Certificate

$ rpki-client -vvf rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/zM5U7q-_kyE82ZK8oeUmfVBSs8c.cer
File:                     zM5U7q-_kyE82ZK8oeUmfVBSs8c.cer (raw, json)
Hash identifier:          sNJI5qf+2Lfu6bI+lyUOActsHOUqd0QcCWr3uw4qRSk=
Subject key identifier:   CC:CE:54:EE:AF:BF:93:21:3C:D9:92:BC:A1:E5:26:7D:50:52:B3:C7
Authority key identifier: 0C:FC:E7:78:57:FC:F0:1F:39:D9:9A:62:B4:AA:62:E6:15:9E:76:F8
Certificate issuer:       /CN=A90DC5BE/serialNumber=0CFCE77857FCF01F39D99A62B4AA62E6159E76F8
Certificate serial:       48B5
Authority info access:    rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DPzneFf88B852ZpitKpi5hWedvg.cer
Manifest:                 rsync://rpki.apnic.net/member_repository/A91FECDA/9BA971A26F9C11E9A5074B2FC4F9AE02/zM5U7q-_kyE82ZK8oeUmfVBSs8c.mft
caRepository:             rsync://rpki.apnic.net/member_repository/A91FECDA/9BA971A26F9C11E9A5074B2FC4F9AE02/
Notify URL:               https://rrdp.apnic.net/notification.xml
Certificate not before:   Thu 24 Oct 2024 03:41:15 +0000
Certificate not after:    Tue 30 Dec 2025 00:00:00 +0000
Subordinate resources:    IP: 193.119.0.0/19

Validation:               OK
Signature path:           rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.crl
                          rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DPzneFf88B852ZpitKpi5hWedvg.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 29 Nov 2024 02:50:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 18613 (0x48b5)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A90DC5BE/serialNumber=0CFCE77857FCF01F39D99A62B4AA62E6159E76F8
        Validity
            Not Before: Oct 24 03:41:15 2024 GMT
            Not After : Dec 30 00:00:00 2025 GMT
        Subject: CN=A91FECDA/serialNumber=CCCE54EEAFBF93213CD992BCA1E5267D5052B3C7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ea:3b:ef:f1:63:94:86:f2:65:79:fe:4c:0f:e2:
                    82:39:cc:99:0b:20:b4:9d:62:c4:8e:ed:24:9f:4a:
                    fb:5e:74:a3:86:f9:3a:41:8e:75:d2:73:90:0e:cd:
                    d1:e6:cb:3a:ae:fd:de:19:27:e1:cd:17:f0:75:70:
                    4c:74:e1:d7:ff:8d:42:7c:85:6c:3d:86:7f:8b:71:
                    aa:5e:3b:87:b2:ae:0e:9b:e4:43:9e:8b:d1:35:35:
                    97:55:8c:14:54:27:62:2e:dd:7a:50:2a:67:e8:4a:
                    56:b3:07:b2:db:46:e8:27:53:94:d0:22:f8:ef:85:
                    08:e1:4b:26:a4:bc:95:3c:8e:55:f0:5b:ef:09:ac:
                    64:de:58:73:88:5a:e4:14:b8:f1:6a:42:10:2f:49:
                    b4:0c:00:a2:ca:e0:29:f9:fe:5e:c1:33:e8:9f:81:
                    b8:74:36:f8:ff:6d:8c:a9:60:c6:fd:ce:2e:f2:59:
                    1c:58:f7:ea:4a:d4:b7:56:fa:4d:ea:4a:37:b9:66:
                    bc:49:dd:d5:03:42:3e:91:af:59:7e:52:92:cb:31:
                    7d:9e:73:16:de:a0:50:6f:ac:cc:13:96:8f:ae:74:
                    1e:b6:1a:e6:f5:ff:88:05:ab:ac:a1:5a:1f:c2:56:
                    ba:eb:8c:19:2c:de:60:45:b7:97:0f:2b:3e:a1:a5:
                    ed:87
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CC:CE:54:EE:AF:BF:93:21:3C:D9:92:BC:A1:E5:26:7D:50:52:B3:C7
            X509v3 Authority Key Identifier:
                keyid:0C:FC:E7:78:57:FC:F0:1F:39:D9:9A:62:B4:AA:62:E6:15:9E:76:F8

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DPzneFf88B852ZpitKpi5hWedvg.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                CA Repository - URI:rsync://rpki.apnic.net/member_repository/A91FECDA/9BA971A26F9C11E9A5074B2FC4F9AE02/
                RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A91FECDA/9BA971A26F9C11E9A5074B2FC4F9AE02/zM5U7q-_kyE82ZK8oeUmfVBSs8c.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  193.119.0.0/19

    Signature Algorithm: sha256WithRSAEncryption
         59:e2:9f:90:51:59:a8:96:95:1b:ac:41:9b:c5:db:22:f6:e4:
         6f:67:bc:f0:4b:c7:e8:f7:40:ba:e5:98:b2:7f:37:6c:fb:6b:
         c8:ea:42:66:5b:a4:eb:f2:7f:f1:f0:5b:bd:c4:f8:0b:7d:23:
         c7:0a:39:7d:12:b9:c0:11:ba:d0:e2:2a:9b:26:ac:48:00:10:
         94:70:73:50:ca:3e:40:97:6a:3f:6c:93:e1:47:c7:17:fd:39:
         66:7b:e0:a6:3f:ed:3c:8e:49:19:4f:bf:f8:70:74:2f:27:05:
         f7:a4:ae:0e:de:ba:fe:ee:ad:a9:3d:d9:93:30:9b:d2:56:05:
         f3:bd:cb:19:6e:68:37:fb:9c:44:5c:ec:c0:57:e2:f7:a9:14:
         68:4f:eb:a8:3f:25:f6:ef:e2:35:3d:d0:e9:40:1e:c7:81:99:
         23:9c:2e:3a:03:4a:78:c1:33:ea:5c:42:f2:85:39:ee:37:86:
         67:1d:9e:f0:e6:d8:da:e3:4b:84:b6:68:e0:36:5a:e2:18:84:
         ad:51:04:53:f2:f6:9a:b1:52:fc:12:10:da:73:01:38:38:1b:
         8a:ad:79:08:56:5d:16:94:55:2f:bc:29:69:01:42:d1:cf:b6:
         96:9d:e0:ba:a0:ed:0b:a1:9b:bf:cf:59:9b:72:ee:54:8b:05:
         e8:cd:88:a3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----