Certificate

$ rpki-client -vvf rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Sew5-RvAfq8SKvqqC9t7U9iBDAc.cer
File:                     Sew5-RvAfq8SKvqqC9t7U9iBDAc.cer (raw, json)
Hash identifier:          KOSx3kEhGCOz/IGOvoNLIyldmiXXp/iahCmT6tzO2B8=
Subject key identifier:   49:EC:39:F9:1B:C0:7E:AF:12:2A:FA:AA:0B:DB:7B:53:D8:81:0C:07
Authority key identifier: 0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
Certificate issuer:       /CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Certificate serial:       022364
Authority info access:    rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
Manifest:                 rsync://rpki.apnic.net/member_repository/A91736B7/4054701A7B4B11EBA8B3523CC4F9AE02/Sew5-RvAfq8SKvqqC9t7U9iBDAc.mft
caRepository:             rsync://rpki.apnic.net/member_repository/A91736B7/4054701A7B4B11EBA8B3523CC4F9AE02/
Notify URL:               https://rrdp.apnic.net/notification.xml
Certificate not before:   Wed 18 Dec 2024 16:59:32 +0000
Certificate not after:    Mon 02 Mar 2026 00:00:00 +0000
Subordinate resources:    AS: 139784
                          IP: 103.145.50.0/23
                          IP: 2001:df5:4280::/48
Validation:               OK
Signature path:           rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 05 Apr 2025 05:08:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 140132 (0x22364)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A90DC5BE
        Validity
            Not Before: Dec 18 16:59:32 2024 GMT
            Not After : Mar  2 00:00:00 2026 GMT
        Subject: CN=A91736B7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:50:63:c1:94:b7:e4:8b:dc:81:d9:f1:e3:ea:
                    a0:f9:ee:d5:c5:71:31:32:c6:0e:43:32:d0:cc:c1:
                    7c:8a:e7:81:6d:9c:75:7f:39:7e:c7:32:a9:1c:56:
                    ab:57:28:09:37:e5:34:70:e5:08:12:2b:fa:64:ac:
                    d1:78:15:b0:3d:e8:b0:c2:88:9c:48:b0:7c:6a:60:
                    bf:c8:6c:a3:1a:30:24:3e:3c:84:bb:a0:32:ae:f6:
                    c9:f3:f9:28:8d:66:9d:ad:41:cc:3c:c9:42:45:21:
                    22:23:e5:4e:37:01:96:b3:dc:6e:01:0b:f0:a1:60:
                    e9:a1:77:65:6a:93:5a:94:2f:c9:65:30:7d:55:dd:
                    22:0f:e5:ad:f4:c2:3d:80:ea:43:f1:03:70:21:e9:
                    33:dd:11:e4:63:2f:03:d7:b8:84:71:c9:c4:0a:ef:
                    4a:f7:e2:53:52:05:2c:65:ba:6c:3a:ee:2b:46:26:
                    5b:cd:e0:e1:b3:2b:68:96:90:7c:4b:4c:05:cc:59:
                    8a:1c:31:45:83:bc:fd:bf:c2:1e:68:5c:48:d6:cb:
                    9d:2e:38:89:6e:e4:4f:99:f3:39:ea:33:a1:37:66:
                    a3:76:cc:c9:7b:bf:a9:b9:f7:7f:95:5f:59:fb:83:
                    65:9e:50:05:96:6f:3a:90:f9:8b:2b:8a:6a:19:42:
                    0d:77
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                49:EC:39:F9:1B:C0:7E:AF:12:2A:FA:AA:0B:DB:7B:53:D8:81:0C:07
            X509v3 Authority Key Identifier:
                keyid:0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                CA Repository - URI:rsync://rpki.apnic.net/member_repository/A91736B7/4054701A7B4B11EBA8B3523CC4F9AE02/
                RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A91736B7/4054701A7B4B11EBA8B3523CC4F9AE02/Sew5-RvAfq8SKvqqC9t7U9iBDAc.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  139784

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.145.50.0/23
                IPv6:
                  2001:df5:4280::/48

    Signature Algorithm: sha256WithRSAEncryption
         43:89:35:99:f0:06:76:ec:3e:40:4d:a2:a6:12:43:e0:8a:dc:
         92:5a:57:20:1a:85:6a:29:f7:cd:8c:8d:80:8e:59:7e:a7:51:
         45:57:af:a9:1d:9a:97:8b:7c:25:24:f6:39:7f:5d:ba:14:9e:
         93:b8:a8:46:d1:00:1b:0c:f6:e4:1a:62:43:91:6e:3c:de:29:
         a5:2e:5b:e5:1b:c7:97:c1:43:6e:6b:fe:e3:e5:67:4c:ca:ec:
         dd:f8:e8:bc:c4:11:8c:25:d9:4a:34:f8:a4:48:f5:70:98:5e:
         8f:0f:65:72:c7:c8:b6:83:53:99:3e:46:df:2c:e0:5b:4c:ed:
         8c:bb:a3:e0:88:45:a3:47:b7:20:f9:05:94:ee:9f:d7:df:38:
         aa:99:75:fd:55:7e:82:8b:5c:57:64:0e:f5:bf:da:69:ae:19:
         4a:94:9f:90:b6:9c:09:90:a4:fa:ad:47:9b:23:6a:7a:3d:ab:
         ea:6a:db:dd:b6:ce:18:8e:c5:9c:1b:39:ac:4a:5b:b4:db:e5:
         1a:d8:ec:06:24:f5:c3:0a:d0:a6:b6:d4:d7:52:ab:ba:0c:a3:
         f2:55:a0:9f:53:5c:8a:ef:6a:a9:0d:ff:d2:18:71:b5:10:79:
         87:be:10:7b:6a:29:1c:24:72:6e:ca:b9:05:1a:93:61:9f:f3:
         dc:47:12:1c
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Fri Apr 4 02:04:24 2025 by rpki-client