Certificate

$ rpki-client -vvf rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/cPEzmWaoGrwgfjvuM3CR2fLzydc.cer
File:                     cPEzmWaoGrwgfjvuM3CR2fLzydc.cer (raw, json)
Hash identifier:          OT5phMSS323AghRzJZKkz1g6UbN3kHNY4804Rr+ekoM=
Subject key identifier:   70:F1:33:99:66:A8:1A:BC:20:7E:3B:EE:33:70:91:D9:F2:F3:C9:D7
Authority key identifier: 74:01:65:A8:0D:10:71:97:0A:BC:09:C0:2B:71:C1:AC:7C:1D:6E:0E
Certificate issuer:       /CN=A90DC5BE/serialNumber=740165A80D1071970ABC09C02B71C1AC7C1D6E0E
Certificate serial:       4F34
Authority info access:    rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
Manifest:                 rsync://rpki.apnic.net/member_repository/A91C9324/22BF8D32E02F11ED95153D31C4F9AE02/cPEzmWaoGrwgfjvuM3CR2fLzydc.mft
caRepository:             rsync://rpki.apnic.net/member_repository/A91C9324/22BF8D32E02F11ED95153D31C4F9AE02/
Notify URL:               https://rrdp.apnic.net/notification.xml
Certificate not before:   Mon 04 Dec 2023 19:46:35 +0000
Certificate not after:    Fri 31 Jan 2025 00:00:00 +0000
Subordinate resources:    AS: 3119
                          AS: 40747

Validation:               OK
Signature path:           rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 04 Apr 2024 06:55:50 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 20276 (0x4f34)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A90DC5BE/serialNumber=740165A80D1071970ABC09C02B71C1AC7C1D6E0E
        Validity
            Not Before: Dec  4 19:46:35 2023 GMT
            Not After : Jan 31 00:00:00 2025 GMT
        Subject: CN=A91C9324/serialNumber=70F1339966A81ABC207E3BEE337091D9F2F3C9D7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:05:33:24:b9:77:43:52:4d:f8:69:e6:50:69:
                    ae:83:ee:85:7d:73:0c:d7:0b:ee:71:f7:32:03:6c:
                    00:37:52:f7:cc:82:cb:22:01:9d:3c:7a:0e:57:55:
                    39:31:af:1e:ff:0f:8d:2b:b5:79:b0:b0:88:3d:b4:
                    08:07:14:b5:3e:7f:e4:54:b4:a0:10:5d:38:f5:ab:
                    cd:df:3f:65:e6:8b:25:ea:fd:27:14:a6:b2:29:0c:
                    23:1a:65:73:94:2e:ea:b8:e0:00:1c:d1:20:fb:d5:
                    46:b7:dd:bc:e1:43:b4:af:62:d6:0a:e2:bd:0d:d7:
                    14:f8:91:71:81:66:5d:b9:39:6f:62:6b:90:73:09:
                    d8:e0:34:2e:6d:7a:ed:dd:87:a8:42:32:7b:e4:a1:
                    46:15:13:92:30:5b:50:41:c5:53:4c:63:6e:ef:41:
                    68:de:b6:0a:c9:0f:7d:84:0d:3c:24:ff:4d:03:fa:
                    87:9e:9f:8f:d8:15:e0:f5:e1:6b:d5:91:8a:a5:76:
                    fe:91:ae:ec:16:6e:89:59:f7:7b:77:52:3b:8d:cb:
                    ca:89:66:23:e0:e9:eb:26:51:2c:e2:ea:69:c4:7b:
                    82:77:bd:7a:a6:34:ad:77:35:63:29:b1:53:81:07:
                    7b:e0:92:40:a0:86:73:45:aa:50:11:c3:a9:c6:24:
                    83:3d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                70:F1:33:99:66:A8:1A:BC:20:7E:3B:EE:33:70:91:D9:F2:F3:C9:D7
            X509v3 Authority Key Identifier:
                keyid:74:01:65:A8:0D:10:71:97:0A:BC:09:C0:2B:71:C1:AC:7C:1D:6E:0E

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                CA Repository - URI:rsync://rpki.apnic.net/member_repository/A91C9324/22BF8D32E02F11ED95153D31C4F9AE02/
                RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A91C9324/22BF8D32E02F11ED95153D31C4F9AE02/cPEzmWaoGrwgfjvuM3CR2fLzydc.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  3119
                  40747

    Signature Algorithm: sha256WithRSAEncryption
         ae:12:25:42:e5:cf:9e:99:08:7b:52:1d:e0:fd:bf:91:30:36:
         8a:8e:09:33:40:15:52:e5:8b:56:03:16:f2:4f:0e:98:9b:60:
         de:eb:02:80:19:c3:24:c4:4d:32:4d:e9:0d:4c:1c:e4:b8:90:
         40:85:cb:ad:33:57:8b:2c:6b:d8:58:0c:ff:32:e3:74:b6:dd:
         39:67:70:16:fa:b1:65:4e:e5:68:5d:0f:ac:31:5e:d4:aa:16:
         6d:ed:74:41:1e:0f:99:fa:bb:cb:56:03:69:26:b9:dc:42:29:
         fb:b9:db:ae:9c:b7:ad:f4:6c:3b:5b:77:74:f9:5b:84:8b:01:
         a5:12:f0:9b:8f:a3:c8:fe:e9:50:ea:c5:f5:a6:d2:ec:75:d3:
         fa:e3:77:69:f7:fd:f8:87:e6:54:18:84:dd:7c:e4:51:c6:8a:
         3e:5d:ba:4e:97:96:d0:da:12:43:7a:a0:39:33:26:d6:e6:7e:
         70:98:3d:4a:a2:4f:68:6d:43:eb:55:c4:e5:36:85:18:83:43:
         59:08:28:60:ef:7f:5d:35:0b:77:23:b8:2c:b7:cc:ce:47:8f:
         10:64:7e:f3:b5:ba:26:d6:ff:4e:30:1f:0a:41:0c:72:7d:b9:
         91:ff:82:90:25:7c:4c:30:cc:65:a6:66:e6:2d:89:cb:94:65:
         a0:61:8e:2b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 28 08:16:19 2024 by rpki-client on console-ams.rpki-client.org