Certificate

$ rpki-client -vvf rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/T1r1ZdMN1U8kFH714XiqC6oz_Ck.cer
File:                     T1r1ZdMN1U8kFH714XiqC6oz_Ck.cer (raw, json)
Hash identifier:          BJpZ8A7xu8IuDElT/6R2wT1VdEIldjmKu1G3O5FtGzA=
Subject key identifier:   4F:5A:F5:65:D3:0D:D5:4F:24:14:7E:F5:E1:78:AA:0B:AA:33:FC:29
Authority key identifier: 0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
Certificate issuer:       /CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Certificate serial:       028695
Authority info access:    rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
Manifest:                 rsync://rpki.apnic.net/member_repository/A91BB883/E982BA3610E711EA9D21C26FC4F9AE02/T1r1ZdMN1U8kFH714XiqC6oz_Ck.mft
caRepository:             rsync://rpki.apnic.net/member_repository/A91BB883/E982BA3610E711EA9D21C26FC4F9AE02/
Notify URL:               https://rrdp.apnic.net/notification.xml
Certificate not before:   Thu 15 Jan 2026 14:01:30 +0000
Certificate not after:    Tue 02 Mar 2027 00:00:00 +0000
Subordinate resources:    AS: 136009
                          IP: 103.79.182.0/23
                          IP: 103.122.90.0/23
                          IP: 2001:df6:d600::/48
Validation:               OK
Signature path:           rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 26 Feb 2026 12:25:57 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 165525 (0x28695)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A90DC5BE, serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
        Validity
            Not Before: Jan 15 14:01:30 2026 GMT
            Not After : Mar  2 00:00:00 2027 GMT
        Subject: CN=A91BB883, serialNumber=4F5AF565D30DD54F24147EF5E178AA0BAA33FC29
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:4c:a9:9d:7c:0e:37:a7:3e:64:12:8e:a5:2f:
                    29:02:91:33:28:ee:2b:ac:d4:00:67:8c:38:73:5f:
                    ff:7e:eb:f6:e7:fe:c0:f7:f8:3a:b5:7a:3e:7c:c8:
                    3c:86:33:c2:2d:5c:02:24:15:14:fc:bc:2e:44:a4:
                    14:94:0a:3d:ad:78:90:4a:42:73:1e:a2:f8:69:1c:
                    1d:e5:f1:f6:30:26:5f:7b:f3:a7:ec:81:3e:df:aa:
                    a0:db:fb:ae:0e:e6:ad:9c:46:68:60:a9:7a:c5:f7:
                    8a:ec:a7:bb:a0:29:30:c1:be:d2:75:2f:10:a1:41:
                    78:87:98:96:44:05:ee:b6:14:20:44:95:d1:1e:af:
                    1b:cf:14:e7:f0:8e:1a:05:2d:e5:c0:3c:0c:05:27:
                    29:9c:f1:32:f6:81:3e:b7:c0:00:0d:44:db:fa:e4:
                    de:ae:14:48:4c:91:51:c4:f9:47:e9:d7:28:ed:c9:
                    fe:f3:4b:3e:5b:9c:eb:19:09:ff:4f:15:c3:8f:a9:
                    ac:d1:59:02:db:2b:4b:01:e4:04:1f:5b:3e:bc:69:
                    8c:aa:de:8f:09:23:1a:76:4c:72:0a:ac:45:68:fc:
                    10:d4:f5:9c:98:4f:ab:49:c6:31:83:13:33:aa:45:
                    57:9a:c4:71:08:a2:f9:e6:5c:41:40:98:e5:68:fa:
                    3f:9b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4F:5A:F5:65:D3:0D:D5:4F:24:14:7E:F5:E1:78:AA:0B:AA:33:FC:29
            X509v3 Authority Key Identifier:
                keyid:0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                CA Repository - URI:rsync://rpki.apnic.net/member_repository/A91BB883/E982BA3610E711EA9D21C26FC4F9AE02/
                RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A91BB883/E982BA3610E711EA9D21C26FC4F9AE02/T1r1ZdMN1U8kFH714XiqC6oz_Ck.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  136009

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.79.182.0/23
                  103.122.90.0/23
                IPv6:
                  2001:df6:d600::/48

    Signature Algorithm: sha256WithRSAEncryption
         08:f0:8f:e0:57:5f:70:29:12:eb:e4:e6:6d:84:72:ac:6a:0a:
         c5:cc:57:3f:be:29:b0:c1:22:3f:1d:95:20:99:cf:5d:84:8e:
         2f:fa:c6:3e:e1:3d:2e:d1:a9:fe:2b:fe:5e:1b:91:21:5c:6f:
         f4:9e:bb:c4:04:a8:04:ae:2c:51:d4:79:0f:4a:1d:f8:13:70:
         4f:9d:c0:3e:be:9f:f1:aa:00:e7:0a:bf:91:e3:21:0b:c8:59:
         9b:f8:13:0f:b6:4e:a2:b8:71:7d:e8:36:6c:57:4b:e3:6b:fe:
         37:c6:35:17:78:9d:cc:29:24:b5:c8:39:f3:59:91:50:5a:52:
         a9:f3:eb:cd:4a:be:23:0e:44:d5:c9:08:2a:7d:b1:86:78:93:
         31:94:4b:06:a8:1b:9e:1f:68:41:07:01:97:50:75:31:b1:d3:
         c2:f6:df:eb:4e:71:50:c3:89:16:4d:5e:91:78:0f:2a:73:11:
         68:46:4f:6b:ff:43:42:06:3c:75:c9:5b:fd:0c:05:ed:6d:20:
         23:bc:8d:fa:4d:2b:7d:84:0a:1e:37:f3:15:29:35:c3:c6:49:
         20:d0:f8:d2:77:21:33:d8:b0:5a:0f:d4:f8:a9:e6:a0:57:4b:
         ae:25:24:fa:5f:b5:86:a6:82:7e:8c:e0:15:4f:46:86:15:a0:
         87:98:22:ce
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 19 15:08:08 2026 by rpki-client