Certificate

$ rpki-client -vvf rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5muokllQFHlLtkUdFCgchAAgYgM.cer
File:                     5muokllQFHlLtkUdFCgchAAgYgM.cer (raw, json)
Hash identifier:          VdUiy5PTyQZ7a5zsyLgkZpXWRTr2dFeI0ZRgcAZTBVo=
Subject key identifier:   E6:6B:A8:92:59:50:14:79:4B:B6:45:1D:14:28:1C:84:00:20:62:03
Authority key identifier: 0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
Certificate issuer:       /CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Certificate serial:       01B401
Authority info access:    rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
Manifest:                 rsync://rpki.apnic.net/member_repository/A9140BA4/47E9268668ED11E890E39549C4F9AE02/5muokllQFHlLtkUdFCgchAAgYgM.mft
caRepository:             rsync://rpki.apnic.net/member_repository/A9140BA4/47E9268668ED11E890E39549C4F9AE02/
Notify URL:               https://rrdp.apnic.net/notification.xml
Certificate not before:   Tue 01 Aug 2023 15:05:05 +0000
Certificate not after:    Mon 30 Sep 2024 00:00:00 +0000
Subordinate resources:    IP: 103.116.188.0/23
                          IP: 2001:df5:5d00::/48

Validation:               OK
Signature path:           rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 15 May 2024 02:42:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 111617 (0x1b401)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
        Validity
            Not Before: Aug  1 15:05:05 2023 GMT
            Not After : Sep 30 00:00:00 2024 GMT
        Subject: CN=A9140BA4/serialNumber=E66BA892595014794BB6451D14281C8400206203
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ed:c1:cf:eb:4c:68:85:a6:1b:f5:4b:e8:19:fb:
                    73:0a:f3:4e:9a:d4:79:40:ee:e0:c3:39:e8:6b:fc:
                    95:3d:43:23:73:29:90:c2:85:ee:ec:f8:39:c6:bf:
                    ba:e3:e9:df:b7:a0:ca:97:e1:ee:a1:30:a8:56:5b:
                    e8:7a:c2:8a:3f:e4:e7:b5:45:74:74:41:2c:8a:5d:
                    4c:cb:8f:e4:56:3e:5a:8e:1c:5e:e9:36:b3:a2:cc:
                    49:12:bf:ba:a6:74:6b:4f:ec:5c:43:89:1b:b5:69:
                    92:dc:7d:61:ab:03:d8:76:a0:1f:a0:c7:e0:09:60:
                    3d:0f:d2:c5:5e:c0:0b:51:13:7d:82:c6:99:94:39:
                    e6:f4:63:83:98:88:12:1d:52:69:3e:26:be:9d:a8:
                    f8:d1:78:a6:7e:ee:1b:2a:f2:5e:0c:65:9d:ff:e1:
                    a0:c2:56:c3:44:be:40:88:12:63:b6:7c:bf:a1:3e:
                    ca:2a:90:37:e7:03:b7:a5:c0:55:4f:d7:0a:8c:4f:
                    d5:3a:35:05:31:3d:2b:ae:8c:fa:a4:3a:4e:d2:27:
                    b6:47:67:b5:d3:c0:4d:7e:19:e1:58:6b:53:c0:7c:
                    40:bf:82:0d:e4:f9:eb:1e:34:42:19:50:c5:b3:84:
                    be:2b:19:48:90:f7:2f:1b:a9:95:f6:3a:32:e3:b3:
                    00:3b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E6:6B:A8:92:59:50:14:79:4B:B6:45:1D:14:28:1C:84:00:20:62:03
            X509v3 Authority Key Identifier:
                keyid:0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                CA Repository - URI:rsync://rpki.apnic.net/member_repository/A9140BA4/47E9268668ED11E890E39549C4F9AE02/
                RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A9140BA4/47E9268668ED11E890E39549C4F9AE02/5muokllQFHlLtkUdFCgchAAgYgM.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.116.188.0/23
                IPv6:
                  2001:df5:5d00::/48

    Signature Algorithm: sha256WithRSAEncryption
         b4:31:3a:a9:bb:1e:1b:d0:37:a0:f3:40:c0:57:37:e6:38:93:
         3b:35:7a:5e:05:08:04:74:10:a4:7c:e2:3b:37:f7:ef:28:fc:
         83:63:ca:f1:df:3b:64:c0:c9:4d:91:5b:92:23:b7:ba:7c:a2:
         94:6f:a3:c0:e6:4a:52:79:ad:1a:90:9d:4c:01:7f:38:ec:bd:
         2e:25:7c:c9:49:81:72:e4:d6:1b:e8:77:1d:04:85:e0:92:b6:
         fd:c1:b5:9f:a2:93:fd:fd:ae:a9:08:1a:94:8c:13:08:ef:10:
         e6:2a:de:11:0e:8b:b6:82:80:35:94:e3:d1:e7:d8:27:c9:14:
         ac:b1:1b:79:e3:24:39:8a:f4:8e:b0:99:97:67:60:97:0a:fd:
         35:64:bf:57:4d:10:68:2d:9d:34:d6:46:4f:2d:4a:28:aa:c7:
         bb:1e:30:c4:fc:d9:4e:42:c0:be:76:5b:68:34:98:bb:76:27:
         ef:a5:7f:8a:04:50:74:1f:af:92:4a:74:41:41:db:8d:07:e5:
         9e:bc:2f:97:be:aa:73:5f:a4:c3:86:c7:15:2d:00:c2:cf:a9:
         15:1d:04:2f:6f:e4:55:12:c2:6e:a2:a4:42:c1:a8:75:6a:26:
         a3:b6:ff:5f:b9:bc:1e:1e:01:41:b2:6e:0e:86:e0:00:96:1a:
         f1:7c:e8:29
-----BEGIN CERTIFICATE-----
MIIGDzCCBPegAwIBAgIDAbQBMA0GCSqGSIb3DQEBCwUAMEYxETAPBgNVBAMTCEE5
MERDNUJFMTEwLwYDVQQFEygwRTY1QTRGNUZEMzZCNUJENjhFQjNDOTIzNDA4OTc4
QzkwN0FBNzlGMB4XDTIzMDgwMTE1MDUwNVoXDTI0MDkzMDAwMDAwMFowRjERMA8G
A1UEAxMIQTkxNDBCQTQxMTAvBgNVBAUTKEU2NkJBODkyNTk1MDE0Nzk0QkI2NDUx
RDE0MjgxQzg0MDAyMDYyMDMwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB
AQDtwc/rTGiFphv1S+gZ+3MK806a1HlA7uDDOehr/JU9QyNzKZDChe7s+DnGv7rj
6d+3oMqX4e6hMKhWW+h6woo/5Oe1RXR0QSyKXUzLj+RWPlqOHF7pNrOizEkSv7qm
dGtP7FxDiRu1aZLcfWGrA9h2oB+gx+AJYD0P0sVewAtRE32CxpmUOeb0Y4OYiBId
Umk+Jr6dqPjReKZ+7hsq8l4MZZ3/4aDCVsNEvkCIEmO2fL+hPsoqkDfnA7elwFVP
1wqMT9U6NQUxPSuujPqkOk7SJ7ZHZ7XTwE1+GeFYa1PAfEC/gg3k+eseNEIZUMWz
hL4rGUiQ9y8bqZX2OjLjswA7AgMBAAGjggMEMIIDADAdBgNVHQ4EFgQU5muokllQ
FHlLtkUdFCgchAAgYgMwHwYDVR0jBBgwFoAUDmWk9f02tb1o6zySNAiXjJB6p58w
DgYDVR0PAQH/BAQDAgEGMA8GA1UdEwEB/wQFMAMBAf8wcwYDVR0fBGwwajBooGag
ZIZicnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2
NjExRTJCQjQ2OEY3QzcyRkQxRkYyL0RtV2s5ZjAydGIxbzZ6eVNOQWlYakpCNnA1
OC5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L3JlcG9zaXRvcnkvOTgwNjUyRTBCNzdFMTFFN0E5NkEzOTUyMUE0
RjRGQjQvRG1XazlmMDJ0YjFvNnp5U05BaVhqSkI2cDU4LmNlcjBKBgNVHSABAf8E
QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj
Lm5ldC9SUEtJL0NQUy5wZGYwggEoBggrBgEFBQcBCwSCARowggEWMF8GCCsGAQUF
BzAFhlNyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5
MTQwQkE0LzQ3RTkyNjg2NjhFRDExRTg5MEUzOTU0OUM0RjlBRTAyLzB+BggrBgEF
BQcwCoZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9B
OTE0MEJBNC80N0U5MjY4NjY4RUQxMUU4OTBFMzk1NDlDNEY5QUUwMi81bXVva2xs
UUZIbEx0a1VkRkNnY2hBQWdZZ00ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3Jy
ZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwMAYIKwYBBQUHAQcBAf8EITAf
MAwEAgABMAYDBAFndLwwDwQCAAIwCQMHACABDfVdADANBgkqhkiG9w0BAQsFAAOC
AQEAtDE6qbseG9A3oPNAwFc35jiTOzV6XgUIBHQQpHziOzf37yj8g2PK8d87ZMDJ
TZFbkiO3unyilG+jwOZKUnmtGpCdTAF/OOy9LiV8yUmBcuTWG+h3HQSF4JK2/cG1
n6KT/f2uqQgalIwTCO8Q5ireEQ6LtoKANZTj0efYJ8kUrLEbeeMkOYr0jrCZl2dg
lwr9NWS/V00QaC2dNNZGTy1KKKrHux4wxPzZTkLAvnZbaDSYu3Yn76V/igRQdB+v
kkp0QUHbjQflnrwvl76qc1+kw4bHFS0Aws+pFR0EL2/kVRLCbqKkQsGodWomo7b/
X7m8Hh4BQbJuDobgAJYa8XzoKQ==
-----END CERTIFICATE-----
Generated at Thu May 9 17:47:59 2024 by rpki-client on console-ams.rpki-client.org