Certificate

$ rpki-client -vvf rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5nV74dIYmt6NdyyclIZDEL45LXA.cer
File:                     5nV74dIYmt6NdyyclIZDEL45LXA.cer (raw, json)
Hash identifier:          8RMCmz12nkju3NAQJ3XC3oK7d8R296Iuc1zlx0v0aNA=
Subject key identifier:   E6:75:7B:E1:D2:18:9A:DE:8D:77:2C:9C:94:86:43:10:BE:39:2D:70
Authority key identifier: 0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
Certificate issuer:       /CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Certificate serial:       022509
Authority info access:    rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
Manifest:                 rsync://rpki.apnic.net/member_repository/A9111F9E/006CE99C500611EC9056CD45C4F9AE02/5nV74dIYmt6NdyyclIZDEL45LXA.mft
caRepository:             rsync://rpki.apnic.net/member_repository/A9111F9E/006CE99C500611EC9056CD45C4F9AE02/
Notify URL:               https://rrdp.apnic.net/notification.xml
Certificate not before:   Fri 27 Dec 2024 12:22:32 +0000
Certificate not after:    Mon 02 Mar 2026 00:00:00 +0000
Subordinate resources:    AS: 149032
                          IP: 103.177.48.0/23
                          IP: 2001:df0:1cc0::/48
Validation:               OK
Signature path:           rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 10 Apr 2025 23:51:19 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 140553 (0x22509)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A90DC5BE
        Validity
            Not Before: Dec 27 12:22:32 2024 GMT
            Not After : Mar  2 00:00:00 2026 GMT
        Subject: CN=A9111F9E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:d6:94:b2:73:e2:c1:0c:af:bd:09:56:cd:b2:
                    2c:e4:43:e9:bc:4f:64:fc:ad:ba:4d:b4:a3:29:99:
                    ff:ff:aa:44:a3:32:bc:fa:6e:30:34:f6:65:89:72:
                    0f:5c:19:d0:35:0e:5f:ad:1f:db:d1:2a:02:f5:be:
                    94:ac:34:db:26:b9:f9:2c:19:8b:fa:96:44:1e:4f:
                    86:af:eb:b7:af:76:af:15:19:2a:d6:ad:e6:92:77:
                    5a:0d:3c:28:2c:ea:60:e8:49:07:f8:d2:69:e0:92:
                    44:52:1b:34:de:80:df:63:db:cf:e8:a7:74:09:7b:
                    39:68:af:d6:df:ad:e4:df:1e:61:0b:4e:44:ea:eb:
                    f9:9c:e6:13:6b:bc:af:05:b4:fd:ff:8e:89:67:59:
                    38:0a:87:d2:75:7e:06:ee:67:db:d7:e4:5e:5b:f8:
                    09:ca:21:cc:f8:48:c4:7a:a6:07:3c:31:e5:46:c7:
                    23:5c:e9:7a:eb:de:de:3c:91:03:c4:6a:18:96:ba:
                    5c:38:5c:6b:82:13:26:d8:ca:3f:9e:4e:80:d0:aa:
                    a6:52:00:f4:a4:58:8e:1a:66:cd:ad:da:60:27:55:
                    2a:15:36:5f:e8:ab:a0:49:89:d6:2d:12:00:31:72:
                    ab:5a:8c:31:3d:f7:6e:33:d5:c3:8b:03:e4:20:1a:
                    48:35
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E6:75:7B:E1:D2:18:9A:DE:8D:77:2C:9C:94:86:43:10:BE:39:2D:70
            X509v3 Authority Key Identifier:
                keyid:0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                CA Repository - URI:rsync://rpki.apnic.net/member_repository/A9111F9E/006CE99C500611EC9056CD45C4F9AE02/
                RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A9111F9E/006CE99C500611EC9056CD45C4F9AE02/5nV74dIYmt6NdyyclIZDEL45LXA.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  149032

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.177.48.0/23
                IPv6:
                  2001:df0:1cc0::/48

    Signature Algorithm: sha256WithRSAEncryption
         5a:33:17:10:3a:99:fb:a5:4b:83:6c:b5:97:cb:94:0a:38:03:
         18:b2:ab:5d:03:a7:bb:01:b3:a7:f3:f0:fd:cb:1c:ab:34:03:
         f9:b0:b9:2c:98:3d:7e:06:63:8b:da:db:f2:e1:76:eb:6d:c8:
         35:f8:54:ed:f9:a0:5c:bd:4c:48:c6:57:03:dc:28:17:bd:80:
         42:6a:66:ed:94:5d:42:c6:64:8c:82:29:5c:dd:bc:3a:7f:e7:
         cf:22:e4:ea:22:56:6c:d4:ff:aa:fd:d6:84:70:02:b9:26:38:
         d3:0a:82:0c:3b:b6:5d:4b:56:6e:fd:f2:ad:2e:1a:95:cf:00:
         29:6b:d1:2c:4f:c6:ad:fc:12:ff:07:18:a0:32:df:2a:44:d7:
         5e:a2:dc:ff:ef:a6:b0:4a:64:62:aa:d4:b9:68:bc:7b:a8:cc:
         5d:fc:86:24:fe:a6:2d:a7:59:a2:14:43:e9:7f:d8:0c:54:2a:
         69:9f:e3:c3:ac:27:2b:81:69:f3:83:cf:42:fb:aa:fd:e5:df:
         76:e5:d3:06:7b:f2:41:18:57:00:55:57:15:9c:f5:f9:9a:f3:
         45:ff:ca:ce:45:01:0a:34:41:58:9b:a0:54:20:2f:86:36:3d:
         7a:13:56:16:db:2d:2d:0d:60:f2:f9:8c:79:0d:78:d4:1a:ba:
         bf:15:f3:27
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Fri Apr 4 02:10:13 2025 by rpki-client