Certificate

$ rpki-client -vvf rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/6t6GhZIRcEQyqBm4GJm2DF093os.cer
File:                     6t6GhZIRcEQyqBm4GJm2DF093os.cer (raw, json)
Hash identifier:          lldaF08jwe7z3A/il/u+lSooTJjQ3xCVoB0pRxHJqLw=
Subject key identifier:   EA:DE:86:85:92:11:70:44:32:A8:19:B8:18:99:B6:0C:5D:3D:DE:8B
Authority key identifier: 0C:FC:E7:78:57:FC:F0:1F:39:D9:9A:62:B4:AA:62:E6:15:9E:76:F8
Certificate issuer:       /CN=A90DC5BE/serialNumber=0CFCE77857FCF01F39D99A62B4AA62E6159E76F8
Certificate serial:       40EA
Authority info access:    rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DPzneFf88B852ZpitKpi5hWedvg.cer
Manifest:                 rsync://rpki.apnic.net/member_repository/A91A0432/EC692F04A4CA11ECAC4E5744C4F9AE02/6t6GhZIRcEQyqBm4GJm2DF093os.mft
caRepository:             rsync://rpki.apnic.net/member_repository/A91A0432/EC692F04A4CA11ECAC4E5744C4F9AE02/
Notify URL:               https://rrdp.apnic.net/notification.xml
Certificate not before:   Wed 10 May 2023 18:39:34 +0000
Certificate not after:    Tue 30 Jul 2024 00:00:00 +0000
Subordinate resources:    IP: 87.121.117.0/24

Validation:               OK
Signature path:           rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.crl
                          rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DPzneFf88B852ZpitKpi5hWedvg.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 12 May 2024 20:58:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 16618 (0x40ea)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A90DC5BE/serialNumber=0CFCE77857FCF01F39D99A62B4AA62E6159E76F8
        Validity
            Not Before: May 10 18:39:34 2023 GMT
            Not After : Jul 30 00:00:00 2024 GMT
        Subject: CN=A91A0432/serialNumber=EADE86859211704432A819B81899B60C5D3DDE8B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:a6:08:82:bd:26:bb:f2:75:fa:17:04:70:42:
                    30:bb:c5:8f:bd:0f:5f:3d:1a:25:8f:8a:a4:7a:02:
                    72:7b:2e:c5:66:89:5e:2a:18:ab:28:a6:23:12:fe:
                    37:5f:74:99:4e:3d:94:c8:1e:5d:8c:75:f1:5a:49:
                    66:40:4b:73:6d:65:63:9e:4f:72:dd:04:0c:a0:38:
                    ee:1c:de:7a:b4:c6:da:d2:62:a7:01:43:e3:7c:f3:
                    42:c1:73:bf:e8:48:f0:e2:38:5a:a6:c4:3e:dc:6c:
                    3a:ef:ee:58:ed:32:27:11:44:61:0d:ba:57:fa:45:
                    06:e0:72:01:9d:56:34:40:64:64:c4:56:4e:8d:3c:
                    4f:6f:5c:92:64:19:10:83:a6:32:a3:5a:4c:38:ab:
                    7e:00:93:53:44:85:f6:6f:a2:b5:ff:f3:7a:2b:18:
                    64:7b:92:f0:51:4e:8f:e9:43:46:dd:1d:14:94:c2:
                    8a:43:0d:d5:2d:9e:38:7f:1c:02:f2:3c:da:6d:ac:
                    49:f4:47:7e:5a:c7:f7:22:40:94:00:7b:aa:1d:cd:
                    0c:df:81:15:ed:29:99:82:aa:f1:9d:2f:9b:8a:74:
                    b2:5c:25:cc:90:24:cc:da:91:26:25:b4:94:dc:ed:
                    7d:d4:42:0e:d1:61:bb:71:61:13:43:6f:95:63:93:
                    0a:27
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EA:DE:86:85:92:11:70:44:32:A8:19:B8:18:99:B6:0C:5D:3D:DE:8B
            X509v3 Authority Key Identifier:
                keyid:0C:FC:E7:78:57:FC:F0:1F:39:D9:9A:62:B4:AA:62:E6:15:9E:76:F8

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DPzneFf88B852ZpitKpi5hWedvg.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                CA Repository - URI:rsync://rpki.apnic.net/member_repository/A91A0432/EC692F04A4CA11ECAC4E5744C4F9AE02/
                RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A91A0432/EC692F04A4CA11ECAC4E5744C4F9AE02/6t6GhZIRcEQyqBm4GJm2DF093os.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  87.121.117.0/24

    Signature Algorithm: sha256WithRSAEncryption
         c3:d6:1e:22:12:49:2f:97:f2:a8:ae:b6:3d:1c:1c:3e:c0:82:
         eb:56:35:f2:b5:02:43:d7:a7:8c:cd:57:81:5a:60:b7:ac:66:
         3f:f5:3a:32:f6:d7:05:7e:69:83:1d:e7:00:b3:ec:0c:08:35:
         e8:90:6a:97:a1:fd:2c:f5:15:04:27:40:b9:c5:97:a1:e2:12:
         03:c7:96:c2:2d:6d:6b:90:3d:9f:7d:bc:b4:1d:41:d2:99:3e:
         d9:7f:6d:ff:e1:92:e7:03:1d:39:0d:aa:13:0b:e1:eb:0e:4c:
         48:2a:bd:8a:3a:44:c1:9c:75:46:7c:02:ca:b7:46:77:f5:17:
         48:b5:2d:5c:b4:7e:6b:24:38:ac:58:de:fc:0e:01:a8:bd:43:
         5d:34:79:93:b5:55:1f:24:54:c4:92:22:2d:39:82:5c:c1:dc:
         cb:3b:69:0d:53:48:aa:5c:e6:ff:91:12:d0:e8:6d:3e:40:27:
         64:cb:6e:b2:0f:44:2a:da:d4:ad:cd:86:bb:53:f8:ed:76:76:
         62:4a:cd:0c:95:f5:b5:db:68:eb:be:6a:de:6d:ca:e1:ef:7a:
         95:d9:a2:cd:6d:3d:98:72:ce:a0:18:1f:c0:f8:6d:21:3d:34:
         b1:13:e2:17:56:56:70:cc:ec:0c:e7:66:4b:70:9d:e2:fd:ca:
         7b:b3:8e:d3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 5 22:04:22 2024 by rpki-client on console-fra.rpki-client.org