Certificate

$ rpki-client -vvf rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6suV_wV9ZBQAyjCUK1Yr0lY8rrQ.cer
File:                     6suV_wV9ZBQAyjCUK1Yr0lY8rrQ.cer (raw, json)
Hash identifier:          jihfIrNBfg0rT+ve+5mT3mfPL91qI/tlU/1bGNl08Zc=
Subject key identifier:   EA:CB:95:FF:05:7D:64:14:00:CA:30:94:2B:56:2B:D2:56:3C:AE:B4
Authority key identifier: 0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
Certificate issuer:       /CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Certificate serial:       0197E2
Authority info access:    rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
Manifest:                 rsync://rpki.apnic.net/member_repository/A91EA522/88692ABA534211EC8CD2D722C4F9AE02/6suV_wV9ZBQAyjCUK1Yr0lY8rrQ.mft
caRepository:             rsync://rpki.apnic.net/member_repository/A91EA522/88692ABA534211EC8CD2D722C4F9AE02/
Notify URL:               https://rrdp.apnic.net/notification.xml
Certificate not before:   Fri 14 Apr 2023 07:28:35 +0000
Certificate not after:    Mon 01 Jul 2024 00:00:00 +0000
Subordinate resources:    AS: 132694
                          IP: 103.18.92.0/22
                          IP: 2406:7700::/32

Validation:               OK
Signature path:           rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 15 May 2024 02:42:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 104418 (0x197e2)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
        Validity
            Not Before: Apr 14 07:28:35 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=A91EA522/serialNumber=EACB95FF057D641400CA30942B562BD2563CAEB4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:38:d1:eb:f0:6a:5c:77:0d:87:9d:36:bf:a3:
                    21:cb:24:f1:9a:fb:55:26:60:a1:6c:7e:95:f5:9d:
                    ae:57:4d:ff:36:df:7c:64:5f:65:d0:d7:3a:45:6f:
                    d9:3b:40:7d:2f:43:4c:d9:cd:37:6f:9d:fc:0e:1a:
                    f0:c0:df:2a:f7:ce:7c:57:13:ef:f0:c3:c9:c7:cb:
                    eb:5d:fa:0a:80:2d:7e:b4:f6:c8:22:c2:f7:1b:c3:
                    c4:1a:7b:b6:91:ad:9e:27:f0:45:08:51:f0:bd:4e:
                    d0:d0:12:8a:d8:9d:d8:e1:6a:60:3d:04:e0:cf:1b:
                    1e:df:b1:1f:49:fa:75:b6:46:c2:a7:ee:63:ad:99:
                    cd:ad:c8:47:fc:a2:4f:36:65:9c:69:fa:29:61:d4:
                    63:bd:bc:54:ce:a4:80:d2:82:51:f0:9f:dc:d5:7f:
                    f1:fa:0a:82:9a:29:72:a4:2c:2a:95:94:10:41:7f:
                    b4:4d:9b:06:22:19:89:92:7a:00:ff:f1:cd:08:b7:
                    85:25:21:63:b6:d7:e2:8c:cf:14:ff:ee:ee:65:6d:
                    aa:09:45:58:39:05:48:39:56:0c:06:ac:51:58:ba:
                    4e:93:91:58:b6:89:c6:cd:79:30:7b:72:5d:3d:04:
                    cd:e8:81:f4:60:c4:b8:1e:be:0c:29:36:cf:a7:b0:
                    cf:8f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EA:CB:95:FF:05:7D:64:14:00:CA:30:94:2B:56:2B:D2:56:3C:AE:B4
            X509v3 Authority Key Identifier:
                keyid:0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                CA Repository - URI:rsync://rpki.apnic.net/member_repository/A91EA522/88692ABA534211EC8CD2D722C4F9AE02/
                RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A91EA522/88692ABA534211EC8CD2D722C4F9AE02/6suV_wV9ZBQAyjCUK1Yr0lY8rrQ.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  132694

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.18.92.0/22
                IPv6:
                  2406:7700::/32

    Signature Algorithm: sha256WithRSAEncryption
         c1:1f:65:3f:56:1e:a8:b0:d5:25:e8:cb:2f:7b:bd:73:9a:25:
         25:41:e2:36:fb:8b:48:0c:62:7b:a8:27:4d:d1:6b:4e:ee:b4:
         0b:b9:33:6a:03:44:06:fd:20:90:47:e4:bf:3b:a1:b3:cc:57:
         26:16:b4:3e:31:3c:f8:11:0d:d2:a6:97:23:b9:07:61:c2:c6:
         ef:bb:91:f8:b0:a8:4c:2a:f0:91:df:a1:26:c0:5a:cf:02:1e:
         65:30:38:c2:ef:d3:d7:8c:b7:99:f2:20:ee:0a:54:45:65:cb:
         02:52:50:8b:2b:b8:3a:8d:5b:2d:83:29:b0:95:4e:5d:2c:24:
         29:12:ec:10:99:b6:72:04:5f:07:59:fd:80:c0:45:40:c1:ea:
         6e:15:ec:d2:4d:a1:c9:46:06:83:6a:d7:90:f7:32:83:fb:b0:
         e8:24:78:18:3a:cc:e3:57:8a:13:27:21:02:1d:1b:9c:3c:a1:
         1b:14:16:bc:83:e9:68:be:3d:ad:4a:c3:a9:e9:9d:76:ea:7d:
         f1:56:bc:d2:b4:fe:a5:04:6b:83:11:b2:26:c2:ff:91:0b:ec:
         f1:2a:d0:3e:29:cf:5d:16:79:fb:de:03:ca:3a:b1:ff:82:43:
         57:9e:d0:83:b9:23:32:da:f1:7c:b1:6c:65:81:f9:02:46:c6:
         0b:ec:0e:1d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 9 14:23:57 2024 by rpki-client on console-fra.rpki-client.org