Certificate

$ rpki-client -vvf rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/6tZGNV11k2y5Pta623kKh_4VN0o.cer
File:                     6tZGNV11k2y5Pta623kKh_4VN0o.cer (raw, json)
Hash identifier:          AN1F0SCdOmObfJqhRH+PlsVO+3D8s0l4Quf8c2oSSf0=
Subject key identifier:   EA:D6:46:35:5D:75:93:6C:B9:3E:D6:BA:DB:79:0A:87:FE:15:37:4A
Authority key identifier: 0C:FC:E7:78:57:FC:F0:1F:39:D9:9A:62:B4:AA:62:E6:15:9E:76:F8
Certificate issuer:       /CN=A90DC5BE/serialNumber=0CFCE77857FCF01F39D99A62B4AA62E6159E76F8
Certificate serial:       44BE
Authority info access:    rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DPzneFf88B852ZpitKpi5hWedvg.cer
Manifest:                 rsync://rpki.apnic.net/member_repository/A912F535/61980A54BA6611EEBC39626EC4F9AE02/6tZGNV11k2y5Pta623kKh_4VN0o.mft
caRepository:             rsync://rpki.apnic.net/member_repository/A912F535/61980A54BA6611EEBC39626EC4F9AE02/
Notify URL:               https://rrdp.apnic.net/notification.xml
Certificate not before:   Wed 24 Jan 2024 03:12:24 +0000
Certificate not after:    Tue 30 Jul 2024 00:00:00 +0000
Subordinate resources:    IP: 83.229.40.0/21
                          IP: 83.229.120.0/21

Validation:               OK
Signature path:           rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.crl
                          rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DPzneFf88B852ZpitKpi5hWedvg.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 12 May 2024 20:58:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 17598 (0x44be)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A90DC5BE/serialNumber=0CFCE77857FCF01F39D99A62B4AA62E6159E76F8
        Validity
            Not Before: Jan 24 03:12:24 2024 GMT
            Not After : Jul 30 00:00:00 2024 GMT
        Subject: CN=A912F535/serialNumber=EAD646355D75936CB93ED6BADB790A87FE15374A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:e8:f7:5e:37:97:80:c0:06:97:50:b4:d0:24:
                    a1:69:12:d6:f6:4b:4a:75:3c:5c:46:fc:58:2a:87:
                    35:98:9e:1c:fd:fd:ae:28:d5:26:5f:db:a9:d3:a1:
                    41:60:e0:8a:48:02:18:0c:54:5f:59:c3:3d:0b:86:
                    85:27:cf:c2:7f:96:2b:55:84:89:2e:9d:b0:85:48:
                    4d:25:bd:9b:b7:1f:49:fa:b1:2c:0d:30:2f:43:92:
                    73:44:e8:fd:25:cd:38:e3:5c:d1:a1:c2:61:9f:20:
                    f5:c5:ad:57:f7:0a:b4:0c:e2:cd:4b:d0:6a:96:2c:
                    3d:14:1c:80:9e:82:8a:8d:07:3d:b9:a0:3d:0b:cb:
                    ef:4a:4f:94:78:94:f3:2c:5c:12:56:c3:37:68:f8:
                    be:49:c9:e5:4b:9f:8a:2a:d9:8d:9e:39:d2:49:1e:
                    9d:f7:a4:2f:e5:67:60:e2:4b:59:98:ca:d1:c5:17:
                    6c:cd:13:39:9e:4d:ae:94:16:39:9a:3a:88:85:5b:
                    f1:56:5c:d9:63:8b:a5:fa:e4:9e:4d:19:62:7e:cf:
                    80:ee:0f:37:27:9d:33:bb:90:ac:05:ff:19:15:4e:
                    e8:5e:73:14:7f:8c:f8:b0:27:e0:5b:d2:12:88:43:
                    42:1f:bd:18:dd:55:df:7f:06:e6:b2:cd:93:37:d2:
                    8b:db
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EA:D6:46:35:5D:75:93:6C:B9:3E:D6:BA:DB:79:0A:87:FE:15:37:4A
            X509v3 Authority Key Identifier:
                keyid:0C:FC:E7:78:57:FC:F0:1F:39:D9:9A:62:B4:AA:62:E6:15:9E:76:F8

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DPzneFf88B852ZpitKpi5hWedvg.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                CA Repository - URI:rsync://rpki.apnic.net/member_repository/A912F535/61980A54BA6611EEBC39626EC4F9AE02/
                RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A912F535/61980A54BA6611EEBC39626EC4F9AE02/6tZGNV11k2y5Pta623kKh_4VN0o.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  83.229.40.0/21
                  83.229.120.0/21

    Signature Algorithm: sha256WithRSAEncryption
         bf:84:4b:92:f5:24:b9:ae:0a:bf:32:c2:67:08:25:09:13:10:
         3a:20:b3:23:2c:3d:c8:b2:c6:c5:75:75:12:3b:9f:f0:42:f6:
         6b:11:5a:2c:2c:04:fb:06:92:de:66:ff:7b:00:39:c3:bd:25:
         52:4a:e1:e2:3c:66:19:62:d2:02:48:c5:13:b8:eb:a3:3a:71:
         cb:d4:78:49:d2:ea:a5:4c:1b:99:08:c9:8b:b0:a1:79:ae:11:
         bc:ab:18:1c:f9:c2:eb:0d:67:39:3a:1b:ba:35:32:4e:a2:25:
         dc:b0:0b:3c:4d:92:2d:16:a8:9c:30:d0:dd:a0:02:de:84:b9:
         15:b6:ef:4a:d0:ed:11:48:b2:87:ee:99:27:d6:55:d4:aa:ce:
         aa:c2:6e:dd:f9:71:70:e5:af:60:95:76:3c:07:cb:3c:08:64:
         b7:8c:55:a4:6b:fb:c2:be:38:75:03:13:82:60:53:03:98:91:
         f7:12:24:f2:1a:cc:b5:24:7c:a9:22:3a:87:d7:d4:d1:e4:de:
         70:ef:83:ff:20:a6:90:e4:48:d3:87:84:b6:35:3b:4d:70:1b:
         18:fa:8f:b3:cf:39:68:b9:d4:87:5d:95:03:52:0a:b5:1f:ec:
         08:1d:00:46:5a:a4:da:19:68:49:9a:49:f3:be:d5:c8:90:db:
         c1:a6:cb:c8
-----BEGIN CERTIFICATE-----
MIIGAzCCBOugAwIBAgICRL4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkw
REM1QkUxMTAvBgNVBAUTKDBDRkNFNzc4NTdGQ0YwMUYzOUQ5OUE2MkI0QUE2MkU2
MTU5RTc2RjgwHhcNMjQwMTI0MDMxMjI0WhcNMjQwNzMwMDAwMDAwWjBGMREwDwYD
VQQDEwhBOTEyRjUzNTExMC8GA1UEBRMoRUFENjQ2MzU1RDc1OTM2Q0I5M0VENkJB
REI3OTBBODdGRTE1Mzc0QTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEB
AKzo9143l4DABpdQtNAkoWkS1vZLSnU8XEb8WCqHNZieHP39rijVJl/bqdOhQWDg
ikgCGAxUX1nDPQuGhSfPwn+WK1WEiS6dsIVITSW9m7cfSfqxLA0wL0OSc0To/SXN
OONc0aHCYZ8g9cWtV/cKtAzizUvQapYsPRQcgJ6Cio0HPbmgPQvL70pPlHiU8yxc
ElbDN2j4vknJ5UufiirZjZ450kkenfekL+VnYOJLWZjK0cUXbM0TOZ5NrpQWOZo6
iIVb8VZc2WOLpfrknk0ZYn7PgO4PNyedM7uQrAX/GRVO6F5zFH+M+LAn4FvSEohD
Qh+9GN1V338G5rLNkzfSi9sCAwEAAaOCAvkwggL1MB0GA1UdDgQWBBTq1kY1XXWT
bLk+1rrbeQqH/hU3SjAfBgNVHSMEGDAWgBQM/Od4V/zwHznZmmK0qmLmFZ52+DAO
BgNVHQ8BAf8EBAMCAQYwDwYDVR0TAQH/BAUwAwEB/zBzBgNVHR8EbDBqMGigZqBk
hmJyc3luYzovL3Jwa2kuYXBuaWMubmV0L3JlcG9zaXRvcnkvQjMyMkE1RjQxRDY2
MTFFMkEzRjI3RjdDNzJGRDFGRjIvRFB6bmVGZjg4Qjg1MlpwaXRLcGk1aFdlZHZn
LmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5h
cG5pYy5uZXQvcmVwb3NpdG9yeS85ODA2NTJFMEI3N0UxMUU3QTk2QTM5NTIxQTRG
NEZCNC9EUHpuZUZmODhCODUyWnBpdEtwaTVoV2VkdmcuY2VyMEoGA1UdIAEB/wRA
MD4wPAYIKwYBBQUHDgIwMDAuBggrBgEFBQcCARYiaHR0cHM6Ly93d3cuYXBuaWMu
bmV0L1JQS0kvQ1BTLnBkZjCCASgGCCsGAQUFBwELBIIBGjCCARYwXwYIKwYBBQUH
MAWGU3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
MkY1MzUvNjE5ODBBNTRCQTY2MTFFRUJDMzk2MjZFQzRGOUFFMDIvMH4GCCsGAQUF
BzAKhnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5
MTJGNTM1LzYxOTgwQTU0QkE2NjExRUVCQzM5NjI2RUM0RjlBRTAyLzZ0WkdOVjEx
azJ5NVB0YTYyM2tLaF80Vk4wby5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJk
cC5hcG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAlBggrBgEFBQcBBwEB/wQWMBQw
EgQCAAEwDAMEA1PlKAMEA1PleDANBgkqhkiG9w0BAQsFAAOCAQEAv4RLkvUkua4K
vzLCZwglCRMQOiCzIyw9yLLGxXV1Ejuf8EL2axFaLCwE+waS3mb/ewA5w70lUkrh
4jxmGWLSAkjFE7jrozpxy9R4SdLqpUwbmQjJi7Chea4RvKsYHPnC6w1nOTobujUy
TqIl3LALPE2SLRaonDDQ3aAC3oS5FbbvStDtEUiyh+6ZJ9ZV1KrOqsJu3flxcOWv
YJV2PAfLPAhkt4xVpGv7wr44dQMTgmBTA5iR9xIk8hrMtSR8qSI6h9fU0eTecO+D
/yCmkORI04eEtjU7TXAbGPqPs885aLnUh12VA1IKtR/sCB0ARlqk2hloSZpJ877V
yJDbwabLyA==
-----END CERTIFICATE-----
Generated at Sun May 5 22:37:14 2024 by rpki-client on console-ams.rpki-client.org