Certificate

$ rpki-client -vvf rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bkVzNIaAMm09remFIV0iZii58Ws.cer
File:                     bkVzNIaAMm09remFIV0iZii58Ws.cer (raw, json)
Hash identifier:          UMmUBQY/BtuLxflPnhzG3mvR78AO0Iu03DOVa50Wlx4=
Subject key identifier:   6E:45:73:34:86:80:32:6D:3D:AD:E9:85:21:5D:22:66:28:B9:F1:6B
Authority key identifier: 0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
Certificate issuer:       /CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Certificate serial:       01F08B
Authority info access:    rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
Manifest:                 rsync://rpki.apnic.net/member_repository/A915A0FB/5056C8B2005611EFA54D6140C4F9AE02/bkVzNIaAMm09remFIV0iZii58Ws.mft
caRepository:             rsync://rpki.apnic.net/member_repository/A915A0FB/5056C8B2005611EFA54D6140C4F9AE02/
Notify URL:               https://rrdp.apnic.net/notification.xml
Certificate not before:   Tue 07 May 2024 23:39:40 +0000
Certificate not after:    Fri 31 Jan 2025 00:00:00 +0000
Subordinate resources:    AS: 152742
                          IP: 103.175.16.0/24

Validation:               OK
Signature path:           rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 15 May 2024 02:42:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 127115 (0x1f08b)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
        Validity
            Not Before: May  7 23:39:40 2024 GMT
            Not After : Jan 31 00:00:00 2025 GMT
        Subject: CN=A915A0FB/serialNumber=6E4573348680326D3DADE985215D226628B9F16B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:64:34:bd:6c:58:0b:cf:f9:60:37:a2:3d:06:
                    6b:84:8c:4d:77:8e:ad:49:d9:fc:02:25:73:c4:0a:
                    30:17:30:01:50:08:da:e9:47:cf:12:2d:b1:b6:2b:
                    f8:c1:2c:3a:3b:c9:b3:14:37:b6:d5:a2:8f:98:30:
                    e9:02:a6:b6:aa:fc:a4:b2:4f:04:e2:0f:6f:7c:5b:
                    2e:1e:75:21:8d:e2:c0:11:9f:8d:9e:f3:53:93:e3:
                    4d:20:bf:2e:94:a4:a8:73:88:aa:67:75:87:2c:6e:
                    80:62:0b:0b:c3:6e:ea:d8:f2:37:d8:f4:20:34:c5:
                    12:e1:1e:54:ba:c9:65:58:65:b8:47:9f:30:9f:53:
                    56:44:c1:98:b4:b6:17:a7:84:2f:65:f2:f7:51:6f:
                    02:7d:ef:f4:28:a6:91:66:ba:85:96:1d:62:3a:ee:
                    ad:04:2f:b0:8b:a6:82:f6:be:8b:83:b8:38:be:a0:
                    cb:5d:7d:86:60:45:1c:65:dc:8c:17:13:62:82:b1:
                    ab:bf:96:67:d2:b5:9c:6f:f5:54:12:04:b7:f3:f5:
                    05:9e:26:a8:b9:74:cb:44:1d:11:a1:4c:0d:73:23:
                    7f:c7:e6:3c:e3:1c:29:59:61:2d:50:e0:37:24:a3:
                    a3:a6:2c:ca:bc:3a:3e:a7:77:41:00:b5:fb:54:fd:
                    18:b5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6E:45:73:34:86:80:32:6D:3D:AD:E9:85:21:5D:22:66:28:B9:F1:6B
            X509v3 Authority Key Identifier:
                keyid:0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                CA Repository - URI:rsync://rpki.apnic.net/member_repository/A915A0FB/5056C8B2005611EFA54D6140C4F9AE02/
                RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A915A0FB/5056C8B2005611EFA54D6140C4F9AE02/bkVzNIaAMm09remFIV0iZii58Ws.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  152742

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.175.16.0/24

    Signature Algorithm: sha256WithRSAEncryption
         54:60:7f:f8:60:b4:51:c4:63:3f:d2:96:cc:64:33:95:07:b9:
         26:ea:38:1d:f5:2c:3d:26:ee:f0:0b:06:4d:45:ba:13:db:1c:
         a0:d9:6f:7f:87:cf:88:4a:00:8a:6f:f5:c5:d1:bc:82:4f:8a:
         6d:91:50:f2:30:5f:fe:97:77:ec:03:30:f9:36:df:89:7e:32:
         27:84:09:cc:03:fe:3e:1f:67:ae:ec:34:77:90:7b:ac:75:a2:
         14:84:2c:55:6f:c3:1e:ec:5f:25:9a:37:b0:52:cb:be:ca:15:
         fe:50:e3:02:d4:8c:5e:f9:05:6d:88:0c:52:21:15:29:a1:71:
         50:33:0a:90:74:ba:3b:50:ca:6b:8b:28:de:dd:3d:d5:03:9e:
         9a:0d:f2:bb:02:91:f1:b5:30:4f:15:9e:66:b7:c0:04:fb:1d:
         ab:d4:12:dc:60:5b:3d:e9:cf:e6:41:aa:58:f3:96:61:55:ba:
         b8:2b:99:bf:67:6c:39:1c:f6:9a:c9:d1:68:26:72:97:bc:6d:
         3e:2d:06:be:22:11:66:74:c4:4f:5c:2a:b7:51:a6:9b:c2:43:
         09:73:34:23:ec:4c:e3:57:de:ba:1b:19:9b:df:0f:bb:67:16:
         e8:2f:a4:b5:03:fb:9b:ff:df:12:a6:1f:72:46:f3:ce:23:ed:
         08:30:ce:60
-----BEGIN CERTIFICATE-----
MIIGGjCCBQKgAwIBAgIDAfCLMA0GCSqGSIb3DQEBCwUAMEYxETAPBgNVBAMTCEE5
MERDNUJFMTEwLwYDVQQFEygwRTY1QTRGNUZEMzZCNUJENjhFQjNDOTIzNDA4OTc4
QzkwN0FBNzlGMB4XDTI0MDUwNzIzMzk0MFoXDTI1MDEzMTAwMDAwMFowRjERMA8G
A1UEAxMIQTkxNUEwRkIxMTAvBgNVBAUTKDZFNDU3MzM0ODY4MDMyNkQzREFERTk4
NTIxNUQyMjY2MjhCOUYxNkIwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB
AQC9ZDS9bFgLz/lgN6I9BmuEjE13jq1J2fwCJXPECjAXMAFQCNrpR88SLbG2K/jB
LDo7ybMUN7bVoo+YMOkCpraq/KSyTwTiD298Wy4edSGN4sARn42e81OT400gvy6U
pKhziKpndYcsboBiCwvDburY8jfY9CA0xRLhHlS6yWVYZbhHnzCfU1ZEwZi0then
hC9l8vdRbwJ97/QoppFmuoWWHWI67q0EL7CLpoL2vouDuDi+oMtdfYZgRRxl3IwX
E2KCsau/lmfStZxv9VQSBLfz9QWeJqi5dMtEHRGhTA1zI3/H5jzjHClZYS1Q4Dck
o6OmLMq8Oj6nd0EAtftU/Ri1AgMBAAGjggMPMIIDCzAdBgNVHQ4EFgQUbkVzNIaA
Mm09remFIV0iZii58WswHwYDVR0jBBgwFoAUDmWk9f02tb1o6zySNAiXjJB6p58w
DgYDVR0PAQH/BAQDAgEGMA8GA1UdEwEB/wQFMAMBAf8wcwYDVR0fBGwwajBooGag
ZIZicnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2
NjExRTJCQjQ2OEY3QzcyRkQxRkYyL0RtV2s5ZjAydGIxbzZ6eVNOQWlYakpCNnA1
OC5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L3JlcG9zaXRvcnkvOTgwNjUyRTBCNzdFMTFFN0E5NkEzOTUyMUE0
RjRGQjQvRG1XazlmMDJ0YjFvNnp5U05BaVhqSkI2cDU4LmNlcjBKBgNVHSABAf8E
QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj
Lm5ldC9SUEtJL0NQUy5wZGYwggEoBggrBgEFBQcBCwSCARowggEWMF8GCCsGAQUF
BzAFhlNyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5
MTVBMEZCLzUwNTZDOEIyMDA1NjExRUZBNTRENjE0MEM0RjlBRTAyLzB+BggrBgEF
BQcwCoZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9B
OTE1QTBGQi81MDU2QzhCMjAwNTYxMUVGQTU0RDYxNDBDNEY5QUUwMi9ia1Z6Tklh
QU1tMDlyZW1GSVYwaVppaTU4V3MubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3Jy
ZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwGgYIKwYBBQUHAQgBAf8ECzAJ
oAcwBQIDAlSmMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAZ68QMA0GCSqG
SIb3DQEBCwUAA4IBAQBUYH/4YLRRxGM/0pbMZDOVB7km6jgd9Sw9Ju7wCwZNRboT
2xyg2W9/h8+ISgCKb/XF0byCT4ptkVDyMF/+l3fsAzD5Nt+JfjInhAnMA/4+H2eu
7DR3kHusdaIUhCxVb8Me7F8lmjewUsu+yhX+UOMC1Ixe+QVtiAxSIRUpoXFQMwqQ
dLo7UMpriyje3T3VA56aDfK7ApHxtTBPFZ5mt8AE+x2r1BLcYFs96c/mQapY85Zh
Vbq4K5m/Z2w5HPaaydFoJnKXvG0+LQa+IhFmdMRPXCq3UaabwkMJczQj7EzjV966
Gxmb3w+7ZxboL6S1A/ub/98Sph9yRvPOI+0IMM5g
-----END CERTIFICATE-----
Generated at Wed May 8 21:04:44 2024 by rpki-client on console-fra.rpki-client.org