Certificate

$ rpki-client -vvf rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/FvdX-Fv0x3-S-se_sL34aE8QKrE.cer
File:                     FvdX-Fv0x3-S-se_sL34aE8QKrE.cer (raw, json)
Hash identifier:          yB2fQhOvnJU+c+fgYtoG5oHtgS4qYqy9gHDa42+zXzc=
Subject key identifier:   16:F7:57:F8:5B:F4:C7:7F:92:FA:C7:BF:B0:BD:F8:68:4F:10:2A:B1
Authority key identifier: 74:01:65:A8:0D:10:71:97:0A:BC:09:C0:2B:71:C1:AC:7C:1D:6E:0E
Certificate issuer:       /CN=A90DC5BE/serialNumber=740165A80D1071970ABC09C02B71C1AC7C1D6E0E
Certificate serial:       54B6
Authority info access:    rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
Manifest:                 rsync://rpki.apnic.net/member_repository/A9172999/D0700E64FE0311EE998E0C49C4F9AE02/FvdX-Fv0x3-S-se_sL34aE8QKrE.mft
caRepository:             rsync://rpki.apnic.net/member_repository/A9172999/D0700E64FE0311EE998E0C49C4F9AE02/
Notify URL:               https://rrdp.apnic.net/notification.xml
Certificate not before:   Fri 19 Apr 2024 04:18:10 +0000
Certificate not after:    Wed 28 May 2025 00:00:00 +0000
Subordinate resources:    AS: 4907

Validation:               OK
Signature path:           rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 10 May 2024 18:05:55 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 21686 (0x54b6)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A90DC5BE/serialNumber=740165A80D1071970ABC09C02B71C1AC7C1D6E0E
        Validity
            Not Before: Apr 19 04:18:10 2024 GMT
            Not After : May 28 00:00:00 2025 GMT
        Subject: CN=A9172999/serialNumber=16F757F85BF4C77F92FAC7BFB0BDF8684F102AB1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9e:2e:55:82:6d:a8:7d:c5:fe:27:65:8b:56:81:
                    a1:48:78:25:0b:2c:53:8b:fc:8c:42:27:06:5e:09:
                    25:b0:57:ba:0e:f3:bd:f6:d1:6b:b2:86:7b:85:53:
                    cb:b8:27:7b:a6:58:6e:4a:30:72:1d:52:04:f3:d3:
                    2f:8a:98:b9:aa:44:ca:6c:1f:cd:37:21:bb:bd:81:
                    a3:67:97:e8:4d:cd:ec:cc:c6:7c:05:69:2f:97:c3:
                    71:cb:03:c0:b7:85:2f:c9:32:c2:d1:88:47:de:d2:
                    bb:c4:92:54:76:3a:39:e4:08:01:51:a6:3c:1a:2e:
                    f3:b8:6d:3a:1a:c4:76:b6:71:ac:66:59:bd:3b:91:
                    06:e3:9a:94:70:ec:d3:29:62:85:b8:c3:82:93:ed:
                    94:39:0f:07:4d:f7:ae:81:10:11:a8:5f:6d:ee:1c:
                    c6:b4:2a:73:ad:e3:69:0f:4c:0e:fc:a4:91:50:19:
                    6a:eb:42:a5:a6:53:1d:31:87:07:90:bc:50:9e:36:
                    aa:54:02:be:de:6b:fd:50:cc:47:28:1d:c0:75:13:
                    a7:8a:db:5e:70:dd:9e:29:03:70:39:02:8b:be:98:
                    92:1e:38:32:3a:bd:d0:77:11:63:64:b1:96:60:a8:
                    f1:09:4c:ba:a0:f1:21:81:f9:1f:fb:bf:d0:ed:06:
                    00:83
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                16:F7:57:F8:5B:F4:C7:7F:92:FA:C7:BF:B0:BD:F8:68:4F:10:2A:B1
            X509v3 Authority Key Identifier:
                keyid:74:01:65:A8:0D:10:71:97:0A:BC:09:C0:2B:71:C1:AC:7C:1D:6E:0E

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                CA Repository - URI:rsync://rpki.apnic.net/member_repository/A9172999/D0700E64FE0311EE998E0C49C4F9AE02/
                RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A9172999/D0700E64FE0311EE998E0C49C4F9AE02/FvdX-Fv0x3-S-se_sL34aE8QKrE.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  4907

    Signature Algorithm: sha256WithRSAEncryption
         33:2e:55:ff:08:6c:09:d2:ea:f4:6f:df:84:bd:79:8c:49:ce:
         af:87:e5:5e:02:a3:b0:7c:c5:8c:1e:54:4b:47:81:a0:3a:8f:
         6a:4d:02:b1:69:d0:a0:3f:6c:48:b1:cc:b5:b3:b7:91:6e:eb:
         43:3d:e1:0c:60:58:d0:a2:b1:2a:dd:c1:f0:92:19:12:1d:0e:
         d5:33:9c:22:56:41:91:24:7f:70:e7:17:6d:45:3b:ba:d5:64:
         25:8e:43:f5:3c:8d:34:33:8b:60:5d:bf:e6:25:f4:b6:02:5a:
         9b:8e:87:bb:46:6b:01:9b:e8:65:3e:c1:63:55:10:a7:57:53:
         77:5f:e2:10:37:fa:75:35:19:63:80:da:d2:14:7c:5e:80:62:
         8f:e8:fc:b0:60:f4:33:0b:ff:14:b8:90:9c:43:38:2e:1d:24:
         c0:be:b4:c4:0f:2d:13:f6:ae:c4:8d:e6:07:ad:d0:26:83:6e:
         64:ef:36:5f:44:81:0d:63:d6:47:f6:b2:75:ac:20:89:a9:06:
         9f:84:f2:5d:80:6f:55:09:68:47:94:7d:24:59:eb:d1:29:a7:
         df:f9:56:22:01:a4:d9:74:c8:c0:3f:4d:e5:ca:7c:18:7e:fa:
         5b:fc:e8:bb:e4:67:a0:ac:f1:1b:eb:a7:77:40:43:1b:9f:97:
         07:b8:25:b6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 3 20:13:52 2024 by rpki-client on console-ams.rpki-client.org