Certificate

$ rpki-client -vvf rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/B2qM_AnS8rcX4jyBAokXiMq1UT4.cer
File:                     B2qM_AnS8rcX4jyBAokXiMq1UT4.cer (raw, json)
Hash identifier:          X5LmHt8TZxYT5yIPAgO/B4kw4JTIKl0KebOJWgK9pLE=
Subject key identifier:   07:6A:8C:FC:09:D2:F2:B7:17:E2:3C:81:02:89:17:88:CA:B5:51:3E
Authority key identifier: 0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
Certificate issuer:       /CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Certificate serial:       02C6CF
Authority info access:    rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
Manifest:                 rsync://rpki.apnic.net/member_repository/A914C9CD/0786670C865811F1B882EAF592A30FBC/B2qM_AnS8rcX4jyBAokXiMq1UT4.mft
caRepository:             rsync://rpki.apnic.net/member_repository/A914C9CD/0786670C865811F1B882EAF592A30FBC/
Notify URL:               https://rrdp.apnic.net/notification.xml
Certificate not before:   Thu 23 Jul 2026 05:33:31 +0000
Certificate not after:    Fri 28 May 2027 00:00:00 +0000
Subordinate resources:    AS: 133372
                          IP: 103.225.212.0/22
                          IP: 202.123.112.0/22
                          IP: 2404:d180::/32
Validation:               OK
Signature path:           rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 30 Jul 2026 16:43:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 181967 (0x2c6cf)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A90DC5BE, serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
        Validity
            Not Before: Jul 23 05:33:31 2026 GMT
            Not After : May 28 00:00:00 2027 GMT
        Subject: CN=A914C9CD, serialNumber=076A8CFC09D2F2B717E23C8102891788CAB5513E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d2:1d:2b:b6:13:35:1f:64:6d:b9:f2:fb:8d:c4:
                    c4:f8:44:31:62:fa:cf:c3:28:c9:b1:f8:8b:ca:71:
                    e2:e3:d9:b8:59:a0:0c:33:92:f6:7f:e3:c5:a4:e2:
                    cc:6e:75:be:4b:ca:00:77:11:a8:36:d6:e0:11:e4:
                    e2:a0:ab:d8:34:2d:7d:38:20:4c:5d:ce:21:57:5f:
                    15:b7:79:a2:5a:1e:ad:3a:3d:c8:ad:f9:1f:75:14:
                    ca:e5:58:ec:06:28:03:b5:a8:4c:34:b0:83:ad:36:
                    50:70:76:92:5e:fc:95:fb:85:7f:8b:91:03:72:04:
                    7f:71:54:65:f1:12:72:88:12:e3:f4:41:bb:b5:63:
                    ed:b5:00:85:cf:f4:71:8f:20:e1:b5:e4:92:1e:72:
                    a7:99:f4:c6:f7:54:9b:b3:13:18:7a:a6:25:d0:37:
                    89:52:3d:cb:23:1d:d7:5b:09:8c:93:c2:cd:b5:71:
                    dc:2f:00:92:44:2f:c5:e1:c6:33:49:26:76:e7:b1:
                    cd:73:1a:0a:0e:ad:48:d7:2f:88:d2:ce:fe:61:ca:
                    f9:d1:cb:cd:bc:c5:f6:01:1a:fe:fa:b9:63:10:2b:
                    c2:1b:1d:ec:3c:39:e7:24:99:6c:5d:a8:da:30:08:
                    ec:c6:39:56:ea:a4:89:6b:ba:09:0e:f6:50:7e:15:
                    bc:bf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                07:6A:8C:FC:09:D2:F2:B7:17:E2:3C:81:02:89:17:88:CA:B5:51:3E
            X509v3 Authority Key Identifier:
                keyid:0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                CA Repository - URI:rsync://rpki.apnic.net/member_repository/A914C9CD/0786670C865811F1B882EAF592A30FBC/
                RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A914C9CD/0786670C865811F1B882EAF592A30FBC/B2qM_AnS8rcX4jyBAokXiMq1UT4.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  133372

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.225.212.0/22
                  202.123.112.0/22
                IPv6:
                  2404:d180::/32

    Signature Algorithm: sha256WithRSAEncryption
         92:01:a8:35:6f:dd:0c:8e:be:fc:60:ed:c1:0f:ed:80:0c:d9:
         66:c5:ae:64:2e:67:a7:b4:61:1d:2a:70:26:e8:4b:83:c0:ad:
         93:18:67:d3:99:9f:0d:44:19:9d:df:43:18:cb:4f:65:ac:95:
         92:90:e5:11:5b:aa:9f:cd:52:db:23:f2:b1:b7:a2:bb:9b:0e:
         95:b7:d9:cb:a8:f1:62:88:20:a3:95:95:49:56:da:4f:1d:3b:
         04:b1:4e:5c:de:a9:48:3d:c9:b1:86:9d:86:c0:f5:e7:c2:4d:
         19:13:6d:d3:d1:48:e3:b0:1b:f2:73:45:31:00:b1:32:2b:df:
         c1:a7:6c:72:ba:47:45:e3:66:19:c5:b3:01:1a:67:62:89:80:
         2d:82:96:c8:65:ed:7e:b2:16:da:8f:3b:2c:6b:c6:08:2f:8e:
         88:20:a0:28:f0:6a:5e:9e:07:95:42:17:2c:39:22:79:e1:d8:
         ec:3f:b2:67:8f:96:de:f0:c2:dd:6b:26:e5:27:bc:5d:83:c3:
         cb:6b:c5:99:e9:25:96:4b:38:54:ee:fc:d1:4a:7b:15:4e:a7:
         76:ea:f4:80:62:93:31:fc:11:dd:8e:30:99:16:a4:96:7c:b1:
         1d:b9:12:ef:47:57:b7:03:dd:d6:b0:be:40:41:5d:1b:3d:e3:
         ec:cc:ef:3f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 23 21:17:47 2026 by rpki-client