Certificate

$ rpki-client -vvf rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/6t6GhZIRcEQyqBm4GJm2DF093os.cer
File:                     6t6GhZIRcEQyqBm4GJm2DF093os.cer (raw, json)
Hash identifier:          qsWWhTxb6AFdFi9y+J6NHlvVzhCI0FbWkBioqVpLrsQ=
Subject key identifier:   EA:DE:86:85:92:11:70:44:32:A8:19:B8:18:99:B6:0C:5D:3D:DE:8B
Authority key identifier: 0C:FC:E7:78:57:FC:F0:1F:39:D9:9A:62:B4:AA:62:E6:15:9E:76:F8
Certificate issuer:       /CN=A90DC5BE/serialNumber=0CFCE77857FCF01F39D99A62B4AA62E6159E76F8
Certificate serial:       4633
Authority info access:    rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DPzneFf88B852ZpitKpi5hWedvg.cer
Manifest:                 rsync://rpki.apnic.net/member_repository/A91A0432/EC692F04A4CA11ECAC4E5744C4F9AE02/6t6GhZIRcEQyqBm4GJm2DF093os.mft
caRepository:             rsync://rpki.apnic.net/member_repository/A91A0432/EC692F04A4CA11ECAC4E5744C4F9AE02/
Notify URL:               https://rrdp.apnic.net/notification.xml
Certificate not before:   Tue 07 May 2024 03:28:12 +0000
Certificate not after:    Wed 30 Jul 2025 00:00:00 +0000
Subordinate resources:    IP: 87.121.117.0/24

Validation:               OK
Signature path:           rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.crl
                          rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DPzneFf88B852ZpitKpi5hWedvg.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 15 May 2024 02:42:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 17971 (0x4633)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A90DC5BE/serialNumber=0CFCE77857FCF01F39D99A62B4AA62E6159E76F8
        Validity
            Not Before: May  7 03:28:12 2024 GMT
            Not After : Jul 30 00:00:00 2025 GMT
        Subject: CN=A91A0432/serialNumber=EADE86859211704432A819B81899B60C5D3DDE8B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:a6:08:82:bd:26:bb:f2:75:fa:17:04:70:42:
                    30:bb:c5:8f:bd:0f:5f:3d:1a:25:8f:8a:a4:7a:02:
                    72:7b:2e:c5:66:89:5e:2a:18:ab:28:a6:23:12:fe:
                    37:5f:74:99:4e:3d:94:c8:1e:5d:8c:75:f1:5a:49:
                    66:40:4b:73:6d:65:63:9e:4f:72:dd:04:0c:a0:38:
                    ee:1c:de:7a:b4:c6:da:d2:62:a7:01:43:e3:7c:f3:
                    42:c1:73:bf:e8:48:f0:e2:38:5a:a6:c4:3e:dc:6c:
                    3a:ef:ee:58:ed:32:27:11:44:61:0d:ba:57:fa:45:
                    06:e0:72:01:9d:56:34:40:64:64:c4:56:4e:8d:3c:
                    4f:6f:5c:92:64:19:10:83:a6:32:a3:5a:4c:38:ab:
                    7e:00:93:53:44:85:f6:6f:a2:b5:ff:f3:7a:2b:18:
                    64:7b:92:f0:51:4e:8f:e9:43:46:dd:1d:14:94:c2:
                    8a:43:0d:d5:2d:9e:38:7f:1c:02:f2:3c:da:6d:ac:
                    49:f4:47:7e:5a:c7:f7:22:40:94:00:7b:aa:1d:cd:
                    0c:df:81:15:ed:29:99:82:aa:f1:9d:2f:9b:8a:74:
                    b2:5c:25:cc:90:24:cc:da:91:26:25:b4:94:dc:ed:
                    7d:d4:42:0e:d1:61:bb:71:61:13:43:6f:95:63:93:
                    0a:27
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EA:DE:86:85:92:11:70:44:32:A8:19:B8:18:99:B6:0C:5D:3D:DE:8B
            X509v3 Authority Key Identifier:
                keyid:0C:FC:E7:78:57:FC:F0:1F:39:D9:9A:62:B4:AA:62:E6:15:9E:76:F8

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DPzneFf88B852ZpitKpi5hWedvg.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                CA Repository - URI:rsync://rpki.apnic.net/member_repository/A91A0432/EC692F04A4CA11ECAC4E5744C4F9AE02/
                RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A91A0432/EC692F04A4CA11ECAC4E5744C4F9AE02/6t6GhZIRcEQyqBm4GJm2DF093os.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  87.121.117.0/24

    Signature Algorithm: sha256WithRSAEncryption
         1a:8c:d1:5f:b9:e4:8d:61:06:f3:33:b5:3b:e3:85:b8:7e:45:
         ac:34:1c:63:81:57:e7:77:3c:ea:6e:80:21:14:13:6c:13:51:
         b9:73:45:f3:00:61:05:1b:b7:ad:22:24:2d:22:df:de:34:0a:
         f8:7b:0e:7b:48:5e:98:71:62:34:9c:30:ad:51:3c:0f:34:e4:
         c9:1d:2a:da:e2:b4:93:b6:53:26:4d:5b:c3:47:9f:f5:63:7a:
         ef:41:8e:f5:c1:59:7f:93:3e:65:37:f4:3d:80:19:5b:a3:c8:
         2d:0b:35:20:d4:66:7e:a4:0e:08:11:bc:5e:29:d2:b8:e1:20:
         6c:09:89:8b:75:58:72:aa:2e:be:b1:2c:7f:ae:91:e4:f1:26:
         38:cd:0e:82:dd:97:2b:53:8a:be:83:6a:15:5c:02:2f:91:27:
         32:a2:bc:64:c6:c5:1e:4b:54:c1:4a:3c:b1:45:b1:26:3e:54:
         c6:b3:8a:e3:3e:ea:5f:a7:00:82:f5:26:85:ea:96:6b:3c:49:
         52:b5:f4:a9:0c:ee:72:d3:9b:e8:2e:4a:2f:62:b6:42:fb:c1:
         9e:da:b8:38:e0:06:75:36:33:cb:9c:5d:3e:85:85:9f:ae:28:
         33:72:09:b9:6c:54:b1:c8:d5:15:ab:74:09:90:22:12:2e:c2:
         e0:a8:cf:29
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 10 03:24:17 2024 by rpki-client on console-fra.rpki-client.org