Certificate

$ rpki-client -vvf rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rQWVkiI-gWrFPEM7llhG950wUjQ.cer
File:                     rQWVkiI-gWrFPEM7llhG950wUjQ.cer (raw, json)
Hash identifier:          GcuPR5tmfXEpT5us81t15ecmS7rrR/WS4GORz7ny0xI=
Subject key identifier:   AD:05:95:92:22:3E:81:6A:C5:3C:43:3B:96:58:46:F7:9D:30:52:34
Authority key identifier: 0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
Certificate issuer:       /CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Certificate serial:       028C0C
Authority info access:    rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
Manifest:                 rsync://rpki.apnic.net/member_repository/A91BAEDC/2DC1BAF2098511E7B1FFC23FC4F9AE02/rQWVkiI-gWrFPEM7llhG950wUjQ.mft
caRepository:             rsync://rpki.apnic.net/member_repository/A91BAEDC/2DC1BAF2098511E7B1FFC23FC4F9AE02/
Notify URL:               https://rrdp.apnic.net/notification.xml
Certificate not before:   Mon 02 Feb 2026 14:24:23 +0000
Certificate not after:    Wed 31 Mar 2027 00:00:00 +0000
Subordinate resources:    AS: 18063
                          AS: 24220
                          AS: 38598
                          IP: 103.5.164.0/22
                          IP: 116.66.160.0/20
                          IP: 2402:d800::/32
Validation:               OK
Signature path:           rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 26 Feb 2026 13:09:13 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 166924 (0x28c0c)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A90DC5BE, serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
        Validity
            Not Before: Feb  2 14:24:23 2026 GMT
            Not After : Mar 31 00:00:00 2027 GMT
        Subject: CN=A91BAEDC, serialNumber=AD059592223E816AC53C433B965846F79D305234
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d1:c3:2a:3a:b8:ac:5d:54:4b:d4:3b:55:78:4a:
                    d2:0b:ca:91:ab:f6:e6:ce:0e:1b:0f:e4:5c:44:9c:
                    3e:58:82:a6:61:01:30:12:4a:f5:0a:a3:e2:93:53:
                    66:2b:b2:bc:96:c8:67:cf:70:2f:99:c6:25:89:f9:
                    a6:1c:a0:9a:63:a6:1b:09:64:8f:2f:78:c9:3f:b8:
                    18:02:1b:d1:ae:32:06:8f:5c:1d:93:9f:4a:2d:61:
                    c1:97:3b:64:0d:1d:be:e8:95:81:5f:d7:b1:63:ca:
                    34:11:24:40:2e:84:8c:87:82:4d:5a:0f:32:18:f5:
                    01:72:18:2e:e8:b6:a8:e2:f6:52:93:53:67:90:ac:
                    80:e0:ab:fa:0b:df:24:3f:35:b8:b7:0c:8e:3e:c1:
                    23:3f:44:96:f1:ed:63:f7:a2:be:16:e7:f9:f2:4a:
                    19:21:78:43:3b:0a:5a:64:37:cd:1a:6f:f1:ff:8f:
                    08:92:2d:35:49:62:42:bc:49:8d:86:ba:ed:9c:25:
                    b7:b5:d5:34:4e:f1:55:9f:3a:c9:b7:4e:68:41:3a:
                    91:0c:35:c1:49:31:63:f0:67:a4:d3:85:6d:39:d5:
                    ce:6f:e7:92:3b:4b:c2:b7:09:6c:9e:f6:9d:45:bc:
                    39:93:4b:96:4b:0e:d4:63:de:02:98:e2:c5:0b:16:
                    6a:f1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AD:05:95:92:22:3E:81:6A:C5:3C:43:3B:96:58:46:F7:9D:30:52:34
            X509v3 Authority Key Identifier:
                keyid:0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                CA Repository - URI:rsync://rpki.apnic.net/member_repository/A91BAEDC/2DC1BAF2098511E7B1FFC23FC4F9AE02/
                RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A91BAEDC/2DC1BAF2098511E7B1FFC23FC4F9AE02/rQWVkiI-gWrFPEM7llhG950wUjQ.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  18063
                  24220
                  38598

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.5.164.0/22
                  116.66.160.0/20
                IPv6:
                  2402:d800::/32

    Signature Algorithm: sha256WithRSAEncryption
         30:49:38:4e:36:90:e2:a1:f8:b1:28:0e:da:fc:f3:ed:1d:4c:
         ac:32:80:67:96:a2:3e:f5:6f:d4:d2:a7:2e:cb:4e:7e:8b:25:
         6a:4d:a4:f5:12:02:c3:55:19:b3:de:c7:d7:2b:c5:b7:1c:2a:
         3e:19:75:7d:f5:13:f7:27:4e:b9:4e:7d:3c:19:84:5d:7d:c9:
         59:ab:ee:2a:7e:48:b3:70:1f:9a:21:82:b1:96:f2:82:73:5c:
         f4:49:19:1c:82:c1:9c:a3:7b:2e:ce:07:fe:5e:4b:5b:b1:e8:
         2a:ca:49:0d:6f:c4:90:dd:89:ad:5a:36:58:c6:c8:b0:48:99:
         0e:ad:e9:c2:af:55:57:d0:e3:30:22:f7:88:e4:64:5b:71:b6:
         d8:10:54:ee:4e:8b:68:79:db:7e:ad:12:c2:d3:12:7a:ac:3f:
         d5:13:26:2b:a7:e9:62:f1:e2:e5:fd:b7:f8:de:8b:04:ab:09:
         4c:4f:1a:46:01:d4:28:74:90:4b:11:1e:63:4e:b8:d8:91:7c:
         1a:c2:28:6d:33:e4:d9:fa:d7:c9:5a:ef:d9:a2:11:13:f7:d9:
         8c:5e:ae:7f:1e:f6:da:0e:00:12:59:61:41:af:f2:02:15:81:
         8a:4d:7e:05:58:be:db:80:79:c8:3a:a3:e8:ad:1e:a8:bc:27:
         63:7c:56:8c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 19 15:08:20 2026 by rpki-client