Certificate

$ rpki-client -vvf rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/Iln4cJbkCts8hBgOKLVsPogi9lE.cer
File:                     Iln4cJbkCts8hBgOKLVsPogi9lE.cer (raw, json)
Hash identifier:          6oJDSc22dOGA2ZrKjcb5rghiMjo4ch2C0DfFg8WcJoQ=
Subject key identifier:   22:59:F8:70:96:E4:0A:DB:3C:84:18:0E:28:B5:6C:3E:88:22:F6:51
Authority key identifier: 74:01:65:A8:0D:10:71:97:0A:BC:09:C0:2B:71:C1:AC:7C:1D:6E:0E
Certificate issuer:       /CN=A90DC5BE/serialNumber=740165A80D1071970ABC09C02B71C1AC7C1D6E0E
Certificate serial:       5AA6
Authority info access:    rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
Manifest:                 rsync://rpki.apnic.net/member_repository/A91E9B89/3A9C8A566C1811EFAB6B690CC4F9AE02/Iln4cJbkCts8hBgOKLVsPogi9lE.mft
caRepository:             rsync://rpki.apnic.net/member_repository/A91E9B89/3A9C8A566C1811EFAB6B690CC4F9AE02/
Notify URL:               https://rrdp.apnic.net/notification.xml
Certificate not before:   Fri 06 Sep 2024 06:21:25 +0000
Certificate not after:    Tue 30 Dec 2025 00:00:00 +0000
Subordinate resources:    IP: 160.187.10.0/23

Validation:               OK
Signature path:           rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 30 Oct 2024 17:50:28 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 23206 (0x5aa6)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A90DC5BE/serialNumber=740165A80D1071970ABC09C02B71C1AC7C1D6E0E
        Validity
            Not Before: Sep  6 06:21:25 2024 GMT
            Not After : Dec 30 00:00:00 2025 GMT
        Subject: CN=A91E9B89/serialNumber=2259F87096E40ADB3C84180E28B56C3E8822F651
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:1e:e5:85:60:7c:e3:d1:c7:4a:17:00:f3:e6:
                    45:dc:38:2c:c8:e8:52:dc:3e:18:a4:22:23:19:3b:
                    ac:a5:65:03:d1:b1:4e:42:b8:52:14:3b:76:b2:6d:
                    67:cc:b3:6d:ec:c3:57:ff:20:0e:1d:13:12:a9:85:
                    f7:d1:29:0e:ad:f8:7f:04:52:ca:44:c8:01:29:86:
                    24:11:0d:14:47:42:3b:d2:73:f6:d4:84:15:9f:4a:
                    c6:8f:d7:9a:fe:6d:45:fe:33:9f:4c:9c:08:5d:0e:
                    cd:51:bb:09:7e:85:78:36:a1:0b:a4:60:5f:e7:9e:
                    de:b7:b2:df:25:77:da:c7:5d:e3:3a:2d:64:17:4f:
                    17:99:a0:dc:b6:00:a7:da:6e:00:37:5c:9b:76:48:
                    53:c6:0f:b2:01:26:e0:0b:32:dd:12:d9:1f:26:95:
                    f2:44:29:98:bc:99:70:02:c2:63:78:21:c4:8b:e3:
                    d2:ff:35:60:8f:b9:de:01:14:b5:c0:78:c1:9b:9a:
                    41:89:3b:b0:5c:0c:e7:12:ae:db:af:4f:77:a7:aa:
                    22:99:28:9b:6f:42:66:88:29:a9:54:ce:33:e5:5f:
                    53:c6:35:58:3d:f7:21:ef:35:f8:da:54:dc:3a:4f:
                    f5:3a:91:00:aa:29:ef:81:61:0c:31:ec:0e:84:2d:
                    7b:3b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                22:59:F8:70:96:E4:0A:DB:3C:84:18:0E:28:B5:6C:3E:88:22:F6:51
            X509v3 Authority Key Identifier:
                keyid:74:01:65:A8:0D:10:71:97:0A:BC:09:C0:2B:71:C1:AC:7C:1D:6E:0E

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                CA Repository - URI:rsync://rpki.apnic.net/member_repository/A91E9B89/3A9C8A566C1811EFAB6B690CC4F9AE02/
                RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A91E9B89/3A9C8A566C1811EFAB6B690CC4F9AE02/Iln4cJbkCts8hBgOKLVsPogi9lE.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  160.187.10.0/23

    Signature Algorithm: sha256WithRSAEncryption
         7f:50:0c:6b:ef:8a:af:db:06:bc:d1:04:3e:ba:2b:d9:a8:8d:
         ec:49:ea:9b:2a:ab:0f:30:28:38:0a:73:1c:e0:19:cb:7c:57:
         a2:ad:04:83:56:de:e0:66:2a:68:01:20:98:20:90:b4:40:57:
         37:31:c8:56:5c:65:60:95:a2:8b:c7:84:3e:41:49:92:cb:1a:
         bf:dd:ee:f9:e2:bd:02:e0:ae:0e:0a:78:21:02:38:3c:63:4a:
         12:27:66:ed:04:38:51:57:64:1d:95:96:08:6b:cf:12:69:f1:
         b5:33:c0:94:c1:38:09:af:e9:f0:53:f6:d5:6a:a2:e3:e9:84:
         b6:33:2e:d2:2a:c3:7b:91:2c:5d:47:87:98:81:f2:65:64:0f:
         1d:2d:a3:bd:c1:26:4d:33:23:72:1d:f3:07:7a:b5:ae:ba:fa:
         94:10:95:ba:36:8a:18:61:a1:e1:e1:d9:ba:08:03:76:e7:f2:
         52:d8:6a:a1:49:61:d1:7b:c2:9a:96:ce:ae:64:10:cd:2e:30:
         95:29:0b:50:2f:b1:68:8b:7e:d9:dc:81:ee:fd:14:eb:16:02:
         fe:79:17:3e:d8:89:f5:94:24:3a:a8:6e:82:7d:5e:87:f4:b8:
         01:a4:80:48:83:96:7c:b5:d0:ab:30:d3:66:94:72:20:03:ab:
         c4:7e:75:ba
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 23 20:54:59 2024 by rpki-client on console-ams.rpki-client.org