Certificate

$ rpki-client -vvf rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/M_iOrx5M4PGhh31J75fA5_7cA5o.cer
File:                     M_iOrx5M4PGhh31J75fA5_7cA5o.cer (raw, json)
Hash identifier:          3DabCX6hc/r7RWtkotFSIDS1QCnKcfXUuBFohpIE6uA=
Subject key identifier:   33:F8:8E:AF:1E:4C:E0:F1:A1:87:7D:49:EF:97:C0:E7:FE:DC:03:9A
Authority key identifier: 74:01:65:A8:0D:10:71:97:0A:BC:09:C0:2B:71:C1:AC:7C:1D:6E:0E
Certificate issuer:       /CN=A90DC5BE/serialNumber=740165A80D1071970ABC09C02B71C1AC7C1D6E0E
Certificate serial:       4BEF
Authority info access:    rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
Manifest:                 rsync://rpki.apnic.net/member_repository/A91758DF/8673608047FE11EC9CDF4B0AC4F9AE02/M_iOrx5M4PGhh31J75fA5_7cA5o.mft
caRepository:             rsync://rpki.apnic.net/member_repository/A91758DF/8673608047FE11EC9CDF4B0AC4F9AE02/
Notify URL:               https://rrdp.apnic.net/notification.xml
Certificate not before:   Sat 08 Jul 2023 14:51:43 +0000
Certificate not after:    Mon 30 Sep 2024 00:00:00 +0000
Subordinate resources:    IP: 65.181.0.0/19
                          IP: 206.83.96.0/19

Validation:               OK
Signature path:           rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 02 May 2024 02:50:15 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 19439 (0x4bef)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A90DC5BE/serialNumber=740165A80D1071970ABC09C02B71C1AC7C1D6E0E
        Validity
            Not Before: Jul  8 14:51:43 2023 GMT
            Not After : Sep 30 00:00:00 2024 GMT
        Subject: CN=A91758DF/serialNumber=33F88EAF1E4CE0F1A1877D49EF97C0E7FEDC039A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:3c:07:d4:67:12:83:cc:67:cf:ff:8e:cc:d5:
                    49:3c:e2:7b:ec:67:cc:37:ea:6d:78:5d:f3:b6:91:
                    24:5b:0c:b7:8f:ae:58:ba:b3:dd:05:ff:e2:6f:46:
                    6e:b3:64:4e:e0:b9:3b:61:07:20:18:ab:73:ff:89:
                    d4:85:5f:aa:76:b6:b0:8c:35:60:72:44:21:43:b3:
                    44:03:1b:2f:a9:e8:e9:4d:c4:b0:dc:50:67:35:a9:
                    ca:59:de:d7:aa:99:50:5c:c0:fa:97:eb:b8:48:77:
                    9a:72:3f:6e:19:4e:c3:2e:70:44:94:8b:de:e6:ab:
                    1c:ed:48:4d:99:30:96:46:eb:31:f0:b0:a4:2b:67:
                    b5:64:a2:4c:6c:cc:e8:71:f2:0b:05:43:fb:2f:59:
                    a8:53:94:d0:2c:72:21:cc:7f:11:f7:e6:83:52:46:
                    35:61:6c:3a:53:35:89:6b:72:f4:98:2d:49:34:a3:
                    06:b7:e3:47:35:2a:b4:c0:81:e0:80:92:6e:54:a5:
                    3a:63:51:08:80:1b:94:bd:28:2e:69:b4:6d:4e:8b:
                    af:3a:6b:3b:b4:3e:a5:64:13:91:54:57:fc:4f:95:
                    08:65:f4:00:be:89:ac:e4:19:f5:45:98:fd:7b:54:
                    e0:39:7e:8e:f3:9a:fb:89:0d:72:c7:b8:2d:f6:3d:
                    9e:c1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                33:F8:8E:AF:1E:4C:E0:F1:A1:87:7D:49:EF:97:C0:E7:FE:DC:03:9A
            X509v3 Authority Key Identifier:
                keyid:74:01:65:A8:0D:10:71:97:0A:BC:09:C0:2B:71:C1:AC:7C:1D:6E:0E

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                CA Repository - URI:rsync://rpki.apnic.net/member_repository/A91758DF/8673608047FE11EC9CDF4B0AC4F9AE02/
                RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A91758DF/8673608047FE11EC9CDF4B0AC4F9AE02/M_iOrx5M4PGhh31J75fA5_7cA5o.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  65.181.0.0/19
                  206.83.96.0/19

    Signature Algorithm: sha256WithRSAEncryption
         b2:89:6e:00:82:7f:0f:91:2b:55:db:9e:49:9d:7f:7d:74:a4:
         9f:f2:30:89:ae:7b:a3:9b:aa:2e:6a:06:3d:55:df:5e:fa:b2:
         b0:3c:c8:f0:5e:df:1d:31:5b:30:da:3c:74:d8:26:e5:d2:c8:
         b8:02:df:c1:83:37:2b:cc:74:08:6a:b9:53:3b:3b:95:f3:cb:
         74:c5:e6:14:92:69:9b:bf:32:c1:29:74:db:47:3a:53:5c:8a:
         d1:8f:68:8e:2f:19:db:7b:fb:60:d8:7b:70:10:f5:f1:be:33:
         ae:12:66:03:d2:68:be:0a:99:b5:22:d9:5e:1f:ba:4b:1a:76:
         cf:13:fb:e2:62:b5:e9:0b:d6:a8:25:c0:fc:81:33:5d:ac:eb:
         d1:28:9a:9e:88:23:d9:ff:2a:71:39:fe:f6:8b:16:c2:56:95:
         25:21:ad:1a:3f:94:df:bb:d5:b7:09:aa:66:d8:dc:8d:e9:b0:
         59:97:1d:a9:a8:d9:59:4f:6b:43:03:9c:69:a6:a3:7f:ea:cb:
         21:8a:9b:8b:6d:4c:fc:a7:74:d5:3c:35:b5:cc:56:da:4b:18:
         7f:71:39:8a:92:14:99:b8:4a:78:9a:0c:5f:01:3d:c5:8f:8d:
         40:c7:41:26:c0:3d:6d:07:a0:55:b4:5e:95:e1:83:68:46:17:
         7e:8a:16:9e
-----BEGIN CERTIFICATE-----
MIIGAzCCBOugAwIBAgICS+8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkw
REM1QkUxMTAvBgNVBAUTKDc0MDE2NUE4MEQxMDcxOTcwQUJDMDlDMDJCNzFDMUFD
N0MxRDZFMEUwHhcNMjMwNzA4MTQ1MTQzWhcNMjQwOTMwMDAwMDAwWjBGMREwDwYD
VQQDEwhBOTE3NThERjExMC8GA1UEBRMoMzNGODhFQUYxRTRDRTBGMUExODc3RDQ5
RUY5N0MwRTdGRURDMDM5QTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEB
AMs8B9RnEoPMZ8//jszVSTzie+xnzDfqbXhd87aRJFsMt4+uWLqz3QX/4m9GbrNk
TuC5O2EHIBirc/+J1IVfqna2sIw1YHJEIUOzRAMbL6no6U3EsNxQZzWpylne16qZ
UFzA+pfruEh3mnI/bhlOwy5wRJSL3uarHO1ITZkwlkbrMfCwpCtntWSiTGzM6HHy
CwVD+y9ZqFOU0CxyIcx/Effmg1JGNWFsOlM1iWty9JgtSTSjBrfjRzUqtMCB4ICS
blSlOmNRCIAblL0oLmm0bU6LrzprO7Q+pWQTkVRX/E+VCGX0AL6JrOQZ9UWY/XtU
4Dl+jvOa+4kNcse4LfY9nsECAwEAAaOCAvkwggL1MB0GA1UdDgQWBBQz+I6vHkzg
8aGHfUnvl8Dn/twDmjAfBgNVHSMEGDAWgBR0AWWoDRBxlwq8CcArccGsfB1uDjAO
BgNVHQ8BAf8EBAMCAQYwDwYDVR0TAQH/BAUwAwEB/zBzBgNVHR8EbDBqMGigZqBk
hmJyc3luYzovL3Jwa2kuYXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRGMjAxRDY2
MTFFMjhBQzg4MzdDNzJGRDFGRjIvZEFGbHFBMFFjWmNLdkFuQUszSEJySHdkYmc0
LmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5h
cG5pYy5uZXQvcmVwb3NpdG9yeS85ODA2NTJFMEI3N0UxMUU3QTk2QTM5NTIxQTRG
NEZCNC9kQUZscUEwUWNaY0t2QW5BSzNIQnJId2RiZzQuY2VyMEoGA1UdIAEB/wRA
MD4wPAYIKwYBBQUHDgIwMDAuBggrBgEFBQcCARYiaHR0cHM6Ly93d3cuYXBuaWMu
bmV0L1JQS0kvQ1BTLnBkZjCCASgGCCsGAQUFBwELBIIBGjCCARYwXwYIKwYBBQUH
MAWGU3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
NzU4REYvODY3MzYwODA0N0ZFMTFFQzlDREY0QjBBQzRGOUFFMDIvMH4GCCsGAQUF
BzAKhnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5
MTc1OERGLzg2NzM2MDgwNDdGRTExRUM5Q0RGNEIwQUM0RjlBRTAyL01faU9yeDVN
NFBHaGgzMUo3NWZBNV83Y0E1by5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJk
cC5hcG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAlBggrBgEFBQcBBwEB/wQWMBQw
EgQCAAEwDAMEBUG1AAMEBc5TYDANBgkqhkiG9w0BAQsFAAOCAQEAsoluAIJ/D5Er
VdueSZ1/fXSkn/Iwia57o5uqLmoGPVXfXvqysDzI8F7fHTFbMNo8dNgm5dLIuALf
wYM3K8x0CGq5Uzs7lfPLdMXmFJJpm78ywSl020c6U1yK0Y9oji8Z23v7YNh7cBD1
8b4zrhJmA9JovgqZtSLZXh+6Sxp2zxP74mK16QvWqCXA/IEzXazr0Sianogj2f8q
cTn+9osWwlaVJSGtGj+U37vVtwmqZtjcjemwWZcdqajZWU9rQwOcaaajf+rLIYqb
i21M/Kd01Tw1tcxW2ksYf3E5ipIUmbhKeJoMXwE9xY+NQMdBJsA9bQegVbReleGD
aEYXfooWng==
-----END CERTIFICATE-----
Generated at Thu Apr 25 03:22:05 2024 by rpki-client on console-ams.rpki-client.org