Certificate

$ rpki-client -vvf rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/sc_l-mpxIskE6xEO8agpgPw9-ko.cer
File:                     sc_l-mpxIskE6xEO8agpgPw9-ko.cer (raw, json)
Hash identifier:          Hom2nt7d9bUL2s2rTFiwA5DevDM/IIKYqBhiMuNbw1A=
Subject key identifier:   B1:CF:E5:FA:6A:71:22:C9:04:EB:11:0E:F1:A8:29:80:FC:3D:FA:4A
Authority key identifier: 0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
Certificate issuer:       /CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Certificate serial:       023419
Authority info access:    rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
Manifest:                 rsync://rpki.apnic.net/member_repository/A91E75B7/7FED5E1E762611EB8DFCE04EC4F9AE02/sc_l-mpxIskE6xEO8agpgPw9-ko.mft
caRepository:             rsync://rpki.apnic.net/member_repository/A91E75B7/7FED5E1E762611EB8DFCE04EC4F9AE02/
Notify URL:               https://rrdp.apnic.net/notification.xml
Certificate not before:   Fri 28 Feb 2025 22:05:47 +0000
Certificate not after:    Fri 01 May 2026 00:00:00 +0000
Subordinate resources:    AS: 141700
                          IP: 103.161.197.0/24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 11 Apr 2025 17:46:13 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 144409 (0x23419)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A90DC5BE
        Validity
            Not Before: Feb 28 22:05:47 2025 GMT
            Not After : May  1 00:00:00 2026 GMT
        Subject: CN=A91E75B7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:db:08:08:67:91:88:4d:a8:fb:1b:66:0f:a1:
                    9a:1c:d9:0e:bf:3c:0c:55:d4:0f:70:33:05:b0:37:
                    5e:9b:1c:85:79:d5:4b:8f:d3:50:38:dc:50:96:c8:
                    7e:3f:8b:e3:23:da:64:fb:10:2f:34:7f:85:29:b6:
                    39:33:c3:2a:e3:02:e4:58:cf:c5:b0:4b:22:8d:a9:
                    83:5e:96:aa:02:0f:09:79:2b:f6:45:92:1e:54:21:
                    94:60:e6:fc:5e:45:c4:58:ef:ad:a2:08:82:44:e1:
                    43:7d:67:b5:bc:86:9f:ff:59:39:9b:97:04:32:69:
                    03:2b:88:95:54:25:8e:83:11:e2:23:42:c2:c8:83:
                    8d:9b:46:44:15:6e:46:4a:1d:3a:65:8f:d4:e4:6c:
                    e9:38:ad:24:41:ff:cd:13:32:b7:23:b4:03:25:bf:
                    a9:22:a9:c5:3b:e0:8b:e0:1e:0c:b2:8a:66:9d:bc:
                    52:5c:08:2c:31:1e:e8:c5:70:6e:67:9a:a7:92:60:
                    23:cf:21:75:cd:90:0f:71:4a:ba:70:31:34:34:b4:
                    fd:c2:49:a6:5d:52:c8:87:5c:7a:38:19:01:5b:49:
                    f2:1a:7e:36:38:9e:38:44:ef:b3:77:31:52:bd:ae:
                    94:1b:b4:38:8b:df:0b:f5:a9:c4:32:b2:da:b1:19:
                    da:b7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B1:CF:E5:FA:6A:71:22:C9:04:EB:11:0E:F1:A8:29:80:FC:3D:FA:4A
            X509v3 Authority Key Identifier:
                keyid:0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                CA Repository - URI:rsync://rpki.apnic.net/member_repository/A91E75B7/7FED5E1E762611EB8DFCE04EC4F9AE02/
                RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A91E75B7/7FED5E1E762611EB8DFCE04EC4F9AE02/sc_l-mpxIskE6xEO8agpgPw9-ko.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  141700

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.161.197.0/24

    Signature Algorithm: sha256WithRSAEncryption
         39:9d:d8:f3:3d:7e:28:67:5c:05:b9:fc:7b:e1:fd:47:f5:62:
         5e:7c:46:82:3d:1b:f1:00:7a:f6:fc:75:d7:4a:6d:45:b2:3f:
         0b:39:2f:82:08:65:c3:91:6e:a8:ee:8c:4b:38:29:58:81:ee:
         7c:76:88:f6:06:fc:b3:18:31:9a:44:2f:6a:f3:3f:2a:0b:0f:
         30:28:ed:08:0a:da:a5:32:fd:17:7b:93:77:96:46:a9:f7:10:
         e7:d2:20:df:de:17:64:3a:85:2f:48:2d:4e:73:a4:a1:fc:56:
         ef:e2:fa:4c:32:d5:e2:44:a7:ba:fc:c3:c9:1c:d1:d6:04:9c:
         1c:b9:d3:e7:1f:cf:7b:b8:55:8d:0e:47:7f:4c:43:ee:a2:d1:
         41:71:86:6e:c8:e8:33:fa:f2:4f:88:cb:c3:05:c6:8c:31:c3:
         ce:fb:59:3c:94:4e:d7:4f:3a:4c:7e:83:fa:69:34:12:ca:bc:
         ec:2c:b0:8f:d2:cb:9d:11:b8:fa:df:f4:ef:74:49:f7:c7:02:
         22:18:a4:cf:70:8b:62:68:80:58:3a:ff:7d:04:3e:65:08:f6:
         6c:01:2d:b4:ee:d9:ef:da:e1:b9:97:78:e4:72:ba:31:14:d8:
         58:f3:4b:c8:10:10:05:a1:a0:59:32:6a:bf:2a:31:20:01:1c:
         56:fc:71:e9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 19:44:25 2025 by rpki-client