Certificate

$ rpki-client -vvf rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WFcZh2wfmiD9644Ew9aTelrKpXw.cer
File:                     WFcZh2wfmiD9644Ew9aTelrKpXw.cer (raw, json)
Hash identifier:          kfjoDys+0OEq5VP87tT8diqth9j5+I2WP2JTm30cb4M=
Subject key identifier:   58:57:19:87:6C:1F:9A:20:FD:EB:8E:04:C3:D6:93:7A:5A:CA:A5:7C
Authority key identifier: 0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
Certificate issuer:       /CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Certificate serial:       01BD4F
Authority info access:    rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
Manifest:                 rsync://rpki.apnic.net/member_repository/A916F1C6/37BDAACC1DA111E2A018339308B02CD2/WFcZh2wfmiD9644Ew9aTelrKpXw.mft
caRepository:             rsync://rpki.apnic.net/member_repository/A916F1C6/37BDAACC1DA111E2A018339308B02CD2/
Notify URL:               https://rrdp.apnic.net/notification.xml
Certificate not before:   Wed 13 Sep 2023 15:45:40 +0000
Certificate not after:    Sun 01 Dec 2024 00:00:00 +0000
Subordinate resources:    AS: 45893
                          IP: 203.161.176.0/23

Validation:               OK
Signature path:           rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 15 May 2024 02:42:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 113999 (0x1bd4f)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
        Validity
            Not Before: Sep 13 15:45:40 2023 GMT
            Not After : Dec  1 00:00:00 2024 GMT
        Subject: CN=A916F1C6/serialNumber=585719876C1F9A20FDEB8E04C3D6937A5ACAA57C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e1:61:f9:82:b7:c5:fc:d6:35:aa:88:ac:da:9b:
                    45:4a:48:cf:db:9c:78:a0:e7:f8:ee:80:08:8e:73:
                    99:8c:bf:63:33:c2:72:02:40:08:61:23:2f:34:44:
                    d7:32:9f:e1:3a:3a:64:6a:2e:5b:f6:5b:6b:48:69:
                    c7:08:21:23:00:84:1e:18:cb:72:db:b2:fb:17:b7:
                    98:5e:79:ac:78:93:97:80:4c:5e:94:61:be:49:90:
                    f8:0f:46:e6:8f:87:a1:56:36:93:b9:90:01:f1:e8:
                    2d:a6:99:2c:a0:4c:d1:90:f2:a4:a5:4a:c5:92:71:
                    ab:b2:87:df:6e:8d:bd:21:23:b7:75:dd:40:f6:b9:
                    1a:f9:2b:90:fe:f1:25:41:b3:e8:c9:e3:e0:e7:03:
                    a7:63:fa:e8:d4:f2:3f:4b:7e:a3:4b:92:42:cf:c3:
                    a2:8a:ef:fb:f0:32:36:1d:d2:96:5b:19:5a:31:4c:
                    69:75:81:28:6f:3c:86:2e:78:58:44:22:0f:69:4f:
                    03:db:11:03:fb:ad:4d:a1:26:03:eb:38:07:15:79:
                    97:be:85:a1:f8:39:39:ff:1d:48:65:49:31:47:17:
                    cc:bc:f3:87:78:fb:49:41:50:e7:1a:e0:6f:97:d3:
                    c6:6f:cb:03:cc:06:cf:76:e5:4a:2e:c2:e7:23:32:
                    6d:4d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                58:57:19:87:6C:1F:9A:20:FD:EB:8E:04:C3:D6:93:7A:5A:CA:A5:7C
            X509v3 Authority Key Identifier:
                keyid:0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                CA Repository - URI:rsync://rpki.apnic.net/member_repository/A916F1C6/37BDAACC1DA111E2A018339308B02CD2/
                RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A916F1C6/37BDAACC1DA111E2A018339308B02CD2/WFcZh2wfmiD9644Ew9aTelrKpXw.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  45893

            sbgp-ipAddrBlock: critical
                IPv4:
                  203.161.176.0/23

    Signature Algorithm: sha256WithRSAEncryption
         07:1d:4b:81:70:66:94:a2:8f:88:f9:33:50:c9:9f:67:0f:82:
         1b:8e:bc:cc:03:c8:6b:cb:1b:c0:2d:28:88:09:3f:3f:d6:7b:
         54:98:1b:85:70:46:81:65:27:db:ae:24:04:a7:df:c0:1c:09:
         58:60:70:85:a0:43:9d:2a:f6:1d:c8:09:1c:27:dc:b8:56:ef:
         2e:2f:be:1a:d0:55:66:06:82:0a:58:63:c7:8e:a7:77:9c:4e:
         98:9e:a0:b3:01:cd:06:d2:05:77:38:3f:e2:20:a3:85:04:57:
         5d:05:41:e9:85:57:3b:79:f6:45:e2:05:63:79:84:ee:1e:cf:
         7a:c8:17:8e:4d:2a:53:47:5a:91:73:6f:42:a3:33:11:46:1a:
         4b:4e:0e:81:b8:6f:93:87:92:9b:44:55:33:0c:40:01:3f:71:
         47:31:84:df:40:df:a9:28:27:25:7b:67:44:f4:4f:e2:16:3d:
         36:d0:d4:bb:03:63:1b:f1:8a:ae:ba:9e:00:86:98:ea:5a:06:
         f5:b7:8c:59:18:25:5c:41:d9:af:96:c3:a1:84:b4:01:bf:44:
         0a:70:d4:ed:9c:05:c4:a2:74:51:f5:4c:da:df:9c:76:b0:f6:
         89:39:05:11:b0:b5:a7:d3:66:54:f6:ff:7b:c8:1a:7a:8f:65:
         7d:4a:02:88
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 8 21:04:39 2024 by rpki-client on console-fra.rpki-client.org