Certificate

$ rpki-client -vvf rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/b-5tdUHTHLD7ENbScmQkY5LHSdI.cer
File:                     b-5tdUHTHLD7ENbScmQkY5LHSdI.cer (raw, json)
Hash identifier:          lqKOzk8AyQcotfto86Byg73Khgqb0t+gUKaQlsfF8eo=
Subject key identifier:   6F:EE:6D:75:41:D3:1C:B0:FB:10:D6:D2:72:64:24:63:92:C7:49:D2
Authority key identifier: 0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
Certificate issuer:       /CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Certificate serial:       028F08
Authority info access:    rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
Manifest:                 rsync://rpki.apnic.net/member_repository/A9145CB7/83EA6D72082A11F1B456BEDF353D8C67/b-5tdUHTHLD7ENbScmQkY5LHSdI.mft
caRepository:             rsync://rpki.apnic.net/member_repository/A9145CB7/83EA6D72082A11F1B456BEDF353D8C67/
Notify URL:               https://rrdp.apnic.net/notification.xml
Certificate not before:   Thu 12 Feb 2026 15:50:16 +0000
Certificate not after:    Sun 31 Jan 2027 00:00:00 +0000
Subordinate resources:    AS: 131789
Validation:               OK
Signature path:           rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 26 Feb 2026 12:25:57 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 167688 (0x28f08)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A90DC5BE, serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
        Validity
            Not Before: Feb 12 15:50:16 2026 GMT
            Not After : Jan 31 00:00:00 2027 GMT
        Subject: CN=A9145CB7, serialNumber=6FEE6D7541D31CB0FB10D6D27264246392C749D2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:2c:36:56:79:ac:c9:e5:8f:71:d1:88:de:a4:
                    ae:dd:c8:c9:27:77:84:5d:b5:5b:ef:a0:81:27:1c:
                    fb:45:25:6f:ef:f3:1e:ef:8e:8a:93:41:eb:43:db:
                    2b:79:e5:b2:5d:aa:c9:55:3b:0d:dd:fe:2d:b7:ce:
                    04:26:65:ce:e4:8f:88:36:84:8b:86:b1:46:7b:ca:
                    a1:08:a1:30:ba:91:f5:76:60:74:ca:f2:ea:d5:3c:
                    2b:1c:bf:fd:9f:f4:01:65:38:9b:7f:41:e9:55:1a:
                    03:8c:44:93:4e:24:4d:5a:72:05:0f:07:6b:fe:fb:
                    41:85:cf:1d:9a:1a:fa:66:66:bb:5a:0c:fc:1d:f5:
                    b2:6d:40:44:f0:87:2f:39:25:09:02:85:a9:66:0c:
                    b2:12:c2:89:93:1a:c9:c1:d1:34:7e:87:da:7c:7a:
                    16:18:de:6a:bc:25:7c:c2:b5:64:93:36:56:9e:58:
                    44:6a:3a:1d:94:74:c9:9e:02:51:c6:96:e9:78:40:
                    97:1b:62:0d:d6:94:02:d0:e7:25:6d:8a:a8:cb:e5:
                    93:b3:34:ad:01:19:d0:57:70:c0:2d:61:54:56:60:
                    24:a9:69:9f:5b:3d:86:c7:32:30:ba:aa:c6:ce:ff:
                    5b:1c:da:90:b0:91:3c:9f:3e:8a:85:ff:3d:6d:1d:
                    ac:37
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6F:EE:6D:75:41:D3:1C:B0:FB:10:D6:D2:72:64:24:63:92:C7:49:D2
            X509v3 Authority Key Identifier:
                keyid:0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                CA Repository - URI:rsync://rpki.apnic.net/member_repository/A9145CB7/83EA6D72082A11F1B456BEDF353D8C67/
                RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A9145CB7/83EA6D72082A11F1B456BEDF353D8C67/b-5tdUHTHLD7ENbScmQkY5LHSdI.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  131789

    Signature Algorithm: sha256WithRSAEncryption
         83:a3:0b:c9:8d:fe:c7:ff:63:ad:89:87:d6:87:75:ea:24:02:
         ad:28:39:48:58:3e:bf:35:d8:e7:07:9d:7f:54:5b:77:ad:8a:
         09:3f:2b:85:c4:ca:f5:f3:1d:83:5a:93:3a:8d:be:22:42:13:
         57:25:98:d5:21:c6:91:59:97:b6:d9:90:c7:e9:b0:d5:e0:2f:
         ce:b1:86:21:66:86:c4:7a:29:07:25:59:33:1c:19:d7:de:a2:
         c1:c1:0b:ff:b7:3f:01:91:34:c5:57:b2:e3:41:29:66:11:41:
         bd:92:08:23:16:fc:70:8d:d6:0f:5b:d1:10:45:3b:6b:33:eb:
         0b:a5:54:ee:56:d4:9d:c2:c9:a1:56:43:4d:0a:15:2c:c2:06:
         c2:58:43:0a:e5:63:72:7b:64:9c:af:52:6a:75:ff:bb:f9:41:
         d6:20:13:12:f9:45:82:cd:36:f9:73:5e:8d:38:bd:35:2b:66:
         2a:a7:b4:3d:8e:7a:9c:86:46:5c:ed:06:cd:c4:c0:53:b0:d5:
         2e:9a:fd:ac:18:ef:8f:f2:9c:fc:23:7e:1b:d6:7c:76:b8:d6:
         46:dd:7b:1e:ca:a0:25:fd:1c:0a:8b:0c:d8:5e:41:80:e2:b3:
         6a:45:d2:28:45:da:05:aa:7a:d0:7d:13:31:70:5e:34:0b:69:
         82:34:c8:48
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 19 15:04:28 2026 by rpki-client