Certificate

$ rpki-client -vvf rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/V1jTgx6S-ugkdfazMhJ5Sh_wfl8.cer
File:                     V1jTgx6S-ugkdfazMhJ5Sh_wfl8.cer (raw, json)
Hash identifier:          46me1wCR0x91YfVpJtsRJxY2DG9bcknYgaYkXug/Ous=
Subject key identifier:   57:58:D3:83:1E:92:FA:E8:24:75:F6:B3:32:12:79:4A:1F:F0:7E:5F
Authority key identifier: 0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
Certificate issuer:       /CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Certificate serial:       01AA29
Authority info access:    rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
Manifest:                 rsync://rpki.apnic.net/member_repository/A919536D/C1851FBE6E2311E8817DCB75C4F9AE02/V1jTgx6S-ugkdfazMhJ5Sh_wfl8.mft
caRepository:             rsync://rpki.apnic.net/member_repository/A919536D/C1851FBE6E2311E8817DCB75C4F9AE02/
Notify URL:               https://rrdp.apnic.net/notification.xml
Certificate not before:   Wed 14 Jun 2023 17:31:57 +0000
Certificate not after:    Sat 31 Aug 2024 00:00:00 +0000
Subordinate resources:    AS: 137824
                          IP: 103.115.14.0/23

Validation:               OK
Signature path:           rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 15 May 2024 02:42:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 109097 (0x1aa29)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
        Validity
            Not Before: Jun 14 17:31:57 2023 GMT
            Not After : Aug 31 00:00:00 2024 GMT
        Subject: CN=A919536D/serialNumber=5758D3831E92FAE82475F6B33212794A1FF07E5F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d1:b3:79:3a:42:e6:33:47:92:09:3e:2a:f8:1d:
                    0d:72:b2:2c:18:91:a7:9b:0c:6d:f9:33:f5:ee:36:
                    a4:0a:24:4b:ab:a5:76:9f:9c:83:de:7b:fd:8b:46:
                    44:9b:ba:f1:a8:9d:49:44:90:14:e4:24:50:e1:0f:
                    3c:0e:dd:46:aa:a7:48:e9:5e:b8:f1:39:b4:f4:5c:
                    f5:9d:d8:10:6d:8c:bf:81:43:c1:11:54:81:5b:fd:
                    58:84:c2:bf:d0:44:07:6b:7d:88:28:36:f8:f3:8b:
                    aa:e6:f7:60:04:2e:08:30:af:3d:59:7b:07:20:f7:
                    50:20:95:3b:57:d5:f2:93:03:bc:56:ac:e2:88:b8:
                    73:2c:24:e0:34:86:fa:0e:94:c7:d6:91:91:07:58:
                    44:89:61:a1:b9:aa:f2:70:28:64:c0:f4:c3:32:c8:
                    36:14:24:8e:9e:64:ff:29:5e:42:be:0f:5e:c2:50:
                    d5:f5:dd:63:47:d8:8a:0c:f5:f1:87:36:d9:04:4f:
                    88:d5:3a:bd:30:93:19:9a:c4:d9:7e:ce:1b:89:d0:
                    63:d1:be:c1:61:1f:58:b7:aa:a3:1c:2d:e8:ad:05:
                    3d:9d:77:f1:04:0b:96:0d:53:ed:6c:b5:a1:51:32:
                    a1:63:21:37:de:e6:d3:1f:d8:ba:52:a4:95:e0:92:
                    c9:1d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                57:58:D3:83:1E:92:FA:E8:24:75:F6:B3:32:12:79:4A:1F:F0:7E:5F
            X509v3 Authority Key Identifier:
                keyid:0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                CA Repository - URI:rsync://rpki.apnic.net/member_repository/A919536D/C1851FBE6E2311E8817DCB75C4F9AE02/
                RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A919536D/C1851FBE6E2311E8817DCB75C4F9AE02/V1jTgx6S-ugkdfazMhJ5Sh_wfl8.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  137824

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.115.14.0/23

    Signature Algorithm: sha256WithRSAEncryption
         37:c2:b3:50:4f:d8:45:67:05:5b:97:46:a6:d1:10:19:d0:f4:
         63:fd:77:c8:66:8d:4a:28:68:5d:dc:3e:92:92:bc:40:05:7d:
         f9:4e:28:d9:0a:5c:39:ae:49:63:71:2d:63:2c:1e:36:41:6a:
         45:4d:12:a0:60:83:eb:77:19:ad:bb:74:cf:b8:72:0b:79:d3:
         78:43:8e:65:8d:35:a6:31:cb:8b:28:4b:22:62:c0:67:b8:96:
         4b:4e:c6:73:18:db:c8:22:0e:48:91:ae:f3:da:48:13:1b:1c:
         63:9b:2c:d2:47:ba:06:b0:3a:bf:9a:e4:ba:77:f9:6e:8a:d4:
         08:29:ad:6c:21:a8:ab:82:a0:4e:d4:6c:87:09:d3:55:33:5d:
         0d:ff:a9:01:78:6d:3c:ef:44:c4:16:22:94:57:1a:d3:09:76:
         c1:20:36:4f:e6:43:04:ba:aa:af:1a:d5:87:79:6a:de:01:16:
         04:9f:f2:2a:19:2b:17:d3:89:37:cb:fb:3d:69:5f:c5:81:1c:
         8a:88:a3:c8:85:cd:8e:ee:98:8a:fd:b2:da:25:51:58:81:8e:
         7d:4b:b8:9f:8d:a7:99:81:5b:a5:31:87:71:5e:ea:f3:ab:32:
         20:3f:53:ae:a3:3b:83:27:b2:2b:8d:61:ec:40:c8:0d:52:88:
         a7:1c:05:11
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 9 10:10:44 2024 by rpki-client on console-ams.rpki-client.org