Certificate

$ rpki-client -vvf rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/5z-4ho3TtGHqGmc8ejaUUjXpyq4.cer
File:                     5z-4ho3TtGHqGmc8ejaUUjXpyq4.cer (raw, json)
Hash identifier:          RMFnMjY335S4C4ANg90+rr9QmsJ9EA1xtW2MYx3k88I=
Subject key identifier:   E7:3F:B8:86:8D:D3:B4:61:EA:1A:67:3C:7A:36:94:52:35:E9:CA:AE
Authority key identifier: 74:01:65:A8:0D:10:71:97:0A:BC:09:C0:2B:71:C1:AC:7C:1D:6E:0E
Certificate issuer:       /CN=A90DC5BE/serialNumber=740165A80D1071970ABC09C02B71C1AC7C1D6E0E
Certificate serial:       4DAB
Authority info access:    rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
Manifest:                 rsync://rpki.apnic.net/member_repository/A91FCEB1/9C14B4063A2111E79AA0D51CC4F9AE02/5z-4ho3TtGHqGmc8ejaUUjXpyq4.mft
caRepository:             rsync://rpki.apnic.net/member_repository/A91FCEB1/9C14B4063A2111E79AA0D51CC4F9AE02/
Notify URL:               https://rrdp.apnic.net/notification.xml
Certificate not before:   Mon 25 Sep 2023 22:38:33 +0000
Certificate not after:    Sun 01 Dec 2024 00:00:00 +0000
Subordinate resources:    IP: 192.249.42.0/23

Validation:               OK
Signature path:           rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 05 Apr 2024 02:50:16 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 19883 (0x4dab)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A90DC5BE/serialNumber=740165A80D1071970ABC09C02B71C1AC7C1D6E0E
        Validity
            Not Before: Sep 25 22:38:33 2023 GMT
            Not After : Dec  1 00:00:00 2024 GMT
        Subject: CN=A91FCEB1/serialNumber=E73FB8868DD3B461EA1A673C7A36945235E9CAAE
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ea:e6:89:46:c3:b5:15:5e:39:58:69:14:65:92:
                    0e:b7:51:ac:0e:3d:45:d1:85:40:46:c7:3e:b5:a0:
                    5f:43:cc:b6:d3:11:95:43:a3:39:09:6d:63:07:31:
                    b9:7b:68:95:7f:f2:4b:bb:88:11:e2:91:90:d6:2f:
                    e7:b9:8a:9a:ff:da:85:c5:0a:0c:44:93:d5:7b:4b:
                    ba:89:4e:df:5d:d1:4b:6c:f7:bd:7f:4a:74:1c:f0:
                    99:b8:ee:c6:f9:7d:82:42:6c:b2:b5:9f:91:a2:e7:
                    3e:66:5f:76:70:4b:62:1f:6e:45:bb:27:97:57:ba:
                    01:be:d8:d9:65:7f:57:c6:39:11:ef:d9:92:02:e0:
                    00:a1:b2:b5:d0:08:1c:42:36:8b:fc:71:be:db:90:
                    d8:11:fb:4f:83:c9:4d:ed:9c:7b:7d:b5:c6:e8:ff:
                    80:90:cb:d6:99:ae:8b:a2:7c:5b:cb:b2:06:0b:e0:
                    07:47:99:bd:ca:db:08:6f:b2:9a:27:ef:6b:fc:e3:
                    b0:2a:18:0e:96:0c:b3:68:30:39:de:1d:f0:57:77:
                    2f:ea:54:aa:84:8c:60:9d:31:af:e5:ec:17:8c:12:
                    87:a8:ec:92:8d:f5:d4:2d:a2:56:62:8d:65:dd:c0:
                    d0:b3:03:d0:34:95:a6:f9:3f:ff:b3:09:27:7d:e0:
                    c4:a3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E7:3F:B8:86:8D:D3:B4:61:EA:1A:67:3C:7A:36:94:52:35:E9:CA:AE
            X509v3 Authority Key Identifier:
                keyid:74:01:65:A8:0D:10:71:97:0A:BC:09:C0:2B:71:C1:AC:7C:1D:6E:0E

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                CA Repository - URI:rsync://rpki.apnic.net/member_repository/A91FCEB1/9C14B4063A2111E79AA0D51CC4F9AE02/
                RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A91FCEB1/9C14B4063A2111E79AA0D51CC4F9AE02/5z-4ho3TtGHqGmc8ejaUUjXpyq4.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.249.42.0/23

    Signature Algorithm: sha256WithRSAEncryption
         58:cc:ee:3b:35:d1:45:80:87:c9:d6:c6:78:de:f7:b7:27:f6:
         a2:d2:39:b7:db:c9:53:26:ad:39:e6:56:3b:fe:d2:2c:39:4b:
         34:df:2f:36:77:9c:4a:04:39:98:24:06:97:85:1a:a6:d1:69:
         18:97:54:30:8f:ea:2f:4c:c3:8f:5c:d7:3e:1e:a5:25:1e:ab:
         7b:8a:74:84:7b:75:ad:03:b5:92:1f:6f:a2:28:bf:e7:f4:e2:
         05:1e:9e:f7:e8:97:d2:be:97:5c:2a:3b:7f:ff:d0:0d:4f:a7:
         1b:bf:af:de:31:87:db:88:d9:cc:0a:4f:9a:c9:f8:51:7a:f8:
         39:5e:b6:6f:25:12:1d:40:00:7a:90:51:c7:59:5c:e5:bc:bc:
         ae:5e:0d:01:d0:3d:7d:43:72:d1:d7:c9:29:3f:3d:d5:d3:8a:
         1e:b2:24:bd:b1:8d:b0:70:c4:e5:92:fd:22:87:52:83:b8:5b:
         94:d7:c0:a2:c2:f3:a9:d1:03:b1:e1:b7:33:31:f4:d1:9d:82:
         98:ca:6b:d7:e1:e1:a5:1e:e9:a2:ca:e7:54:77:bd:35:53:62:
         8a:18:ce:0d:31:81:c5:e8:27:ac:92:27:04:2b:9d:b6:16:06:
         6e:ab:14:c0:8f:0d:a7:e9:53:36:d5:0f:76:23:8f:61:b2:66:
         8b:fc:4b:82
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 29 03:25:07 2024 by rpki-client on console-ams.rpki-client.org