Certificate

$ rpki-client -vvf rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WiI7nFJPqu2HJyGkKzwwLZceOAQ.cer
File:                     WiI7nFJPqu2HJyGkKzwwLZceOAQ.cer (raw, json)
Hash identifier:          +cL+w7fI0bVXk6CZqww3NpnNT0r3woIrnofaLyDJZPg=
Subject key identifier:   5A:22:3B:9C:52:4F:AA:ED:87:27:21:A4:2B:3C:30:2D:97:1E:38:04
Authority key identifier: 0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
Certificate issuer:       /CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Certificate serial:       028BBE
Authority info access:    rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
Manifest:                 rsync://rpki.apnic.net/member_repository/A9137843/36CAD808EA0F11EB88A54E2FC4F9AE02/WiI7nFJPqu2HJyGkKzwwLZceOAQ.mft
caRepository:             rsync://rpki.apnic.net/member_repository/A9137843/36CAD808EA0F11EB88A54E2FC4F9AE02/
Notify URL:               https://rrdp.apnic.net/notification.xml
Certificate not before:   Mon 02 Feb 2026 12:50:07 +0000
Certificate not after:    Wed 31 Mar 2027 00:00:00 +0000
Subordinate resources:    AS: 134491
                          IP: 103.161.24.0/24
                          IP: 2001:df5:b480::/48
Validation:               OK
Signature path:           rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 26 Feb 2026 14:50:15 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 166846 (0x28bbe)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A90DC5BE, serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
        Validity
            Not Before: Feb  2 12:50:07 2026 GMT
            Not After : Mar 31 00:00:00 2027 GMT
        Subject: CN=A9137843, serialNumber=5A223B9C524FAAED872721A42B3C302D971E3804
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:f9:a5:1a:d4:28:ce:99:11:19:f5:8d:3a:71:
                    bd:e0:a2:74:94:f4:56:2f:ec:34:40:5e:ae:28:17:
                    38:33:c4:92:44:dd:0a:cb:02:8f:24:50:f7:89:20:
                    d7:31:23:61:68:4f:38:60:de:31:b5:61:ee:22:74:
                    f1:86:d2:83:6e:d9:54:20:b4:cf:ee:5b:29:a3:78:
                    e9:84:ca:17:e2:fc:d9:78:0c:bd:ba:92:41:79:18:
                    15:d0:6f:11:89:0d:15:e8:29:07:d7:f9:52:4a:80:
                    e2:f9:04:69:b4:20:e0:89:f1:ca:f1:e7:82:bf:f5:
                    39:5e:af:6f:05:d3:46:7b:b8:1e:c8:10:df:48:d7:
                    63:19:e1:98:57:60:7d:be:b2:a2:2d:c8:4e:56:14:
                    50:52:42:53:26:e3:a7:c4:44:22:ab:a6:83:12:22:
                    c8:32:fe:ff:58:8e:29:77:db:b6:09:6c:34:b3:da:
                    63:70:e7:94:da:50:96:ce:f6:25:4c:d4:c3:5e:88:
                    a8:83:bb:13:26:ac:49:75:80:d2:e7:ac:b0:c8:47:
                    54:86:a4:5b:dc:87:85:8c:da:ea:ca:b7:51:99:d9:
                    54:1c:18:e3:db:9c:ae:d1:c9:1e:f8:3b:da:6d:99:
                    53:c7:a5:f8:13:30:c3:fe:57:96:65:59:bc:32:3e:
                    67:19
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5A:22:3B:9C:52:4F:AA:ED:87:27:21:A4:2B:3C:30:2D:97:1E:38:04
            X509v3 Authority Key Identifier:
                keyid:0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                CA Repository - URI:rsync://rpki.apnic.net/member_repository/A9137843/36CAD808EA0F11EB88A54E2FC4F9AE02/
                RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A9137843/36CAD808EA0F11EB88A54E2FC4F9AE02/WiI7nFJPqu2HJyGkKzwwLZceOAQ.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  134491

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.161.24.0/24
                IPv6:
                  2001:df5:b480::/48

    Signature Algorithm: sha256WithRSAEncryption
         73:a5:9a:ea:9b:dc:c9:4b:d1:fc:02:07:e8:57:e6:3e:e6:0d:
         e5:54:0a:04:d3:fe:3b:2b:a7:ce:d7:a1:c3:03:76:3b:6c:3c:
         40:ef:85:e0:a1:47:6e:3b:7d:14:47:9a:3b:f8:33:32:b6:c6:
         e3:c0:ec:d9:d8:b6:64:7c:53:a1:20:36:79:b7:1d:5f:d3:a1:
         0f:e0:43:df:89:ea:9a:db:18:82:02:48:bc:e6:a5:59:28:45:
         59:86:31:57:df:91:eb:ab:b0:31:af:59:0c:1d:9b:01:2b:4e:
         1f:04:68:09:e7:78:72:24:59:38:fd:98:e5:bb:ed:85:98:21:
         98:a8:a8:d4:a3:75:0b:a2:95:66:d5:b7:42:b5:4c:76:3d:4d:
         1b:da:43:8d:ab:f5:23:e8:d3:af:30:f0:e2:b8:8f:e6:2b:e8:
         bc:49:6f:ac:2c:04:95:17:20:68:1d:93:11:2b:f2:8a:df:47:
         a5:9a:ef:6f:43:0f:77:4f:1f:80:e6:31:c9:f8:24:0e:8b:74:
         4a:8e:e6:a7:d5:8c:a6:6f:0f:6b:47:96:6a:3d:89:c5:a5:d4:
         2c:08:d5:11:0d:85:58:ec:d1:4f:69:84:2b:9a:53:37:81:61:
         7b:ec:28:de:86:d0:e5:00:87:fe:d7:60:08:d0:09:73:7d:95:
         f4:2b:6b:4d
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Thu Feb 19 16:39:54 2026 by rpki-client