Certificate

$ rpki-client -vvf rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/lf6-k6M6M5S9H2Dcu925_eByt_M.cer
File:                     lf6-k6M6M5S9H2Dcu925_eByt_M.cer (raw, json)
Hash identifier:          uWfjLtc8QmrqASppAhAfTyBU+/k9cmOrTyIWj1oJoVQ=
Subject key identifier:   95:FE:BE:93:A3:3A:33:94:BD:1F:60:DC:BB:DD:B9:FD:E0:72:B7:F3
Authority key identifier: 74:01:65:A8:0D:10:71:97:0A:BC:09:C0:2B:71:C1:AC:7C:1D:6E:0E
Certificate issuer:       /CN=A90DC5BE/serialNumber=740165A80D1071970ABC09C02B71C1AC7C1D6E0E
Certificate serial:       4BD1
Authority info access:    rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
Manifest:                 rsync://rpki.apnic.net/member_repository/A91EDB37/4DE635E078A011EB950D3175C4F9AE02/lf6-k6M6M5S9H2Dcu925_eByt_M.mft
caRepository:             rsync://rpki.apnic.net/member_repository/A91EDB37/4DE635E078A011EB950D3175C4F9AE02/
Notify URL:               https://rrdp.apnic.net/notification.xml
Certificate not before:   Mon 03 Jul 2023 23:05:36 +0000
Certificate not after:    Mon 30 Sep 2024 00:00:00 +0000
Subordinate resources:    IP: 129.227.0.0/16
                          IP: 156.59.0.0/16

Validation:               OK
Signature path:           rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 15 May 2024 02:42:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 19409 (0x4bd1)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A90DC5BE/serialNumber=740165A80D1071970ABC09C02B71C1AC7C1D6E0E
        Validity
            Not Before: Jul  3 23:05:36 2023 GMT
            Not After : Sep 30 00:00:00 2024 GMT
        Subject: CN=A91EDB37/serialNumber=95FEBE93A33A3394BD1F60DCBBDDB9FDE072B7F3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:97:c0:42:44:82:5d:ff:d6:be:be:b5:d6:d4:
                    66:d4:cb:c4:c8:a4:43:78:9c:f8:97:ab:27:e0:7e:
                    f0:e3:b5:d5:f1:a9:20:9a:91:ff:f0:06:13:aa:a1:
                    2a:7e:fe:c6:8a:85:61:3a:6b:ad:0a:0d:07:22:e9:
                    09:5b:32:72:62:c4:e7:e8:7e:0b:74:a7:5e:d0:bc:
                    64:77:48:b8:2c:8a:a7:80:c4:de:05:39:c3:e1:a5:
                    98:ee:0b:e5:36:77:30:8a:f6:7b:59:35:d8:65:37:
                    b7:0e:bb:6a:88:0d:34:04:3f:71:79:d6:62:f7:2b:
                    e4:0e:d7:e1:0c:a8:b5:32:c9:5e:a3:f5:7a:36:f3:
                    ba:8b:d0:df:0a:f5:e6:89:11:f6:0c:f0:52:a9:cc:
                    de:83:e2:c0:42:2b:1a:06:f4:d8:7e:b0:d0:30:0e:
                    85:33:d0:52:27:03:93:4f:39:79:d0:eb:2b:ae:2f:
                    1e:56:d5:25:24:d0:ea:af:19:3a:c1:9d:61:74:23:
                    90:eb:5b:8e:8b:34:db:ea:da:33:f2:c9:1f:1c:59:
                    63:ea:ec:df:b8:48:85:3f:3b:bb:5f:f7:f4:77:76:
                    45:f5:1d:f6:69:60:dc:74:22:6e:00:99:80:e2:8b:
                    79:0d:49:2d:cb:d1:95:13:ab:87:a7:bf:4f:2c:45:
                    8f:a7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                95:FE:BE:93:A3:3A:33:94:BD:1F:60:DC:BB:DD:B9:FD:E0:72:B7:F3
            X509v3 Authority Key Identifier:
                keyid:74:01:65:A8:0D:10:71:97:0A:BC:09:C0:2B:71:C1:AC:7C:1D:6E:0E

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                CA Repository - URI:rsync://rpki.apnic.net/member_repository/A91EDB37/4DE635E078A011EB950D3175C4F9AE02/
                RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A91EDB37/4DE635E078A011EB950D3175C4F9AE02/lf6-k6M6M5S9H2Dcu925_eByt_M.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  129.227.0.0/16
                  156.59.0.0/16

    Signature Algorithm: sha256WithRSAEncryption
         54:2f:52:98:a0:e6:2e:a4:ed:86:c8:e2:47:01:d9:4c:59:cc:
         52:3a:f7:d6:04:fd:46:01:dd:9e:15:69:0d:a7:09:90:15:de:
         0d:a0:13:1a:29:50:95:0e:c3:1d:d3:5b:1a:36:b3:4a:9a:da:
         74:f8:2e:40:05:ec:9d:a3:ed:7b:95:bc:80:40:27:ca:c3:74:
         90:dc:33:6d:87:44:4b:55:9b:2a:a7:3e:81:a0:f9:23:77:3d:
         4c:9e:35:86:c8:94:f1:4d:42:9b:9f:45:a5:74:13:6b:8f:eb:
         b6:55:08:8b:13:57:fe:5b:ae:40:36:26:03:4a:e3:d3:56:06:
         66:80:a0:a5:08:71:02:ef:38:49:a4:94:8c:1a:1c:18:4f:0b:
         01:81:cd:12:42:87:50:e3:79:4b:47:ba:9a:55:00:4d:01:7c:
         90:fc:94:cb:03:3f:13:60:e2:1d:ca:ba:b2:42:64:73:e1:1e:
         b1:a3:ea:52:0f:0b:6f:be:fa:d0:e5:1b:04:ec:74:b5:b1:26:
         82:7b:80:77:48:07:a2:63:1a:74:95:25:6b:be:c9:47:c0:de:
         d2:d2:81:22:e2:8c:79:a2:24:7b:ee:4b:9c:d3:57:6d:41:0e:
         e2:f9:ff:cc:32:c4:c9:c5:8e:3e:32:1c:2b:7e:a7:f8:6a:10:
         e9:db:a1:03
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 9 03:29:32 2024 by rpki-client on console-fra.rpki-client.org