Certificate

$ rpki-client -vvf rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/sVKnnxvpeDPCpvzW9J-dv9hDyYM.cer
File:                     sVKnnxvpeDPCpvzW9J-dv9hDyYM.cer (raw, json)
Hash identifier:          Emm/5EUU68Fd/sa46FTgg4ciVoXcuQ8G6c/GpO3z85s=
Subject key identifier:   B1:52:A7:9F:1B:E9:78:33:C2:A6:FC:D6:F4:9F:9D:BF:D8:43:C9:83
Authority key identifier: 74:01:65:A8:0D:10:71:97:0A:BC:09:C0:2B:71:C1:AC:7C:1D:6E:0E
Certificate issuer:       /CN=A90DC5BE/serialNumber=740165A80D1071970ABC09C02B71C1AC7C1D6E0E
Certificate serial:       61E0
Authority info access:    rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
Manifest:                 rsync://rpki.apnic.net/member_repository/A919C203/C59812F8C58611EE91166B83C4F9AE02/sVKnnxvpeDPCpvzW9J-dv9hDyYM.mft
caRepository:             rsync://rpki.apnic.net/member_repository/A919C203/C59812F8C58611EE91166B83C4F9AE02/
Notify URL:               https://rrdp.apnic.net/notification.xml
Certificate not before:   Wed 05 Feb 2025 04:26:08 +0000
Certificate not after:    Fri 01 May 2026 00:00:00 +0000
Subordinate resources:    IP: 157.15.69.0/24
Validation:               Failed, CRL has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 25056 (0x61e0)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A90DC5BE
        Validity
            Not Before: Feb  5 04:26:08 2025 GMT
            Not After : May  1 00:00:00 2026 GMT
        Subject: CN=A919C203
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d4:f3:3a:60:45:7e:19:3c:ff:98:3c:14:48:2b:
                    3f:5d:25:86:b1:72:16:78:8c:23:bc:b8:7d:83:8c:
                    94:f1:32:3b:1c:76:46:82:38:5c:69:ab:32:5d:73:
                    1a:6e:37:fd:8e:66:0f:70:b9:89:36:ad:38:ae:13:
                    a8:9f:63:18:51:c1:c7:21:4c:ab:6e:f1:74:8a:dc:
                    c8:1f:17:84:99:d3:2d:09:a7:ac:bb:3e:9a:57:58:
                    3f:11:0d:f8:ad:f1:d1:c4:4c:84:1c:77:9f:9d:bb:
                    a3:d8:03:ae:08:51:72:0e:5d:59:2c:32:5f:48:55:
                    cc:13:1f:b8:80:1d:15:75:79:f8:88:12:41:4e:5d:
                    c8:f8:77:b8:96:14:e5:eb:a9:1f:2c:6a:2b:89:01:
                    89:09:ba:3b:2f:06:f2:21:b7:f0:78:0c:9b:84:de:
                    d7:83:b9:cc:18:18:95:79:67:9b:68:33:d5:cc:d1:
                    e9:f3:03:71:ef:36:d2:d0:49:a3:aa:22:4c:59:43:
                    92:90:c3:8e:a0:f0:8a:7a:1d:10:41:d2:9d:89:f1:
                    ce:6d:ad:9b:9b:cb:86:e0:13:05:71:47:21:de:82:
                    0e:3b:d0:63:62:1b:87:1e:98:ed:d1:be:2b:d0:ef:
                    66:8d:60:67:bf:1c:97:1c:55:bd:c0:15:24:b2:49:
                    ef:e3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B1:52:A7:9F:1B:E9:78:33:C2:A6:FC:D6:F4:9F:9D:BF:D8:43:C9:83
            X509v3 Authority Key Identifier:
                keyid:74:01:65:A8:0D:10:71:97:0A:BC:09:C0:2B:71:C1:AC:7C:1D:6E:0E

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                CA Repository - URI:rsync://rpki.apnic.net/member_repository/A919C203/C59812F8C58611EE91166B83C4F9AE02/
                RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A919C203/C59812F8C58611EE91166B83C4F9AE02/sVKnnxvpeDPCpvzW9J-dv9hDyYM.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  157.15.69.0/24

    Signature Algorithm: sha256WithRSAEncryption
         98:f1:e4:03:80:88:8d:0c:c8:34:99:ec:e0:05:2d:56:00:23:
         ab:97:64:87:a3:c2:f6:50:1f:25:00:85:a5:37:13:5e:db:a7:
         33:d0:e8:16:94:91:f8:1b:c6:c0:d1:91:3b:e0:6a:1e:ef:4a:
         dc:a0:13:06:e5:0c:b7:60:cc:38:53:66:3a:f6:7b:95:88:22:
         61:a4:1b:85:53:0c:a4:33:00:c7:1f:8d:06:6f:f4:45:f0:49:
         12:2d:40:95:8b:13:2c:78:22:17:04:70:d1:bc:db:54:a4:c2:
         63:79:07:7d:30:01:27:65:ca:f5:e6:1d:f4:7d:7a:26:19:3c:
         b9:89:e7:f0:c7:bc:6c:51:6c:25:64:da:2d:0d:55:11:48:fd:
         c3:5d:34:ca:0c:b0:30:7a:2c:d2:77:b5:8a:ba:0f:88:4f:8c:
         f6:3b:5a:6b:9b:ec:0e:28:c5:29:dd:67:b9:ce:7d:42:e5:14:
         ba:52:43:0a:96:12:5a:a1:32:ba:4e:5c:c2:6f:f9:77:df:ca:
         de:62:56:fa:6b:7f:44:08:1f:16:fc:2a:f6:f0:8e:51:c8:32:
         d5:61:32:a2:71:1c:8d:67:ab:46:ba:78:f0:40:a0:db:5e:53:
         25:f0:1f:e8:d4:79:f3:e5:a9:41:bc:bc:db:8c:87:12:e0:32:
         74:ed:62:65
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 14:35:57 2025 by rpki-client