Certificate

$ rpki-client -vvf rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/E7lE6lgzzbdBH9TsaqHJYs87CIA.cer
File:                     E7lE6lgzzbdBH9TsaqHJYs87CIA.cer (raw, json)
Hash identifier:          L6KNNjXNVuivo0Zcd172cl8cIdKgVBIazXEg2KqMI40=
Subject key identifier:   13:B9:44:EA:58:33:CD:B7:41:1F:D4:EC:6A:A1:C9:62:CF:3B:08:80
Authority key identifier: 0C:FC:E7:78:57:FC:F0:1F:39:D9:9A:62:B4:AA:62:E6:15:9E:76:F8
Certificate issuer:       /CN=A90DC5BE/serialNumber=0CFCE77857FCF01F39D99A62B4AA62E6159E76F8
Certificate serial:       4939
Authority info access:    rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DPzneFf88B852ZpitKpi5hWedvg.cer
Manifest:                 rsync://rpki.apnic.net/member_repository/A91FCF44/E219C638AE1511EFB302983EC4F9AE02/E7lE6lgzzbdBH9TsaqHJYs87CIA.mft
caRepository:             rsync://rpki.apnic.net/member_repository/A91FCF44/E219C638AE1511EFB302983EC4F9AE02/
Notify URL:               https://rrdp.apnic.net/notification.xml
Certificate not before:   Fri 29 Nov 2024 05:50:53 +0000
Certificate not after:    Wed 28 May 2025 00:00:00 +0000
Subordinate resources:    AS: 35820
Validation:               OK
Signature path:           rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.crl
                          rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DPzneFf88B852ZpitKpi5hWedvg.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 12 Feb 2025 14:50:30 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 18745 (0x4939)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A90DC5BE
        Validity
            Not Before: Nov 29 05:50:53 2024 GMT
            Not After : May 28 00:00:00 2025 GMT
        Subject: CN=A91FCF44
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:82:77:ad:b6:35:31:9f:79:2d:4b:e2:ed:f8:
                    27:ea:09:95:87:80:c9:ca:9c:48:13:43:33:7d:7f:
                    2c:7f:78:fa:a7:5d:5f:e2:53:9f:27:da:bd:65:97:
                    0c:5f:49:0a:65:73:db:cb:23:90:16:13:3e:2b:1f:
                    3b:b4:c7:ea:c9:69:38:93:92:43:d3:00:3f:61:01:
                    56:58:02:77:83:ee:5c:d7:e8:cb:18:d8:6c:17:bb:
                    b3:a1:d6:14:32:bc:b9:55:a3:51:66:80:8f:2e:8c:
                    5e:72:87:a0:a2:f6:49:20:d5:32:b6:13:d0:ed:0c:
                    47:b9:4a:bc:64:5e:5d:42:a9:d0:9a:db:2a:17:3c:
                    82:b9:be:81:a1:ca:16:aa:6c:20:46:21:0c:aa:0d:
                    a4:02:9b:e5:fa:f9:a5:57:71:14:ed:a7:87:4c:ea:
                    f5:43:16:ab:95:08:1e:a9:e2:37:1c:18:94:4f:11:
                    fd:78:2c:0c:a0:e3:13:1e:53:a6:a2:f1:36:20:d4:
                    c0:87:09:79:bb:5b:2c:3a:5d:ed:2d:b9:c3:6a:5c:
                    c4:63:fd:57:16:c8:b3:f5:c1:53:d6:3e:32:fd:30:
                    7e:73:ca:a0:ae:5c:1a:52:82:db:e5:12:1d:2f:3e:
                    37:8b:a7:2d:16:dc:d2:5b:1b:5d:8c:42:df:de:12:
                    ee:b3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                13:B9:44:EA:58:33:CD:B7:41:1F:D4:EC:6A:A1:C9:62:CF:3B:08:80
            X509v3 Authority Key Identifier:
                keyid:0C:FC:E7:78:57:FC:F0:1F:39:D9:9A:62:B4:AA:62:E6:15:9E:76:F8

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DPzneFf88B852ZpitKpi5hWedvg.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                CA Repository - URI:rsync://rpki.apnic.net/member_repository/A91FCF44/E219C638AE1511EFB302983EC4F9AE02/
                RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A91FCF44/E219C638AE1511EFB302983EC4F9AE02/E7lE6lgzzbdBH9TsaqHJYs87CIA.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  35820

    Signature Algorithm: sha256WithRSAEncryption
         57:5c:8a:61:61:43:00:b3:ad:76:ce:05:49:02:21:45:2a:00:
         1c:a1:a8:58:ac:3c:f9:a7:c3:68:ac:fb:d2:95:58:7c:37:b9:
         56:f9:90:45:03:fd:af:4d:63:dd:d1:32:a1:dc:0f:8c:30:e7:
         b5:d0:f8:ab:db:26:ba:6c:92:6a:eb:47:ce:3a:dd:3d:3b:0a:
         eb:97:e1:32:f1:76:07:26:5e:94:4b:38:f6:e2:c3:dc:ea:b0:
         83:73:f6:98:cb:af:23:23:de:0a:12:fc:3e:b9:9f:ee:4b:18:
         15:c1:50:e5:c6:d0:95:6b:41:c9:df:c3:d7:09:87:59:55:f2:
         53:52:90:a7:c5:6e:c0:57:f8:d8:87:88:d5:0d:b8:14:b4:36:
         9d:c2:54:80:4c:93:58:f7:93:97:90:8b:bf:c0:ed:5a:51:ab:
         f7:26:25:c4:8e:cf:0f:b5:15:e5:82:b7:f8:b4:9e:c9:23:0d:
         fc:63:51:a2:11:ff:df:ee:f7:e1:10:17:9f:f8:96:17:66:de:
         e6:19:16:9a:a0:8f:5d:55:16:5d:a1:17:18:3e:2a:f2:af:49:
         d5:b1:32:1c:cf:a2:9c:0a:b7:18:40:63:6a:23:ca:85:58:1f:
         00:1e:aa:8b:5f:59:82:65:b1:f7:c1:94:78:61:96:1e:77:ee:
         a4:81:88:04
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 5 19:03:41 2025 by rpki-client