Certificate

$ rpki-client -vvf rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/m_F9j3QKJQLQXVeEi5_xZMAkIJE.cer
File:                     m_F9j3QKJQLQXVeEi5_xZMAkIJE.cer (raw, json)
Hash identifier:          KwW5T4N+IFtuYbKq8Cv9PBwsCGY4aHyu2z89spOUbuY=
Subject key identifier:   9B:F1:7D:8F:74:0A:25:02:D0:5D:57:84:8B:9F:F1:64:C0:24:20:91
Authority key identifier: 74:01:65:A8:0D:10:71:97:0A:BC:09:C0:2B:71:C1:AC:7C:1D:6E:0E
Certificate issuer:       /CN=A90DC5BE/serialNumber=740165A80D1071970ABC09C02B71C1AC7C1D6E0E
Certificate serial:       4B30
Authority info access:    rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
Manifest:                 rsync://rpki.apnic.net/member_repository/A91589E7/EFA47670BDFB11E7B873FE27C4F9AE02/m_F9j3QKJQLQXVeEi5_xZMAkIJE.mft
caRepository:             rsync://rpki.apnic.net/member_repository/A91589E7/EFA47670BDFB11E7B873FE27C4F9AE02/
Notify URL:               https://rrdp.apnic.net/notification.xml
Certificate not before:   Mon 05 Jun 2023 16:12:20 +0000
Certificate not after:    Sat 31 Aug 2024 00:00:00 +0000
Subordinate resources:    IP: 143.192.96.0/20

Validation:               OK
Signature path:           rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 05 Apr 2024 14:50:15 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 19248 (0x4b30)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A90DC5BE/serialNumber=740165A80D1071970ABC09C02B71C1AC7C1D6E0E
        Validity
            Not Before: Jun  5 16:12:20 2023 GMT
            Not After : Aug 31 00:00:00 2024 GMT
        Subject: CN=A91589E7/serialNumber=9BF17D8F740A2502D05D57848B9FF164C0242091
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:22:c6:6f:96:11:c2:68:d8:f8:61:e6:fc:63:
                    33:e4:80:3e:ef:36:41:84:4c:25:c4:75:99:c4:1a:
                    10:fa:ae:0b:c0:d3:23:0f:b3:01:83:ce:29:d2:19:
                    2a:d4:c2:0a:cf:4e:b4:de:65:01:35:d2:28:02:6f:
                    b5:54:d2:b0:40:66:a5:ba:20:76:ac:5d:bb:05:bd:
                    24:8d:73:50:9d:a5:d3:b7:8f:ba:69:48:ba:00:76:
                    ac:9d:a0:ee:f4:c6:4f:e5:c1:07:9b:bf:a8:f2:df:
                    3d:a3:e4:6c:e5:4e:e7:ba:07:87:b3:60:ad:56:f7:
                    bc:1d:4c:5c:6f:29:68:b6:5a:46:44:be:41:24:69:
                    05:cd:a8:b4:84:db:86:a3:0b:94:26:f5:8f:41:7e:
                    72:e6:7d:85:7e:54:22:ac:05:f2:9f:a8:fb:08:0a:
                    39:a0:e9:a3:77:98:e6:46:4f:37:e6:14:0f:1e:a2:
                    02:97:f3:22:0d:e4:83:7b:af:e1:33:f5:45:91:ea:
                    26:9e:a7:8c:e8:70:ce:55:64:7f:1b:52:c5:6e:e6:
                    77:7d:d5:ca:f2:dc:21:d8:96:8e:cc:41:f6:8c:6f:
                    a9:ae:01:fe:0b:4a:74:8b:a0:f2:d6:1e:4d:7e:f6:
                    5d:cf:95:e8:57:b5:ae:c3:7f:89:40:b6:10:ec:be:
                    61:13
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9B:F1:7D:8F:74:0A:25:02:D0:5D:57:84:8B:9F:F1:64:C0:24:20:91
            X509v3 Authority Key Identifier:
                keyid:74:01:65:A8:0D:10:71:97:0A:BC:09:C0:2B:71:C1:AC:7C:1D:6E:0E

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                CA Repository - URI:rsync://rpki.apnic.net/member_repository/A91589E7/EFA47670BDFB11E7B873FE27C4F9AE02/
                RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A91589E7/EFA47670BDFB11E7B873FE27C4F9AE02/m_F9j3QKJQLQXVeEi5_xZMAkIJE.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  143.192.96.0/20

    Signature Algorithm: sha256WithRSAEncryption
         0e:db:da:16:98:7b:66:af:33:d5:3f:ab:0d:a9:95:95:69:e4:
         b9:b4:21:a0:5a:ee:30:bc:f5:ff:5b:c3:b4:04:ae:b2:50:da:
         b8:6b:9b:5d:e3:bf:8c:02:b2:2c:a4:72:33:0a:f4:60:92:9b:
         ce:de:5a:0b:95:5e:1b:fb:84:59:77:4c:f2:92:61:95:43:b7:
         46:3b:ad:48:ce:cc:65:ca:a9:1d:4a:18:80:95:24:6d:2b:bc:
         b2:23:ca:3f:90:f1:29:e5:1c:05:aa:57:f5:3c:b1:2e:61:5c:
         22:d7:d1:78:2b:6c:49:a5:78:b0:de:be:13:97:b1:c1:dc:61:
         db:10:e8:89:f1:67:45:a1:e3:87:7e:ce:39:5e:16:08:60:63:
         22:37:02:30:a9:e0:d4:c7:a3:fa:b8:85:20:b7:f3:14:31:02:
         4e:20:38:7b:ef:fe:b2:90:a8:02:c2:5e:25:35:d3:91:c4:1a:
         e2:10:47:10:8c:06:15:e7:ce:d2:90:f1:a4:be:5c:43:1e:34:
         b7:a5:79:29:30:35:a0:fd:a9:fe:c4:2a:58:0a:dd:3d:7b:1b:
         f8:ec:7c:54:15:a4:8b:af:40:9f:a5:40:71:37:0e:cf:fd:89:
         45:1f:5f:7c:a8:63:7b:31:5b:c6:eb:36:9b:0e:bd:74:c9:4d:
         79:c3:56:64
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 29 15:35:19 2024 by rpki-client on console-fra.rpki-client.org