Certificate

$ rpki-client -vvf rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nryww05Pd_InjbFcWeHtrH5VdW4.cer
File:                     nryww05Pd_InjbFcWeHtrH5VdW4.cer (raw, json)
Hash identifier:          LQY8yAJXE3QGL4Zyy6uyHRFVdOaq8hhn8MPL6/quyYE=
Subject key identifier:   9E:BC:B0:C3:4E:4F:77:F2:27:8D:B1:5C:59:E1:ED:AC:7E:55:75:6E
Authority key identifier: 0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
Certificate issuer:       /CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Certificate serial:       023C51
Authority info access:    rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
Manifest:                 rsync://rpki.apnic.net/member_repository/A9121821/AB22EAC4D54911EE9497D880C4F9AE02/nryww05Pd_InjbFcWeHtrH5VdW4.mft
caRepository:             rsync://rpki.apnic.net/member_repository/A9121821/AB22EAC4D54911EE9497D880C4F9AE02/
Notify URL:               https://rrdp.apnic.net/notification.xml
Certificate not before:   Wed 02 Apr 2025 14:14:07 +0000
Certificate not after:    Fri 01 Aug 2025 00:00:00 +0000
Subordinate resources:    AS: 150736
                          IP: 103.77.216.0/23
                          IP: 2001:df1:e2c0::/48
Validation:               OK
Signature path:           rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 11 Apr 2025 17:46:13 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 146513 (0x23c51)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A90DC5BE
        Validity
            Not Before: Apr  2 14:14:07 2025 GMT
            Not After : Aug  1 00:00:00 2025 GMT
        Subject: CN=A9121821
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:85:5e:00:29:0e:9f:40:43:87:60:6c:93:31:
                    b0:1a:c2:2e:e0:9f:46:ad:18:6a:15:66:41:fd:f6:
                    d6:5c:50:84:0a:8b:cb:b2:1f:09:5c:79:ea:fa:7b:
                    90:86:69:f0:6b:f8:6b:1f:59:d8:02:82:f1:94:7d:
                    bd:8e:68:aa:72:e6:ae:ff:8a:e6:13:92:b1:19:1d:
                    40:0e:20:a3:31:33:e1:86:62:2e:76:52:32:55:4a:
                    2d:ca:b0:8f:2c:de:52:a0:83:38:92:fa:2a:91:88:
                    43:4d:a9:7c:bf:f7:43:40:75:72:3c:d6:fe:70:9c:
                    57:04:eb:bf:14:aa:2a:9c:0d:54:89:58:01:5d:3c:
                    fd:1b:ad:b5:58:85:84:89:9c:e8:e0:61:be:aa:5d:
                    7d:4e:e0:8a:17:cf:92:fd:70:bb:79:c6:36:cd:77:
                    af:3d:d5:b2:7c:26:2e:df:75:a2:f5:22:13:f6:b6:
                    60:93:1e:fe:cb:e1:26:ed:c6:2e:c3:3f:b5:63:f4:
                    3a:38:f5:38:e3:94:29:db:7f:f9:0e:d9:03:b7:66:
                    4b:80:1f:c7:71:21:ff:91:58:4f:3b:ea:88:ed:e2:
                    bd:0d:9b:a9:bc:df:6b:64:c8:0e:2c:a7:65:11:ee:
                    84:5c:a2:5a:b8:ec:d1:8c:00:d6:2d:91:56:be:ca:
                    46:bd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9E:BC:B0:C3:4E:4F:77:F2:27:8D:B1:5C:59:E1:ED:AC:7E:55:75:6E
            X509v3 Authority Key Identifier:
                keyid:0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                CA Repository - URI:rsync://rpki.apnic.net/member_repository/A9121821/AB22EAC4D54911EE9497D880C4F9AE02/
                RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A9121821/AB22EAC4D54911EE9497D880C4F9AE02/nryww05Pd_InjbFcWeHtrH5VdW4.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  150736

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.77.216.0/23
                IPv6:
                  2001:df1:e2c0::/48

    Signature Algorithm: sha256WithRSAEncryption
         c2:c3:01:4e:a5:70:38:cf:be:6f:02:32:ab:5d:85:2b:7d:ad:
         15:8c:13:ec:5b:e1:91:00:53:e1:e1:a6:fd:de:d8:3a:24:78:
         e6:5e:0c:c7:83:48:57:fb:22:91:50:20:a3:e1:6d:26:bf:c2:
         40:81:e6:43:99:80:50:78:5d:31:93:d9:77:94:00:91:22:17:
         c5:d0:0d:1c:e5:87:2b:40:fa:3b:aa:34:d1:46:f5:2c:8b:9a:
         ab:d5:20:0f:93:66:16:16:af:c8:26:cf:d9:76:cd:c4:11:81:
         59:29:c4:97:1f:7a:ab:3e:b8:15:52:d3:18:b0:e1:4f:c4:0c:
         1e:f8:dd:16:18:c8:84:8a:0b:9e:47:ca:bd:ab:69:d0:d0:8a:
         fc:c8:7f:a1:a0:b1:5d:6b:0d:3a:f7:06:00:f6:b2:fc:3a:13:
         3a:d7:f6:64:9d:f5:d1:1f:f7:81:ac:40:8c:e2:f5:5a:3d:67:
         8c:34:cc:36:c1:ca:79:df:1f:f7:63:ee:87:35:f2:ff:8e:97:
         74:55:e0:82:ee:94:ca:c6:bb:3c:50:79:e4:07:1e:42:43:8e:
         df:f4:66:e4:22:29:9f:45:4d:8a:32:cd:34:b3:28:22:de:51:
         37:f1:e9:57:20:f6:06:ce:fd:f9:6c:43:ab:4c:e3:91:b1:14:
         2b:49:83:d5
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Fri Apr 4 20:19:44 2025 by rpki-client