Certificate

$ rpki-client -vvf rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6yX--P-P_HFEQDc2nK2vr2zYklI.cer
File:                     6yX--P-P_HFEQDc2nK2vr2zYklI.cer (raw, json)
Hash identifier:          NBTn2Bp9ot1hJm+CL6cPi6MRimpsj+XzQfQpRld6Q3U=
Subject key identifier:   EB:25:FE:F8:FF:8F:FC:71:44:40:37:36:9C:AD:AF:AF:6C:D8:92:52
Authority key identifier: 0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
Certificate issuer:       /CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Certificate serial:       01EDA8
Authority info access:    rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
Manifest:                 rsync://rpki.apnic.net/member_repository/A9185456/052E2C48D46211EDA7DC6E51C4F9AE02/6yX--P-P_HFEQDc2nK2vr2zYklI.mft
caRepository:             rsync://rpki.apnic.net/member_repository/A9185456/052E2C48D46211EDA7DC6E51C4F9AE02/
Notify URL:               https://rrdp.apnic.net/notification.xml
Certificate not before:   Fri 26 Apr 2024 16:48:06 +0000
Certificate not after:    Tue 01 Jul 2025 00:00:00 +0000
Subordinate resources:    IP: 203.15.107.0/24

Validation:               OK
Signature path:           rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 15 May 2024 02:42:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 126376 (0x1eda8)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
        Validity
            Not Before: Apr 26 16:48:06 2024 GMT
            Not After : Jul  1 00:00:00 2025 GMT
        Subject: CN=A9185456/serialNumber=EB25FEF8FF8FFC71444037369CADAFAF6CD89252
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:c1:cc:4a:6a:3b:a2:ec:ff:8e:ca:01:09:de:
                    b1:d7:4a:df:e8:e0:dd:7e:4f:8a:f2:a6:ec:b5:b5:
                    02:9c:13:fe:34:d3:2d:62:26:b3:70:71:19:7d:46:
                    ee:b6:b5:4f:42:56:d7:bf:9d:26:b0:09:19:66:cc:
                    a6:a6:a9:4c:88:47:2a:c4:f1:5d:3e:ad:20:f1:d6:
                    a3:d6:01:22:ba:54:37:ad:e6:23:1b:2f:7a:61:30:
                    dc:33:8e:4f:7c:a5:07:60:dd:c6:f7:21:3e:0d:4a:
                    5d:28:1d:84:72:53:84:92:7b:89:4a:3e:e1:73:ee:
                    6c:ac:62:90:fb:fb:2b:37:5d:9b:28:04:76:eb:48:
                    83:e1:8e:77:53:91:b5:99:86:54:ab:be:1f:82:10:
                    5f:87:14:d3:9b:cc:1e:53:0a:fb:73:2c:c2:41:56:
                    96:5e:34:a3:c8:01:ed:82:15:28:bb:f3:74:bb:30:
                    74:77:b0:96:6d:32:b0:e6:f4:48:88:e1:41:5f:dc:
                    cc:c1:99:05:9c:0e:8f:d2:b9:36:4a:00:dd:6f:eb:
                    18:bb:85:03:db:55:a9:3b:29:e3:7d:bb:6d:e2:7a:
                    83:1e:0b:7b:00:c4:72:5e:11:56:c6:0a:a5:76:a6:
                    57:28:48:4b:5b:d3:00:4e:49:fd:89:83:09:31:ee:
                    dd:23
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EB:25:FE:F8:FF:8F:FC:71:44:40:37:36:9C:AD:AF:AF:6C:D8:92:52
            X509v3 Authority Key Identifier:
                keyid:0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                CA Repository - URI:rsync://rpki.apnic.net/member_repository/A9185456/052E2C48D46211EDA7DC6E51C4F9AE02/
                RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A9185456/052E2C48D46211EDA7DC6E51C4F9AE02/6yX--P-P_HFEQDc2nK2vr2zYklI.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  203.15.107.0/24

    Signature Algorithm: sha256WithRSAEncryption
         07:35:a9:9d:ad:a9:b8:dc:70:3f:92:52:cb:1a:92:c6:2d:8f:
         02:52:04:fc:7a:67:b9:d7:9e:5c:3c:62:0a:fb:b0:be:b1:d1:
         c3:38:76:ad:77:71:bb:bb:b6:20:1e:1d:89:b9:df:49:b8:5c:
         06:51:48:72:ec:2c:82:fc:26:20:3c:ca:3e:49:9e:5f:a8:36:
         db:61:f2:9e:84:26:2b:e7:17:77:3a:56:36:11:82:be:c1:98:
         84:4a:f1:21:c4:d7:47:98:8d:10:dc:b8:e5:f9:73:3f:f6:4f:
         e9:c9:b8:0d:0f:71:df:c6:06:94:b3:37:6c:e0:81:35:3a:c0:
         16:b4:bf:52:a1:be:77:b8:b1:6d:9b:a6:0f:89:da:a3:d1:17:
         a1:2e:d7:48:3b:ff:c8:c2:75:c9:f4:15:cd:b5:08:40:79:06:
         df:86:88:d6:65:69:36:f2:79:36:d2:63:13:28:64:b1:96:06:
         b7:96:76:64:fa:b6:2b:61:e1:09:fe:5a:25:07:3e:5a:61:d1:
         9c:89:bb:80:4a:ff:a0:ca:81:ca:a4:76:63:a7:c5:7b:9d:d5:
         0d:e7:33:9d:c5:1f:5b:1f:63:4e:87:e4:c8:9c:a8:b7:c2:95:
         d1:b6:63:87:65:6b:97:d1:b1:51:9e:c2:43:14:bd:54:17:ac:
         59:a6:90:8f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 9 03:29:41 2024 by rpki-client on console-fra.rpki-client.org