Certificate

$ rpki-client -vvf rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kGjeIDMsvR2zmyN0NbF03nCZTwM.cer
File:                     kGjeIDMsvR2zmyN0NbF03nCZTwM.cer (raw, json)
Hash identifier:          QeWXvqIbUeU5mMPUOQTEPXmW8hYRaEtR9zcsc5KxiJ4=
Subject key identifier:   90:68:DE:20:33:2C:BD:1D:B3:9B:23:74:35:B1:74:DE:70:99:4F:03
Authority key identifier: 0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
Certificate issuer:       /CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Certificate serial:       0233A4
Authority info access:    rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
Manifest:                 rsync://rpki.apnic.net/member_repository/A91813E4/27505882B9A211EB95C68839C4F9AE02/kGjeIDMsvR2zmyN0NbF03nCZTwM.mft
caRepository:             rsync://rpki.apnic.net/member_repository/A91813E4/27505882B9A211EB95C68839C4F9AE02/
Notify URL:               https://rrdp.apnic.net/notification.xml
Certificate not before:   Thu 27 Feb 2025 16:36:23 +0000
Certificate not after:    Fri 01 May 2026 00:00:00 +0000
Subordinate resources:    AS: 153039
                          IP: 202.12.127.0/24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 10 Apr 2025 23:51:19 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 144292 (0x233a4)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A90DC5BE
        Validity
            Not Before: Feb 27 16:36:23 2025 GMT
            Not After : May  1 00:00:00 2026 GMT
        Subject: CN=A91813E4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e2:77:32:84:79:18:28:80:63:14:d3:64:42:93:
                    06:af:46:f1:e5:d9:bf:2b:9b:c9:70:82:fb:46:33:
                    80:8d:ad:a5:fa:6e:23:67:13:2d:6c:e4:1a:e1:42:
                    0d:73:3a:fe:78:17:d9:24:69:9f:71:0c:2f:5a:54:
                    49:fb:33:cd:f6:df:15:57:b7:5a:d6:dd:c0:39:51:
                    60:56:df:17:61:83:db:d4:0c:cc:2d:21:e6:6d:c1:
                    f4:01:33:1c:9b:c7:d7:90:b2:3e:21:b0:1e:af:ec:
                    4f:39:06:6c:4a:82:9e:60:66:f2:e4:c5:63:d1:52:
                    5b:58:77:b4:a3:c3:78:e8:26:b8:e8:e5:43:56:4d:
                    85:61:33:e9:a2:7c:c4:a9:67:c9:c3:0a:6c:78:de:
                    6d:e3:4b:1e:b7:d2:9f:fd:e0:31:32:e8:d4:ba:2b:
                    87:5b:dc:d2:1c:ec:cb:1f:cd:af:68:06:6d:d9:50:
                    b5:1e:ed:ed:e5:ea:cc:6d:b8:65:6f:7f:b0:9a:ea:
                    9b:45:75:66:3b:3f:a5:ee:a3:a7:c4:50:5c:32:56:
                    e6:2f:21:a3:81:6c:cb:0d:85:f2:d3:88:21:e8:9b:
                    ed:f9:4d:8d:cf:47:29:e9:4a:04:52:74:75:db:06:
                    43:9e:f9:fe:2d:cc:db:fc:3e:9b:25:0a:54:d9:df:
                    dc:39
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                90:68:DE:20:33:2C:BD:1D:B3:9B:23:74:35:B1:74:DE:70:99:4F:03
            X509v3 Authority Key Identifier:
                keyid:0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                CA Repository - URI:rsync://rpki.apnic.net/member_repository/A91813E4/27505882B9A211EB95C68839C4F9AE02/
                RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A91813E4/27505882B9A211EB95C68839C4F9AE02/kGjeIDMsvR2zmyN0NbF03nCZTwM.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  153039

            sbgp-ipAddrBlock: critical
                IPv4:
                  202.12.127.0/24

    Signature Algorithm: sha256WithRSAEncryption
         00:2a:b8:94:1b:ce:ba:25:b5:ae:a7:00:f2:3f:8d:c1:c2:81:
         ba:12:15:ff:4e:ac:95:84:df:d0:51:eb:cb:43:e1:1a:15:97:
         56:dd:1e:ee:03:9b:71:8a:69:4e:3b:9a:9e:60:9b:04:02:ff:
         d4:f7:6e:59:37:52:ca:3a:6d:df:66:e6:86:92:31:67:cf:22:
         f3:a3:5a:0a:6e:d8:ee:24:fc:f7:fc:3e:85:6e:1e:72:3f:8e:
         46:b5:78:8b:0a:10:b6:bd:81:58:c9:12:1d:00:ef:fb:45:5a:
         af:e3:58:27:e7:1c:c2:65:c1:f7:dd:8d:1c:d1:bb:8b:36:a1:
         5a:cf:59:be:2d:2d:80:e4:0b:92:e5:a5:50:70:26:66:79:a0:
         45:d2:0b:57:d1:80:40:83:1f:38:bd:87:f6:7d:df:d2:20:4a:
         09:95:1f:75:83:9f:ec:12:bb:78:8c:d5:ef:a3:1e:13:18:b1:
         e4:7c:0e:1d:3a:cf:7b:fb:5b:3c:9c:25:07:88:8a:71:9b:e4:
         3f:0e:8c:58:77:ca:d4:7c:5a:f7:08:01:2c:1f:25:d8:16:cf:
         a8:b0:6f:eb:7c:a1:d2:52:7c:56:23:e7:5c:f9:1e:7f:25:ea:
         ae:71:34:2a:b2:9e:26:2d:8c:b9:c9:f0:fe:1c:49:b1:7c:cc:
         d1:c4:6e:41
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 02:12:39 2025 by rpki-client