Certificate

$ rpki-client -vvf rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/E0b2XWKf_5NrD8TPEnUJtoLo4-Q.cer
File:                     E0b2XWKf_5NrD8TPEnUJtoLo4-Q.cer (raw, json)
Hash identifier:          oJntxqbedS1KB1RMRwEwv5edYpMoOJEPY8ZA4MnZ1Oc=
Subject key identifier:   13:46:F6:5D:62:9F:FF:93:6B:0F:C4:CF:12:75:09:B6:82:E8:E3:E4
Authority key identifier: 74:01:65:A8:0D:10:71:97:0A:BC:09:C0:2B:71:C1:AC:7C:1D:6E:0E
Certificate issuer:       /CN=A90DC5BE/serialNumber=740165A80D1071970ABC09C02B71C1AC7C1D6E0E
Certificate serial:       574C
Authority info access:    rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
Manifest:                 rsync://rpki.apnic.net/member_repository/A91334F0/0D46CBE8340011EF94779540C4F9AE02/E0b2XWKf_5NrD8TPEnUJtoLo4-Q.mft
caRepository:             rsync://rpki.apnic.net/member_repository/A91334F0/0D46CBE8340011EF94779540C4F9AE02/
Notify URL:               https://rrdp.apnic.net/notification.xml
Certificate not before:   Wed 26 Jun 2024 21:07:16 +0000
Certificate not after:    Tue 30 Sep 2025 00:00:00 +0000
Subordinate resources:    IP: 160.22.52.0/23

Validation:               OK
Signature path:           rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 26 Sep 2024 21:06:43 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 22348 (0x574c)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A90DC5BE/serialNumber=740165A80D1071970ABC09C02B71C1AC7C1D6E0E
        Validity
            Not Before: Jun 26 21:07:16 2024 GMT
            Not After : Sep 30 00:00:00 2025 GMT
        Subject: CN=A91334F0/serialNumber=1346F65D629FFF936B0FC4CF127509B682E8E3E4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e8:59:d7:03:d4:37:03:c7:f8:a1:83:55:44:bb:
                    3d:5b:a1:5f:93:5d:c3:62:44:c5:0f:5e:88:19:7a:
                    ca:28:54:22:3b:db:1a:4f:86:17:2e:c8:df:a7:ab:
                    9d:3b:ce:87:cf:31:ea:37:10:2f:4d:ab:68:af:ab:
                    e4:d3:db:e8:77:34:a6:c6:70:e1:e2:a5:cb:90:95:
                    af:ec:93:a0:0f:ad:b9:8f:a6:25:c4:6e:d6:54:6d:
                    11:d6:fa:fe:8b:65:db:1a:98:e6:62:cd:12:bd:9f:
                    80:75:19:10:13:f2:af:c8:65:1f:47:bf:ba:0c:a6:
                    c3:89:e2:c3:77:97:9a:83:77:d7:d3:3c:9e:22:b8:
                    40:25:27:0c:51:f1:aa:88:3b:3d:63:7c:e5:b8:93:
                    31:d4:27:44:17:9e:7a:29:09:cf:83:2a:90:e3:42:
                    20:23:7c:1d:c5:d7:c8:fe:59:f2:d7:28:43:0c:18:
                    3e:65:49:21:f1:cb:63:a7:d3:69:0b:77:5c:f9:7c:
                    47:12:4d:1d:06:ac:66:cb:18:0d:81:dc:73:bf:9e:
                    e9:51:d1:b9:cb:e4:32:1a:9b:c0:78:12:8e:14:1c:
                    91:4c:f1:01:22:59:00:ff:df:39:0d:2e:09:ae:c4:
                    74:0e:a0:a3:ad:90:eb:ac:00:54:c6:ba:98:e0:97:
                    89:1d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                13:46:F6:5D:62:9F:FF:93:6B:0F:C4:CF:12:75:09:B6:82:E8:E3:E4
            X509v3 Authority Key Identifier:
                keyid:74:01:65:A8:0D:10:71:97:0A:BC:09:C0:2B:71:C1:AC:7C:1D:6E:0E

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                CA Repository - URI:rsync://rpki.apnic.net/member_repository/A91334F0/0D46CBE8340011EF94779540C4F9AE02/
                RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A91334F0/0D46CBE8340011EF94779540C4F9AE02/E0b2XWKf_5NrD8TPEnUJtoLo4-Q.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  160.22.52.0/23

    Signature Algorithm: sha256WithRSAEncryption
         b8:80:db:26:62:e4:5d:42:9c:bb:17:46:2d:9b:6d:9c:20:ec:
         3d:04:f9:5f:a7:c1:17:c9:7d:d8:fb:bc:c7:df:f4:b4:cb:24:
         b9:54:55:69:69:a0:b3:8e:ca:b8:94:04:31:2c:a3:54:31:84:
         2a:b6:c9:5c:cb:2c:3d:4a:cb:84:1e:09:c2:3e:b0:65:13:57:
         9c:95:22:d9:cc:67:54:75:f1:c3:0a:a2:39:b4:52:8d:99:c1:
         44:29:b4:ac:1c:97:35:01:40:2b:41:72:79:33:48:c4:af:da:
         b5:b4:41:c1:8d:a1:3c:a3:8f:62:ea:60:3c:0d:89:a8:b0:c7:
         09:04:f5:f3:56:7c:16:43:a1:23:5d:c7:2b:33:d0:64:c6:7c:
         d4:7b:22:a1:e4:49:f9:e5:77:52:b2:36:3a:d3:32:43:5d:1f:
         df:9b:a3:80:cb:68:78:7c:cd:49:98:9f:dd:c9:6f:c2:ba:b5:
         5a:9b:3e:69:f5:52:00:20:5b:c8:2a:b5:8f:cb:e5:ee:8c:5e:
         1c:b6:35:b9:5c:7c:ff:58:a6:06:4f:e0:e9:ce:d8:7a:ce:fa:
         85:00:bb:7a:9f:8b:c3:32:2e:46:cc:70:ac:26:e7:40:89:2f:
         5f:80:dc:4e:aa:35:cf:d4:ae:2d:25:3c:a6:f5:cf:30:50:8c:
         76:dd:f5:81
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 19 22:41:13 2024 by rpki-client on console-fra.rpki-client.org