Certificate

$ rpki-client -vvf rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/JyMHsieTbbPuO2VAYCwy2Vgwn2E.cer
File:                     JyMHsieTbbPuO2VAYCwy2Vgwn2E.cer (raw, json)
Hash identifier:          XJgY976AeQsa1Lw0owdsw/OmWABmIYuHf521IB/m59Q=
Subject key identifier:   27:23:07:B2:27:93:6D:B3:EE:3B:65:40:60:2C:32:D9:58:30:9F:61
Authority key identifier: 0C:FC:E7:78:57:FC:F0:1F:39:D9:9A:62:B4:AA:62:E6:15:9E:76:F8
Certificate issuer:       /CN=A90DC5BE/serialNumber=0CFCE77857FCF01F39D99A62B4AA62E6159E76F8
Certificate serial:       41DA
Authority info access:    rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DPzneFf88B852ZpitKpi5hWedvg.cer
Manifest:                 rsync://rpki.apnic.net/member_repository/A91E5D61/2A7C7D981D7911E2879E38C508B02CD2/JyMHsieTbbPuO2VAYCwy2Vgwn2E.mft
caRepository:             rsync://rpki.apnic.net/member_repository/A91E5D61/2A7C7D981D7911E2879E38C508B02CD2/
Notify URL:               https://rrdp.apnic.net/notification.xml
Certificate not before:   Tue 18 Jul 2023 14:22:04 +0000
Certificate not after:    Mon 30 Sep 2024 00:00:00 +0000
Subordinate resources:    IP: 2001:7fa:5::/48

Validation:               OK
Signature path:           rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.crl
                          rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DPzneFf88B852ZpitKpi5hWedvg.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 13 May 2024 02:50:12 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 16858 (0x41da)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A90DC5BE/serialNumber=0CFCE77857FCF01F39D99A62B4AA62E6159E76F8
        Validity
            Not Before: Jul 18 14:22:04 2023 GMT
            Not After : Sep 30 00:00:00 2024 GMT
        Subject: CN=A91E5D61/serialNumber=272307B227936DB3EE3B6540602C32D958309F61
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:2a:55:34:f7:7a:00:99:ca:7f:b5:95:74:df:
                    72:29:e8:db:3d:c2:9d:e4:4a:cb:d9:77:33:7c:33:
                    ce:13:26:a9:77:22:19:65:6b:3c:2a:22:72:af:5b:
                    80:8e:aa:ca:2b:ea:21:c7:cc:7e:d3:d0:b8:61:6b:
                    7a:4c:e4:79:3b:69:45:f0:51:ef:97:20:e0:2b:e0:
                    9a:8d:f6:c8:45:67:b9:a3:c0:a2:f8:0f:90:d5:cd:
                    ef:17:9c:33:1b:ca:fa:37:07:bd:da:f6:5e:72:f9:
                    80:83:c6:67:6a:39:f2:a0:cc:6a:01:e7:fa:5d:2e:
                    db:5e:de:fe:8b:25:b0:ff:0f:53:a7:96:41:5a:f0:
                    85:84:07:ff:c6:6a:8a:0e:21:d2:d9:eb:35:81:25:
                    c3:2b:55:c1:5c:31:2f:05:2e:05:01:b2:e6:13:39:
                    5c:e3:06:af:1e:07:f3:23:65:8c:7a:c1:d7:dd:b1:
                    d1:ae:4d:d1:0f:f2:9e:26:4b:a6:6a:f1:34:04:4f:
                    96:63:95:11:87:29:30:cd:23:68:42:5d:a2:13:53:
                    76:ab:ef:c8:30:99:65:59:e7:ab:28:e5:0a:4c:2f:
                    15:b2:4f:fe:98:2e:7a:df:5c:1c:b6:d3:fc:c5:fe:
                    28:bf:0b:96:08:fc:01:9b:99:2c:9e:b7:5f:ec:5f:
                    94:dd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                27:23:07:B2:27:93:6D:B3:EE:3B:65:40:60:2C:32:D9:58:30:9F:61
            X509v3 Authority Key Identifier:
                keyid:0C:FC:E7:78:57:FC:F0:1F:39:D9:9A:62:B4:AA:62:E6:15:9E:76:F8

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DPzneFf88B852ZpitKpi5hWedvg.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                CA Repository - URI:rsync://rpki.apnic.net/member_repository/A91E5D61/2A7C7D981D7911E2879E38C508B02CD2/
                RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A91E5D61/2A7C7D981D7911E2879E38C508B02CD2/JyMHsieTbbPuO2VAYCwy2Vgwn2E.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:7fa:5::/48

    Signature Algorithm: sha256WithRSAEncryption
         c0:48:20:1e:9b:96:c0:2f:18:5d:e2:02:1f:01:70:fa:70:d6:
         d3:55:db:40:47:99:76:2a:8b:74:83:fe:d7:b4:bd:df:77:12:
         8a:e9:42:7c:c2:4d:3e:6e:ea:80:87:23:56:a7:52:38:2e:0f:
         d6:e5:5e:a4:2f:d4:a4:ed:b6:d4:a1:aa:51:4c:94:41:11:95:
         77:c4:0f:f5:12:12:98:57:a7:65:31:6c:6a:04:c0:34:52:3f:
         99:f6:78:76:ac:95:b1:84:95:f6:7a:ba:a2:29:72:d0:64:d9:
         68:c9:af:7b:7c:9c:eb:c1:66:f8:d0:47:08:99:8c:69:73:40:
         db:76:54:c3:d0:86:c7:6e:fa:fa:6e:cd:d4:53:66:79:f4:b0:
         ae:cd:72:05:5c:c4:0a:c1:43:c2:25:69:04:30:de:fb:79:0d:
         fd:c7:c7:41:bb:1e:8d:0c:d5:5a:6a:c8:62:4b:d3:0d:69:52:
         b4:e8:59:bd:57:ac:26:c6:f8:fb:31:2a:85:ff:6d:7c:e2:c5:
         81:f0:aa:a2:83:a7:50:4c:27:38:ad:72:45:19:8c:e0:c7:31:
         12:a0:73:ab:ec:85:b8:51:88:2f:58:35:e8:ac:6d:09:ec:99:
         a9:f9:3f:75:36:de:76:07:f3:b6:56:4b:00:39:0b:df:67:a5:
         54:30:31:1f
-----BEGIN CERTIFICATE-----
MIIGADCCBOigAwIBAgICQdowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkw
REM1QkUxMTAvBgNVBAUTKDBDRkNFNzc4NTdGQ0YwMUYzOUQ5OUE2MkI0QUE2MkU2
MTU5RTc2RjgwHhcNMjMwNzE4MTQyMjA0WhcNMjQwOTMwMDAwMDAwWjBGMREwDwYD
VQQDEwhBOTFFNUQ2MTExMC8GA1UEBRMoMjcyMzA3QjIyNzkzNkRCM0VFM0I2NTQw
NjAyQzMyRDk1ODMwOUY2MTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEB
ALcqVTT3egCZyn+1lXTfcino2z3CneRKy9l3M3wzzhMmqXciGWVrPCoicq9bgI6q
yivqIcfMftPQuGFrekzkeTtpRfBR75cg4Cvgmo32yEVnuaPAovgPkNXN7xecMxvK
+jcHvdr2XnL5gIPGZ2o58qDMagHn+l0u217e/oslsP8PU6eWQVrwhYQH/8Zqig4h
0tnrNYElwytVwVwxLwUuBQGy5hM5XOMGrx4H8yNljHrB192x0a5N0Q/yniZLpmrx
NARPlmOVEYcpMM0jaEJdohNTdqvvyDCZZVnnqyjlCkwvFbJP/pguet9cHLbT/MX+
KL8Llgj8AZuZLJ63X+xflN0CAwEAAaOCAvYwggLyMB0GA1UdDgQWBBQnIweyJ5Nt
s+47ZUBgLDLZWDCfYTAfBgNVHSMEGDAWgBQM/Od4V/zwHznZmmK0qmLmFZ52+DAO
BgNVHQ8BAf8EBAMCAQYwDwYDVR0TAQH/BAUwAwEB/zBzBgNVHR8EbDBqMGigZqBk
hmJyc3luYzovL3Jwa2kuYXBuaWMubmV0L3JlcG9zaXRvcnkvQjMyMkE1RjQxRDY2
MTFFMkEzRjI3RjdDNzJGRDFGRjIvRFB6bmVGZjg4Qjg1MlpwaXRLcGk1aFdlZHZn
LmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5h
cG5pYy5uZXQvcmVwb3NpdG9yeS85ODA2NTJFMEI3N0UxMUU3QTk2QTM5NTIxQTRG
NEZCNC9EUHpuZUZmODhCODUyWnBpdEtwaTVoV2VkdmcuY2VyMEoGA1UdIAEB/wRA
MD4wPAYIKwYBBQUHDgIwMDAuBggrBgEFBQcCARYiaHR0cHM6Ly93d3cuYXBuaWMu
bmV0L1JQS0kvQ1BTLnBkZjCCASgGCCsGAQUFBwELBIIBGjCCARYwXwYIKwYBBQUH
MAWGU3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
RTVENjEvMkE3QzdEOTgxRDc5MTFFMjg3OUUzOEM1MDhCMDJDRDIvMH4GCCsGAQUF
BzAKhnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5
MUU1RDYxLzJBN0M3RDk4MUQ3OTExRTI4NzlFMzhDNTA4QjAyQ0QyL0p5TUhzaWVU
YmJQdU8yVkFZQ3d5MlZnd24yRS5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJk
cC5hcG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAiBggrBgEFBQcBBwEB/wQTMBEw
DwQCAAIwCQMHACABB/oABTANBgkqhkiG9w0BAQsFAAOCAQEAwEggHpuWwC8YXeIC
HwFw+nDW01XbQEeZdiqLdIP+17S933cSiulCfMJNPm7qgIcjVqdSOC4P1uVepC/U
pO221KGqUUyUQRGVd8QP9RISmFenZTFsagTANFI/mfZ4dqyVsYSV9nq6oily0GTZ
aMmve3yc68Fm+NBHCJmMaXNA23ZUw9CGx276+m7N1FNmefSwrs1yBVzECsFDwiVp
BDDe+3kN/cfHQbsejQzVWmrIYkvTDWlStOhZvVesJsb4+zEqhf9tfOLFgfCqooOn
UEwnOK1yRRmM4McxEqBzq+yFuFGIL1g16KxtCeyZqfk/dTbedgfztlZLADkL32el
VDAxHw==
-----END CERTIFICATE-----
Generated at Mon May 6 03:48:39 2024 by rpki-client on console-fra.rpki-client.org