Certificate

$ rpki-client -vvf rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tksRCOmO7If7awwovgFkXHCLSsU.cer
File:                     tksRCOmO7If7awwovgFkXHCLSsU.cer (raw, json)
Hash identifier:          d4E4vl90JIYNajYatu5N0Mv0qRY+j6IMrnw7cltS6zg=
Subject key identifier:   B6:4B:11:08:E9:8E:EC:87:FB:6B:0C:28:BE:01:64:5C:70:8B:4A:C5
Authority key identifier: 0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
Certificate issuer:       /CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Certificate serial:       0288F9
Authority info access:    rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
Manifest:                 rsync://rpki.apnic.net/member_repository/A91BAE17/445EE09458BD11E49383AB76C4F9AE02/tksRCOmO7If7awwovgFkXHCLSsU.mft
caRepository:             rsync://rpki.apnic.net/member_repository/A91BAE17/445EE09458BD11E49383AB76C4F9AE02/
Notify URL:               https://rrdp.apnic.net/notification.xml
Certificate not before:   Tue 27 Jan 2026 14:09:37 +0000
Certificate not after:    Wed 31 Mar 2027 00:00:00 +0000
Subordinate resources:    AS: 58473
                          AS: 131182
                          IP: 103.28.72.0/24
                          IP: 103.36.248.0/23
                          IP: 103.60.132.0/23
                          IP: 103.240.132.0/24
                          IP: 2001:df0:c200::/48
                          IP: 2402:df80::/32
Validation:               OK
Signature path:           rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 26 Feb 2026 12:25:57 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 166137 (0x288f9)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A90DC5BE, serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
        Validity
            Not Before: Jan 27 14:09:37 2026 GMT
            Not After : Mar 31 00:00:00 2027 GMT
        Subject: CN=A91BAE17, serialNumber=B64B1108E98EEC87FB6B0C28BE01645C708B4AC5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:80:8f:79:c0:82:d5:68:c3:dc:0b:4c:5e:33:
                    6e:de:d7:19:62:c7:20:c5:42:42:ea:fd:35:ea:4e:
                    f3:ad:c2:5b:f4:c7:c4:47:5e:a3:de:63:80:d4:41:
                    89:a4:16:d3:af:65:8a:8e:76:de:c0:55:71:fe:57:
                    47:f6:d6:81:a8:f7:5c:1f:5f:22:8d:2d:f9:e5:ff:
                    58:f6:21:59:ff:52:14:0a:ce:48:e0:fc:f6:fc:ae:
                    c5:2c:a5:61:77:9e:f7:ab:2f:41:3d:40:55:a5:a5:
                    6e:6f:12:bc:7d:8d:e4:8a:9d:29:9d:48:5a:7b:11:
                    19:b5:7b:23:98:f2:01:ce:8b:1d:67:d7:cd:ef:3e:
                    13:ea:db:5f:32:de:26:dd:60:05:04:3d:aa:1e:f5:
                    6a:00:5d:21:df:cc:eb:ee:ba:bf:de:be:5d:28:c8:
                    99:11:96:c9:d0:e4:a2:a4:c3:ed:6e:b8:86:1e:10:
                    0a:cd:dd:56:90:6b:73:c4:c5:cb:f2:fe:8c:84:0e:
                    3a:ed:14:1a:87:d0:fc:df:d5:01:09:cc:4d:f4:09:
                    fe:73:23:e2:7f:e6:4f:fd:be:3a:c0:47:1f:3c:ad:
                    4a:3c:9c:67:94:80:5a:f4:65:73:40:e1:32:6c:eb:
                    24:6d:90:83:9f:ad:9d:7d:d9:02:ac:f4:a2:9d:88:
                    25:bb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B6:4B:11:08:E9:8E:EC:87:FB:6B:0C:28:BE:01:64:5C:70:8B:4A:C5
            X509v3 Authority Key Identifier:
                keyid:0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                CA Repository - URI:rsync://rpki.apnic.net/member_repository/A91BAE17/445EE09458BD11E49383AB76C4F9AE02/
                RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A91BAE17/445EE09458BD11E49383AB76C4F9AE02/tksRCOmO7If7awwovgFkXHCLSsU.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  58473
                  131182

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.28.72.0/24
                  103.36.248.0/23
                  103.60.132.0/23
                  103.240.132.0/24
                IPv6:
                  2001:df0:c200::/48
                  2402:df80::/32

    Signature Algorithm: sha256WithRSAEncryption
         6c:08:43:17:1d:a4:29:d2:5c:fe:df:83:12:99:2c:12:da:1c:
         fd:49:1b:4e:fd:e5:94:27:c5:0d:51:a1:d5:61:5a:b6:c8:6b:
         2c:a0:68:5a:7f:9e:70:14:07:94:10:52:fe:cc:74:e2:8b:62:
         b4:96:4a:d2:be:5a:65:10:22:c4:fb:56:e6:c9:a6:ce:02:eb:
         60:5d:d6:b2:2b:0e:28:84:78:7c:40:37:92:56:5f:16:99:be:
         d2:e3:fc:f9:35:ee:42:87:e0:5c:25:26:71:57:b8:5b:ba:2a:
         86:2b:ac:15:62:11:2e:d7:25:42:ae:1d:2e:4b:d8:42:a4:ed:
         ae:d8:23:4d:82:05:7b:2a:14:14:04:6e:2a:74:8e:9a:1b:3a:
         7b:91:0e:6e:48:4b:e8:fa:b2:73:dc:be:3e:61:86:e2:5e:7e:
         d5:80:7a:3f:53:cb:e8:01:38:52:b2:62:63:6c:69:2c:52:50:
         0e:b0:4e:75:eb:4e:da:8d:6a:37:11:b4:e7:e1:36:b3:ef:17:
         24:fb:cc:49:a0:8f:af:81:38:3d:11:68:b4:ef:95:43:44:d7:
         70:cf:03:f0:35:62:28:e9:f9:5b:bb:ff:1f:e2:e2:2b:c2:3d:
         fe:8e:52:09:5e:1e:d7:d6:59:b8:4b:18:ac:92:f3:45:67:e9:
         65:5f:ba:42
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 19 15:06:34 2026 by rpki-client