Certificate

$ rpki-client -vvf rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/wS8PVy2jONITRB7wfKUR0anIm20.cer
File:                     wS8PVy2jONITRB7wfKUR0anIm20.cer (raw, json)
Hash identifier:          K6X197zwITEyI9N66yKeAJsW67nwQWnzW7YOzWxuwBI=
Subject key identifier:   C1:2F:0F:57:2D:A3:38:D2:13:44:1E:F0:7C:A5:11:D1:A9:C8:9B:6D
Authority key identifier: 0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
Certificate issuer:       /CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Certificate serial:       028D4C
Authority info access:    rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
Manifest:                 rsync://rpki.apnic.net/member_repository/A916CA70/A7125D7603AA11EB8C158229C4F9AE02/wS8PVy2jONITRB7wfKUR0anIm20.mft
caRepository:             rsync://rpki.apnic.net/member_repository/A916CA70/A7125D7603AA11EB8C158229C4F9AE02/
Notify URL:               https://rrdp.apnic.net/notification.xml
Certificate not before:   Thu 05 Feb 2026 06:45:09 +0000
Certificate not after:    Wed 31 Mar 2027 00:00:00 +0000
Subordinate resources:    AS: 139917
                          IP: 103.147.44.0/24
                          IP: 2001:df2:8380::/48
Validation:               OK
Signature path:           rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 26 Feb 2026 12:25:57 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 167244 (0x28d4c)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A90DC5BE, serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
        Validity
            Not Before: Feb  5 06:45:09 2026 GMT
            Not After : Mar 31 00:00:00 2027 GMT
        Subject: CN=A916CA70, serialNumber=C12F0F572DA338D213441EF07CA511D1A9C89B6D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:e1:59:5b:f2:c1:37:00:5b:81:a3:b7:aa:d9:
                    32:c7:e7:2f:87:8e:5a:98:de:35:81:42:42:75:56:
                    15:95:3b:b0:26:b3:2b:9f:ab:6f:ba:e7:a3:85:ba:
                    fb:84:7f:e5:d5:3f:bc:af:86:ef:0a:fc:dc:59:3f:
                    29:f6:1d:e2:71:ca:bd:89:d0:74:45:c0:7d:1a:f0:
                    8b:e6:02:33:a0:a7:ad:81:b6:d6:76:95:f1:f4:d2:
                    72:22:9d:8d:9f:7d:01:b7:f6:e8:12:b4:7b:bb:4a:
                    23:92:32:d5:48:e3:2a:c2:ed:bf:ac:6a:13:b5:00:
                    4f:c2:0a:9a:36:2f:40:e1:cb:7f:4a:4f:f4:0b:ea:
                    be:0c:ea:82:e4:ec:8c:22:42:c9:b2:76:a0:a0:f8:
                    e9:5f:b0:e0:bb:3b:a4:f8:2e:7c:35:d1:af:69:d6:
                    0b:72:d4:01:07:79:f7:59:f8:6f:3f:85:ba:60:f2:
                    a2:ef:88:f0:16:54:a9:c6:b4:52:67:6b:79:1d:b0:
                    e6:07:b4:42:f8:c1:30:f8:37:87:02:f6:99:8a:cc:
                    64:4c:41:ab:d8:22:d7:ed:94:c7:c4:ff:66:a7:11:
                    6e:87:db:25:c4:77:23:9a:c6:f2:17:24:b6:b6:a0:
                    e3:cc:84:52:a1:90:f2:da:8e:b3:cb:59:21:d0:05:
                    83:a3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C1:2F:0F:57:2D:A3:38:D2:13:44:1E:F0:7C:A5:11:D1:A9:C8:9B:6D
            X509v3 Authority Key Identifier:
                keyid:0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                CA Repository - URI:rsync://rpki.apnic.net/member_repository/A916CA70/A7125D7603AA11EB8C158229C4F9AE02/
                RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A916CA70/A7125D7603AA11EB8C158229C4F9AE02/wS8PVy2jONITRB7wfKUR0anIm20.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  139917

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.147.44.0/24
                IPv6:
                  2001:df2:8380::/48

    Signature Algorithm: sha256WithRSAEncryption
         3e:53:cb:b4:37:b2:bb:a9:fb:cd:60:8b:35:76:54:60:80:c1:
         b1:f9:77:96:80:ab:d2:36:64:a7:d2:77:91:10:50:cc:15:31:
         4c:c0:6c:8e:c3:b7:9f:2d:25:42:81:cb:d9:93:68:25:2d:b7:
         57:91:6c:c3:b4:c6:c0:d3:d7:02:78:a3:4f:d9:11:85:9f:d6:
         c7:5a:c8:be:68:ab:e8:80:26:09:45:aa:29:b0:64:28:d9:c7:
         8b:ec:bd:cc:0d:d7:e3:08:48:c8:fa:f0:1e:a5:0f:61:14:8e:
         78:3f:92:5d:64:b4:9d:52:50:c5:1a:86:13:05:ed:f3:6d:7c:
         b6:fd:1d:fc:aa:c6:6b:41:3f:a3:68:ce:c5:ba:7c:8b:f7:a8:
         49:e9:39:80:29:00:f5:86:3a:99:1f:14:55:79:a3:38:98:b1:
         14:2a:78:a0:71:bb:6e:0a:a4:c1:a0:7e:b6:db:3b:28:9d:d1:
         8d:8d:d6:29:8b:a8:79:bd:75:56:a8:32:a9:a9:5f:98:59:3d:
         42:d3:7e:88:3e:0c:77:f4:5f:ce:e3:a8:8d:54:22:91:76:bb:
         82:ad:2a:5d:81:35:b0:35:35:8a:4d:7b:69:4d:1c:03:73:e3:
         d5:d9:27:1e:4d:92:5f:7f:a6:36:f8:dd:2f:49:63:10:87:a3:
         b0:10:5a:13
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Thu Feb 19 15:06:38 2026 by rpki-client