Certificate

$ rpki-client -vvf rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WpbU7D01JJTZI51SrzWsEE2hL50.cer
File:                     WpbU7D01JJTZI51SrzWsEE2hL50.cer (raw, json)
Hash identifier:          6UL4Ux9FnJ+hHYORz2unA4Efl0f5TUXqFdllt42YLxs=
Subject key identifier:   5A:96:D4:EC:3D:35:24:94:D9:23:9D:52:AF:35:AC:10:4D:A1:2F:9D
Authority key identifier: 0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
Certificate issuer:       /CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Certificate serial:       029F1E
Authority info access:    rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
Manifest:                 rsync://rpki.apnic.net/member_repository/A9129E3A/197EC0B61D8611E2ABEF22DD08B02CD2/WpbU7D01JJTZI51SrzWsEE2hL50.mft
caRepository:             rsync://rpki.apnic.net/member_repository/A9129E3A/197EC0B61D8611E2ABEF22DD08B02CD2/
Notify URL:               https://rrdp.apnic.net/notification.xml
Certificate not before:   Fri 27 Feb 2026 04:09:43 +0000
Certificate not after:    Wed 31 Mar 2027 00:00:00 +0000
Subordinate resources:    AS: 9831
                          AS: 10085
                          AS: 24235
                          IP: 103.3.192.0/22
                          IP: 202.3.160.0/19
                          IP: 202.55.224.0/19
                          IP: 202.153.160.0 -- 202.153.207.255
                          IP: 2400:1300::/32
Validation:               OK
Signature path:           rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 08 Mar 2026 14:59:26 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 171806 (0x29f1e)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A90DC5BE, serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
        Validity
            Not Before: Feb 27 04:09:43 2026 GMT
            Not After : Mar 31 00:00:00 2027 GMT
        Subject: CN=A9129E3A, serialNumber=5A96D4EC3D352494D9239D52AF35AC104DA12F9D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:6f:22:3e:0b:a4:e3:eb:76:4b:3e:bc:ee:76:
                    60:de:cd:5d:94:5d:82:f3:7a:d5:e5:09:db:9a:80:
                    c8:a9:b1:ae:d6:f6:2f:3b:77:f4:fa:35:61:c8:9c:
                    5e:42:25:43:93:8a:0a:8d:fb:3d:27:24:0f:d8:2d:
                    39:fd:d6:b8:c5:02:df:14:9a:aa:8f:88:11:6c:d2:
                    99:44:b9:b1:07:95:46:24:5d:50:af:bb:7a:c3:93:
                    c5:7f:19:ef:1a:b9:04:d8:79:75:cc:d9:29:88:05:
                    9d:9d:7b:7b:26:69:6c:be:bc:58:0b:0f:6d:6a:ac:
                    82:3d:01:f8:0f:06:8d:66:5c:1b:83:44:6c:94:4d:
                    48:3e:6f:1e:f8:c0:a1:fe:d3:5d:5d:97:27:e9:34:
                    13:9b:b2:ff:ca:2d:a4:e9:4d:b5:2b:09:3c:83:ae:
                    39:bc:91:d4:6e:8d:93:6b:ea:fe:56:98:5a:85:9c:
                    dc:5f:07:e6:d2:71:d5:9d:8a:54:08:8c:c3:35:b0:
                    88:f7:5c:80:25:10:da:d8:93:54:0a:65:75:d1:3c:
                    73:30:e0:31:a4:ed:c6:64:3b:e1:a2:f4:d1:d3:e3:
                    39:f2:16:2a:a1:ba:0b:07:60:08:06:31:fc:58:8b:
                    09:57:cd:97:55:b2:93:bc:b4:7c:4e:5e:70:d4:0b:
                    8c:cf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5A:96:D4:EC:3D:35:24:94:D9:23:9D:52:AF:35:AC:10:4D:A1:2F:9D
            X509v3 Authority Key Identifier:
                keyid:0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                CA Repository - URI:rsync://rpki.apnic.net/member_repository/A9129E3A/197EC0B61D8611E2ABEF22DD08B02CD2/
                RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A9129E3A/197EC0B61D8611E2ABEF22DD08B02CD2/WpbU7D01JJTZI51SrzWsEE2hL50.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  9831
                  10085
                  24235

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.3.192.0/22
                  202.3.160.0/19
                  202.55.224.0/19
                  202.153.160.0-202.153.207.255
                IPv6:
                  2400:1300::/32

    Signature Algorithm: sha256WithRSAEncryption
         16:aa:5e:f9:3b:54:ac:32:8e:c0:2f:3e:38:06:e7:48:c9:86:
         65:dc:71:c7:de:19:63:21:4c:7e:18:b9:69:c0:fa:27:af:4c:
         cd:53:e1:43:0b:3e:01:2d:44:25:30:86:ea:cb:e4:28:05:a3:
         65:68:c7:9e:f5:36:70:23:73:5a:bf:bf:07:3f:75:2c:0c:ca:
         33:14:c4:4d:96:f9:59:d1:f9:e4:52:29:e0:78:cd:9d:c3:b0:
         0e:72:0b:b2:70:a6:37:2c:01:99:b9:c0:ac:2c:e3:02:a7:e3:
         e8:6d:bc:f4:5f:93:e5:7e:bc:8f:86:d2:ec:91:1d:29:9b:ac:
         c8:2b:dc:d5:99:3c:c4:3f:1f:c4:c8:d4:7e:8e:ba:be:4f:52:
         25:bf:a1:05:b1:85:4d:31:cf:fe:1b:bc:1e:5f:e5:86:fc:84:
         3f:4d:63:55:1d:e0:1d:31:84:9e:87:6b:a0:f2:68:3e:03:fb:
         6e:64:f9:2a:d3:db:24:1e:9e:ca:da:55:80:b5:c7:93:3a:0c:
         f8:f7:fa:ff:df:ff:6a:d1:bf:37:d1:4c:80:61:55:20:45:91:
         c9:d7:72:32:77:87:de:fc:1b:b3:2c:f0:c9:d4:55:57:a8:d6:
         c9:58:cb:69:a5:f1:28:b0:cc:ac:a4:08:4d:b6:40:a9:5b:20:
         1a:21:a5:08
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 1 18:24:40 2026 by rpki-client