Certificate

$ rpki-client -vvf rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rCjcKlVLTjOaOZyWQrTOAmio37A.cer
File:                     rCjcKlVLTjOaOZyWQrTOAmio37A.cer (raw, json)
Hash identifier:          GJT95DQ6tglyhk3rMQTPHD0q2e6mwfrOGF2nMAml8jI=
Subject key identifier:   AC:28:DC:2A:55:4B:4E:33:9A:39:9C:96:42:B4:CE:02:68:A8:DF:B0
Authority key identifier: 0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
Certificate issuer:       /CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Certificate serial:       0219AE
Authority info access:    rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
Manifest:                 rsync://rpki.apnic.net/member_repository/A915EA46/DBDA2CC49C1111EF92FBA97CC4F9AE02/rCjcKlVLTjOaOZyWQrTOAmio37A.mft
caRepository:             rsync://rpki.apnic.net/member_repository/A915EA46/DBDA2CC49C1111EF92FBA97CC4F9AE02/
Notify URL:               https://rrdp.apnic.net/notification.xml
Certificate not before:   Wed 06 Nov 2024 07:36:43 +0000
Certificate not after:    Mon 02 Mar 2026 00:00:00 +0000
Subordinate resources:    AS: 153392
                          IP: 2001:df4:8f40::/48
Validation:               OK
Signature path:           rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 05 Apr 2025 05:08:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 137646 (0x219ae)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A90DC5BE
        Validity
            Not Before: Nov  6 07:36:43 2024 GMT
            Not After : Mar  2 00:00:00 2026 GMT
        Subject: CN=A915EA46
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:de:09:3b:d3:c1:21:e2:2a:fb:b9:d1:49:34:
                    50:f6:d9:a9:8f:4f:fe:d9:02:20:99:81:64:15:49:
                    1e:61:49:95:cc:1f:95:04:76:8a:93:37:e2:c1:19:
                    5e:05:1f:aa:46:95:36:24:27:df:8b:c9:6e:be:46:
                    86:ff:7a:97:38:41:3c:25:2c:ab:e7:3d:cd:b8:b4:
                    7d:de:97:77:62:b6:98:44:93:32:22:3b:57:22:15:
                    f4:7f:dd:db:1b:73:4c:0d:d1:2b:13:d1:99:49:ad:
                    76:ca:70:5f:58:61:26:39:21:6c:42:94:a5:8f:a4:
                    af:ab:cf:0a:ce:9f:a7:1e:19:2a:93:7b:02:04:b3:
                    d9:76:bd:0b:77:eb:7d:30:2f:54:99:5d:8b:c2:94:
                    5d:72:0b:d1:fd:3c:9a:6b:35:30:8b:b5:be:61:51:
                    c0:4e:fb:d9:e9:fd:fc:2f:a3:c4:93:c7:96:f5:d8:
                    73:de:d5:38:31:e0:cc:a9:58:b1:c8:f0:8a:7d:a4:
                    d6:c6:a8:d5:b9:bf:45:1c:cc:b1:5c:1d:cb:51:c4:
                    b4:94:35:22:68:0c:f9:a6:85:0b:2d:0e:1b:7b:b6:
                    1d:fa:bd:34:34:53:1b:1f:ab:14:96:af:7a:ce:05:
                    e8:c7:c6:07:03:88:c3:85:47:42:81:c2:e8:77:4d:
                    4f:c3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AC:28:DC:2A:55:4B:4E:33:9A:39:9C:96:42:B4:CE:02:68:A8:DF:B0
            X509v3 Authority Key Identifier:
                keyid:0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                CA Repository - URI:rsync://rpki.apnic.net/member_repository/A915EA46/DBDA2CC49C1111EF92FBA97CC4F9AE02/
                RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A915EA46/DBDA2CC49C1111EF92FBA97CC4F9AE02/rCjcKlVLTjOaOZyWQrTOAmio37A.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  153392

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:df4:8f40::/48

    Signature Algorithm: sha256WithRSAEncryption
         9a:55:73:48:39:9f:e6:0a:fc:46:ee:d4:0c:7e:20:1b:e2:e7:
         05:a4:97:1d:8e:04:0e:4d:be:19:06:0e:ed:c6:af:3b:d4:55:
         94:78:dd:cf:41:ba:fb:0a:f7:4b:b6:91:34:0c:b5:42:1a:76:
         77:e9:cc:e7:ab:83:e4:bc:cd:0b:a5:65:47:b6:1d:e0:76:56:
         b8:25:43:be:12:91:7c:5b:57:84:7e:47:97:69:8f:ca:29:d7:
         fa:9d:f0:8f:0d:49:13:9d:7f:4a:99:85:32:1e:f4:cc:14:76:
         1c:12:63:ec:bc:eb:a5:73:01:bf:e2:1c:7d:ce:d6:bc:49:6d:
         7f:f8:80:2e:56:3f:86:72:04:53:b9:f3:41:7f:f8:7c:0c:f2:
         f2:ab:e1:98:db:c0:a8:60:a8:c9:1b:2c:24:b2:bd:9c:d2:6d:
         e4:65:65:6c:e8:2f:70:d3:b9:a8:a4:e4:f5:c0:c7:29:38:01:
         42:9d:d9:bc:8a:7f:87:02:3c:a2:3b:02:bd:29:a6:1f:f6:a4:
         6c:f8:ab:48:ae:e3:84:67:f5:36:cd:0b:25:04:ad:37:25:4e:
         2f:2b:32:81:b6:f5:c5:0b:4f:82:9a:14:12:7e:fb:f7:d3:f2:
         f9:73:4d:81:61:bc:8b:df:62:a2:b9:a5:6a:78:84:45:ad:f2:
         10:e0:ff:df
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 02:10:06 2025 by rpki-client