Certificate

$ rpki-client -vvf rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/c5PammDgEK2QIFHzC9pJc3T4UaQ.cer
File:                     c5PammDgEK2QIFHzC9pJc3T4UaQ.cer (raw, json)
Hash identifier:          UxKEnEeQHAPuukv1DxEsjF8GY4S46iUfmB7tFNeYjmA=
Subject key identifier:   73:93:DA:9A:60:E0:10:AD:90:20:51:F3:0B:DA:49:73:74:F8:51:A4
Authority key identifier: 0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
Certificate issuer:       /CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Certificate serial:       028B3B
Authority info access:    rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
Manifest:                 rsync://rpki.apnic.net/member_repository/A9182545/B90BA192032A11EC8B4FC84FC4F9AE02/c5PammDgEK2QIFHzC9pJc3T4UaQ.mft
caRepository:             rsync://rpki.apnic.net/member_repository/A9182545/B90BA192032A11EC8B4FC84FC4F9AE02/
Notify URL:               https://rrdp.apnic.net/notification.xml
Certificate not before:   Sun 01 Feb 2026 13:44:33 +0000
Certificate not after:    Sat 01 May 2027 00:00:00 +0000
Subordinate resources:    AS: 141676
                          IP: 103.161.240.0/23
                          IP: 2001:df5:d680::/48
                          IP: 2400:78a0::/32
Validation:               OK
Signature path:           rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 26 Feb 2026 12:25:57 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 166715 (0x28b3b)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A90DC5BE, serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
        Validity
            Not Before: Feb  1 13:44:33 2026 GMT
            Not After : May  1 00:00:00 2027 GMT
        Subject: CN=A9182545, serialNumber=7393DA9A60E010AD902051F30BDA497374F851A4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:f2:05:6c:31:61:84:2a:1e:6d:eb:50:43:d3:
                    d1:7e:ca:42:7c:2d:98:9d:45:12:06:da:b5:bf:f4:
                    f9:51:ab:2a:16:0c:8c:cd:ea:22:48:5b:35:f2:44:
                    d3:8b:9d:60:de:d9:66:5a:05:ca:27:79:94:48:ee:
                    18:68:7f:64:bd:17:71:6a:c1:e3:ec:73:26:56:f6:
                    83:7b:c8:22:4b:7f:07:1a:d9:aa:cc:58:83:6b:ba:
                    f2:70:e6:9b:05:fd:d9:5d:a1:01:a9:24:80:68:e1:
                    54:c9:82:3e:85:5b:49:b9:ff:4f:a4:01:5b:2b:26:
                    c6:88:52:45:6e:2d:c3:39:73:3c:ef:4a:60:0d:d8:
                    c6:6e:28:6f:d8:45:b9:25:f0:76:8c:59:a5:e0:e1:
                    25:aa:4b:10:6f:96:9d:52:37:cb:dd:78:41:fa:df:
                    7f:2d:bb:d9:bf:3d:4f:8e:01:c0:43:fe:da:80:1b:
                    00:9f:0c:33:01:1f:cc:07:6e:e3:b0:22:01:b3:19:
                    61:55:75:a2:14:ea:f6:b3:77:4e:ac:e4:2a:b2:ab:
                    05:a5:c3:77:81:73:dd:1e:b8:89:c6:17:de:26:63:
                    3b:70:07:01:16:b2:ce:ab:d4:0c:e9:8c:16:35:7f:
                    ae:0b:f0:8e:bf:fd:51:04:aa:ed:cd:55:a3:e6:27:
                    21:1b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                73:93:DA:9A:60:E0:10:AD:90:20:51:F3:0B:DA:49:73:74:F8:51:A4
            X509v3 Authority Key Identifier:
                keyid:0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                CA Repository - URI:rsync://rpki.apnic.net/member_repository/A9182545/B90BA192032A11EC8B4FC84FC4F9AE02/
                RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A9182545/B90BA192032A11EC8B4FC84FC4F9AE02/c5PammDgEK2QIFHzC9pJc3T4UaQ.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  141676

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.161.240.0/23
                IPv6:
                  2001:df5:d680::/48
                  2400:78a0::/32

    Signature Algorithm: sha256WithRSAEncryption
         60:8c:0b:49:b7:e7:31:00:24:d9:2f:a7:0f:dc:2b:76:1d:90:
         7d:6a:a0:f8:ed:9a:ca:f7:cb:a4:c7:58:23:d8:bf:8a:59:da:
         40:15:e4:2d:b0:df:a6:f2:19:42:9b:17:32:d2:f5:be:b9:22:
         24:77:1e:71:89:ff:b9:fd:12:62:ff:e3:22:82:c4:9f:57:66:
         18:27:89:e6:6b:34:db:da:86:fb:e2:65:09:9d:30:5d:28:67:
         05:66:c7:19:66:98:1f:a1:36:a1:0b:3c:36:37:54:a9:88:76:
         83:38:4f:07:62:06:3f:f7:5c:01:80:ef:61:31:ce:47:df:68:
         a2:69:3c:b4:55:64:4b:fa:57:cf:28:34:47:bc:e1:ad:df:5b:
         c1:08:10:9d:83:9c:70:7a:0e:82:b3:f2:60:a8:2a:7f:47:75:
         e4:33:a0:2c:7f:bb:92:34:d8:8e:24:83:4f:3c:e0:e3:49:bd:
         70:0b:08:6e:bd:1b:59:89:2f:b4:dc:f5:55:e3:60:23:1a:5a:
         f3:7a:0c:81:0e:74:e0:bd:a9:d7:fd:db:f7:42:6c:6c:e0:20:
         88:b1:b4:0d:f7:54:14:bc:5a:9f:b0:b3:e8:4e:1d:f0:ee:ca:
         0b:30:30:71:ee:f4:c3:a1:e9:89:77:79:e7:96:d9:84:41:b0:
         36:af:9d:f2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 19 15:06:40 2026 by rpki-client