Certificate

$ rpki-client -vvf rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/pFVIOEAp8fN2pyJjKU0GWujJRCI.cer
File:                     pFVIOEAp8fN2pyJjKU0GWujJRCI.cer (raw, json)
Hash identifier:          vXDxCzxJ1v1/h7FL0pYbCH1WWZ8GQEIxWVnmxqLXSgw=
Subject key identifier:   A4:55:48:38:40:29:F1:F3:76:A7:22:63:29:4D:06:5A:E8:C9:44:22
Authority key identifier: 74:01:65:A8:0D:10:71:97:0A:BC:09:C0:2B:71:C1:AC:7C:1D:6E:0E
Certificate issuer:       /CN=A90DC5BE/serialNumber=740165A80D1071970ABC09C02B71C1AC7C1D6E0E
Certificate serial:       4F98
Authority info access:    rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
Manifest:                 rsync://rpki.apnic.net/member_repository/A9137992/18A81EF08D2E11EB9840E05FC4F9AE02/pFVIOEAp8fN2pyJjKU0GWujJRCI.mft
caRepository:             rsync://rpki.apnic.net/member_repository/A9137992/18A81EF08D2E11EB9840E05FC4F9AE02/
Notify URL:               https://rrdp.apnic.net/notification.xml
Certificate not before:   Tue 26 Dec 2023 13:41:22 +0000
Certificate not after:    Sun 02 Mar 2025 00:00:00 +0000
Subordinate resources:    IP: 192.100.77.0/24

Validation:               OK
Signature path:           rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 15 May 2024 02:42:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 20376 (0x4f98)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A90DC5BE/serialNumber=740165A80D1071970ABC09C02B71C1AC7C1D6E0E
        Validity
            Not Before: Dec 26 13:41:22 2023 GMT
            Not After : Mar  2 00:00:00 2025 GMT
        Subject: CN=A9137992/serialNumber=A45548384029F1F376A72263294D065AE8C94422
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:2b:bc:2c:d3:73:d7:c0:1f:3e:c0:60:d3:72:
                    4f:b7:b1:35:59:15:5a:c7:80:6f:83:97:c4:78:89:
                    4b:7c:ea:01:4d:29:9e:f6:a4:b7:33:66:c9:0e:b0:
                    79:c0:b2:cf:9f:1a:3e:d0:c4:ad:59:01:5c:96:c9:
                    84:cd:40:46:6e:de:a2:d0:b4:97:84:a2:d2:13:94:
                    87:0e:4b:40:7b:89:d3:51:84:78:7b:2c:5d:bd:16:
                    1a:a7:01:64:11:14:14:99:0f:ab:1a:32:9d:61:6f:
                    da:f9:94:ac:9b:15:3d:88:b3:77:21:27:10:fd:4a:
                    c3:f3:bf:ec:ad:c4:97:0d:6e:6f:09:0d:62:56:79:
                    29:c7:fd:66:4c:9f:0f:82:0f:13:ff:6c:05:2a:cd:
                    e3:9c:45:e2:cf:f1:90:3d:f4:ab:55:62:d0:46:d1:
                    71:69:79:22:eb:46:37:9f:c2:92:1b:40:37:4a:d9:
                    60:f3:e3:be:58:bf:bd:55:f6:80:77:a1:77:12:40:
                    ac:1d:36:38:3e:3f:b7:98:d1:3b:75:e7:cb:ed:bf:
                    56:5e:46:f1:81:17:0b:a0:12:d7:9f:35:63:96:06:
                    f3:3d:e4:87:2f:a6:2a:dd:87:3c:73:49:80:40:f4:
                    8b:a0:08:4f:1b:50:d4:b2:7e:4f:0d:82:7d:cd:eb:
                    f2:99
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A4:55:48:38:40:29:F1:F3:76:A7:22:63:29:4D:06:5A:E8:C9:44:22
            X509v3 Authority Key Identifier:
                keyid:74:01:65:A8:0D:10:71:97:0A:BC:09:C0:2B:71:C1:AC:7C:1D:6E:0E

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                CA Repository - URI:rsync://rpki.apnic.net/member_repository/A9137992/18A81EF08D2E11EB9840E05FC4F9AE02/
                RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A9137992/18A81EF08D2E11EB9840E05FC4F9AE02/pFVIOEAp8fN2pyJjKU0GWujJRCI.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.100.77.0/24

    Signature Algorithm: sha256WithRSAEncryption
         5c:29:65:51:df:b0:90:ee:f5:bb:99:61:90:d3:64:b9:3b:f5:
         85:01:56:60:7b:5d:4b:ad:fd:34:16:49:6e:67:c4:b8:26:f2:
         60:ab:d9:9d:db:d8:5a:33:f0:89:c9:21:ec:97:35:9e:55:3b:
         fd:fa:a4:f6:98:d8:fb:0d:c9:2b:56:c6:9e:fe:5f:36:5f:03:
         c8:e8:d3:30:9c:a3:e2:8b:ee:d1:f3:3b:0a:9c:5e:b2:68:77:
         d1:1b:c0:62:d8:d5:53:67:47:61:21:63:b2:75:fb:d5:89:6e:
         2b:6c:b7:3a:f2:e9:3d:f5:b8:bf:b0:38:a5:55:3b:d0:d0:df:
         b9:d3:8e:ea:ae:03:3b:8a:d8:1c:b7:52:0d:99:fd:1f:b2:9f:
         14:35:c6:7a:63:52:e6:f3:b4:94:c3:a5:f7:c5:51:80:77:d4:
         e3:13:28:7a:f0:25:be:52:3e:ba:17:3e:5e:9d:a4:94:80:3c:
         e5:b4:c1:ac:ae:b7:fc:75:cd:15:29:26:85:0b:4a:2a:b4:19:
         8c:17:a3:7f:0e:11:63:35:d8:cc:89:cd:40:aa:5d:2e:dc:e5:
         d3:da:ba:6c:13:1e:8a:d7:7b:05:a9:e4:31:b1:52:23:b7:a1:
         34:4e:0d:d2:b3:7f:0b:e8:0c:2b:fa:fe:c9:42:91:5d:dc:e5:
         ec:97:a1:4b
-----BEGIN CERTIFICATE-----
MIIF/TCCBOWgAwIBAgICT5gwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkw
REM1QkUxMTAvBgNVBAUTKDc0MDE2NUE4MEQxMDcxOTcwQUJDMDlDMDJCNzFDMUFD
N0MxRDZFMEUwHhcNMjMxMjI2MTM0MTIyWhcNMjUwMzAyMDAwMDAwWjBGMREwDwYD
VQQDEwhBOTEzNzk5MjExMC8GA1UEBRMoQTQ1NTQ4Mzg0MDI5RjFGMzc2QTcyMjYz
Mjk0RDA2NUFFOEM5NDQyMjCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEB
AL8rvCzTc9fAHz7AYNNyT7exNVkVWseAb4OXxHiJS3zqAU0pnvaktzNmyQ6wecCy
z58aPtDErVkBXJbJhM1ARm7eotC0l4Si0hOUhw5LQHuJ01GEeHssXb0WGqcBZBEU
FJkPqxoynWFv2vmUrJsVPYizdyEnEP1Kw/O/7K3Elw1ubwkNYlZ5Kcf9ZkyfD4IP
E/9sBSrN45xF4s/xkD30q1Vi0EbRcWl5IutGN5/CkhtAN0rZYPPjvli/vVX2gHeh
dxJArB02OD4/t5jRO3Xny+2/Vl5G8YEXC6AS1581Y5YG8z3khy+mKt2HPHNJgED0
i6AITxtQ1LJ+Tw2Cfc3r8pkCAwEAAaOCAvMwggLvMB0GA1UdDgQWBBSkVUg4QCnx
83anImMpTQZa6MlEIjAfBgNVHSMEGDAWgBR0AWWoDRBxlwq8CcArccGsfB1uDjAO
BgNVHQ8BAf8EBAMCAQYwDwYDVR0TAQH/BAUwAwEB/zBzBgNVHR8EbDBqMGigZqBk
hmJyc3luYzovL3Jwa2kuYXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRGMjAxRDY2
MTFFMjhBQzg4MzdDNzJGRDFGRjIvZEFGbHFBMFFjWmNLdkFuQUszSEJySHdkYmc0
LmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5h
cG5pYy5uZXQvcmVwb3NpdG9yeS85ODA2NTJFMEI3N0UxMUU3QTk2QTM5NTIxQTRG
NEZCNC9kQUZscUEwUWNaY0t2QW5BSzNIQnJId2RiZzQuY2VyMEoGA1UdIAEB/wRA
MD4wPAYIKwYBBQUHDgIwMDAuBggrBgEFBQcCARYiaHR0cHM6Ly93d3cuYXBuaWMu
bmV0L1JQS0kvQ1BTLnBkZjCCASgGCCsGAQUFBwELBIIBGjCCARYwXwYIKwYBBQUH
MAWGU3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
Mzc5OTIvMThBODFFRjA4RDJFMTFFQjk4NDBFMDVGQzRGOUFFMDIvMH4GCCsGAQUF
BzAKhnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5
MTM3OTkyLzE4QTgxRUYwOEQyRTExRUI5ODQwRTA1RkM0RjlBRTAyL3BGVklPRUFw
OGZOMnB5SmpLVTBHV3VqSlJDSS5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJk
cC5hcG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAfBggrBgEFBQcBBwEB/wQQMA4w
DAQCAAEwBgMEAMBkTTANBgkqhkiG9w0BAQsFAAOCAQEAXCllUd+wkO71u5lhkNNk
uTv1hQFWYHtdS639NBZJbmfEuCbyYKvZndvYWjPwickh7Jc1nlU7/fqk9pjY+w3J
K1bGnv5fNl8DyOjTMJyj4ovu0fM7Cpxesmh30RvAYtjVU2dHYSFjsnX71YluK2y3
OvLpPfW4v7A4pVU70NDfudOO6q4DO4rYHLdSDZn9H7KfFDXGemNS5vO0lMOl98VR
gHfU4xMoevAlvlI+uhc+Xp2klIA85bTBrK63/HXNFSkmhQtKKrQZjBejfw4RYzXY
zInNQKpdLtzl09q6bBMeitd7BankMbFSI7ehNE4N0rN/C+gMK/r+yUKRXdzl7Jeh
Sw==
-----END CERTIFICATE-----
Generated at Thu May 9 03:38:11 2024 by rpki-client on console-ams.rpki-client.org