Certificate

$ rpki-client -vvf rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pYJQrqsTuNPTJ54yLhgS_a1G1ik.cer
File:                     pYJQrqsTuNPTJ54yLhgS_a1G1ik.cer (raw, json)
Hash identifier:          uObA8QsUvpFsJ5tIgKoi7NSzXJZSnYTn4i/y25Oc7TQ=
Subject key identifier:   A5:82:50:AE:AB:13:B8:D3:D3:27:9E:32:2E:18:12:FD:AD:46:D6:29
Authority key identifier: 0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
Certificate issuer:       /CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Certificate serial:       028FA5
Authority info access:    rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
Manifest:                 rsync://rpki.apnic.net/member_repository/A9199B04/642E07DC88A411ECA2A35020C4F9AE02/pYJQrqsTuNPTJ54yLhgS_a1G1ik.mft
caRepository:             rsync://rpki.apnic.net/member_repository/A9199B04/642E07DC88A411ECA2A35020C4F9AE02/
Notify URL:               https://rrdp.apnic.net/notification.xml
Certificate not before:   Mon 16 Feb 2026 13:46:05 +0000
Certificate not after:    Sat 01 May 2027 00:00:00 +0000
Subordinate resources:    AS: 59339
                          IP: 103.93.24.0/23
                          IP: 103.197.186.0/23
                          IP: 2001:df2:800::/48
Validation:               OK
Signature path:           rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 26 Feb 2026 12:25:57 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 167845 (0x28fa5)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A90DC5BE, serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
        Validity
            Not Before: Feb 16 13:46:05 2026 GMT
            Not After : May  1 00:00:00 2027 GMT
        Subject: CN=A9199B04, serialNumber=A58250AEAB13B8D3D3279E322E1812FDAD46D629
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:93:16:81:d7:9e:13:d1:dc:84:c1:07:29:08:c6:
                    37:30:76:6b:72:1b:2f:0b:17:53:96:61:ef:2d:25:
                    eb:2b:f6:97:17:ec:65:23:b5:16:ce:7c:b4:06:ee:
                    83:9a:b1:73:fc:6e:e9:7c:f9:fc:2c:9a:3a:89:1a:
                    45:7c:7c:9c:a6:71:e2:6b:03:78:e2:12:2c:47:9e:
                    4f:8e:eb:ee:f9:02:ce:e9:17:f0:c4:a1:8f:08:4b:
                    6e:7d:20:43:9a:ea:79:52:ff:10:57:c0:13:56:5a:
                    81:7a:1d:c3:26:3e:a7:a6:ef:1c:56:de:28:85:88:
                    b3:2e:bb:0e:90:85:f4:3b:80:9c:89:94:dd:8f:1c:
                    9e:05:5d:36:68:42:21:ec:a9:6a:b2:f3:35:c0:6a:
                    73:fb:d3:5b:bc:41:33:d0:d1:85:d8:a9:fc:ca:86:
                    6a:8a:0e:ac:61:79:b8:dd:79:31:03:20:a9:7e:66:
                    f4:ca:7d:ed:09:c6:c3:21:ec:96:84:46:c9:a9:e5:
                    0e:c3:db:8d:de:26:70:4e:73:20:00:c1:85:a3:17:
                    d4:0e:0e:92:0f:c8:49:b7:72:f0:ea:ef:14:66:13:
                    7a:98:ac:b2:06:b0:d6:5c:d2:ef:33:c3:a4:62:f2:
                    e4:85:73:cf:49:55:4a:86:89:39:e2:97:47:17:2c:
                    8a:05
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A5:82:50:AE:AB:13:B8:D3:D3:27:9E:32:2E:18:12:FD:AD:46:D6:29
            X509v3 Authority Key Identifier:
                keyid:0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                CA Repository - URI:rsync://rpki.apnic.net/member_repository/A9199B04/642E07DC88A411ECA2A35020C4F9AE02/
                RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A9199B04/642E07DC88A411ECA2A35020C4F9AE02/pYJQrqsTuNPTJ54yLhgS_a1G1ik.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  59339

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.93.24.0/23
                  103.197.186.0/23
                IPv6:
                  2001:df2:800::/48

    Signature Algorithm: sha256WithRSAEncryption
         5e:e0:ba:d0:f0:38:59:4e:b5:66:85:e0:ae:6a:9b:74:51:39:
         2c:ad:8f:1c:30:cd:3e:89:9c:e6:02:26:18:fe:86:d0:df:23:
         7e:19:91:30:62:07:f5:b7:b0:eb:4c:fd:7c:55:fa:6b:57:4a:
         ef:0e:2d:9d:dc:d7:9e:3e:ea:b4:b7:09:64:9b:ec:10:bb:e3:
         0b:c2:c1:7b:6e:a4:f4:6e:18:c2:79:bf:9b:ef:57:a7:d4:98:
         99:7c:87:64:25:65:8d:96:b3:86:36:f2:af:53:93:dc:e7:37:
         f3:dd:3b:32:28:fc:d9:e6:b6:5f:b0:85:5f:4e:54:d3:02:67:
         50:56:30:b1:53:46:ae:08:8f:73:82:bb:ea:7c:28:e8:1d:14:
         91:f2:d3:01:17:4d:82:a1:78:8f:22:04:46:24:76:b4:3e:f7:
         da:f7:2c:20:20:e0:0c:8e:01:17:6b:56:91:c6:92:9a:c2:0e:
         5b:04:50:d5:ac:f3:d6:bb:a8:6a:3a:ea:78:ab:f7:f5:8a:de:
         1e:32:35:7d:a9:df:07:ca:20:ce:ce:52:24:95:46:b7:e2:d5:
         a6:18:39:5d:d8:c6:6a:d0:f4:c8:3c:ae:2a:8e:f9:1d:2b:f4:
         8e:5d:22:dd:c6:b1:c3:2b:ca:43:e9:32:27:85:72:32:8f:36:
         88:27:f2:a5
-----BEGIN CERTIFICATE-----
MIIGMTCCBRmgAwIBAgIDAo+lMA0GCSqGSIb3DQEBCwUAMEYxETAPBgNVBAMMCEE5
MERDNUJFMTEwLwYDVQQFEygwRTY1QTRGNUZEMzZCNUJENjhFQjNDOTIzNDA4OTc4
QzkwN0FBNzlGMB4XDTI2MDIxNjEzNDYwNVoXDTI3MDUwMTAwMDAwMFowRjERMA8G
A1UEAwwIQTkxOTlCMDQxMTAvBgNVBAUTKEE1ODI1MEFFQUIxM0I4RDNEMzI3OUUz
MjJFMTgxMkZEQUQ0NkQ2MjkwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB
AQCTFoHXnhPR3ITBBykIxjcwdmtyGy8LF1OWYe8tJesr9pcX7GUjtRbOfLQG7oOa
sXP8bul8+fwsmjqJGkV8fJymceJrA3jiEixHnk+O6+75As7pF/DEoY8IS259IEOa
6nlS/xBXwBNWWoF6HcMmPqem7xxW3iiFiLMuuw6QhfQ7gJyJlN2PHJ4FXTZoQiHs
qWqy8zXAanP701u8QTPQ0YXYqfzKhmqKDqxhebjdeTEDIKl+ZvTKfe0JxsMh7JaE
Rsmp5Q7D243eJnBOcyAAwYWjF9QODpIPyEm3cvDq7xRmE3qYrLIGsNZc0u8zw6Ri
8uSFc89JVUqGiTnil0cXLIoFAgMBAAGjggMmMIIDIjAdBgNVHQ4EFgQUpYJQrqsT
uNPTJ54yLhgS/a1G1ikwHwYDVR0jBBgwFoAUDmWk9f02tb1o6zySNAiXjJB6p58w
DgYDVR0PAQH/BAQDAgEGMA8GA1UdEwEB/wQFMAMBAf8wcwYDVR0fBGwwajBooGag
ZIZicnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2
NjExRTJCQjQ2OEY3QzcyRkQxRkYyL0RtV2s5ZjAydGIxbzZ6eVNOQWlYakpCNnA1
OC5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L3JlcG9zaXRvcnkvOTgwNjUyRTBCNzdFMTFFN0E5NkEzOTUyMUE0
RjRGQjQvRG1XazlmMDJ0YjFvNnp5U05BaVhqSkI2cDU4LmNlcjBKBgNVHSABAf8E
QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj
Lm5ldC9SUEtJL0NQUy5wZGYwggEoBggrBgEFBQcBCwSCARowggEWMF8GCCsGAQUF
BzAFhlNyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5
MTk5QjA0LzY0MkUwN0RDODhBNDExRUNBMkEzNTAyMEM0RjlBRTAyLzB+BggrBgEF
BQcwCoZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9B
OTE5OUIwNC82NDJFMDdEQzg4QTQxMUVDQTJBMzUwMjBDNEY5QUUwMi9wWUpRcnFz
VHVOUFRKNTR5TGhnU19hMUcxaWsubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3Jy
ZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwGgYIKwYBBQUHAQgBAf8ECzAJ
oAcwBQIDAOfLMDYGCCsGAQUFBwEHAQH/BCcwJTASBAIAATAMAwQBZ10YAwQBZ8W6
MA8EAgACMAkDBwAgAQ3yCAAwDQYJKoZIhvcNAQELBQADggEBAF7gutDwOFlOtWaF
4K5qm3RROSytjxwwzT6JnOYCJhj+htDfI34ZkTBiB/W3sOtM/XxV+mtXSu8OLZ3c
154+6rS3CWSb7BC74wvCwXtupPRuGMJ5v5vvV6fUmJl8h2QlZY2Ws4Y28q9Tk9zn
N/PdOzIo/Nnmtl+whV9OVNMCZ1BWMLFTRq4Ij3OCu+p8KOgdFJHy0wEXTYKheI8i
BEYkdrQ+99r3LCAg4AyOARdrVpHGkprCDlsEUNWs89a7qGo66nir9/WK3h4yNX2p
3wfKIM7OUiSVRrfi1aYYOV3YxmrQ9Mg8riqO+R0r9I5dIt3GscMrykPpMieFcjKP
Nogn8qU=
-----END CERTIFICATE-----
Generated at Thu Feb 19 15:10:11 2026 by rpki-client