Certificate

$ rpki-client -vvf rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/tljvayeSnHt_X7Jsue5qQSzoXdQ.cer
File:                     tljvayeSnHt_X7Jsue5qQSzoXdQ.cer (raw, json)
Hash identifier:          iRFkRC+tgNZT3tURs62mtlJtCVlpHaz2kexgFYE2jlw=
Subject key identifier:   B6:58:EF:6B:27:92:9C:7B:7F:5F:B2:6C:B9:EE:6A:41:2C:E8:5D:D4
Authority key identifier: 0C:FC:E7:78:57:FC:F0:1F:39:D9:9A:62:B4:AA:62:E6:15:9E:76:F8
Certificate issuer:       /CN=A90DC5BE/serialNumber=0CFCE77857FCF01F39D99A62B4AA62E6159E76F8
Certificate serial:       4941
Authority info access:    rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DPzneFf88B852ZpitKpi5hWedvg.cer
Manifest:                 rsync://rpki.apnic.net/member_repository/A9123072/069A06E60B5C11EB99A17562C4F9AE02/tljvayeSnHt_X7Jsue5qQSzoXdQ.mft
caRepository:             rsync://rpki.apnic.net/member_repository/A9123072/069A06E60B5C11EB99A17562C4F9AE02/
Notify URL:               https://rrdp.apnic.net/notification.xml
Certificate not before:   Sun 01 Dec 2024 13:03:25 +0000
Certificate not after:    Sat 31 Jan 2026 00:00:00 +0000
Subordinate resources:    IP: 185.135.72.0/21
                          IP: 185.189.240.0/22
Validation:               OK
Signature path:           rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.crl
                          rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DPzneFf88B852ZpitKpi5hWedvg.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 05 Apr 2025 02:50:31 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 18753 (0x4941)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A90DC5BE
        Validity
            Not Before: Dec  1 13:03:25 2024 GMT
            Not After : Jan 31 00:00:00 2026 GMT
        Subject: CN=A9123072
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:fa:f0:2d:af:0c:67:4d:95:8a:37:af:49:2f:5c:
                    48:30:fd:41:ec:10:28:46:76:1b:13:49:b4:46:86:
                    5e:d0:84:14:b9:2a:da:ce:44:43:5b:22:ea:91:e0:
                    26:d2:e2:ee:3d:c7:cb:06:c4:5d:f5:92:4b:14:f5:
                    09:b7:9a:6d:12:41:76:9b:e0:23:5a:e1:92:e4:72:
                    b3:38:3b:6e:81:37:67:73:50:40:60:86:2e:5b:69:
                    f8:cb:f7:42:ea:1a:9d:1c:5e:fa:ee:73:f4:63:5a:
                    e7:9c:8a:26:37:f5:8d:f7:f3:5e:a9:41:27:dd:38:
                    dd:55:34:be:ed:97:cf:4e:1a:b4:6f:9e:08:a5:6b:
                    84:c9:f2:54:b4:fd:12:96:ae:32:86:c5:5b:a8:d7:
                    b0:15:cb:a3:99:de:dd:1c:79:65:2f:6d:c8:b2:1e:
                    a0:23:07:f7:f4:7c:c4:45:47:ce:a9:89:a8:e1:85:
                    b8:c7:8e:ee:79:7f:9a:9c:66:2f:0d:34:d1:7f:1c:
                    bf:89:a0:9f:4e:fb:e1:ac:3b:cf:96:9e:57:ed:4c:
                    46:0e:57:62:7b:4f:b1:64:c8:14:fa:9d:4d:40:78:
                    8a:44:e3:ad:90:07:71:f4:7b:f4:3a:e2:45:54:6d:
                    ce:b8:be:a4:fd:ea:71:ce:22:5b:c8:9a:44:e8:19:
                    46:95
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B6:58:EF:6B:27:92:9C:7B:7F:5F:B2:6C:B9:EE:6A:41:2C:E8:5D:D4
            X509v3 Authority Key Identifier:
                keyid:0C:FC:E7:78:57:FC:F0:1F:39:D9:9A:62:B4:AA:62:E6:15:9E:76:F8

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DPzneFf88B852ZpitKpi5hWedvg.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                CA Repository - URI:rsync://rpki.apnic.net/member_repository/A9123072/069A06E60B5C11EB99A17562C4F9AE02/
                RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A9123072/069A06E60B5C11EB99A17562C4F9AE02/tljvayeSnHt_X7Jsue5qQSzoXdQ.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  185.135.72.0/21
                  185.189.240.0/22

    Signature Algorithm: sha256WithRSAEncryption
         68:06:d2:a2:a0:82:e4:ff:d1:ab:9d:a5:f5:8d:3d:a3:bc:62:
         f2:77:f6:20:5c:3e:34:69:ee:43:52:6f:25:c4:80:74:8c:bc:
         81:d6:b1:0e:65:bf:b1:08:57:10:a2:21:8b:52:09:b9:89:fc:
         5c:29:4f:86:51:68:80:f5:a7:07:cc:7f:bf:79:d9:02:68:70:
         51:c2:86:22:31:d1:30:da:67:86:29:a4:e9:f2:b0:17:f1:d0:
         6e:3a:33:a7:b4:e7:95:b7:cc:7b:d9:4a:3b:33:46:57:28:cb:
         70:38:50:92:a8:66:72:89:e1:c2:bf:17:07:30:4b:01:dd:1c:
         76:7c:43:fd:0b:08:02:c5:af:35:fa:1e:3e:2e:4d:67:8d:70:
         f9:03:8c:e9:21:72:36:c4:ea:01:86:10:1a:1b:c4:7a:80:0d:
         a9:58:b2:d8:15:de:8c:fa:6e:48:92:79:c9:3c:f0:c3:6a:a1:
         49:dd:b6:56:bf:46:ea:f7:62:41:69:cb:77:95:08:4a:91:c0:
         4b:e2:50:71:e2:22:b6:6f:ea:f8:48:44:90:5d:ce:0b:06:d8:
         7e:56:eb:56:13:48:7d:9c:e7:6b:84:dd:6b:fa:f9:c1:83:a4:
         9b:65:60:f0:c7:dc:70:0f:b4:c4:09:63:90:47:ea:58:3f:75:
         d7:82:30:e3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 20:37:44 2025 by rpki-client