Certificate

$ rpki-client -vvf rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YHa9C6TbeXpypo_v-b-1WMRDmLI.cer
File:                     YHa9C6TbeXpypo_v-b-1WMRDmLI.cer (raw, json)
Hash identifier:          eTFEovm0UDhdPJarb0Z203ZtYVT7zfPutXLxzaOICus=
Subject key identifier:   60:76:BD:0B:A4:DB:79:7A:72:A6:8F:EF:F9:BF:B5:58:C4:43:98:B2
Authority key identifier: 0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
Certificate issuer:       /CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Certificate serial:       01C286
Authority info access:    rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
Manifest:                 rsync://rpki.apnic.net/member_repository/A9162EE1/752D42E88FD211EC948A937EC4F9AE02/YHa9C6TbeXpypo_v-b-1WMRDmLI.mft
caRepository:             rsync://rpki.apnic.net/member_repository/A9162EE1/752D42E88FD211EC948A937EC4F9AE02/
Notify URL:               https://rrdp.apnic.net/notification.xml
Certificate not before:   Fri 06 Oct 2023 16:17:41 +0000
Certificate not after:    Mon 30 Dec 2024 00:00:00 +0000
Subordinate resources:    AS: 147049
                          IP: 103.173.150.0/23
                          IP: 2407:e8c0::/32

Validation:               OK
Signature path:           rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 15 May 2024 02:42:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 115334 (0x1c286)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
        Validity
            Not Before: Oct  6 16:17:41 2023 GMT
            Not After : Dec 30 00:00:00 2024 GMT
        Subject: CN=A9162EE1/serialNumber=6076BD0BA4DB797A72A68FEFF9BFB558C44398B2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:da:0e:49:cd:80:52:61:e9:92:8f:cf:12:cb:19:
                    7a:a2:95:de:f1:b5:d2:68:c3:7a:77:4a:3c:be:64:
                    10:79:55:af:84:1a:bb:82:52:dc:25:0c:52:de:96:
                    82:31:fc:26:d7:e1:19:14:17:78:e7:53:a6:1e:a6:
                    dd:48:4c:c2:4e:e3:ef:80:7f:fa:82:7f:b4:69:50:
                    c6:60:43:6d:89:9c:3d:e2:48:9c:a7:bd:1a:97:aa:
                    92:1c:07:a1:ad:1b:79:45:30:53:38:7e:dd:c0:a0:
                    02:0c:de:f6:13:10:01:66:17:a2:f3:27:f7:3c:62:
                    1e:b6:ae:b2:aa:3d:5c:04:57:7f:fe:52:e7:54:1d:
                    31:a7:f0:4d:50:9b:96:a8:fb:c1:ac:73:8c:86:32:
                    53:b2:60:ab:36:ca:16:6b:1a:a6:63:0e:1c:c3:57:
                    b3:c2:df:fc:05:31:1c:3e:1f:07:8d:48:18:82:ec:
                    64:8b:70:58:47:b6:9a:69:da:0b:bb:6f:a7:04:5b:
                    cc:86:50:5e:f9:33:8e:37:c7:d8:78:f9:40:ef:6d:
                    59:e1:2b:81:01:0f:86:a8:8e:2b:d2:5f:83:2f:e2:
                    84:fb:06:b2:61:a8:b2:f5:84:c1:63:3d:a0:4c:a4:
                    4d:ae:7d:50:7d:31:1d:78:1f:10:77:3f:2a:87:42:
                    0a:ed
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                60:76:BD:0B:A4:DB:79:7A:72:A6:8F:EF:F9:BF:B5:58:C4:43:98:B2
            X509v3 Authority Key Identifier:
                keyid:0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                CA Repository - URI:rsync://rpki.apnic.net/member_repository/A9162EE1/752D42E88FD211EC948A937EC4F9AE02/
                RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A9162EE1/752D42E88FD211EC948A937EC4F9AE02/YHa9C6TbeXpypo_v-b-1WMRDmLI.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  147049

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.173.150.0/23
                IPv6:
                  2407:e8c0::/32

    Signature Algorithm: sha256WithRSAEncryption
         b6:7a:5b:39:9a:2f:e0:c9:8f:3b:25:a5:5f:4f:17:24:dd:fb:
         4a:8f:f3:12:62:82:7c:f6:47:bb:b4:b5:fd:4f:7f:a1:c1:95:
         3e:33:fc:ea:cc:0e:35:b5:eb:b4:b3:1c:60:cc:7e:0f:9a:38:
         ba:32:e0:1e:5d:db:0d:44:49:de:21:fb:a5:43:81:36:03:60:
         08:e7:d1:3d:57:c7:75:fd:ea:44:7a:e0:ad:a4:3b:3f:e2:7a:
         6b:cd:4c:3d:8e:d4:1d:51:64:39:c5:f5:36:96:30:a7:ea:d8:
         74:8d:ea:64:be:31:b5:84:1e:5f:30:80:35:ba:37:c1:dc:f3:
         3d:98:cd:3b:af:12:ad:8a:40:28:a8:93:2a:b7:c4:1e:ef:f5:
         ad:df:a1:16:fa:dd:ff:b8:fc:d3:59:2e:f0:6b:dd:aa:49:e4:
         e7:4f:1a:42:d1:52:18:93:f1:10:dd:86:5d:b0:68:2e:50:1b:
         bd:90:aa:93:a9:de:3f:30:b5:c0:89:a5:78:5d:77:e7:6c:68:
         34:ec:ad:0e:2e:d3:80:a1:af:e2:dd:ff:e9:70:93:77:4f:d6:
         12:46:3a:ff:1a:eb:5a:ae:c3:88:2d:f8:08:7d:2f:4a:cf:59:
         df:31:f9:c1:02:32:24:1f:44:ec:d4:d6:b1:0b:a9:a4:58:36:
         af:c1:c9:cf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 9 03:38:31 2024 by rpki-client on console-ams.rpki-client.org