Certificate

$ rpki-client -vvf rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/k3obX-sKKTNg6k6IRzUuf9Nsx6U.cer
File:                     k3obX-sKKTNg6k6IRzUuf9Nsx6U.cer (raw, json)
Hash identifier:          +7MK1Z9bVvckmeAwyy/+WcHs7edc3SYrZKYI5tPMcPE=
Subject key identifier:   93:7A:1B:5F:EB:0A:29:33:60:EA:4E:88:47:35:2E:7F:D3:6C:C7:A5
Authority key identifier: 74:01:65:A8:0D:10:71:97:0A:BC:09:C0:2B:71:C1:AC:7C:1D:6E:0E
Certificate issuer:       /CN=A90DC5BE/serialNumber=740165A80D1071970ABC09C02B71C1AC7C1D6E0E
Certificate serial:       534F
Authority info access:    rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
Manifest:                 rsync://rpki.apnic.net/member_repository/A91D73BB/7ED57586E18D11EE990FEC4FC4F9AE02/k3obX-sKKTNg6k6IRzUuf9Nsx6U.mft
caRepository:             rsync://rpki.apnic.net/member_repository/A91D73BB/7ED57586E18D11EE990FEC4FC4F9AE02/
Notify URL:               https://rrdp.apnic.net/notification.xml
Certificate not before:   Wed 13 Mar 2024 23:00:39 +0000
Certificate not after:    Mon 30 Sep 2024 00:00:00 +0000
Subordinate resources:    IP: 148.195.0.0/16
                          IP: 159.73.0.0/16

Validation:               OK
Signature path:           rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 11 May 2024 02:50:15 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 21327 (0x534f)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A90DC5BE/serialNumber=740165A80D1071970ABC09C02B71C1AC7C1D6E0E
        Validity
            Not Before: Mar 13 23:00:39 2024 GMT
            Not After : Sep 30 00:00:00 2024 GMT
        Subject: CN=A91D73BB/serialNumber=937A1B5FEB0A293360EA4E8847352E7FD36CC7A5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e9:c0:d6:00:cb:f5:4b:39:4a:7b:7d:9a:05:8f:
                    e5:09:91:9d:c1:34:1e:66:9a:aa:14:d9:3a:56:fe:
                    42:c3:8d:c5:3b:0c:9b:ee:36:65:a6:6a:bb:2c:5b:
                    61:34:a8:a8:11:f3:ee:e7:10:5d:a3:09:d3:23:50:
                    dc:22:5a:aa:94:e8:f1:f6:4e:6c:5c:ef:31:fb:8d:
                    31:60:6b:be:37:9b:f7:77:f7:e5:d2:00:bd:84:79:
                    8f:92:fd:46:aa:7c:58:64:51:82:6a:7d:bb:1a:ff:
                    13:f0:3e:e9:44:2b:45:30:ec:97:67:f3:0b:5a:63:
                    40:e2:06:09:0b:4d:75:bc:bf:c5:a0:72:62:f8:c9:
                    2c:62:1f:b3:af:d1:26:b5:76:ef:e3:65:96:75:56:
                    8c:e3:4d:8b:df:e8:70:c8:e6:56:1c:9e:4f:6d:a6:
                    fe:b3:89:a4:ef:e8:34:f3:d7:38:44:58:7a:30:42:
                    9f:ca:90:5a:a5:93:35:bd:b0:98:5a:70:ae:7b:2e:
                    2d:cc:2d:06:17:f7:80:1b:5e:1d:0a:b8:1d:0a:d6:
                    ce:38:48:71:4c:67:23:11:d2:d8:09:7d:e9:c1:8f:
                    70:22:ed:1f:ec:2f:8f:e7:21:83:a9:f3:0b:cf:e8:
                    4f:bb:34:a2:ad:bb:ce:57:03:f3:e1:13:74:3a:6d:
                    40:c3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                93:7A:1B:5F:EB:0A:29:33:60:EA:4E:88:47:35:2E:7F:D3:6C:C7:A5
            X509v3 Authority Key Identifier:
                keyid:74:01:65:A8:0D:10:71:97:0A:BC:09:C0:2B:71:C1:AC:7C:1D:6E:0E

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                CA Repository - URI:rsync://rpki.apnic.net/member_repository/A91D73BB/7ED57586E18D11EE990FEC4FC4F9AE02/
                RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A91D73BB/7ED57586E18D11EE990FEC4FC4F9AE02/k3obX-sKKTNg6k6IRzUuf9Nsx6U.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  148.195.0.0/16
                  159.73.0.0/16

    Signature Algorithm: sha256WithRSAEncryption
         69:84:e8:5d:0f:b4:09:c8:1b:25:1c:98:f6:2f:62:3b:1b:50:
         96:c4:8c:bc:8f:ca:b9:50:5c:47:c0:22:0c:5c:57:26:a2:29:
         22:74:63:25:37:e1:3e:6d:03:91:1c:7c:a9:ea:21:c9:0d:f3:
         be:a3:fe:c1:f4:b5:ab:b8:db:4a:c0:cf:78:e7:21:3b:06:61:
         44:e7:eb:d4:db:03:0f:72:e5:d7:bf:26:86:b9:03:bd:84:f0:
         54:88:56:d7:df:e8:36:f8:7c:fc:d0:4b:10:c1:ff:b9:e4:c9:
         41:66:03:91:6b:1a:5c:84:22:99:2d:8e:92:e6:31:33:88:bb:
         6f:9f:ae:87:82:12:7c:3d:60:30:ee:c0:02:55:5f:cd:1d:6d:
         eb:2f:1a:83:19:7a:0e:01:bd:12:a6:8a:72:71:3b:86:e4:77:
         07:9a:71:f4:d8:54:fb:40:8a:76:41:ab:67:13:3f:92:7b:17:
         76:79:ae:4d:e8:d3:c7:7d:8c:9f:9a:a2:29:a5:b4:fa:aa:17:
         35:25:c3:a2:6c:52:56:a0:cc:14:65:12:5b:cc:65:ba:05:27:
         d9:e7:df:13:95:ec:fd:c0:e9:60:bc:2e:0d:82:b7:75:27:fe:
         17:b3:b4:f2:56:16:bf:9b:ba:b6:c3:c1:35:d4:81:46:c7:74:
         2f:bf:cc:cf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 4 03:48:11 2024 by rpki-client on console-ams.rpki-client.org