Certificate

$ rpki-client -vvf rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hUw8jb_u2qy7OypCS1iyWaFMnws.cer
File:                     hUw8jb_u2qy7OypCS1iyWaFMnws.cer (raw, json)
Hash identifier:          0ulpmbs2A3T8Ou+RRIBdg66LYpGe8DlwJ54WjRthTsY=
Subject key identifier:   85:4C:3C:8D:BF:EE:DA:AC:BB:3B:2A:42:4B:58:B2:59:A1:4C:9F:0B
Authority key identifier: 0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
Certificate issuer:       /CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Certificate serial:       023558
Authority info access:    rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
Manifest:                 rsync://rpki.apnic.net/member_repository/A919DBBF/B595A6689BF711EDA1DC5E6FC4F9AE02/hUw8jb_u2qy7OypCS1iyWaFMnws.mft
caRepository:             rsync://rpki.apnic.net/member_repository/A919DBBF/B595A6689BF711EDA1DC5E6FC4F9AE02/
Notify URL:               https://rrdp.apnic.net/notification.xml
Certificate not before:   Tue 04 Mar 2025 19:03:51 +0000
Certificate not after:    Fri 01 May 2026 00:00:00 +0000
Subordinate resources:    AS: 150726
                          IP: 103.74.10.0/23
                          IP: 2001:df1:dd40::/48
Validation:               OK
Signature path:           rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 05 Apr 2025 05:08:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 144728 (0x23558)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A90DC5BE
        Validity
            Not Before: Mar  4 19:03:51 2025 GMT
            Not After : May  1 00:00:00 2026 GMT
        Subject: CN=A919DBBF
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:db:1a:12:c2:03:ff:e9:8a:4e:19:c9:27:87:69:
                    e0:96:13:bc:ba:20:dd:6a:69:08:00:78:74:a9:2d:
                    31:ab:38:9a:54:35:07:7a:3f:58:dc:7c:9b:8f:47:
                    76:c2:d0:53:ab:f0:06:66:ff:e1:46:fb:a9:04:34:
                    8b:8f:eb:86:bb:ae:1f:f4:0c:b3:cc:44:d4:9d:3f:
                    07:12:18:d2:4b:a2:d1:24:68:3e:a1:a7:9c:e8:12:
                    1e:3b:0b:51:0d:92:d4:6b:47:20:c5:06:98:6a:0c:
                    f0:d3:09:09:6f:61:b9:fb:ce:c4:b1:74:a0:30:89:
                    6e:fc:55:9d:db:54:d7:ee:e9:1e:dc:29:18:7a:ea:
                    85:10:dc:39:89:75:44:0e:42:e5:dc:08:aa:cd:ad:
                    8d:1f:64:d1:89:ab:a7:42:6c:b5:bf:ef:09:3e:c5:
                    da:b0:d5:9d:3a:a8:5a:4b:9e:fb:04:5d:6e:8e:22:
                    71:c5:09:5f:ec:2e:d7:93:bf:01:74:3a:f7:57:cd:
                    bc:48:3d:0c:b1:4f:78:40:bb:74:ad:11:09:27:a7:
                    52:52:e8:bc:fb:20:29:5e:93:b9:fb:d7:d3:76:69:
                    b6:31:48:10:b6:67:03:d8:65:75:bb:17:ee:1f:03:
                    d9:52:de:dc:6e:cd:88:bd:32:de:20:b8:70:01:22:
                    c7:5b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                85:4C:3C:8D:BF:EE:DA:AC:BB:3B:2A:42:4B:58:B2:59:A1:4C:9F:0B
            X509v3 Authority Key Identifier:
                keyid:0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                CA Repository - URI:rsync://rpki.apnic.net/member_repository/A919DBBF/B595A6689BF711EDA1DC5E6FC4F9AE02/
                RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A919DBBF/B595A6689BF711EDA1DC5E6FC4F9AE02/hUw8jb_u2qy7OypCS1iyWaFMnws.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  150726

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.74.10.0/23
                IPv6:
                  2001:df1:dd40::/48

    Signature Algorithm: sha256WithRSAEncryption
         27:0a:b6:f1:89:5e:d8:e9:96:4d:5d:4f:54:04:2e:96:ef:af:
         93:8c:ff:03:9e:8e:bb:18:d2:93:be:1b:fa:9f:6c:d4:60:fa:
         4b:6a:d7:70:1e:99:52:09:c2:48:e3:ba:97:d7:a1:af:09:a7:
         aa:ec:19:84:29:31:75:8f:a5:03:9b:67:1e:02:9d:d9:32:fd:
         59:ef:95:9a:3a:33:ee:1e:ea:3d:59:dc:b2:81:eb:5b:7c:3b:
         c2:ab:b8:26:a3:0e:35:12:5b:16:3b:6e:2e:77:2e:a7:59:86:
         38:f7:8a:86:ec:b9:97:f1:cb:1c:2e:e5:0f:b5:6a:5a:7f:08:
         b8:f9:ea:5b:28:30:da:31:a0:c2:49:0f:1c:53:95:fa:d1:1d:
         70:7b:04:2e:7a:86:7e:8d:5f:69:2b:d6:02:83:28:bb:f1:3f:
         b9:df:a3:76:ed:f1:6a:7d:ee:9e:39:17:0c:d8:b3:25:bc:21:
         cd:91:c9:af:df:12:af:a9:35:e4:b8:cb:d0:9c:4b:01:8a:d5:
         f4:00:1d:a7:39:51:78:b7:28:13:15:49:2b:73:d8:de:c5:99:
         9d:9c:d4:76:53:54:ff:2f:06:fe:4b:f5:39:85:07:a2:2e:5a:
         8d:97:1a:0a:16:5e:49:c7:93:af:5e:56:4a:c6:3e:8c:07:3e:
         f3:75:b9:76
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Fri Apr 4 20:12:26 2025 by rpki-client