Certificate

$ rpki-client -vvf rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/VaNt8khLtGWsMwGcBws5J0UkAic.cer
File:                     VaNt8khLtGWsMwGcBws5J0UkAic.cer (raw, json)
Hash identifier:          7Fuv8mfrKV+LFrdSaQ7J4yGXLGE/JXcuILg76yUDDC8=
Subject key identifier:   55:A3:6D:F2:48:4B:B4:65:AC:33:01:9C:07:0B:39:27:45:24:02:27
Authority key identifier: 0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
Certificate issuer:       /CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Certificate serial:       0222FF
Authority info access:    rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
Manifest:                 rsync://rpki.apnic.net/member_repository/A9134167/B42267F43E8E11EF97A8557DC4F9AE02/VaNt8khLtGWsMwGcBws5J0UkAic.mft
caRepository:             rsync://rpki.apnic.net/member_repository/A9134167/B42267F43E8E11EF97A8557DC4F9AE02/
Notify URL:               https://rrdp.apnic.net/notification.xml
Certificate not before:   Tue 17 Dec 2024 05:12:47 +0000
Certificate not after:    Mon 02 Mar 2026 00:00:00 +0000
Subordinate resources:    AS: 132587
                          IP: 103.245.74.0/24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 10 Apr 2025 23:51:19 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 140031 (0x222ff)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A90DC5BE
        Validity
            Not Before: Dec 17 05:12:47 2024 GMT
            Not After : Mar  2 00:00:00 2026 GMT
        Subject: CN=A9134167
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:94:0f:79:d3:72:76:e0:81:68:66:5f:d3:f5:a1:
                    c9:c8:f8:9a:41:5e:5c:96:6a:30:ea:60:90:d6:21:
                    c0:a0:f7:ae:13:94:98:3b:cc:d5:cc:59:5e:cf:18:
                    98:f2:d2:b1:dc:97:2b:6e:a1:4b:50:24:e4:41:6e:
                    37:2e:86:55:b3:ad:e7:02:c6:42:06:3e:65:ac:a2:
                    d1:dd:84:9f:13:17:ce:dd:47:db:12:86:65:2f:29:
                    29:1a:95:77:96:60:33:c2:26:ff:4e:26:9c:89:f2:
                    da:b8:70:f0:20:75:ee:ef:be:59:cb:91:42:0b:f7:
                    3f:e9:22:42:d3:46:31:41:4c:b4:da:a3:db:66:e5:
                    9e:0b:41:7c:0a:8e:23:8a:bf:29:81:54:fb:fd:d3:
                    0e:5d:70:2d:28:5d:15:d6:6b:9f:2b:b1:88:30:5e:
                    41:40:da:a6:45:2c:f3:04:e8:20:3d:15:18:cc:90:
                    c1:37:e7:5a:ed:71:cf:83:9c:ab:e2:3e:93:cb:81:
                    50:21:2d:06:cc:55:f8:52:32:06:52:b6:b4:de:f0:
                    22:71:2c:cc:e9:da:76:9e:c6:7b:bf:ae:5d:fc:c6:
                    c5:f9:cb:a0:2f:ec:26:1d:ec:3e:26:67:a9:c6:bf:
                    f2:40:1d:38:b3:47:1a:53:fa:d2:7c:e8:6c:fb:e5:
                    0c:71
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                55:A3:6D:F2:48:4B:B4:65:AC:33:01:9C:07:0B:39:27:45:24:02:27
            X509v3 Authority Key Identifier:
                keyid:0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                CA Repository - URI:rsync://rpki.apnic.net/member_repository/A9134167/B42267F43E8E11EF97A8557DC4F9AE02/
                RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A9134167/B42267F43E8E11EF97A8557DC4F9AE02/VaNt8khLtGWsMwGcBws5J0UkAic.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  132587

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.245.74.0/24

    Signature Algorithm: sha256WithRSAEncryption
         7f:59:6a:c2:21:ec:96:17:70:66:2c:a0:af:e5:31:88:7c:2c:
         31:e5:98:b9:7f:38:fe:05:5a:6f:e0:f4:04:1b:3a:12:92:9d:
         31:68:4c:1e:b3:fa:19:dd:15:38:38:89:d7:09:41:15:90:2c:
         32:4f:70:ef:45:12:00:07:cf:30:06:01:41:96:21:20:67:86:
         29:a4:90:41:e0:e4:6b:82:55:1d:25:0e:eb:ff:2b:d9:7c:81:
         81:ff:22:4c:4b:e8:9f:f2:71:1c:ca:bf:c2:af:de:9e:7c:a6:
         7b:c3:cd:a5:db:00:58:6c:b8:b6:92:6c:2b:6f:03:85:2a:e0:
         ee:86:7c:44:7c:d9:18:91:95:c7:a5:1c:ab:72:d9:fd:7d:c9:
         db:94:e5:40:8a:3e:85:f8:b5:d6:ea:60:b9:5b:de:26:29:9c:
         fc:b1:76:55:90:32:0d:ed:c8:9e:f0:e9:d2:7b:49:03:8a:22:
         78:17:33:31:18:ba:f9:26:fe:d5:bc:6f:54:9f:4c:a9:2a:e6:
         d7:64:d8:a4:3a:56:77:1a:5d:b4:2c:ff:47:6f:c7:76:20:fa:
         7a:eb:cf:33:57:b8:f0:84:b7:a5:9a:7a:a2:df:04:ae:97:93:
         34:36:e2:0b:11:04:34:be:e2:39:16:0a:ad:05:75:c6:6e:c4:
         f3:58:ba:4c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 02:07:12 2025 by rpki-client