Certificate

$ rpki-client -vvf rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/Wooi55jo9JLh-FhQOV63mFXso-U.cer
File:                     Wooi55jo9JLh-FhQOV63mFXso-U.cer (raw, json)
Hash identifier:          aN1LGX1DJ52cJenNskDErikjkEbpo1XkS/Dmkeu7Dz0=
Subject key identifier:   5A:8A:22:E7:98:E8:F4:92:E1:F8:58:50:39:5E:B7:98:55:EC:A3:E5
Authority key identifier: 74:01:65:A8:0D:10:71:97:0A:BC:09:C0:2B:71:C1:AC:7C:1D:6E:0E
Certificate issuer:       /CN=A90DC5BE/serialNumber=740165A80D1071970ABC09C02B71C1AC7C1D6E0E
Certificate serial:       4C86
Authority info access:    rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
Manifest:                 rsync://rpki.apnic.net/member_repository/A9152A4E/DA1B37D095BB11EB949FE535C4F9AE02/Wooi55jo9JLh-FhQOV63mFXso-U.mft
caRepository:             rsync://rpki.apnic.net/member_repository/A9152A4E/DA1B37D095BB11EB949FE535C4F9AE02/
Notify URL:               https://rrdp.apnic.net/notification.xml
Certificate not before:   Wed 02 Aug 2023 15:35:40 +0000
Certificate not after:    Thu 31 Oct 2024 00:00:00 +0000
Subordinate resources:    AS: 10358

Validation:               OK
Signature path:           rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 05 Apr 2024 02:50:16 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 19590 (0x4c86)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A90DC5BE/serialNumber=740165A80D1071970ABC09C02B71C1AC7C1D6E0E
        Validity
            Not Before: Aug  2 15:35:40 2023 GMT
            Not After : Oct 31 00:00:00 2024 GMT
        Subject: CN=A9152A4E/serialNumber=5A8A22E798E8F492E1F85850395EB79855ECA3E5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:c5:79:89:a4:81:b1:24:3d:b6:06:91:31:b6:
                    a7:1b:8d:13:e5:1b:61:62:da:17:ab:89:e1:5f:9d:
                    d7:23:fc:5e:3f:06:88:42:61:87:fe:1d:83:56:f1:
                    97:51:33:c6:7e:0c:1d:5a:59:ab:5a:c1:e9:5d:aa:
                    7e:c7:22:1a:21:56:eb:46:37:12:08:ce:54:1e:3d:
                    1e:38:41:1e:af:0b:a0:1e:6d:d4:7e:ab:83:bd:b9:
                    a6:f0:d4:23:21:35:0e:a9:0e:aa:8d:fb:bf:fb:44:
                    c9:de:64:10:30:24:77:25:bd:65:56:f0:cf:31:14:
                    32:5a:9a:3a:31:89:ca:ef:ab:ce:72:64:f5:72:20:
                    c7:9c:d7:2a:7d:4e:29:b6:8d:c4:98:4f:a8:7b:6e:
                    c6:f8:32:41:5b:43:16:6c:95:b3:17:bb:0e:12:c5:
                    99:07:98:e2:19:4c:a5:69:e2:2a:c0:65:a5:46:12:
                    66:2f:64:7a:b8:95:67:3b:ff:09:2b:a8:0e:04:47:
                    4c:4c:f2:9c:b3:77:6e:12:65:8d:67:b3:79:2a:cb:
                    21:5b:8a:8f:1d:6c:cc:26:e1:84:a7:20:f2:22:7d:
                    03:da:19:0e:73:cf:37:7b:43:bb:5c:b1:5a:1a:ec:
                    41:61:d0:ef:52:a3:0e:92:ad:e6:25:ce:bb:2e:62:
                    1f:91
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5A:8A:22:E7:98:E8:F4:92:E1:F8:58:50:39:5E:B7:98:55:EC:A3:E5
            X509v3 Authority Key Identifier:
                keyid:74:01:65:A8:0D:10:71:97:0A:BC:09:C0:2B:71:C1:AC:7C:1D:6E:0E

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                CA Repository - URI:rsync://rpki.apnic.net/member_repository/A9152A4E/DA1B37D095BB11EB949FE535C4F9AE02/
                RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A9152A4E/DA1B37D095BB11EB949FE535C4F9AE02/Wooi55jo9JLh-FhQOV63mFXso-U.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  10358

    Signature Algorithm: sha256WithRSAEncryption
         48:56:ac:1e:6b:b5:3c:c4:37:8d:6f:e5:41:bd:bf:2a:0c:c8:
         ac:1c:2e:4d:4b:b2:20:44:e6:db:01:29:91:a0:d3:70:1b:46:
         50:ff:7b:9f:e7:8f:24:f0:6d:05:bb:86:5d:52:a6:84:73:e9:
         13:c0:9f:bf:29:3e:c0:e3:f0:a9:d8:6a:ed:cf:0d:67:87:fe:
         4d:d5:56:78:e6:45:a9:59:27:9a:02:26:96:eb:0c:0d:33:26:
         3b:9a:4a:75:92:fb:77:75:04:9b:9f:9a:2c:2e:f8:37:8d:ab:
         62:c5:f2:0b:92:af:dc:81:30:40:1e:b0:23:12:2f:ce:3f:98:
         49:66:51:7f:8a:3d:69:fe:40:f8:ae:7f:6a:c0:32:07:04:f7:
         2a:3b:f5:58:9b:01:8d:da:96:b6:95:76:2e:91:17:7e:3a:19:
         65:99:e5:35:c3:b9:25:7c:71:53:1b:fe:54:43:c6:dd:b3:1b:
         03:40:ea:3e:2d:82:8a:44:c9:35:50:a8:8a:35:0d:49:0a:eb:
         c9:ef:b3:61:6f:01:01:c4:1f:24:11:34:42:c9:21:5e:8d:c4:
         77:2d:ba:04:7e:f0:14:73:5e:59:39:f4:ad:aa:02:a3:0e:ce:
         b5:a9:63:41:08:82:22:86:b2:da:a7:69:b7:fe:e1:70:8f:0a:
         c0:53:ec:e8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 29 03:43:55 2024 by rpki-client on console-fra.rpki-client.org