Certificate

$ rpki-client -vvf rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/C5sr_BxrLAlndq91fTrxRUfkPnI.cer
File:                     C5sr_BxrLAlndq91fTrxRUfkPnI.cer (raw, json)
Hash identifier:          1xPBlwDxf3dHZcLW/CGHRfjwdQzgdEZ1bMzTURpoVQ4=
Subject key identifier:   0B:9B:2B:FC:1C:6B:2C:09:67:76:AF:75:7D:3A:F1:45:47:E4:3E:72
Authority key identifier: 74:01:65:A8:0D:10:71:97:0A:BC:09:C0:2B:71:C1:AC:7C:1D:6E:0E
Certificate issuer:       /CN=A90DC5BE/serialNumber=740165A80D1071970ABC09C02B71C1AC7C1D6E0E
Certificate serial:       5486
Authority info access:    rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
Manifest:                 rsync://rpki.apnic.net/member_repository/A918F646/CECE8C9AF48E11E8B14A341EC4F9AE02/C5sr_BxrLAlndq91fTrxRUfkPnI.mft
caRepository:             rsync://rpki.apnic.net/member_repository/A918F646/CECE8C9AF48E11E8B14A341EC4F9AE02/
Notify URL:               https://rrdp.apnic.net/notification.xml
Certificate not before:   Fri 12 Apr 2024 17:10:11 +0000
Certificate not after:    Tue 01 Jul 2025 00:00:00 +0000
Subordinate resources:    IP: 167.179.48.0/20

Validation:               OK
Signature path:           rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 15 May 2024 02:42:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 21638 (0x5486)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A90DC5BE/serialNumber=740165A80D1071970ABC09C02B71C1AC7C1D6E0E
        Validity
            Not Before: Apr 12 17:10:11 2024 GMT
            Not After : Jul  1 00:00:00 2025 GMT
        Subject: CN=A918F646/serialNumber=0B9B2BFC1C6B2C096776AF757D3AF14547E43E72
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:7a:10:02:06:84:01:11:f5:99:df:35:e8:29:
                    67:27:24:f3:a6:07:2b:30:65:d2:41:ba:76:10:9a:
                    8e:25:c6:24:b1:39:06:4f:17:1c:8e:90:3f:a8:fe:
                    39:9d:52:35:ad:ca:78:d3:bc:91:9a:60:d3:c9:29:
                    74:51:7b:d1:80:20:0c:b1:99:76:ce:41:52:1b:a9:
                    40:10:a0:f1:5c:30:c1:8b:39:5c:ec:e8:7e:79:4d:
                    34:7d:d2:67:1a:df:3b:3e:9f:25:94:eb:39:93:15:
                    b0:1c:77:3d:b1:a2:b8:0f:88:b6:2e:5f:bc:88:2f:
                    2c:67:59:77:43:d9:a2:75:b9:c4:a1:5d:53:5e:6c:
                    7a:72:20:a2:9f:91:99:54:bd:2a:85:07:88:a3:53:
                    35:d4:0c:a8:af:7e:c9:b2:51:46:f5:1e:43:08:47:
                    28:71:e0:05:b3:76:af:9a:1d:c2:6c:77:7e:d1:7e:
                    da:b4:1b:63:bc:41:74:2c:05:47:b1:03:ec:a0:57:
                    d4:2f:4a:a6:7b:2b:78:0e:32:4d:1e:eb:5c:68:44:
                    aa:6a:90:ff:8e:76:4f:3f:9f:52:af:8f:42:99:b6:
                    b3:22:fb:a4:c1:2a:57:10:ba:c6:92:19:0b:97:27:
                    85:33:2f:9e:e7:2a:6f:80:7e:50:f8:0d:5d:23:14:
                    f6:1d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0B:9B:2B:FC:1C:6B:2C:09:67:76:AF:75:7D:3A:F1:45:47:E4:3E:72
            X509v3 Authority Key Identifier:
                keyid:74:01:65:A8:0D:10:71:97:0A:BC:09:C0:2B:71:C1:AC:7C:1D:6E:0E

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                CA Repository - URI:rsync://rpki.apnic.net/member_repository/A918F646/CECE8C9AF48E11E8B14A341EC4F9AE02/
                RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A918F646/CECE8C9AF48E11E8B14A341EC4F9AE02/C5sr_BxrLAlndq91fTrxRUfkPnI.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  167.179.48.0/20

    Signature Algorithm: sha256WithRSAEncryption
         13:a3:6e:90:a0:a3:b0:86:49:32:1b:51:f3:a4:42:9e:70:ee:
         e5:33:8c:49:b1:70:70:f9:71:ad:01:18:5a:ea:02:b5:59:31:
         68:32:85:d5:40:6f:58:52:92:77:52:64:1d:d5:51:32:8d:59:
         9c:bc:58:ff:a8:40:21:70:85:11:6a:10:8f:f7:38:87:77:b8:
         78:fc:a2:a3:cb:33:65:bb:eb:c0:07:23:bc:4f:6c:21:2c:c6:
         cf:43:73:00:46:de:e5:49:de:75:78:d1:e5:08:6d:38:1d:85:
         9a:b2:6d:19:19:6c:e3:7e:5a:62:2b:ef:84:cc:1d:c3:fb:42:
         17:a8:b1:b8:e5:d1:90:57:a1:ad:98:13:da:32:35:e5:65:48:
         5c:c2:65:eb:38:dc:8a:d7:11:19:42:98:48:64:ec:2d:6f:da:
         2c:e8:bb:a0:5a:f9:60:20:86:28:b6:ac:5b:53:0a:40:94:fb:
         f2:10:3e:a7:51:14:74:85:3a:77:f9:88:32:c2:f3:8b:19:14:
         d5:b7:5a:5a:0a:be:80:49:4d:bd:a4:9b:ab:6a:71:5f:02:59:
         1b:77:87:e2:66:8e:ca:fc:be:0a:4c:53:b4:5d:80:90:9f:df:
         5d:0e:a4:f3:28:bd:44:57:5f:1e:38:6c:cd:99:29:7f:83:37:
         7e:4e:06:2e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 9 15:20:43 2024 by rpki-client on console-fra.rpki-client.org