Certificate

$ rpki-client -vvf rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/e2JiC_6zjOtk0hDJgF3CSAQVcH0.cer
File:                     e2JiC_6zjOtk0hDJgF3CSAQVcH0.cer (raw, json)
Hash identifier:          LGi9qFuHxuobRqfZLznM0ggnPff6tpEpKf9LLQbe3EI=
Subject key identifier:   7B:62:62:0B:FE:B3:8C:EB:64:D2:10:C9:80:5D:C2:48:04:15:70:7D
Authority key identifier: 74:01:65:A8:0D:10:71:97:0A:BC:09:C0:2B:71:C1:AC:7C:1D:6E:0E
Certificate issuer:       /CN=A90DC5BE/serialNumber=740165A80D1071970ABC09C02B71C1AC7C1D6E0E
Certificate serial:       60BB
Authority info access:    rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
Manifest:                 rsync://rpki.apnic.net/member_repository/A9187BAC/BE318FB0D02C11EFB5584915C4F9AE02/e2JiC_6zjOtk0hDJgF3CSAQVcH0.mft
caRepository:             rsync://rpki.apnic.net/member_repository/A9187BAC/BE318FB0D02C11EFB5584915C4F9AE02/
Notify URL:               https://rrdp.apnic.net/notification.xml
Certificate not before:   Sat 11 Jan 2025 15:00:10 +0000
Certificate not after:    Fri 01 May 2026 00:00:00 +0000
Subordinate resources:    IP: 161.248.136.0/23
Validation:               OK
Signature path:           rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 12 Feb 2025 14:50:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 24763 (0x60bb)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A90DC5BE
        Validity
            Not Before: Jan 11 15:00:10 2025 GMT
            Not After : May  1 00:00:00 2026 GMT
        Subject: CN=A9187BAC
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:e1:81:69:cb:eb:19:aa:50:67:73:74:49:ca:
                    61:83:f3:86:9f:73:4d:cc:fd:94:ce:f3:0b:4e:93:
                    6e:b3:da:27:23:f6:fb:ac:b5:68:ef:67:f4:bf:c1:
                    f6:2e:52:d1:06:6c:91:26:3d:d0:7f:f7:df:06:29:
                    bb:8a:21:4c:f4:fe:98:f9:08:2c:fd:7a:25:0f:96:
                    e6:10:c1:b1:a5:5e:eb:6a:1e:b6:ee:9f:0c:1e:9c:
                    d9:c7:1a:1e:bd:c8:af:43:ad:f5:a0:e7:1c:95:59:
                    7d:61:90:cb:c2:a4:8c:a5:12:9a:4c:42:cf:4b:ce:
                    a7:32:07:b6:54:67:d7:6e:23:79:6c:90:26:ee:13:
                    09:94:3c:22:39:62:01:0a:12:ae:c4:ce:60:ce:b6:
                    2a:42:c8:ce:bf:5e:c4:f9:a9:89:91:73:e3:98:af:
                    e9:29:6c:79:8e:30:6b:cd:c0:76:48:de:07:99:e3:
                    2d:49:b8:88:f6:6b:c9:88:a4:9e:12:1a:50:44:27:
                    7e:2e:ec:a3:5f:72:78:e9:20:1e:05:e8:89:a9:2e:
                    25:ff:13:9c:d0:69:cf:56:dc:12:b2:69:43:66:cb:
                    d6:32:5c:58:4b:49:1c:8b:30:87:50:b6:4e:d5:58:
                    b2:e1:d9:e1:a2:34:bf:6c:a9:d5:67:d3:01:ed:b4:
                    fd:b5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7B:62:62:0B:FE:B3:8C:EB:64:D2:10:C9:80:5D:C2:48:04:15:70:7D
            X509v3 Authority Key Identifier:
                keyid:74:01:65:A8:0D:10:71:97:0A:BC:09:C0:2B:71:C1:AC:7C:1D:6E:0E

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                CA Repository - URI:rsync://rpki.apnic.net/member_repository/A9187BAC/BE318FB0D02C11EFB5584915C4F9AE02/
                RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A9187BAC/BE318FB0D02C11EFB5584915C4F9AE02/e2JiC_6zjOtk0hDJgF3CSAQVcH0.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  161.248.136.0/23

    Signature Algorithm: sha256WithRSAEncryption
         99:0d:ca:3d:c7:24:fc:4e:6b:70:59:27:7f:ba:a0:ad:19:92:
         ce:bc:44:52:be:6d:2e:66:48:d1:48:1f:0f:c4:ca:c2:00:38:
         18:77:f7:83:e7:04:7e:7b:56:ee:c3:92:6a:f3:41:bc:e0:b5:
         19:7c:07:97:53:e8:0e:c1:15:5a:f5:4b:d3:7f:df:f2:54:5a:
         39:b7:7a:0c:4b:3e:b1:e0:74:f4:af:58:83:cb:0f:05:09:8d:
         3d:36:9e:31:70:ae:19:3c:f8:7a:e6:ca:d8:35:c3:82:85:fb:
         e4:c2:b0:af:b2:9c:3e:05:e7:27:46:d4:19:9b:ed:56:bc:47:
         fb:d0:6b:e5:18:0b:c9:12:06:14:6c:77:84:65:a2:4b:a5:87:
         fb:73:42:2b:1a:a2:56:74:46:8d:74:fe:04:dc:37:bd:03:d7:
         c7:f6:09:5c:57:d9:7b:33:a1:57:2b:de:7c:8f:9f:35:86:e9:
         a7:b5:da:30:08:d8:61:e9:af:0c:8b:21:31:27:92:e0:5a:85:
         e8:8a:7a:ac:01:aa:8f:dc:7f:dd:c4:82:4e:b7:db:6d:fa:92:
         c3:85:71:1c:df:18:f4:8f:77:e1:7d:4c:e8:c1:72:07:f8:26:
         26:29:b0:7b:1c:84:c1:ae:10:12:dc:38:69:7d:1d:6e:b2:0d:
         b2:37:0d:1c
-----BEGIN CERTIFICATE-----
MIIF/TCCBOWgAwIBAgICYLswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkw
REM1QkUxMTAvBgNVBAUTKDc0MDE2NUE4MEQxMDcxOTcwQUJDMDlDMDJCNzFDMUFD
N0MxRDZFMEUwHhcNMjUwMTExMTUwMDEwWhcNMjYwNTAxMDAwMDAwWjBGMREwDwYD
VQQDEwhBOTE4N0JBQzExMC8GA1UEBRMoN0I2MjYyMEJGRUIzOENFQjY0RDIxMEM5
ODA1REMyNDgwNDE1NzA3RDCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEB
AKnhgWnL6xmqUGdzdEnKYYPzhp9zTcz9lM7zC06TbrPaJyP2+6y1aO9n9L/B9i5S
0QZskSY90H/33wYpu4ohTPT+mPkILP16JQ+W5hDBsaVe62oetu6fDB6c2ccaHr3I
r0Ot9aDnHJVZfWGQy8KkjKUSmkxCz0vOpzIHtlRn124jeWyQJu4TCZQ8IjliAQoS
rsTOYM62KkLIzr9exPmpiZFz45iv6SlseY4wa83AdkjeB5njLUm4iPZryYiknhIa
UEQnfi7so19yeOkgHgXoiakuJf8TnNBpz1bcErJpQ2bL1jJcWEtJHIswh1C2TtVY
suHZ4aI0v2yp1WfTAe20/bUCAwEAAaOCAvMwggLvMB0GA1UdDgQWBBR7YmIL/rOM
62TSEMmAXcJIBBVwfTAfBgNVHSMEGDAWgBR0AWWoDRBxlwq8CcArccGsfB1uDjAO
BgNVHQ8BAf8EBAMCAQYwDwYDVR0TAQH/BAUwAwEB/zBzBgNVHR8EbDBqMGigZqBk
hmJyc3luYzovL3Jwa2kuYXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRGMjAxRDY2
MTFFMjhBQzg4MzdDNzJGRDFGRjIvZEFGbHFBMFFjWmNLdkFuQUszSEJySHdkYmc0
LmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5h
cG5pYy5uZXQvcmVwb3NpdG9yeS85ODA2NTJFMEI3N0UxMUU3QTk2QTM5NTIxQTRG
NEZCNC9kQUZscUEwUWNaY0t2QW5BSzNIQnJId2RiZzQuY2VyMEoGA1UdIAEB/wRA
MD4wPAYIKwYBBQUHDgIwMDAuBggrBgEFBQcCARYiaHR0cHM6Ly93d3cuYXBuaWMu
bmV0L1JQS0kvQ1BTLnBkZjCCASgGCCsGAQUFBwELBIIBGjCCARYwXwYIKwYBBQUH
MAWGU3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
ODdCQUMvQkUzMThGQjBEMDJDMTFFRkI1NTg0OTE1QzRGOUFFMDIvMH4GCCsGAQUF
BzAKhnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5
MTg3QkFDL0JFMzE4RkIwRDAyQzExRUZCNTU4NDkxNUM0RjlBRTAyL2UySmlDXzZ6
ak90azBoREpnRjNDU0FRVmNIMC5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJk
cC5hcG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAfBggrBgEFBQcBBwEB/wQQMA4w
DAQCAAEwBgMEAaH4iDANBgkqhkiG9w0BAQsFAAOCAQEAmQ3KPcck/E5rcFknf7qg
rRmSzrxEUr5tLmZI0UgfD8TKwgA4GHf3g+cEfntW7sOSavNBvOC1GXwHl1PoDsEV
WvVL03/f8lRaObd6DEs+seB09K9Yg8sPBQmNPTaeMXCuGTz4eubK2DXDgoX75MKw
r7KcPgXnJ0bUGZvtVrxH+9Br5RgLyRIGFGx3hGWiS6WH+3NCKxqiVnRGjXT+BNw3
vQPXx/YJXFfZezOhVyvefI+fNYbpp7XaMAjYYemvDIshMSeS4FqF6Ip6rAGqj9x/
3cSCTrfbbfqSw4VxHN8Y9I934X1M6MFyB/gmJimwexyEwa4QEtw4aX0dbrINsjcN
HA==
-----END CERTIFICATE-----
Generated at Wed Feb 5 17:08:00 2025 by rpki-client