Certificate

$ rpki-client -vvf rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MsQgReoLUWVRIk2Ajw1VUKBHO0M.cer
File:                     MsQgReoLUWVRIk2Ajw1VUKBHO0M.cer (raw, json)
Hash identifier:          XyoKV7pPmwE7Z05eoGArZYoSBm5Pc2ek/2yG0ECRqes=
Subject key identifier:   32:C4:20:45:EA:0B:51:65:51:22:4D:80:8F:0D:55:50:A0:47:3B:43
Authority key identifier: 0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
Certificate issuer:       /CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Certificate serial:       01A060
Authority info access:    rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
Manifest:                 rsync://rpki.apnic.net/member_repository/A915FB7F/1BAE26547CC911E792CBA944C4F9AE02/MsQgReoLUWVRIk2Ajw1VUKBHO0M.mft
caRepository:             rsync://rpki.apnic.net/member_repository/A915FB7F/1BAE26547CC911E792CBA944C4F9AE02/
Notify URL:               https://rrdp.apnic.net/notification.xml
Certificate not before:   Mon 01 May 2023 18:19:15 +0000
Certificate not after:    Mon 01 Jul 2024 00:00:00 +0000
Subordinate resources:    AS: 136479
                          IP: 103.89.152.0/23
                          IP: 103.126.4.0/23
                          IP: 2001:df0:d500::/48

Validation:               OK
Signature path:           rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 15 May 2024 02:42:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 106592 (0x1a060)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
        Validity
            Not Before: May  1 18:19:15 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=A915FB7F/serialNumber=32C42045EA0B516551224D808F0D5550A0473B43
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:04:54:0e:60:d4:14:91:ed:20:bb:14:bf:76:
                    e5:f6:8f:05:d7:00:ee:d7:fa:6f:23:ff:bc:a3:1a:
                    7f:c7:da:db:e7:d3:7a:b4:d2:96:3d:3c:8c:06:6a:
                    b9:22:fb:29:4d:46:c5:c8:90:87:af:66:dd:7a:3e:
                    a5:45:08:8a:ae:ce:1d:23:ba:74:44:fa:16:fb:bf:
                    3c:c3:aa:e8:31:5e:f3:51:4b:ef:a1:f7:2d:a1:97:
                    f3:39:7e:0b:13:bb:dd:63:88:2c:ad:32:21:b1:cb:
                    29:72:45:63:f9:67:00:76:f8:1f:46:eb:8b:12:03:
                    b5:35:b1:7d:8e:62:7c:9a:7c:6b:d8:af:82:2f:5e:
                    ec:dc:79:15:42:b4:7d:5b:4f:30:66:e9:7c:80:7f:
                    a0:d9:c5:f2:4b:33:3e:ed:c4:fa:36:69:c4:cc:3a:
                    4d:c4:78:53:d5:6e:c1:f8:f5:46:c0:c4:39:b2:0c:
                    2b:2b:a0:65:76:2a:58:5e:b4:a3:64:ae:9a:fc:94:
                    92:f9:20:c0:86:3f:0c:ac:ac:b0:ad:d8:db:89:4d:
                    e4:67:97:3c:44:2c:a2:6b:0c:62:a7:56:8b:a2:63:
                    d8:a8:4a:20:56:be:4f:4a:11:ce:a6:0e:38:e5:f0:
                    5f:3d:fb:41:6d:00:81:a0:d1:5d:11:b7:11:7f:26:
                    b8:39
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                32:C4:20:45:EA:0B:51:65:51:22:4D:80:8F:0D:55:50:A0:47:3B:43
            X509v3 Authority Key Identifier:
                keyid:0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                CA Repository - URI:rsync://rpki.apnic.net/member_repository/A915FB7F/1BAE26547CC911E792CBA944C4F9AE02/
                RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A915FB7F/1BAE26547CC911E792CBA944C4F9AE02/MsQgReoLUWVRIk2Ajw1VUKBHO0M.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  136479

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.89.152.0/23
                  103.126.4.0/23
                IPv6:
                  2001:df0:d500::/48

    Signature Algorithm: sha256WithRSAEncryption
         84:3d:2b:1b:9e:39:92:b3:2f:d4:52:27:89:9e:96:4a:19:80:
         c0:0a:32:6e:a4:a8:88:f5:04:09:c6:a7:5b:05:a0:d8:ae:bf:
         bf:b7:aa:5c:83:0f:e3:89:ae:fb:c2:dc:9c:7a:dd:b5:3f:57:
         36:f2:3a:9d:f3:db:ca:38:25:32:9e:6c:3e:ee:9c:e6:7c:46:
         cb:08:46:03:66:8d:90:55:3e:0d:7e:d3:ce:28:cb:4a:6d:11:
         0b:6d:53:a4:8d:77:75:18:84:a9:92:35:8e:c8:83:4c:b5:7d:
         cf:85:89:68:61:67:30:08:d2:a4:3e:92:ba:c2:52:d4:17:94:
         75:12:54:ff:69:8d:e3:78:26:ec:1e:87:ef:22:af:6f:60:b7:
         79:bd:18:f5:fd:fc:7e:03:41:64:ab:7b:d2:98:83:50:ba:79:
         6b:3e:8b:3b:6c:fd:95:ee:59:dc:3e:42:08:15:e6:9b:0a:e4:
         87:ad:fb:06:53:9f:ce:8e:72:ee:84:26:a7:02:7d:5e:ad:ff:
         c7:7c:6e:62:95:b0:62:6b:8e:7b:33:e7:aa:f6:a6:23:c9:0b:
         d4:b9:22:10:b2:ea:f4:d7:a5:2d:6d:8e:25:fa:2a:24:2c:0b:
         da:44:7d:cb:af:ba:e4:23:80:02:3c:cb:6d:65:27:56:6e:f6:
         4b:f8:7c:f8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 8 20:36:35 2024 by rpki-client on console-ams.rpki-client.org