Certificate

$ rpki-client -vvf rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6FKljehxn4vGvWSUmFS0dEe4nN4.cer
File:                     6FKljehxn4vGvWSUmFS0dEe4nN4.cer (raw, json)
Hash identifier:          fCDEtGHhD+4AklRRjOSfLYDyXKpr3ZwdqiFe95oqtnY=
Subject key identifier:   E8:52:A5:8D:E8:71:9F:8B:C6:BD:64:94:98:54:B4:74:47:B8:9C:DE
Authority key identifier: 0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
Certificate issuer:       /CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Certificate serial:       01BFD6
Authority info access:    rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
Manifest:                 rsync://rpki.apnic.net/member_repository/A918F862/1E6F6C120FF911E9A0D92B0FC4F9AE02/6FKljehxn4vGvWSUmFS0dEe4nN4.mft
caRepository:             rsync://rpki.apnic.net/member_repository/A918F862/1E6F6C120FF911E9A0D92B0FC4F9AE02/
Notify URL:               https://rrdp.apnic.net/notification.xml
Certificate not before:   Tue 26 Sep 2023 17:44:09 +0000
Certificate not after:    Sun 01 Dec 2024 00:00:00 +0000
Subordinate resources:    AS: 132372
                          IP: 103.28.90.0/23
                          IP: 103.72.162.0/23
                          IP: 103.117.20.0/24
                          IP: 103.122.164.0/24
                          IP: 2403:fd40::/32

Validation:               OK
Signature path:           rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 15 May 2024 02:42:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 114646 (0x1bfd6)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
        Validity
            Not Before: Sep 26 17:44:09 2023 GMT
            Not After : Dec  1 00:00:00 2024 GMT
        Subject: CN=A918F862/serialNumber=E852A58DE8719F8BC6BD64949854B47447B89CDE
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9b:6e:47:f1:90:aa:87:ba:d0:fc:2c:d3:1e:01:
                    fb:49:8c:b2:3f:d5:29:ab:bd:fb:c9:0c:71:ed:68:
                    eb:dd:8a:22:ed:14:31:28:43:cc:97:25:38:4c:51:
                    25:7c:8f:7a:82:1b:b7:e9:53:ec:03:c2:aa:5e:ab:
                    40:6b:00:ed:a6:b9:f1:10:28:e9:f5:af:b6:57:48:
                    75:05:aa:24:a1:85:34:e3:47:8d:db:c1:85:23:90:
                    81:89:fa:bd:57:c2:8b:47:ef:52:2b:69:f7:95:c5:
                    d9:e3:aa:c5:8a:eb:fe:62:17:2a:ec:fd:47:6e:79:
                    36:70:9b:3c:8f:06:4f:79:95:70:1d:78:c0:d0:da:
                    b5:b2:b3:7c:2c:ae:49:03:91:e0:34:b0:8d:a0:76:
                    03:8d:2f:f8:e1:9f:0b:73:6d:f7:1d:98:b8:1b:d6:
                    17:d8:8f:a8:42:3d:24:25:11:fe:c1:25:de:44:72:
                    0a:cc:2a:c9:04:4e:1b:d4:59:20:e0:1e:0c:53:12:
                    00:8d:25:df:9a:43:8c:a1:9d:f1:9a:ec:ea:cc:cc:
                    50:a0:1b:05:ed:f8:0e:e5:bd:cd:85:23:c6:2c:3e:
                    6e:df:6f:28:3f:15:6c:3f:0d:39:de:5b:a0:27:a1:
                    f3:19:2f:32:35:b7:90:e2:7c:24:93:fa:0c:ec:8c:
                    4a:0f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E8:52:A5:8D:E8:71:9F:8B:C6:BD:64:94:98:54:B4:74:47:B8:9C:DE
            X509v3 Authority Key Identifier:
                keyid:0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                CA Repository - URI:rsync://rpki.apnic.net/member_repository/A918F862/1E6F6C120FF911E9A0D92B0FC4F9AE02/
                RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A918F862/1E6F6C120FF911E9A0D92B0FC4F9AE02/6FKljehxn4vGvWSUmFS0dEe4nN4.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  132372

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.28.90.0/23
                  103.72.162.0/23
                  103.117.20.0/24
                  103.122.164.0/24
                IPv6:
                  2403:fd40::/32

    Signature Algorithm: sha256WithRSAEncryption
         7b:b1:17:53:0e:8d:1b:a0:eb:7a:a6:8f:76:9d:1f:ce:20:4a:
         36:e4:2d:c6:ab:3a:b1:6d:68:b8:83:55:8e:bb:12:a6:4b:83:
         61:7d:6a:6f:7c:54:73:7e:94:f2:e8:2c:e8:48:36:4d:62:6d:
         be:68:fa:7d:5c:63:40:c6:28:92:21:78:73:9c:20:07:95:78:
         09:d0:42:5d:2e:c1:7c:a5:77:11:eb:e4:89:08:ab:48:e2:76:
         17:53:17:34:5f:68:6a:25:8e:84:19:e7:b0:e0:bb:38:21:f3:
         74:5e:8d:59:3c:c6:f1:1c:5f:ed:49:18:d7:75:1d:da:d0:dc:
         a5:06:ab:cf:d6:0d:97:b8:de:3e:10:04:0b:72:5c:d5:88:0a:
         09:98:73:5c:c5:d4:86:26:72:a2:1a:06:b2:50:c2:7b:55:96:
         d6:d6:6a:a5:ad:93:05:15:84:3c:1f:43:b1:9d:80:73:3d:f6:
         74:1d:9c:82:b9:fb:a8:36:ed:61:20:c9:1f:fe:84:36:ff:56:
         12:48:6f:dc:98:ff:44:78:e8:4c:d8:92:23:c8:01:d9:f4:e3:
         6b:06:0a:0d:63:41:8d:b0:2f:70:8e:fb:80:c0:91:c0:9c:84:
         b4:e4:b0:54:4b:7c:70:dd:b2:8d:0b:e3:bc:93:a6:1a:4f:dc:
         e4:13:95:39
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 9 10:23:53 2024 by rpki-client on console-fra.rpki-client.org