
                    62:c3:2e:da:48:40:be:73:db:d8:1f:29:cf:b2:51:
                    13:23
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4B:D5:C2:31:86:7E:27:39:51:55:C0:1C:78:48:B3:B0:1C:86:06:F2
            X509v3 Authority Key Identifier:
                keyid:0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                CA Repository - URI:rsync://rpki.apnic.net/member_repository/A914BBE1/9E66034C84C511ECA9861564C4F9AE02/
                RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A914BBE1/9E66034C84C511ECA9861564C4F9AE02/S9XCMYZ-JzlRVcAceEizsByGBvI.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  149491

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.181.24.0/23
                IPv6:
                  2400:5760::/32

    Signature Algorithm: sha256WithRSAEncryption
         8b:8e:d0:b2:ab:6f:49:b6:91:e7:ae:f3:d5:c8:1e:e9:b6:ea:
         30:75:8b:d8:7e:5f:47:4c:13:08:1f:78:25:7c:f9:f9:45:5f:
         37:25:0b:ea:9f:7c:bc:23:04:72:ad:88:53:11:80:6e:59:e2:
         ba:e7:21:19:40:a5:06:f6:3c:d6:ee:06:27:2f:60:59:ae:7f:
         da:4b:64:b6:7d:e5:e4:ca:15:36:7f:18:4a:66:ca:96:e8:29:
         99:f3:d2:ac:16:6d:c0:21:87:3e:90:91:be:3c:42:70:c3:e3:
         f2:79:54:d6:92:52:74:9a:97:5b:da:82:76:3d:21:bd:cc:bb:
         ef:3c:96:2c:79:22:20:36:00:3f:57:47:32:c6:18:2f:d2:84:
         cc:93:1d:c1:a7:fe:b0:99:fc:1c:3b:27:bf:65:4e:1d:13:97:
         fd:96:36:e4:2a:9b:b1:27:fd:b9:72:21:4f:51:2a:b3:0f:64:
         c6:41:2b:27:df:c6:1b:fb:5c:71:bf:d8:1a:a8:20:4d:98:1b:
         13:f6:8a:1d:37:ba:ff:57:16:56:6e:18:1d:22:2d:72:12:b5:
         11:78:61:9b:1a:70:f0:ce:0e:56:2c:a0:a5:83:40:bc:64:8d:
         01:d1:ab:99:7e:60:4a:76:42:e3:48:37:25:c2:a8:e3:70:c3:
         64:24:42:90
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 19 15:10:02 2026 by rpki-client