Certificate

$ rpki-client -vvf rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/fiRDENekVusSe5JsQvJteems24g.cer
File:                     fiRDENekVusSe5JsQvJteems24g.cer (raw, json)
Hash identifier:          UXC2sL4gtj72Wk3wkdoGJARmdCdh02eMROnkKOaYFno=
Subject key identifier:   7E:24:43:10:D7:A4:56:EB:12:7B:92:6C:42:F2:6D:79:E9:AC:DB:88
Authority key identifier: 74:01:65:A8:0D:10:71:97:0A:BC:09:C0:2B:71:C1:AC:7C:1D:6E:0E
Certificate issuer:       /CN=A90DC5BE/serialNumber=740165A80D1071970ABC09C02B71C1AC7C1D6E0E
Certificate serial:       4B64
Authority info access:    rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
Manifest:                 rsync://rpki.apnic.net/member_repository/A91DF93A/F7DFA72EE5F311EAB3A91561C4F9AE02/fiRDENekVusSe5JsQvJteems24g.mft
caRepository:             rsync://rpki.apnic.net/member_repository/A91DF93A/F7DFA72EE5F311EAB3A91561C4F9AE02/
Notify URL:               https://rrdp.apnic.net/notification.xml
Certificate not before:   Thu 15 Jun 2023 17:48:57 +0000
Certificate not after:    Sat 31 Aug 2024 00:00:00 +0000
Subordinate resources:    IP: 169.136.64.0 -- 169.136.191.255

Validation:               OK
Signature path:           rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 26 Apr 2024 23:35:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 19300 (0x4b64)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A90DC5BE/serialNumber=740165A80D1071970ABC09C02B71C1AC7C1D6E0E
        Validity
            Not Before: Jun 15 17:48:57 2023 GMT
            Not After : Aug 31 00:00:00 2024 GMT
        Subject: CN=A91DF93A/serialNumber=7E244310D7A456EB127B926C42F26D79E9ACDB88
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:96:d2:a3:fb:1b:9c:3f:a6:2d:3a:c2:21:f4:f0:
                    b4:7a:f8:90:3a:c8:a1:57:e2:f7:4f:b6:6d:fa:7f:
                    96:de:ac:5a:88:b8:8f:b5:a2:1d:e1:42:d2:3b:12:
                    1c:54:32:86:b2:0b:20:82:43:26:81:28:3f:35:7f:
                    08:a5:76:79:2f:e1:f9:c0:a5:70:49:ed:d7:3d:74:
                    95:61:da:37:df:31:16:ca:b1:f8:aa:1a:cb:4d:ba:
                    31:c7:c8:8d:28:db:79:10:ba:e0:dc:a1:c0:48:ac:
                    2f:4b:a2:4d:9e:69:44:ba:d8:3b:ad:cc:de:73:bb:
                    5f:0f:90:74:e6:7a:8c:ff:09:1f:6d:79:90:0b:20:
                    27:95:7f:ef:fb:74:b1:80:41:6d:9b:f2:2e:07:5e:
                    fb:90:8f:b8:85:09:30:17:ee:f8:17:a7:c5:d5:be:
                    d1:9a:01:9f:33:90:c0:ea:24:3e:1c:46:e7:3e:95:
                    6a:50:17:31:7f:0e:e9:5f:85:ad:27:82:2b:9e:48:
                    c9:d8:e3:5a:ab:27:0a:8a:5c:dd:e4:be:49:0e:37:
                    f2:c8:af:89:bb:15:b5:e4:0e:b0:d6:5f:ab:92:40:
                    80:3f:0d:4c:4b:6d:20:9d:d4:28:ad:74:f0:4e:09:
                    23:0c:e4:95:2b:70:c8:27:b1:f8:cb:54:6c:92:55:
                    7a:e5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7E:24:43:10:D7:A4:56:EB:12:7B:92:6C:42:F2:6D:79:E9:AC:DB:88
            X509v3 Authority Key Identifier:
                keyid:74:01:65:A8:0D:10:71:97:0A:BC:09:C0:2B:71:C1:AC:7C:1D:6E:0E

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                CA Repository - URI:rsync://rpki.apnic.net/member_repository/A91DF93A/F7DFA72EE5F311EAB3A91561C4F9AE02/
                RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A91DF93A/F7DFA72EE5F311EAB3A91561C4F9AE02/fiRDENekVusSe5JsQvJteems24g.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  169.136.64.0-169.136.191.255

    Signature Algorithm: sha256WithRSAEncryption
         72:e3:4f:36:d3:dd:58:b5:7f:55:0e:e7:e8:0d:f8:63:b5:e2:
         8e:1c:4b:50:fc:2f:6c:66:9f:31:1b:62:c2:1d:08:ee:5c:7b:
         1f:ee:54:9c:2c:78:97:b9:7c:0a:f0:3e:3e:56:8e:68:ac:b0:
         4a:d7:f3:a7:e4:45:39:e2:12:bd:e2:91:84:b2:4e:dd:d1:d4:
         64:d1:4a:7b:62:fc:f4:7a:8d:bd:6a:2f:76:3d:19:d0:08:c2:
         70:9e:40:c8:ae:d7:01:0c:74:d0:9f:b4:38:f3:f7:0f:db:18:
         5f:08:e5:b3:87:0c:b6:aa:59:62:a9:d6:2f:69:85:0f:82:67:
         5e:d5:6a:b8:3c:84:73:cd:07:9e:d3:ea:8b:ad:1b:3b:80:65:
         63:74:4e:77:7c:d0:44:13:14:5d:e5:ce:1d:58:0e:cd:d7:80:
         a9:0c:e5:79:07:a4:40:a7:82:a8:27:88:d4:83:a0:9f:c4:e0:
         31:2b:b7:51:d9:9e:56:59:14:6b:5a:c9:5b:62:bc:9d:5a:8c:
         b9:53:3c:8f:02:04:6f:15:9d:4a:fe:36:c8:3f:d4:9b:61:7c:
         45:b9:87:a0:9b:53:74:06:d5:9a:4d:04:3c:43:b6:1f:cf:cb:
         a1:bf:84:dc:90:86:13:6c:1c:2d:0a:97:05:13:86:66:aa:c2:
         62:67:8c:62
-----BEGIN CERTIFICATE-----
MIIGBTCCBO2gAwIBAgICS2QwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkw
REM1QkUxMTAvBgNVBAUTKDc0MDE2NUE4MEQxMDcxOTcwQUJDMDlDMDJCNzFDMUFD
N0MxRDZFMEUwHhcNMjMwNjE1MTc0ODU3WhcNMjQwODMxMDAwMDAwWjBGMREwDwYD
VQQDEwhBOTFERjkzQTExMC8GA1UEBRMoN0UyNDQzMTBEN0E0NTZFQjEyN0I5MjZD
NDJGMjZENzlFOUFDREI4ODCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEB
AJbSo/sbnD+mLTrCIfTwtHr4kDrIoVfi90+2bfp/lt6sWoi4j7WiHeFC0jsSHFQy
hrILIIJDJoEoPzV/CKV2eS/h+cClcEnt1z10lWHaN98xFsqx+Koay026McfIjSjb
eRC64NyhwEisL0uiTZ5pRLrYO63M3nO7Xw+QdOZ6jP8JH215kAsgJ5V/7/t0sYBB
bZvyLgde+5CPuIUJMBfu+BenxdW+0ZoBnzOQwOokPhxG5z6ValAXMX8O6V+FrSeC
K55IydjjWqsnCopc3eS+SQ438sivibsVteQOsNZfq5JAgD8NTEttIJ3UKK108E4J
IwzklStwyCex+MtUbJJVeuUCAwEAAaOCAvswggL3MB0GA1UdDgQWBBR+JEMQ16RW
6xJ7kmxC8m156azbiDAfBgNVHSMEGDAWgBR0AWWoDRBxlwq8CcArccGsfB1uDjAO
BgNVHQ8BAf8EBAMCAQYwDwYDVR0TAQH/BAUwAwEB/zBzBgNVHR8EbDBqMGigZqBk
hmJyc3luYzovL3Jwa2kuYXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRGMjAxRDY2
MTFFMjhBQzg4MzdDNzJGRDFGRjIvZEFGbHFBMFFjWmNLdkFuQUszSEJySHdkYmc0
LmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5h
cG5pYy5uZXQvcmVwb3NpdG9yeS85ODA2NTJFMEI3N0UxMUU3QTk2QTM5NTIxQTRG
NEZCNC9kQUZscUEwUWNaY0t2QW5BSzNIQnJId2RiZzQuY2VyMEoGA1UdIAEB/wRA
MD4wPAYIKwYBBQUHDgIwMDAuBggrBgEFBQcCARYiaHR0cHM6Ly93d3cuYXBuaWMu
bmV0L1JQS0kvQ1BTLnBkZjCCASgGCCsGAQUFBwELBIIBGjCCARYwXwYIKwYBBQUH
MAWGU3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
REY5M0EvRjdERkE3MkVFNUYzMTFFQUIzQTkxNTYxQzRGOUFFMDIvMH4GCCsGAQUF
BzAKhnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5
MURGOTNBL0Y3REZBNzJFRTVGMzExRUFCM0E5MTU2MUM0RjlBRTAyL2ZpUkRFTmVr
VnVzU2U1SnNRdkp0ZWVtczI0Zy5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJk
cC5hcG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAnBggrBgEFBQcBBwEB/wQYMBYw
FAQCAAEwDjAMAwQGqYhAAwQGqYiAMA0GCSqGSIb3DQEBCwUAA4IBAQBy4082091Y
tX9VDufoDfhjteKOHEtQ/C9sZp8xG2LCHQjuXHsf7lScLHiXuXwK8D4+Vo5orLBK
1/On5EU54hK94pGEsk7d0dRk0Up7Yvz0eo29ai92PRnQCMJwnkDIrtcBDHTQn7Q4
8/cP2xhfCOWzhwy2qlliqdYvaYUPgmde1Wq4PIRzzQee0+qLrRs7gGVjdE53fNBE
ExRd5c4dWA7N14CpDOV5B6RAp4KoJ4jUg6CfxOAxK7dR2Z5WWRRrWslbYrydWoy5
UzyPAgRvFZ1K/jbIP9SbYXxFuYegm1N0BtWaTQQ8Q7Yfz8uhv4TckIYTbBwtCpcF
E4ZmqsJiZ4xi
-----END CERTIFICATE-----
Generated at Sat Apr 20 00:10:36 2024 by rpki-client on console-fra.rpki-client.org