Certificate

$ rpki-client -vvf rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/B2lXYTNYblq0-b9NpSttXKFtnNU.cer
File:                     B2lXYTNYblq0-b9NpSttXKFtnNU.cer (raw, json)
Hash identifier:          u4VJYH2LHg+WXh4/+j8bgcOgDWewCNcwGXCtFu0TVxY=
Subject key identifier:   07:69:57:61:33:58:6E:5A:B4:F9:BF:4D:A5:2B:6D:5C:A1:6D:9C:D5
Authority key identifier: 0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
Certificate issuer:       /CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Certificate serial:       029E77
Authority info access:    rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
Manifest:                 rsync://rpki.apnic.net/member_repository/A911057B/A917E754260511EAB464E155C4F9AE02/B2lXYTNYblq0-b9NpSttXKFtnNU.mft
caRepository:             rsync://rpki.apnic.net/member_repository/A911057B/A917E754260511EAB464E155C4F9AE02/
Notify URL:               https://rrdp.apnic.net/notification.xml
Certificate not before:   Fri 27 Feb 2026 04:06:44 +0000
Certificate not after:    Tue 02 Mar 2027 00:00:00 +0000
Subordinate resources:    AS: 137182
                          IP: 103.104.98.0/24
                          IP: 103.143.172.0/24
                          IP: 2402:9c0::/32
Validation:               OK
Signature path:           rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 08 Mar 2026 18:27:22 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 171639 (0x29e77)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A90DC5BE, serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
        Validity
            Not Before: Feb 27 04:06:44 2026 GMT
            Not After : Mar  2 00:00:00 2027 GMT
        Subject: CN=A911057B, serialNumber=0769576133586E5AB4F9BF4DA52B6D5CA16D9CD5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:3a:08:00:e2:bb:85:20:55:cf:4d:46:ec:d6:
                    37:32:72:42:39:f0:49:b5:07:6b:b4:0e:85:c9:58:
                    19:56:97:1e:22:7a:16:5f:9e:fb:0f:8c:b5:0f:c4:
                    a7:aa:ad:eb:95:8f:49:28:bd:b7:82:56:2f:93:59:
                    fc:79:34:5f:5e:16:4a:67:f3:1d:6c:bb:cb:34:de:
                    d4:cb:eb:60:11:8d:7f:ad:85:42:93:c4:13:ec:c8:
                    29:29:80:87:8b:09:1c:41:1b:3e:ee:66:c7:e6:ea:
                    a1:16:43:3c:14:2e:c4:cd:56:7c:45:d9:78:5f:87:
                    75:7e:9a:1e:e7:5d:cb:ef:6e:18:7f:30:35:cb:57:
                    e9:b2:0f:83:7a:13:a7:45:8a:d4:f8:1e:55:67:98:
                    6e:c8:b5:05:60:09:4e:88:8a:6c:05:c7:11:fc:37:
                    c0:4b:4e:3a:67:09:78:c9:f0:0a:1d:4d:6a:fd:16:
                    3d:dd:d3:08:2a:d7:f5:90:55:66:a8:e9:fd:a1:a8:
                    e1:22:fa:84:25:41:43:3d:4b:f6:75:7c:12:8d:61:
                    52:69:62:ea:c0:5b:b5:56:1c:9f:84:e4:b5:b8:78:
                    4c:89:25:e7:fc:bb:6e:7e:da:94:d4:f8:d8:56:59:
                    b9:de:eb:2c:8a:74:06:a4:5c:d0:ad:d3:01:22:4b:
                    9b:d1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                07:69:57:61:33:58:6E:5A:B4:F9:BF:4D:A5:2B:6D:5C:A1:6D:9C:D5
            X509v3 Authority Key Identifier:
                keyid:0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                CA Repository - URI:rsync://rpki.apnic.net/member_repository/A911057B/A917E754260511EAB464E155C4F9AE02/
                RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A911057B/A917E754260511EAB464E155C4F9AE02/B2lXYTNYblq0-b9NpSttXKFtnNU.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  137182

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.104.98.0/24
                  103.143.172.0/24
                IPv6:
                  2402:9c0::/32

    Signature Algorithm: sha256WithRSAEncryption
         1e:62:23:36:93:bb:a4:39:0c:1e:62:4b:f2:17:bc:a6:0d:bf:
         d8:58:86:be:c3:d7:7f:4c:f3:dd:d6:bc:15:c9:b2:7c:c6:31:
         6b:c5:c0:a9:bf:c3:50:9c:68:55:4c:a8:c2:cb:6d:1a:dc:75:
         35:de:38:1e:cf:4f:85:c2:10:8f:82:5a:44:08:1d:40:37:ef:
         32:8c:73:f6:9d:24:9f:94:0e:84:80:a2:0e:26:22:72:90:07:
         80:c5:4e:1d:0c:26:e1:84:73:d3:3c:3d:d2:64:dc:3a:d3:3e:
         fb:50:56:26:dd:7a:cc:8b:bd:3e:37:eb:f7:ca:8f:29:16:77:
         cb:5a:4c:d6:2f:8e:11:5b:84:50:ee:09:d9:4a:cb:24:1e:b5:
         96:7f:7e:3e:9a:33:a2:58:95:63:ca:2c:93:da:fb:6e:18:72:
         f2:94:be:2f:cf:03:08:ed:33:8c:62:4e:28:e7:80:ee:0e:b5:
         b0:1f:cd:f3:48:f0:b8:91:b6:88:89:06:64:49:91:27:8b:2f:
         8c:ae:6d:10:a9:67:66:91:68:c9:21:28:aa:90:f1:e2:90:39:
         bc:d3:52:cc:c9:65:03:87:4b:80:ef:fc:5a:9e:ea:78:c1:45:
         4d:04:d0:02:76:e2:cd:ee:99:3a:57:9b:db:df:75:cf:d8:d9:
         94:5a:c9:58
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 02:32:36 2026 by rpki-client