Certificate

$ rpki-client -vvf rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/G1Zt71944xm_wNFADedV4mSoK7w.cer
File:                     G1Zt71944xm_wNFADedV4mSoK7w.cer (raw, json)
Hash identifier:          IAkGdRYNoKKIwnaEZnrTLWEItTg6YAFu/6+7C8ufDFc=
Subject key identifier:   1B:56:6D:EF:5F:78:E3:19:BF:C0:D1:40:0D:E7:55:E2:64:A8:2B:BC
Authority key identifier: 0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
Certificate issuer:       /CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Certificate serial:       01CD79
Authority info access:    rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
Manifest:                 rsync://rpki.apnic.net/member_repository/A91C20AB/6BE550B0B09311EA8AF3175EC4F9AE02/G1Zt71944xm_wNFADedV4mSoK7w.mft
caRepository:             rsync://rpki.apnic.net/member_repository/A91C20AB/6BE550B0B09311EA8AF3175EC4F9AE02/
Notify URL:               https://rrdp.apnic.net/notification.xml
Certificate not before:   Tue 28 Nov 2023 21:40:10 +0000
Certificate not after:    Sun 02 Mar 2025 00:00:00 +0000
Subordinate resources:    AS: 137269
                          AS: 138035
                          IP: 103.106.117.0/24
                          IP: 103.120.41.0/24

Validation:               OK
Signature path:           rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 29 Nov 2024 20:43:15 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 118137 (0x1cd79)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
        Validity
            Not Before: Nov 28 21:40:10 2023 GMT
            Not After : Mar  2 00:00:00 2025 GMT
        Subject: CN=A91C20AB/serialNumber=1B566DEF5F78E319BFC0D1400DE755E264A82BBC
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:65:03:98:70:06:78:5a:86:1e:63:e7:21:31:
                    49:70:eb:5f:31:8f:2a:92:a9:84:87:fa:9e:76:e3:
                    99:23:d9:f3:f4:ae:42:b4:2b:08:ab:b5:f6:ec:09:
                    0f:5f:a6:64:00:1c:d1:f2:a4:0f:fa:6e:aa:d1:96:
                    88:2b:f8:af:84:1c:f8:08:32:e9:47:9b:32:26:38:
                    25:3b:71:fe:d2:94:13:3a:4e:f6:e1:fe:ae:ef:f2:
                    99:f5:9c:62:19:90:19:b5:c3:9e:20:24:87:db:af:
                    cb:b6:a9:cf:d8:8a:a0:cb:6a:d5:0b:30:05:77:6b:
                    5a:39:51:70:49:69:90:aa:86:8d:83:32:db:7a:a7:
                    74:9a:98:fb:c1:69:e7:94:5b:d0:75:ac:0a:09:e1:
                    34:1b:df:02:95:cb:f3:a5:d7:c7:fc:6a:3d:fb:d7:
                    77:7a:6f:d7:cd:b0:fc:ac:30:30:e6:43:97:c1:d7:
                    ea:81:33:dc:e6:c9:7c:a2:1d:cd:c3:24:91:0b:b9:
                    d5:4d:55:e8:81:2a:de:a6:ee:7a:f5:90:59:f4:75:
                    96:f4:af:12:9e:65:d6:4c:7a:89:cb:2a:e4:5c:64:
                    98:f9:c3:da:92:a7:e7:73:af:68:4c:09:14:3e:2f:
                    8d:14:d8:af:ea:9c:ab:d3:a5:4d:53:8e:ec:f0:a9:
                    cf:37
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1B:56:6D:EF:5F:78:E3:19:BF:C0:D1:40:0D:E7:55:E2:64:A8:2B:BC
            X509v3 Authority Key Identifier:
                keyid:0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                CA Repository - URI:rsync://rpki.apnic.net/member_repository/A91C20AB/6BE550B0B09311EA8AF3175EC4F9AE02/
                RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A91C20AB/6BE550B0B09311EA8AF3175EC4F9AE02/G1Zt71944xm_wNFADedV4mSoK7w.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  137269
                  138035

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.106.117.0/24
                  103.120.41.0/24

    Signature Algorithm: sha256WithRSAEncryption
         cd:04:b9:07:bc:0d:65:1c:d0:d7:b7:e0:cd:62:22:f4:6f:d3:
         d4:38:c4:23:d1:76:27:5d:a9:67:3e:87:85:f3:1b:f0:c4:35:
         d0:de:b1:29:06:69:95:1d:ac:73:a2:35:23:80:ce:27:02:64:
         1f:7b:bf:39:24:63:f3:de:43:0d:9b:9d:e3:32:ee:aa:d3:ae:
         96:55:43:12:b2:81:4a:90:b5:91:95:f7:c1:3d:de:e2:f2:20:
         95:22:2d:2f:90:ba:ad:9c:ef:44:da:84:60:32:c3:25:73:99:
         8b:d4:1c:82:ce:c3:3b:a3:43:0b:c5:94:60:1a:52:fe:0d:d6:
         18:d6:c2:4d:d4:be:00:a7:43:df:5c:83:d5:1f:ce:81:5f:9f:
         bb:2c:4a:fa:27:99:b3:31:4d:c3:83:0c:c9:9b:7d:82:29:8e:
         44:3a:5b:cc:55:6d:a4:1f:c3:58:8c:92:e3:90:54:c9:75:e2:
         4a:04:3b:5e:a2:4c:20:62:9e:26:89:1b:94:63:85:17:8d:4e:
         66:b2:c7:be:78:66:26:b0:17:fc:cd:d9:24:fb:36:e1:f3:93:
         10:79:11:a4:f2:ef:b8:c3:16:1d:18:84:20:bb:68:17:a5:a7:
         98:7c:b3:1c:4b:35:01:be:dc:45:3c:eb:8c:8d:e0:5b:3a:3a:
         a9:10:81:88
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 22:24:33 2024 by rpki-client on console-fra.rpki-client.org