Certificate

$ rpki-client -vvf rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/je6uhW6V886s4RLAoeqXukWlekQ.cer
File:                     je6uhW6V886s4RLAoeqXukWlekQ.cer (raw, json)
Hash identifier:          6B8kQ9zSK51iItAhbJdcC+UCfOjQxa1kVHKSkUWUqW4=
Subject key identifier:   8D:EE:AE:85:6E:95:F3:CE:AC:E1:12:C0:A1:EA:97:BA:45:A5:7A:44
Authority key identifier: 0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
Certificate issuer:       /CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Certificate serial:       028CE3
Authority info access:    rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
Manifest:                 rsync://rpki.apnic.net/member_repository/A91C39D1/088C1B48A27D11EBA28F9177C4F9AE02/je6uhW6V886s4RLAoeqXukWlekQ.mft
caRepository:             rsync://rpki.apnic.net/member_repository/A91C39D1/088C1B48A27D11EBA28F9177C4F9AE02/
Notify URL:               https://rrdp.apnic.net/notification.xml
Certificate not before:   Tue 03 Feb 2026 14:10:14 +0000
Certificate not after:    Sat 01 May 2027 00:00:00 +0000
Subordinate resources:    AS: 45648
                          IP: 27.34.240.0/20
                          IP: 43.254.160.0/22
                          IP: 103.228.220.0/22
                          IP: 111.125.192.0/23
                          IP: 111.125.200.0/21
                          IP: 111.125.212.0/24
                          IP: 183.87.212.0/23
                          IP: 183.87.250.0/24
                          IP: 203.201.60.0/22
                          IP: 2400:d280::/32
Validation:               OK
Signature path:           rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 26 Feb 2026 14:50:15 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 167139 (0x28ce3)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A90DC5BE, serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
        Validity
            Not Before: Feb  3 14:10:14 2026 GMT
            Not After : May  1 00:00:00 2027 GMT
        Subject: CN=A91C39D1, serialNumber=8DEEAE856E95F3CEACE112C0A1EA97BA45A57A44
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e1:d7:86:91:5c:72:1a:cb:9b:ac:4c:f1:cc:d9:
                    99:fe:39:01:f5:37:f0:04:bf:85:7c:b3:ea:a0:9a:
                    48:3a:6b:05:d2:f6:73:ea:c3:d4:6f:30:5e:dc:a0:
                    81:25:6b:94:08:93:18:64:10:b9:a6:02:b3:7d:d3:
                    35:e9:bd:bd:be:a6:e9:75:85:7c:d5:d2:69:e3:71:
                    54:5d:ef:6b:3c:05:08:17:d0:d1:fa:8b:31:0f:e2:
                    91:ee:87:e6:a5:70:6f:7a:4b:f6:d0:6c:6e:dc:0e:
                    f9:12:7f:79:63:f0:80:6e:aa:6e:0b:a0:f8:a5:5d:
                    5d:6f:27:63:9b:97:a3:b7:b4:95:41:d1:fb:bb:f7:
                    dd:bd:e0:4f:19:82:f2:2b:f3:6f:32:d3:1f:d4:99:
                    d5:c4:85:8e:fa:15:0f:46:8b:08:d9:94:03:84:bf:
                    98:22:08:9f:fb:b7:26:52:b4:74:c5:a2:69:92:83:
                    2c:af:08:50:59:11:45:67:c6:d8:75:c7:b4:09:95:
                    0c:22:6b:3c:4d:4a:26:16:b9:d4:a7:20:e6:0b:d5:
                    f9:e0:d6:70:df:9e:89:e6:14:9a:3e:3d:1b:2d:b1:
                    11:3f:83:65:cc:e6:28:1d:64:ed:8e:bd:15:fb:03:
                    47:82:f2:95:64:4a:4d:a6:f6:24:2c:9d:a6:82:6f:
                    05:29
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8D:EE:AE:85:6E:95:F3:CE:AC:E1:12:C0:A1:EA:97:BA:45:A5:7A:44
            X509v3 Authority Key Identifier:
                keyid:0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                CA Repository - URI:rsync://rpki.apnic.net/member_repository/A91C39D1/088C1B48A27D11EBA28F9177C4F9AE02/
                RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A91C39D1/088C1B48A27D11EBA28F9177C4F9AE02/je6uhW6V886s4RLAoeqXukWlekQ.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  45648

            sbgp-ipAddrBlock: critical
                IPv4:
                  27.34.240.0/20
                  43.254.160.0/22
                  103.228.220.0/22
                  111.125.192.0/23
                  111.125.200.0/21
                  111.125.212.0/24
                  183.87.212.0/23
                  183.87.250.0/24
                  203.201.60.0/22
                IPv6:
                  2400:d280::/32

    Signature Algorithm: sha256WithRSAEncryption
         80:54:92:93:18:03:19:11:92:39:13:08:a8:57:80:16:38:57:
         6f:88:6f:58:71:bf:02:85:8a:0c:2e:74:33:71:c8:46:9d:04:
         82:ba:bb:21:fe:e5:23:06:eb:d0:3c:d1:eb:41:62:7e:46:84:
         be:ff:bf:c6:fc:2d:e9:2f:e5:b9:d4:49:c3:73:04:48:e2:db:
         43:bf:52:fc:c1:ca:3c:de:a8:f4:cf:5e:43:d9:4f:84:e9:05:
         34:d7:60:6b:c9:7b:69:db:66:7a:8f:7e:ac:29:fa:d5:29:40:
         54:5a:ff:4f:58:27:af:db:c7:fb:51:28:0d:2e:ac:60:51:06:
         98:5f:89:cf:2e:50:a7:ca:40:95:ef:74:ed:9a:3b:08:a2:a9:
         ef:da:a4:8e:c7:3b:8c:2c:e8:36:d9:68:49:3e:22:67:fc:f1:
         bc:ff:18:d0:fe:f5:83:16:77:65:05:30:6c:47:f1:f3:99:bf:
         dd:e6:62:ec:fc:e5:ca:1e:0a:91:29:2f:45:ad:00:40:d8:14:
         bb:2c:d9:ee:78:3f:a0:84:d3:36:14:fb:7d:48:de:d0:4b:44:
         eb:f8:43:40:25:fd:a8:95:ad:7f:7a:d3:28:27:72:25:a8:ae:
         83:03:fd:30:eb:38:0d:ef:a8:c3:d1:a2:d5:a9:10:d6:bd:88:
         e5:96:cd:25
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 19 16:42:02 2026 by rpki-client