Certificate

$ rpki-client -vvf rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dMuFpjScPKYYSuz3D4Ov_fzgp_c.cer
File:                     dMuFpjScPKYYSuz3D4Ov_fzgp_c.cer (raw, json)
Hash identifier:          0B46EzEERgq4863adzexf77kT9K6v74hDWW+mWxmzAk=
Subject key identifier:   74:CB:85:A6:34:9C:3C:A6:18:4A:EC:F7:0F:83:AF:FD:FC:E0:A7:F7
Authority key identifier: 74:01:65:A8:0D:10:71:97:0A:BC:09:C0:2B:71:C1:AC:7C:1D:6E:0E
Certificate issuer:       /CN=A90DC5BE/serialNumber=740165A80D1071970ABC09C02B71C1AC7C1D6E0E
Certificate serial:       5DE6
Authority info access:    rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
Manifest:                 rsync://rpki.apnic.net/member_repository/A911691A/751F31DAA28511EF842B9410C4F9AE02/dMuFpjScPKYYSuz3D4Ov_fzgp_c.mft
caRepository:             rsync://rpki.apnic.net/member_repository/A911691A/751F31DAA28511EF842B9410C4F9AE02/
Notify URL:               https://rrdp.apnic.net/notification.xml
Certificate not before:   Thu 14 Nov 2024 12:39:19 +0000
Certificate not after:    Mon 02 Mar 2026 00:00:00 +0000
Subordinate resources:    IP: 160.250.10.0/23

Validation:               OK
Signature path:           rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 28 Nov 2024 20:12:56 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 24038 (0x5de6)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A90DC5BE/serialNumber=740165A80D1071970ABC09C02B71C1AC7C1D6E0E
        Validity
            Not Before: Nov 14 12:39:19 2024 GMT
            Not After : Mar  2 00:00:00 2026 GMT
        Subject: CN=A911691A/serialNumber=74CB85A6349C3CA6184AECF70F83AFFDFCE0A7F7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d1:86:70:0a:5f:76:09:29:89:04:ee:ae:4a:65:
                    a0:08:4e:61:4d:3e:83:51:b4:e6:92:c5:e0:5f:d5:
                    a8:76:4d:e9:b2:20:93:55:b1:cf:97:60:f1:7d:26:
                    28:c1:5a:4e:bb:b4:91:d6:7b:3a:bf:33:3e:d6:30:
                    43:ae:0d:74:92:f6:ff:71:46:b3:a3:93:9f:09:74:
                    47:f0:ac:03:3e:3b:55:4c:cf:f0:9b:15:0f:04:95:
                    15:65:72:53:29:14:68:4c:b8:61:31:c5:9b:90:a8:
                    96:0a:15:c1:be:39:67:9c:b6:fc:25:ee:ca:8b:e3:
                    cd:15:a4:d8:d8:e8:07:89:b2:ae:70:22:17:23:e6:
                    6c:4e:49:87:81:c4:e6:db:b4:84:27:58:4b:a9:ce:
                    98:d2:3c:61:0b:b9:42:92:0d:b7:a3:33:0d:97:6d:
                    ae:a9:53:d5:15:f2:fe:8a:5f:ce:ae:4f:0c:ff:ce:
                    bd:d9:09:d8:f8:63:f3:b1:c8:1d:f2:6f:e2:b7:ca:
                    90:50:96:42:01:c4:cd:d6:fa:76:0f:bd:ba:e4:1b:
                    53:f7:12:17:49:ea:e0:20:21:0f:1c:10:1f:ed:42:
                    c0:ef:0b:a8:b2:28:a2:ab:bf:ca:ba:19:ba:d5:39:
                    e7:50:9c:c8:f8:61:6d:63:e5:0a:6b:14:8e:63:46:
                    a2:1d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                74:CB:85:A6:34:9C:3C:A6:18:4A:EC:F7:0F:83:AF:FD:FC:E0:A7:F7
            X509v3 Authority Key Identifier:
                keyid:74:01:65:A8:0D:10:71:97:0A:BC:09:C0:2B:71:C1:AC:7C:1D:6E:0E

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                CA Repository - URI:rsync://rpki.apnic.net/member_repository/A911691A/751F31DAA28511EF842B9410C4F9AE02/
                RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A911691A/751F31DAA28511EF842B9410C4F9AE02/dMuFpjScPKYYSuz3D4Ov_fzgp_c.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  160.250.10.0/23

    Signature Algorithm: sha256WithRSAEncryption
         02:a1:5f:8f:ea:78:88:34:ec:5c:c0:3e:a3:6f:38:64:fb:bc:
         ac:a3:d4:d9:93:02:51:5c:4c:22:9a:4e:e0:36:7f:54:19:f6:
         be:4c:23:34:83:ac:c9:1f:1f:a2:a6:fe:90:df:41:bc:a3:2e:
         27:fa:fc:ca:62:b2:4a:43:5c:71:3f:53:55:ed:eb:30:f2:e3:
         1b:b8:b2:9a:9e:87:b3:5b:a7:08:70:c8:27:50:b4:78:fa:f3:
         27:a9:2c:e6:e7:af:d2:33:5e:77:71:79:31:9f:a2:90:94:42:
         cf:5e:2b:e7:9d:2b:63:b4:76:f7:7c:69:48:02:c6:03:37:cd:
         95:22:08:a6:71:b1:6d:ea:97:e9:21:ca:c2:93:cd:d9:29:0b:
         97:38:e8:13:a4:83:8c:0c:9a:03:eb:f5:0e:a8:34:4c:b7:f9:
         81:fd:9f:3d:d4:30:da:bd:93:20:ed:fc:38:78:77:dc:1a:b8:
         5f:e8:79:59:57:0f:18:54:a6:5c:f6:de:b8:43:29:9f:e4:ed:
         f3:4c:dd:25:c3:b4:30:93:ae:d8:4c:63:f1:5d:7a:60:80:95:
         a0:05:84:6b:dd:72:74:33:c8:44:95:86:ab:c8:12:17:e9:c7:
         41:2a:b0:52:98:2b:0f:db:bf:0c:b5:99:61:89:b4:da:20:c3:
         55:3c:34:de
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 21:04:30 2024 by rpki-client on console-fra.rpki-client.org