Certificate

$ rpki-client -vvf rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/XwTABfKMKFbHu_R2uRxioC8vxRw.cer
File:                     XwTABfKMKFbHu_R2uRxioC8vxRw.cer (raw, json)
Hash identifier:          JDwg0HOvCehQfJUC/agT/pm8jC/4KPKjA8qVN24/B08=
Subject key identifier:   5F:04:C0:05:F2:8C:28:56:C7:BB:F4:76:B9:1C:62:A0:2F:2F:C5:1C
Authority key identifier: 74:01:65:A8:0D:10:71:97:0A:BC:09:C0:2B:71:C1:AC:7C:1D:6E:0E
Certificate issuer:       /CN=A90DC5BE/serialNumber=740165A80D1071970ABC09C02B71C1AC7C1D6E0E
Certificate serial:       57F1
Authority info access:    rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
Manifest:                 rsync://rpki.apnic.net/member_repository/A915A0FB/E17193623D8D11EF87053B0FC4F9AE02/XwTABfKMKFbHu_R2uRxioC8vxRw.mft
caRepository:             rsync://rpki.apnic.net/member_repository/A915A0FB/E17193623D8D11EF87053B0FC4F9AE02/
Notify URL:               https://rrdp.apnic.net/notification.xml
Certificate not before:   Tue 09 Jul 2024 00:55:12 +0000
Certificate not after:    Fri 31 Jan 2025 00:00:00 +0000
Subordinate resources:    IP: 160.25.140.0/24

Validation:               OK
Signature path:           rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 30 Oct 2024 17:50:28 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 22513 (0x57f1)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A90DC5BE/serialNumber=740165A80D1071970ABC09C02B71C1AC7C1D6E0E
        Validity
            Not Before: Jul  9 00:55:12 2024 GMT
            Not After : Jan 31 00:00:00 2025 GMT
        Subject: CN=A915A0FB/serialNumber=5F04C005F28C2856C7BBF476B91C62A02F2FC51C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:87:b1:2b:af:74:6b:47:d7:86:6d:ca:55:c4:
                    f8:00:59:0e:e6:88:ce:99:56:58:c9:8c:4c:4d:4e:
                    64:cd:43:3e:8d:19:dd:f2:76:41:f6:44:36:02:7d:
                    7c:4d:66:d0:1e:10:ad:29:a4:4c:59:27:0b:85:5a:
                    90:09:d3:59:8c:bf:6c:39:ac:aa:57:2f:2c:4c:3d:
                    31:35:ed:cb:b8:43:3c:ed:ab:fe:a6:5a:bf:c3:7f:
                    3f:c5:79:c5:d5:94:73:95:1e:c6:40:f4:01:93:bb:
                    8a:1d:61:b6:b1:3e:2d:aa:76:36:82:9c:b2:89:70:
                    e4:09:c6:29:df:ac:db:f1:25:bb:62:4e:1e:51:b2:
                    af:1d:1a:96:46:a3:8c:72:c4:37:1e:c1:e4:49:5e:
                    ab:7d:d4:60:cd:95:75:b1:bc:35:5a:81:5f:18:c3:
                    b1:1f:1e:52:b4:69:8d:5f:4d:dd:16:d9:96:8c:01:
                    72:f1:91:db:02:ed:65:2f:5a:4e:18:c2:24:44:63:
                    25:66:bd:f1:d1:9f:30:88:eb:03:fa:d1:a0:3f:37:
                    68:4e:02:1e:29:4c:b3:9d:eb:05:fc:27:3e:9c:fd:
                    98:5c:fa:e9:05:60:09:cf:f2:c6:35:bf:21:3c:0d:
                    0b:7f:67:c0:0d:76:58:b1:cf:a3:cb:b8:f6:bf:6b:
                    f9:15
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5F:04:C0:05:F2:8C:28:56:C7:BB:F4:76:B9:1C:62:A0:2F:2F:C5:1C
            X509v3 Authority Key Identifier:
                keyid:74:01:65:A8:0D:10:71:97:0A:BC:09:C0:2B:71:C1:AC:7C:1D:6E:0E

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                CA Repository - URI:rsync://rpki.apnic.net/member_repository/A915A0FB/E17193623D8D11EF87053B0FC4F9AE02/
                RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A915A0FB/E17193623D8D11EF87053B0FC4F9AE02/XwTABfKMKFbHu_R2uRxioC8vxRw.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  160.25.140.0/24

    Signature Algorithm: sha256WithRSAEncryption
         3d:69:85:fb:0b:15:f2:64:8a:5e:98:3c:4f:6b:1e:2f:d0:9d:
         b0:f8:0f:d3:ba:1b:98:86:22:82:b8:55:3c:73:14:65:ad:06:
         ce:22:8f:10:bc:20:2b:a1:b0:b6:4e:bf:26:b7:e6:89:cd:e7:
         a1:73:0a:fb:59:d4:e5:11:e5:93:64:ca:9f:95:9b:5f:cf:4d:
         fb:4c:c4:b9:19:a7:34:2b:53:e0:e8:1e:6d:1d:f6:a9:4e:d4:
         14:d1:ad:75:d2:62:5b:e7:a4:26:e5:9f:78:88:3d:67:ca:98:
         ae:cf:6b:09:d2:44:fa:0a:77:65:e1:59:4f:49:38:5d:d5:3a:
         b4:f1:f5:9a:10:f0:92:a8:63:3a:8d:bc:57:92:23:7d:70:f2:
         cc:e8:ac:02:59:74:ad:7a:b0:7d:04:e9:ca:c7:4e:d9:3d:9a:
         37:70:9e:bd:67:24:79:d9:24:41:3e:ef:c4:ed:a0:38:87:9d:
         e0:6e:e8:f9:12:f5:30:40:b3:5d:64:d2:31:02:eb:66:0c:48:
         8d:10:c4:5d:92:c7:ab:50:4b:75:0b:dd:2d:17:ab:d8:8b:47:
         b5:1f:c9:d4:fc:8d:8a:69:af:7f:2f:fb:e9:f3:d4:30:40:9a:
         dd:e6:dc:e8:3b:40:90:cd:2e:78:a6:0a:57:9b:9f:2d:ae:34:
         31:22:a2:cb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 23 19:11:16 2024 by rpki-client on console-fra.rpki-client.org