Certificate

$ rpki-client -vvf rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/G_zVla1f_bnAQ3N7yv7HLgRsa-4.cer
File:                     G_zVla1f_bnAQ3N7yv7HLgRsa-4.cer (raw, json)
Hash identifier:          osQw8zwzD1fiR6yBH9Y6Xn0yx7Bf/MClMnewrbEpCmA=
Subject key identifier:   1B:FC:D5:95:AD:5F:FD:B9:C0:43:73:7B:CA:FE:C7:2E:04:6C:6B:EE
Authority key identifier: 0C:FC:E7:78:57:FC:F0:1F:39:D9:9A:62:B4:AA:62:E6:15:9E:76:F8
Certificate issuer:       /CN=A90DC5BE/serialNumber=0CFCE77857FCF01F39D99A62B4AA62E6159E76F8
Certificate serial:       4293
Authority info access:    rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DPzneFf88B852ZpitKpi5hWedvg.cer
Manifest:                 rsync://rpki.apnic.net/member_repository/A9139322/91FE056ADFFE11ED95153D31C4F9AE02/G_zVla1f_bnAQ3N7yv7HLgRsa-4.mft
caRepository:             rsync://rpki.apnic.net/member_repository/A9139322/91FE056ADFFE11ED95153D31C4F9AE02/
Notify URL:               https://rrdp.apnic.net/notification.xml
Certificate not before:   Sun 03 Sep 2023 13:24:56 +0000
Certificate not after:    Sun 01 Dec 2024 00:00:00 +0000
Subordinate resources:    AS: 42960

Validation:               OK
Signature path:           rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.crl
                          rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DPzneFf88B852ZpitKpi5hWedvg.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 13 May 2024 02:50:12 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 17043 (0x4293)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A90DC5BE/serialNumber=0CFCE77857FCF01F39D99A62B4AA62E6159E76F8
        Validity
            Not Before: Sep  3 13:24:56 2023 GMT
            Not After : Dec  1 00:00:00 2024 GMT
        Subject: CN=A9139322/serialNumber=1BFCD595AD5FFDB9C043737BCAFEC72E046C6BEE
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:cc:52:14:60:d7:60:2f:62:84:a5:d3:55:d4:
                    e0:20:2b:af:0f:5c:d8:21:71:c1:22:48:88:c1:d6:
                    84:cc:2c:b9:53:a8:5f:56:fa:3a:72:c0:f1:79:01:
                    c9:08:36:21:ea:da:96:f1:b8:55:92:c3:f2:90:8d:
                    5a:cf:72:12:bf:1f:c8:21:21:f4:3a:a4:59:5c:7c:
                    3a:db:09:86:63:30:7d:ba:59:ee:d3:db:24:68:0f:
                    4d:c6:97:5a:50:d8:18:85:7a:0c:67:ac:60:dd:33:
                    a4:02:db:1a:40:2e:c7:e6:66:6e:fa:6e:ee:52:e0:
                    97:b5:80:38:f9:20:4b:6c:90:b4:d6:ec:15:e6:a3:
                    02:32:82:a5:db:e5:fc:6d:80:40:b6:b5:07:99:9d:
                    5c:29:fa:7a:a0:58:22:aa:6d:ed:19:e2:b5:8e:c2:
                    ae:25:91:2a:39:0d:12:f2:fc:cf:8c:70:e4:35:53:
                    80:81:b6:26:c8:42:dd:07:f3:d2:20:e5:da:f6:dd:
                    e1:aa:74:13:14:fc:15:00:7e:67:11:ac:4d:fd:7a:
                    39:52:8b:35:64:91:a4:10:65:2f:bf:82:bf:e9:2b:
                    57:fe:d2:5c:1f:7d:c1:96:e4:10:40:93:d3:9c:ca:
                    ea:78:7f:de:8e:e5:21:be:d3:44:1b:ae:15:9f:d1:
                    98:bd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1B:FC:D5:95:AD:5F:FD:B9:C0:43:73:7B:CA:FE:C7:2E:04:6C:6B:EE
            X509v3 Authority Key Identifier:
                keyid:0C:FC:E7:78:57:FC:F0:1F:39:D9:9A:62:B4:AA:62:E6:15:9E:76:F8

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DPzneFf88B852ZpitKpi5hWedvg.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                CA Repository - URI:rsync://rpki.apnic.net/member_repository/A9139322/91FE056ADFFE11ED95153D31C4F9AE02/
                RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A9139322/91FE056ADFFE11ED95153D31C4F9AE02/G_zVla1f_bnAQ3N7yv7HLgRsa-4.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  42960

    Signature Algorithm: sha256WithRSAEncryption
         64:8b:50:2a:19:33:2d:61:d2:ca:bc:84:22:fe:32:7f:80:3b:
         56:4d:46:d2:93:91:c3:73:01:20:6e:2f:3d:41:6e:fe:d7:e6:
         1f:5d:99:ef:fd:56:c9:0f:3e:c7:b3:31:84:8d:82:fb:c1:e2:
         41:a9:cd:61:23:bf:ad:55:17:46:9c:13:c8:1b:15:c2:b5:01:
         ce:d7:48:e4:77:6e:1b:b8:58:b6:5a:ca:81:fd:d4:63:6f:75:
         36:ac:b3:3e:d2:f6:7c:d7:8b:44:cd:0e:33:7a:3d:8a:83:09:
         a4:47:8f:5d:9e:6a:86:b7:9c:2e:36:86:3f:6d:bf:8f:ab:b5:
         c6:4a:07:36:22:84:07:72:9b:3e:fd:09:21:d7:1d:61:12:dc:
         d7:1c:ba:de:f8:6f:2e:6e:62:61:65:e9:35:39:0f:c8:6a:13:
         d1:80:65:b8:b9:ad:4c:65:47:d4:85:74:28:69:a6:26:bb:58:
         b8:50:e0:9f:6c:a5:10:fa:ca:b6:2e:56:71:fe:54:31:43:c5:
         97:51:98:0b:6a:36:65:b4:b4:3c:31:e9:21:5a:b5:39:3a:38:
         a0:f9:1e:c2:e3:33:1f:36:11:97:04:7a:eb:4a:1b:9d:b3:6b:
         9c:cc:04:b5:4a:8f:06:0a:c9:77:45:45:cf:15:7e:47:d0:6b:
         a9:80:5c:55
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 6 03:47:49 2024 by rpki-client on console-ams.rpki-client.org