Certificate

$ rpki-client -vvf rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/wbuCKyWKYPzS9sgIpVFnSYpQdUw.cer
File:                     wbuCKyWKYPzS9sgIpVFnSYpQdUw.cer (raw, json)
Hash identifier:          mBbVhFoTJs7uAFfzRaS4FpEF2407sjNOIkuqwpq+L3M=
Subject key identifier:   C1:BB:82:2B:25:8A:60:FC:D2:F6:C8:08:A5:51:67:49:8A:50:75:4C
Authority key identifier: 0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
Certificate issuer:       /CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Certificate serial:       028F79
Authority info access:    rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
Manifest:                 rsync://rpki.apnic.net/member_repository/A91E1729/A7A1A29ADF1611E6BABC0E26C4F9AE02/wbuCKyWKYPzS9sgIpVFnSYpQdUw.mft
caRepository:             rsync://rpki.apnic.net/member_repository/A91E1729/A7A1A29ADF1611E6BABC0E26C4F9AE02/
Notify URL:               https://rrdp.apnic.net/notification.xml
Certificate not before:   Sun 15 Feb 2026 14:08:46 +0000
Certificate not after:    Wed 31 Mar 2027 00:00:00 +0000
Subordinate resources:    AS: 64093
                          IP: 103.252.80.0/22
                          IP: 110.232.188.0/22
Validation:               OK
Signature path:           rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 26 Feb 2026 14:50:15 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 167801 (0x28f79)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A90DC5BE, serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
        Validity
            Not Before: Feb 15 14:08:46 2026 GMT
            Not After : Mar 31 00:00:00 2027 GMT
        Subject: CN=A91E1729, serialNumber=C1BB822B258A60FCD2F6C808A55167498A50754C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:4b:c5:ea:22:71:4a:29:03:76:e7:4e:86:e6:
                    01:f3:23:44:cb:d5:d2:64:fb:cc:61:79:88:60:98:
                    1d:c3:0e:87:dd:8b:75:fb:02:19:ab:51:2d:98:33:
                    43:0f:01:44:ca:46:2a:10:7b:70:64:d8:fb:0c:b8:
                    e4:fe:0e:12:f6:87:84:d7:46:45:4e:56:78:43:e8:
                    5d:75:9d:94:bd:96:20:ad:25:03:fd:1e:0e:9a:a7:
                    ad:98:a3:aa:b6:09:7a:0f:24:5c:77:b4:70:9a:3b:
                    18:30:e5:eb:65:0b:c3:b2:6f:d0:b0:c8:9e:7a:e3:
                    b7:7a:ef:5b:0f:97:f7:2a:47:41:cd:05:0e:4e:49:
                    b4:b0:df:72:c8:fd:ef:43:0f:f7:44:b1:61:27:5b:
                    e4:fc:7b:a6:ad:2c:59:64:e7:84:d2:54:3f:5a:2f:
                    fb:cf:da:3a:52:ae:e8:ab:1f:ad:08:5e:33:8b:1c:
                    89:9e:e2:ae:21:1d:c6:22:2d:bd:85:5c:57:7e:45:
                    89:72:5e:5a:f8:11:61:25:af:be:6e:23:26:a9:9a:
                    a9:58:6f:be:37:ac:9b:50:bd:4e:46:07:a2:8a:99:
                    13:22:e4:fe:6d:c1:44:67:2d:08:25:ff:4c:aa:cb:
                    5b:9b:25:6b:21:5e:b4:f8:b0:0f:3d:92:9a:bb:e3:
                    ee:25
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C1:BB:82:2B:25:8A:60:FC:D2:F6:C8:08:A5:51:67:49:8A:50:75:4C
            X509v3 Authority Key Identifier:
                keyid:0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                CA Repository - URI:rsync://rpki.apnic.net/member_repository/A91E1729/A7A1A29ADF1611E6BABC0E26C4F9AE02/
                RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A91E1729/A7A1A29ADF1611E6BABC0E26C4F9AE02/wbuCKyWKYPzS9sgIpVFnSYpQdUw.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  64093

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.252.80.0/22
                  110.232.188.0/22

    Signature Algorithm: sha256WithRSAEncryption
         82:72:b6:61:af:27:1f:da:38:4e:bb:e2:16:b1:33:70:3a:b9:
         02:c5:8a:cb:63:e0:a5:fb:68:ac:11:44:de:1c:a8:7b:f5:e8:
         7d:e6:66:82:0f:ce:86:7e:32:34:45:60:ee:d9:03:dc:f8:c9:
         3a:b9:6e:0e:75:95:d9:68:6a:99:a0:93:b2:b0:63:43:d9:71:
         d4:bf:fd:cd:8d:a8:be:de:63:a6:25:ad:83:72:40:b9:7c:de:
         01:44:88:4a:03:59:a8:23:fd:9b:55:98:6e:93:97:ff:09:af:
         63:59:ca:e9:75:db:b9:47:8c:52:3f:9a:eb:a6:0a:5d:bc:d1:
         31:b1:13:18:2e:4f:10:4a:42:68:97:22:f4:64:6f:0b:bf:51:
         52:34:8b:bb:ce:8f:fb:c5:f1:76:5a:c6:8e:57:8d:00:c1:b3:
         f5:50:1c:bc:a1:36:09:aa:01:76:df:6a:60:21:17:22:55:5f:
         de:18:e6:07:c2:0c:37:16:ef:f6:28:0e:40:29:71:97:de:16:
         dd:93:be:98:07:12:f7:8e:97:89:d8:33:9a:86:88:e6:ae:e9:
         b7:bb:a5:f6:ff:91:64:69:d6:3d:78:30:72:78:85:ed:34:53:
         f2:6a:9d:d4:98:3b:ca:04:a0:7e:c5:a7:67:30:a3:33:26:d3:
         28:b0:62:d9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 19 16:39:45 2026 by rpki-client