Certificate

$ rpki-client -vvf rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/AVKKhMu1YZDhLiat_I45RJUdY8o.cer
File:                     AVKKhMu1YZDhLiat_I45RJUdY8o.cer (raw, json)
Hash identifier:          beEZ0ztM4LL8UTVQnQa3qL/PPpTmw+QmaddZKRCzHpc=
Subject key identifier:   01:52:8A:84:CB:B5:61:90:E1:2E:26:AD:FC:8E:39:44:95:1D:63:CA
Authority key identifier: 74:01:65:A8:0D:10:71:97:0A:BC:09:C0:2B:71:C1:AC:7C:1D:6E:0E
Certificate issuer:       /CN=A90DC5BE/serialNumber=740165A80D1071970ABC09C02B71C1AC7C1D6E0E
Certificate serial:       46B7
Authority info access:    rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
Manifest:                 rsync://rpki.apnic.net/member_repository/A9142FB1/C38E255A6BBA11ED9CCCA211C4F9AE02/AVKKhMu1YZDhLiat_I45RJUdY8o.mft
caRepository:             rsync://rpki.apnic.net/member_repository/A9142FB1/C38E255A6BBA11ED9CCCA211C4F9AE02/
Notify URL:               https://rrdp.apnic.net/notification.xml
Certificate not before:   Thu 24 Nov 2022 05:42:27 +0000
Certificate not after:    Sat 01 Jul 2023 00:00:00 +0000
Subordinate resources:    IP: 192.135.208.0/24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 18103 (0x46b7)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A90DC5BE/serialNumber=740165A80D1071970ABC09C02B71C1AC7C1D6E0E
        Validity
            Not Before: Nov 24 05:42:27 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=A9142FB1/serialNumber=01528A84CBB56190E12E26ADFC8E3944951D63CA
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e2:03:a0:e6:94:e5:ec:ad:af:9c:d5:94:2f:88:
                    07:0f:aa:ed:37:eb:f5:2e:9d:b8:04:e0:4c:86:6a:
                    1c:f3:3c:dc:68:6a:70:6f:41:90:2d:09:b9:51:4e:
                    7b:7b:ed:6e:e4:13:7f:79:2d:eb:76:af:e6:55:1e:
                    f0:89:92:ce:88:cb:76:38:68:1d:02:78:94:09:e1:
                    d7:cc:96:55:87:f7:6d:a7:07:75:7d:1a:51:69:4f:
                    81:5c:c9:cf:ea:2b:c6:c0:c1:17:95:ea:69:b7:ec:
                    64:9d:83:ff:e6:a8:ee:c3:8f:f8:69:cc:cf:95:13:
                    fe:45:37:7e:73:2d:4a:bb:87:6e:f5:9f:e8:a2:e4:
                    fc:c7:cb:be:32:17:ef:92:ab:68:0a:19:c9:28:7d:
                    d5:2e:18:b3:fb:4f:2f:79:82:5c:1b:3e:0b:df:7b:
                    2c:9e:46:7d:79:90:36:78:a0:f2:91:a5:a5:14:d6:
                    a9:2b:06:ce:da:e6:e8:01:b0:ad:3b:f5:ac:8d:26:
                    96:76:e0:10:66:45:24:66:41:2b:77:d0:e7:76:6b:
                    4f:20:c9:94:f5:ab:02:af:73:ec:76:78:0e:2e:c5:
                    45:67:85:63:ee:10:f6:df:56:49:ae:c7:86:a5:cd:
                    4e:7e:6a:4b:47:a0:3e:b3:12:b5:e9:80:dd:27:e1:
                    cc:c5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                01:52:8A:84:CB:B5:61:90:E1:2E:26:AD:FC:8E:39:44:95:1D:63:CA
            X509v3 Authority Key Identifier:
                keyid:74:01:65:A8:0D:10:71:97:0A:BC:09:C0:2B:71:C1:AC:7C:1D:6E:0E

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                CA Repository - URI:rsync://rpki.apnic.net/member_repository/A9142FB1/C38E255A6BBA11ED9CCCA211C4F9AE02/
                RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A9142FB1/C38E255A6BBA11ED9CCCA211C4F9AE02/AVKKhMu1YZDhLiat_I45RJUdY8o.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.135.208.0/24

    Signature Algorithm: sha256WithRSAEncryption
         20:98:7e:47:17:20:77:e7:4c:2e:d0:bc:ef:ec:a7:bd:c6:b7:
         9a:f4:33:bc:12:45:5d:ca:11:ba:6c:ba:08:2f:77:3e:43:32:
         42:2e:33:e9:05:59:af:07:38:92:0e:70:66:bc:8e:90:be:7f:
         3b:6a:95:52:a6:06:3e:ac:30:9d:0e:e1:63:70:0f:05:89:cd:
         9a:18:b4:81:7b:f7:14:b7:18:38:54:f6:e7:03:bd:13:eb:bd:
         4e:be:f2:90:11:15:2d:ff:6d:c7:e4:8d:6b:30:3d:97:89:7d:
         95:87:0f:af:0d:6e:41:32:30:0a:8b:41:4f:70:bd:43:19:46:
         37:16:9e:9f:01:5f:8e:6f:a5:ff:24:e1:15:63:27:bb:18:e1:
         6d:32:4c:74:33:63:6e:70:4c:16:80:50:10:6d:a9:a1:38:88:
         a8:7a:a5:bc:84:4b:2a:ef:6d:af:9a:30:71:6a:93:62:57:3b:
         10:7c:a8:90:1b:65:f1:a7:9c:06:02:2c:4d:44:55:25:57:27:
         b0:61:e6:69:ed:c8:de:c5:cf:ce:d3:7e:1e:9d:13:7b:14:93:
         5a:7f:d8:a9:7a:e5:ec:80:cf:8f:02:85:d4:2c:32:ae:6b:bb:
         5d:9d:53:73:8b:4c:6b:70:91:6b:28:da:c1:7a:55:9b:d8:9e:
         40:e2:99:c5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----