Certificate

$ rpki-client -vvf rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9fW2D5FdvXIk_85g8fnQXoNwLvM.cer
File:                     9fW2D5FdvXIk_85g8fnQXoNwLvM.cer (raw, json)
Hash identifier:          Vb6dlgPQCRT9QOa1RatbiAV3PyoDZPfW9U+m+vY8QVc=
Subject key identifier:   F5:F5:B6:0F:91:5D:BD:72:24:FF:CE:60:F1:F9:D0:5E:83:70:2E:F3
Authority key identifier: 0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
Certificate issuer:       /CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Certificate serial:       029F07
Authority info access:    rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
Manifest:                 rsync://rpki.apnic.net/member_repository/A91E585B/B86CCF58F20511F0818B77324A6F56BC/9fW2D5FdvXIk_85g8fnQXoNwLvM.mft
caRepository:             rsync://rpki.apnic.net/member_repository/A91E585B/B86CCF58F20511F0818B77324A6F56BC/
Notify URL:               https://rrdp.apnic.net/notification.xml
Certificate not before:   Fri 27 Feb 2026 04:09:15 +0000
Certificate not after:    Wed 31 Mar 2027 00:00:00 +0000
Subordinate resources:    IP: 202.44.145.0/24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 08 Mar 2026 18:27:22 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 171783 (0x29f07)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A90DC5BE, serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
        Validity
            Not Before: Feb 27 04:09:15 2026 GMT
            Not After : Mar 31 00:00:00 2027 GMT
        Subject: CN=A91E585B, serialNumber=F5F5B60F915DBD7224FFCE60F1F9D05E83702EF3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8e:bd:51:03:74:d8:ab:1d:05:8e:39:b8:9d:98:
                    29:ba:86:72:52:f6:b7:39:8b:0b:47:d2:07:d9:32:
                    31:50:97:0a:1a:b5:68:b2:61:a5:1f:83:fd:9f:c1:
                    e5:8e:e5:b4:c9:82:f0:23:c7:0d:4c:49:b5:7b:6d:
                    59:87:1c:7a:0b:6d:50:69:e3:83:cb:27:0f:34:a0:
                    d4:40:97:78:02:b5:22:7a:14:16:2e:3a:9b:78:42:
                    bc:7c:6a:a5:d1:cb:3e:3d:74:33:2a:eb:54:0b:5e:
                    ec:b1:6f:3b:69:88:b3:c2:71:62:07:81:87:1d:89:
                    8a:c7:d2:6e:1c:0f:23:06:de:27:f5:94:8c:b2:e8:
                    e5:49:20:07:b4:82:59:ba:6f:d2:c8:d8:d9:72:11:
                    d4:7d:36:f5:ea:1b:cb:1b:ef:67:97:bc:ad:54:79:
                    65:11:e1:1e:e4:d7:31:63:4a:f5:85:49:a4:c0:74:
                    34:c6:cf:00:ad:c1:dc:ed:3a:99:4b:17:d2:60:2a:
                    cc:06:90:0d:31:e7:35:62:2c:da:65:da:cd:5b:e2:
                    7b:ee:a1:02:5f:4f:a2:c1:97:44:1a:c9:32:fa:b5:
                    20:fd:1f:56:f4:05:f8:dd:a2:63:aa:5b:df:a2:96:
                    c1:dd:56:82:b9:03:81:3f:82:1e:e6:27:37:48:e9:
                    da:61
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F5:F5:B6:0F:91:5D:BD:72:24:FF:CE:60:F1:F9:D0:5E:83:70:2E:F3
            X509v3 Authority Key Identifier:
                keyid:0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                CA Repository - URI:rsync://rpki.apnic.net/member_repository/A91E585B/B86CCF58F20511F0818B77324A6F56BC/
                RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A91E585B/B86CCF58F20511F0818B77324A6F56BC/9fW2D5FdvXIk_85g8fnQXoNwLvM.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  202.44.145.0/24

    Signature Algorithm: sha256WithRSAEncryption
         b0:45:86:eb:12:00:08:3e:4d:f3:c8:57:4d:1d:0e:aa:f5:57:
         69:2b:19:8f:ee:a0:4a:2f:33:36:3e:de:4e:2a:b1:09:63:93:
         0e:75:e4:e0:5e:8f:a7:11:7b:0a:47:8e:a3:e7:3f:bd:9b:7f:
         54:89:93:c5:48:27:5e:1d:cb:b8:48:54:0c:86:14:82:45:78:
         83:50:bb:e8:d4:4e:40:a0:f5:58:4e:a0:33:06:eb:da:2f:1c:
         e8:9f:68:4a:7f:ec:52:a8:52:ba:46:ee:79:76:5f:c8:ca:40:
         44:70:83:bb:03:81:f0:8f:73:b0:2a:46:8c:c3:c8:0c:f2:7b:
         8c:a1:36:92:93:71:08:c1:61:31:a2:83:74:2b:13:94:60:5d:
         56:1f:ba:24:0e:17:c7:79:b4:6a:ac:c9:37:0e:89:ec:96:ab:
         7d:e0:45:a2:55:f9:18:6d:f2:b4:18:58:ff:88:89:30:77:44:
         e3:b2:d3:75:f2:bd:ef:8e:8b:57:80:25:b3:4c:a6:79:c7:39:
         6e:6d:88:74:c7:22:a9:dc:92:87:27:9c:e8:b8:ad:80:09:a2:
         6b:dc:eb:8a:dd:74:5c:3a:30:3e:5f:a9:dc:27:2b:ba:47:35:
         bf:fa:54:fe:06:4e:a5:58:72:1c:2c:88:4a:b8:80:db:b1:66:
         dd:6e:52:e1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 01:52:41 2026 by rpki-client