Certificate

$ rpki-client -vvf rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/B-7MRCaowz1FkLzaEtl1DEkEhX0.cer
File:                     B-7MRCaowz1FkLzaEtl1DEkEhX0.cer (raw, json)
Hash identifier:          6M3YdEevVjPl8PLkhHpWP/dcEPN67d2hT2nHDy++yP4=
Subject key identifier:   07:EE:CC:44:26:A8:C3:3D:45:90:BC:DA:12:D9:75:0C:49:04:85:7D
Authority key identifier: 0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
Certificate issuer:       /CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Certificate serial:       029497
Authority info access:    rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
Manifest:                 rsync://rpki.apnic.net/member_repository/A914C90B/92842702E71011EEA9DBC252C4F9AE02/B-7MRCaowz1FkLzaEtl1DEkEhX0.mft
caRepository:             rsync://rpki.apnic.net/member_repository/A914C90B/92842702E71011EEA9DBC252C4F9AE02/
Notify URL:               https://rrdp.apnic.net/notification.xml
Certificate not before:   Fri 27 Feb 2026 03:20:39 +0000
Certificate not after:    Sat 01 May 2027 00:00:00 +0000
Subordinate resources:    AS: 45631
                          AS: 135400
                          AS: 142602
                          IP: 103.26.203.0/24
                          IP: 203.176.122.0/23
Validation:               OK
Signature path:           rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 08 Mar 2026 14:59:26 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 169111 (0x29497)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A90DC5BE, serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
        Validity
            Not Before: Feb 27 03:20:39 2026 GMT
            Not After : May  1 00:00:00 2027 GMT
        Subject: CN=A914C90B, serialNumber=07EECC4426A8C33D4590BCDA12D9750C4904857D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:de:2d:b5:b6:85:3f:a6:06:b5:79:18:fc:8c:65:
                    eb:ab:54:87:ca:a5:34:b0:74:b0:f1:25:61:49:f3:
                    94:63:b5:3e:aa:c3:73:bc:a0:4f:aa:33:9d:f2:28:
                    ba:49:88:a6:ad:38:ae:47:25:f1:89:cd:1c:f3:17:
                    29:17:a0:95:51:03:1f:52:5d:f2:16:6a:3a:fc:70:
                    ac:57:5f:ef:e2:51:a3:23:d1:a4:fe:5b:ae:7f:e5:
                    4b:2c:29:61:8a:56:6a:99:3c:90:3d:d3:db:cf:e4:
                    79:8a:d5:6a:ea:6d:2d:1e:4d:75:0b:4e:34:96:2e:
                    15:69:4a:65:a2:e8:c2:1a:95:d6:15:a0:51:ca:06:
                    89:97:cc:f5:28:0a:39:75:23:93:68:0d:57:2d:d9:
                    38:f6:77:fc:41:c8:11:60:f8:3c:28:43:87:d5:1c:
                    54:cc:4a:1c:5f:8f:7c:6b:a5:27:4a:62:b0:89:81:
                    68:54:43:b6:86:7b:65:84:a9:61:d6:27:4c:cb:11:
                    cf:11:29:0c:b5:d0:ec:59:12:09:23:24:84:a4:14:
                    8a:30:1f:17:f6:4f:c4:09:63:a3:a4:83:2c:69:a8:
                    79:cf:13:bf:d7:2f:80:0a:56:bc:b0:72:46:f9:d3:
                    8e:30:ec:68:f2:96:13:14:3c:76:48:ce:b5:e4:cf:
                    f1:1f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                07:EE:CC:44:26:A8:C3:3D:45:90:BC:DA:12:D9:75:0C:49:04:85:7D
            X509v3 Authority Key Identifier:
                keyid:0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                CA Repository - URI:rsync://rpki.apnic.net/member_repository/A914C90B/92842702E71011EEA9DBC252C4F9AE02/
                RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A914C90B/92842702E71011EEA9DBC252C4F9AE02/B-7MRCaowz1FkLzaEtl1DEkEhX0.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  45631
                  135400
                  142602

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.26.203.0/24
                  203.176.122.0/23

    Signature Algorithm: sha256WithRSAEncryption
         1e:3b:a4:25:dc:f2:9d:0a:ec:d7:35:f5:a1:af:32:aa:3d:26:
         b6:87:77:61:dc:df:8c:0a:1c:ad:6a:52:7b:f1:75:ef:98:87:
         93:d6:86:66:6d:4d:16:11:d7:21:bb:d8:b5:87:21:e3:0c:36:
         47:4d:f1:7f:3e:c3:7d:34:f0:b4:d9:e2:8a:ae:92:5a:a5:8c:
         ef:23:32:44:b4:08:be:40:fd:67:57:2a:c6:cd:ab:c6:bf:18:
         3a:8d:4b:8b:4b:04:1b:6c:20:1a:0b:3e:35:09:64:f9:52:45:
         29:02:38:b5:f9:d5:5a:d1:04:b9:20:cd:9b:0b:d3:28:ca:88:
         0b:01:8f:a5:44:57:74:d6:a4:7d:eb:8d:22:c3:58:7a:b4:4d:
         83:ff:f1:d5:4f:10:9a:67:0c:67:21:42:30:0e:b6:e7:32:ef:
         ab:3e:49:00:45:1e:e1:79:33:7e:b0:5a:96:6a:d4:bd:65:40:
         ac:a1:2f:18:9c:7c:79:6e:0e:3b:96:c9:b1:15:39:a3:36:49:
         1b:a0:bc:7a:55:af:18:09:74:48:34:f7:8a:27:ec:16:3a:1a:
         c2:9d:30:b4:16:8a:35:53:9e:ba:54:ce:09:58:8a:c1:cb:d5:
         56:3b:c8:e4:f0:5e:e0:2d:6c:fe:3d:a9:ce:0e:c7:7d:5c:8e:
         42:50:5f:93
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Sun Mar 1 18:23:07 2026 by rpki-client