Certificate

$ rpki-client -vvf rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6EKSkSMrng-5SFoKrUk9fgfH5NE.cer
File:                     6EKSkSMrng-5SFoKrUk9fgfH5NE.cer (raw, json)
Hash identifier:          0nIjao5ZgZW7nGWWgC7qZBQEiW0Uh/QsouSQcACxFY8=
Subject key identifier:   E8:42:92:91:23:2B:9E:0F:B9:48:5A:0A:AD:49:3D:7E:07:C7:E4:D1
Authority key identifier: 0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
Certificate issuer:       /CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Certificate serial:       0232BB
Authority info access:    rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
Manifest:                 rsync://rpki.apnic.net/member_repository/A9199696/2B811656F1A411EF8448EB22C4F9AE02/6EKSkSMrng-5SFoKrUk9fgfH5NE.mft
caRepository:             rsync://rpki.apnic.net/member_repository/A9199696/2B811656F1A411EF8448EB22C4F9AE02/
Notify URL:               https://rrdp.apnic.net/notification.xml
Certificate not before:   Sun 23 Feb 2025 05:08:14 +0000
Certificate not after:    Fri 01 May 2026 00:00:00 +0000
Subordinate resources:    AS: 153569
                          IP: 163.61.36.0/24
                          IP: 2001:df5:5c0::/48
Validation:               OK
Signature path:           rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 05 Apr 2025 05:08:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 144059 (0x232bb)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A90DC5BE
        Validity
            Not Before: Feb 23 05:08:14 2025 GMT
            Not After : May  1 00:00:00 2026 GMT
        Subject: CN=A9199696
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:83:5d:db:cb:fb:cd:0f:bf:e1:25:36:d1:bc:
                    5c:49:cf:99:c2:9d:2e:22:4e:7f:bb:dc:d6:27:79:
                    a1:2a:b7:96:3a:fa:2b:10:49:59:77:00:02:0c:81:
                    62:c9:4e:bd:47:34:63:1f:11:f2:cc:33:7f:93:56:
                    d0:85:a2:5c:f1:1d:df:22:3d:10:f0:02:bb:fd:72:
                    b5:80:de:e6:64:12:b0:32:bc:c2:e1:53:4e:73:b1:
                    55:e5:60:6b:81:40:84:c8:60:50:5b:be:41:71:a4:
                    9f:50:67:f4:69:c9:db:26:c5:6a:cb:63:b9:d1:96:
                    1c:37:e6:9b:f6:55:5f:2f:95:3c:ac:8e:18:2f:a3:
                    7f:04:65:23:56:e3:c4:bf:31:52:d2:7c:42:53:ee:
                    10:33:97:b2:9b:82:ac:53:bd:28:c7:ef:12:02:f4:
                    09:67:71:f8:87:0f:64:bd:df:a1:26:13:a4:73:37:
                    3f:81:07:23:aa:f1:8e:ce:9f:36:39:c4:5e:43:5c:
                    3f:a2:99:16:1a:65:8c:39:0c:e4:85:67:bb:52:86:
                    99:a3:29:83:24:d0:30:d5:e3:e8:ca:2f:5e:e9:66:
                    2b:d2:a1:e3:6b:cd:9b:34:50:f5:0c:6d:92:5b:e5:
                    12:a2:d5:52:b3:d8:70:9b:59:ec:f0:ba:91:1e:6a:
                    38:0b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E8:42:92:91:23:2B:9E:0F:B9:48:5A:0A:AD:49:3D:7E:07:C7:E4:D1
            X509v3 Authority Key Identifier:
                keyid:0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                CA Repository - URI:rsync://rpki.apnic.net/member_repository/A9199696/2B811656F1A411EF8448EB22C4F9AE02/
                RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A9199696/2B811656F1A411EF8448EB22C4F9AE02/6EKSkSMrng-5SFoKrUk9fgfH5NE.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  153569

            sbgp-ipAddrBlock: critical
                IPv4:
                  163.61.36.0/24
                IPv6:
                  2001:df5:5c0::/48

    Signature Algorithm: sha256WithRSAEncryption
         b9:0b:e3:13:de:34:14:a2:19:68:b6:31:a0:93:7c:40:17:6b:
         5e:f6:91:af:8e:a4:55:38:0f:bb:95:eb:a6:3a:90:74:ea:f2:
         d8:c9:d9:a4:f5:34:10:30:f3:c4:e1:59:3e:f9:e5:fb:4b:34:
         85:59:7a:2a:d6:c3:f3:5d:20:a4:02:a6:7c:23:40:34:07:2f:
         1c:45:51:e2:e1:eb:8b:d1:b0:72:d1:6a:18:13:d9:75:86:55:
         c3:4d:70:11:28:ea:80:0f:03:d8:fc:62:8a:61:6f:68:5f:d0:
         93:76:7a:bd:fe:5a:61:3a:e4:6d:fc:fd:c4:6e:70:1d:ed:bd:
         55:94:f9:fb:fa:db:48:ce:5b:e0:35:88:e8:de:a9:3f:5a:bb:
         8f:b2:92:a2:6d:af:2e:7d:d9:d5:5b:b3:11:fd:a0:23:17:29:
         6e:da:93:78:94:80:c7:5d:03:0f:4f:14:06:a9:ce:69:fb:d1:
         ac:42:4a:99:35:64:7a:4b:24:d6:f2:bc:f4:bf:ad:ca:4a:92:
         68:c2:92:d0:ad:e2:1a:7e:07:e1:03:09:28:c2:5a:97:32:41:
         c5:be:9b:34:1e:40:67:43:b7:e9:73:ee:17:75:dd:87:9b:76:
         7e:61:bd:81:80:46:fd:ec:77:c6:d4:0d:48:9a:bb:cd:fe:ba:
         ca:eb:af:30
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Fri Apr 4 02:10:07 2025 by rpki-client