Certificate

$ rpki-client -vvf rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/V1pu0ww3OtQ00VpmXdoudk7Imso.cer
File:                     V1pu0ww3OtQ00VpmXdoudk7Imso.cer (raw, json)
Hash identifier:          iIuscpz8rlTYbplzCPWtXNBvPLvj1ZhnKfvF18LQESo=
Subject key identifier:   57:5A:6E:D3:0C:37:3A:D4:34:D1:5A:66:5D:DA:2E:76:4E:C8:9A:CA
Authority key identifier: 74:01:65:A8:0D:10:71:97:0A:BC:09:C0:2B:71:C1:AC:7C:1D:6E:0E
Certificate issuer:       /CN=A90DC5BE/serialNumber=740165A80D1071970ABC09C02B71C1AC7C1D6E0E
Certificate serial:       5C5B
Authority info access:    rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
Manifest:                 rsync://rpki.apnic.net/member_repository/A91827C5/D065ABB48AD911EF981C8283C4F9AE02/V1pu0ww3OtQ00VpmXdoudk7Imso.mft
caRepository:             rsync://rpki.apnic.net/member_repository/A91827C5/D065ABB48AD911EF981C8283C4F9AE02/
Notify URL:               https://rrdp.apnic.net/notification.xml
Certificate not before:   Tue 15 Oct 2024 09:42:43 +0000
Certificate not after:    Fri 31 Oct 2025 00:00:00 +0000
Subordinate resources:    IP: 160.30.104.0/23

Validation:               OK
Signature path:           rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 30 Oct 2024 17:50:28 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 23643 (0x5c5b)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A90DC5BE/serialNumber=740165A80D1071970ABC09C02B71C1AC7C1D6E0E
        Validity
            Not Before: Oct 15 09:42:43 2024 GMT
            Not After : Oct 31 00:00:00 2025 GMT
        Subject: CN=A91827C5/serialNumber=575A6ED30C373AD434D15A665DDA2E764EC89ACA
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e2:e3:f8:31:a0:9b:ca:31:2e:53:9e:e3:be:30:
                    d0:dc:49:4f:ee:c0:d2:5d:51:fb:13:57:b5:d2:2d:
                    dc:0b:aa:7b:7c:9f:99:0b:b8:9b:3c:15:a3:45:c2:
                    4d:41:bf:45:b8:e5:e5:a4:bf:6e:c7:ef:22:e0:6c:
                    07:09:76:07:c1:e5:99:2e:3d:1c:1c:2d:f0:1a:0c:
                    29:fb:2d:ff:8a:d7:7a:83:6c:a1:a1:c8:74:e0:b1:
                    9c:29:3d:ac:e4:9a:04:1f:87:26:1f:bd:c4:3c:01:
                    7c:de:29:53:de:a2:ac:4c:d7:bd:1c:f6:91:18:c5:
                    3b:5b:1a:9d:a2:ef:40:60:07:c3:e6:20:c5:aa:79:
                    60:2b:3d:eb:2e:42:be:57:ec:a5:e6:a7:c7:65:dc:
                    95:1c:20:f6:0a:31:a4:c2:0e:78:fe:75:13:16:54:
                    2e:73:7f:6d:16:4c:8b:f1:42:9e:99:b2:44:d3:d5:
                    5f:b0:b7:90:cd:c0:7c:f4:be:12:29:42:c4:8a:e2:
                    dd:3a:e5:3c:e8:74:28:dc:3c:66:cf:d8:b3:21:cc:
                    bd:b0:48:cb:0c:c3:b5:5b:69:cc:7d:14:1a:2a:e4:
                    d8:2c:0b:7f:36:84:e1:52:4c:87:5d:0e:3a:44:dc:
                    ea:17:7b:ef:eb:cb:14:b8:02:f9:98:12:13:91:29:
                    55:95
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                57:5A:6E:D3:0C:37:3A:D4:34:D1:5A:66:5D:DA:2E:76:4E:C8:9A:CA
            X509v3 Authority Key Identifier:
                keyid:74:01:65:A8:0D:10:71:97:0A:BC:09:C0:2B:71:C1:AC:7C:1D:6E:0E

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                CA Repository - URI:rsync://rpki.apnic.net/member_repository/A91827C5/D065ABB48AD911EF981C8283C4F9AE02/
                RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A91827C5/D065ABB48AD911EF981C8283C4F9AE02/V1pu0ww3OtQ00VpmXdoudk7Imso.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  160.30.104.0/23

    Signature Algorithm: sha256WithRSAEncryption
         65:5b:0f:b4:1e:9d:11:04:78:08:5b:2a:99:49:22:88:5c:71:
         9c:4d:2c:ae:ff:ca:bc:e9:1d:99:6e:61:2b:45:26:c1:b8:de:
         90:bb:ca:66:15:4b:55:18:b8:e6:55:01:30:b6:20:ed:10:53:
         1a:17:13:3d:d8:a6:4b:e4:da:f3:d1:29:10:49:83:e6:7b:95:
         12:23:91:8b:06:94:91:fb:41:33:df:e4:bb:ba:37:07:ff:21:
         62:2e:74:99:fa:1d:81:76:39:9c:6c:dd:80:bb:47:91:f7:15:
         6f:ea:04:3d:10:8c:34:e2:ba:be:4d:9b:4d:c8:0e:e6:93:59:
         f6:01:ea:c8:4e:18:ac:39:28:56:80:39:c2:d8:11:c0:9d:6e:
         11:9e:2c:d2:b9:c9:d0:45:dd:30:87:42:89:55:52:4b:ff:64:
         bf:ea:c5:7c:e0:1d:50:ca:54:e0:95:11:71:80:11:e2:3d:f4:
         85:33:f4:d4:cf:0c:0b:e8:26:e9:f9:d3:5a:32:21:ab:0d:81:
         05:f9:32:fd:1c:25:df:8a:25:2c:92:17:e3:d4:72:02:e7:a2:
         84:6e:ce:ca:ce:fb:11:6c:d7:a8:fb:e8:98:87:ec:48:97:c2:
         f0:9f:1c:7f:44:66:27:b2:30:ed:e1:4e:83:b3:f0:8a:32:a4:
         75:20:85:40
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 23 19:11:16 2024 by rpki-client on console-fra.rpki-client.org