Certificate

$ rpki-client -vvf rpki.afrinic.net/repository/apnic/U_eNgMrA6y6s13sBdd8xno91J5Y.cer
File:                     U_eNgMrA6y6s13sBdd8xno91J5Y.cer (raw, json)
Hash identifier:          7wnmK4TUsAQFB4aTf61zo6E0Mz2KJ5b/rgxYOI5V3nQ=
Subject key identifier:   53:F7:8D:80:CA:C0:EB:2E:AC:D7:7B:01:75:DF:31:9E:8F:75:27:96
Authority key identifier: 6F:1A:10:3E:14:27:FF:03:48:3A:BF:D9:E3:4D:AC:BE:15:24:FF:8B
Certificate issuer:       /CN=APNICTOAFRINIC/serialNumber=6F1A103E1427FF03483ABFD9E34DACBE1524FF8B
Certificate serial:       0E0A
Authority info access:    rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/apnic-to-afrinic.cer
Manifest:                 rsync://rpki.afrinic.net/repository/member_repository/F36AC63A/3017B30240C311EEA7230C444AD9E6FC/U_eNgMrA6y6s13sBdd8xno91J5Y.mft
caRepository:             rsync://rpki.afrinic.net/repository/member_repository/F36AC63A/3017B30240C311EEA7230C444AD9E6FC/
Notify URL:               https://rrdp.afrinic.net/notification.xml
Certificate not before:   Wed 01 Jan 2025 00:15:52 +0000
Certificate not after:    Tue 31 Mar 2026 00:00:00 +0000
Subordinate resources:    IP: 163.199.0.0/16
                          IP: 163.201.0.0/16
Validation:               Failed, CRL has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3594 (0xe0a)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=APNICTOAFRINIC
        Validity
            Not Before: Jan  1 00:15:52 2025 GMT
            Not After : Mar 31 00:00:00 2026 GMT
        Subject: CN=F36AC63AAP
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cf:56:0e:92:c6:3d:13:d6:0d:1a:a1:64:49:75:
                    0b:dc:65:3f:dc:7e:57:c0:73:21:a6:aa:23:0e:8c:
                    3c:c1:09:de:fe:cc:4b:91:76:53:e4:f4:d3:80:6c:
                    2d:1f:94:96:b6:3e:ca:68:4a:23:eb:7f:d4:c1:7c:
                    f8:1b:39:d9:50:6c:0d:3e:9d:7f:e8:13:4b:fc:99:
                    2f:98:31:5f:b2:aa:44:5f:e3:b9:c3:cc:12:d4:07:
                    97:31:85:74:f1:0c:ff:e2:4a:ab:d3:18:73:6b:ac:
                    2f:ec:c0:23:2f:d4:c5:e9:7c:73:38:63:b3:c1:35:
                    b5:34:1e:eb:1d:49:86:2b:46:4c:8c:b8:9d:5f:2d:
                    7f:79:dc:05:2c:13:26:90:10:f5:0e:e0:6b:3a:a5:
                    a7:af:d6:99:bc:fb:a3:46:b6:6e:c4:d0:01:13:80:
                    1a:62:70:58:e2:f5:0d:63:2f:14:54:d0:40:e6:62:
                    34:79:7e:65:e8:70:77:bb:f5:87:37:d3:de:5a:88:
                    82:cc:2b:50:0e:a9:3e:b8:9f:29:a6:e0:35:4e:69:
                    87:d4:4a:85:ac:ac:5e:48:6c:ca:84:01:f2:fe:75:
                    e6:39:6b:af:ec:96:d2:d8:c3:c4:fb:97:9f:66:8a:
                    79:6b:ae:d1:20:15:ff:59:10:05:ec:53:27:14:fd:
                    09:dd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                53:F7:8D:80:CA:C0:EB:2E:AC:D7:7B:01:75:DF:31:9E:8F:75:27:96
            X509v3 Authority Key Identifier:
                keyid:6F:1A:10:3E:14:27:FF:03:48:3A:BF:D9:E3:4D:AC:BE:15:24:FF:8B

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/apnic/bxoQPhQn_wNIOr_Z402svhUk_4s.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/apnic-to-afrinic.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                CA Repository - URI:rsync://rpki.afrinic.net/repository/member_repository/F36AC63A/3017B30240C311EEA7230C444AD9E6FC/
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
                RPKI Manifest - URI:rsync://rpki.afrinic.net/repository/member_repository/F36AC63A/3017B30240C311EEA7230C444AD9E6FC/U_eNgMrA6y6s13sBdd8xno91J5Y.mft

            sbgp-ipAddrBlock: critical
                IPv4:
                  163.199.0.0/16
                  163.201.0.0/16

    Signature Algorithm: sha256WithRSAEncryption
         33:ff:b5:54:ab:04:e6:ae:42:f6:cc:05:dd:05:25:6d:dc:70:
         cc:54:eb:bb:cd:2e:c3:1e:f4:3f:dd:24:af:12:ef:79:19:5f:
         b9:87:b9:4a:92:51:b5:63:42:2d:7f:41:91:a8:bc:a0:ea:20:
         29:c4:4b:d7:36:71:5d:b4:2e:9f:6b:cf:10:f2:e7:f1:b6:1c:
         6d:05:a0:b9:63:74:50:7e:1c:e2:97:a0:aa:63:7b:9e:f5:72:
         be:56:9c:e3:44:12:d7:04:11:e1:1f:71:97:b4:0d:b0:55:5b:
         f0:3e:24:d4:54:32:22:b3:20:ad:d6:bf:4a:ad:0d:e8:3a:36:
         39:f4:5a:30:6f:a3:b7:3d:04:0a:f3:2d:41:2b:ec:60:9c:f1:
         43:9f:af:df:6d:a4:e8:08:89:40:d9:5a:18:84:71:4c:a0:bc:
         0d:2a:dd:0f:1e:d1:44:46:e1:ad:8c:21:1a:d8:84:68:ea:9e:
         5a:aa:5a:90:16:08:a6:cf:59:f5:ce:29:dd:7e:97:60:f0:03:
         13:4d:92:1c:0b:3c:3a:6f:7c:78:1f:7d:f2:37:eb:ce:d9:1f:
         6c:1f:1c:d5:32:a1:99:3e:86:95:f4:6f:73:fb:62:9f:29:7a:
         f2:27:fb:d0:0d:92:34:39:b3:b1:9b:65:7e:b5:61:a6:f6:fb:
         3b:db:c3:63
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 00:00:32 2025 by rpki-client