Certificate

$ rpki-client -vvf rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/w5O8331Fpxlv881tMNYjDfT9xX0.cer
File:                     w5O8331Fpxlv881tMNYjDfT9xX0.cer (raw, json)
Hash identifier:          5KstTPIXtVTP/K9FaRXnBmtWk0h3yEfFRU1oLi/mZa8=
Subject key identifier:   C3:93:BC:DF:7D:45:A7:19:6F:F3:CD:6D:30:D6:23:0D:F4:FD:C5:7D
Authority key identifier: 74:01:65:A8:0D:10:71:97:0A:BC:09:C0:2B:71:C1:AC:7C:1D:6E:0E
Certificate issuer:       /CN=A90DC5BE/serialNumber=740165A80D1071970ABC09C02B71C1AC7C1D6E0E
Certificate serial:       58A2
Authority info access:    rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
Manifest:                 rsync://rpki.apnic.net/member_repository/A916ED2B/FC11BFD245B011EFBD598B77C4F9AE02/w5O8331Fpxlv881tMNYjDfT9xX0.mft
caRepository:             rsync://rpki.apnic.net/member_repository/A916ED2B/FC11BFD245B011EFBD598B77C4F9AE02/
Notify URL:               https://rrdp.apnic.net/notification.xml
Certificate not before:   Fri 19 Jul 2024 09:26:38 +0000
Certificate not after:    Sun 02 Mar 2025 00:00:00 +0000
Subordinate resources:    IP: 157.10.122.0/23

Validation:               OK
Signature path:           rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 26 Sep 2024 21:06:43 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 22690 (0x58a2)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A90DC5BE/serialNumber=740165A80D1071970ABC09C02B71C1AC7C1D6E0E
        Validity
            Not Before: Jul 19 09:26:38 2024 GMT
            Not After : Mar  2 00:00:00 2025 GMT
        Subject: CN=A916ED2B/serialNumber=C393BCDF7D45A7196FF3CD6D30D6230DF4FDC57D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:d4:45:af:d7:07:17:b9:8c:b1:23:3e:c8:c3:
                    47:36:b0:52:8d:08:1c:07:ed:cc:49:df:7c:bc:74:
                    bd:02:0f:64:56:9e:7b:58:b0:b2:eb:95:b6:b3:60:
                    8a:69:a2:d8:a9:51:89:0f:cc:ee:63:2e:b4:ea:88:
                    bd:da:00:32:56:07:9b:78:be:12:66:e4:7e:a3:99:
                    8b:e2:dd:db:f3:3f:13:97:fb:d5:b7:08:14:3e:40:
                    62:bc:87:07:83:4f:a0:f5:75:e5:e0:4c:1c:30:24:
                    6a:93:0d:e4:12:26:4a:e6:61:5b:51:2a:37:65:08:
                    1d:0f:96:25:c7:ec:fe:4d:bf:12:e9:f5:1a:a4:dc:
                    fd:ca:64:a3:df:ec:84:e4:bb:93:d1:9c:2f:68:ff:
                    a9:9b:df:e0:93:a5:04:8d:ad:e7:54:d2:03:c3:59:
                    03:84:e1:65:12:b8:17:38:bf:bf:57:84:51:8d:a5:
                    95:04:b2:9d:b9:cb:d5:82:92:6b:db:33:16:fd:07:
                    bc:70:96:c1:d6:f4:5f:87:85:0d:77:8b:90:f2:55:
                    ba:de:36:82:3e:7c:d2:84:aa:4b:46:8e:0b:33:cf:
                    ec:95:6f:28:ae:79:d4:2e:cc:a0:02:ad:e2:3a:63:
                    c0:1d:7d:97:a3:f1:1a:25:90:2d:34:6c:76:59:8b:
                    05:a9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C3:93:BC:DF:7D:45:A7:19:6F:F3:CD:6D:30:D6:23:0D:F4:FD:C5:7D
            X509v3 Authority Key Identifier:
                keyid:74:01:65:A8:0D:10:71:97:0A:BC:09:C0:2B:71:C1:AC:7C:1D:6E:0E

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                CA Repository - URI:rsync://rpki.apnic.net/member_repository/A916ED2B/FC11BFD245B011EFBD598B77C4F9AE02/
                RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A916ED2B/FC11BFD245B011EFBD598B77C4F9AE02/w5O8331Fpxlv881tMNYjDfT9xX0.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  157.10.122.0/23

    Signature Algorithm: sha256WithRSAEncryption
         1e:87:d2:36:99:0e:da:3a:5d:43:e2:b3:4d:1c:9a:57:46:f0:
         87:9e:f2:ca:bf:f8:8f:99:a1:6c:76:ec:6f:16:41:52:b5:ac:
         3a:9c:a3:49:2c:23:65:95:e2:13:ef:d8:20:1a:25:6b:16:42:
         8a:37:88:cf:08:fb:d9:92:3c:b9:fe:91:30:65:81:4f:92:58:
         7b:33:d2:1c:94:42:3d:1a:d9:b0:4e:28:94:bf:30:c2:a2:1e:
         ba:31:80:01:94:87:c3:02:72:4d:79:23:c3:3a:44:16:2e:25:
         41:25:ad:6a:b6:78:cd:16:6b:08:d1:37:df:0d:d9:d7:d2:fe:
         9a:51:fb:37:c9:5c:4d:4c:4a:62:49:07:ad:50:b5:a4:7a:55:
         18:db:23:8c:af:54:ef:59:6f:0e:bd:ce:31:7b:e9:c4:2c:f9:
         f1:55:2c:64:81:99:94:72:14:23:92:5f:0c:c5:03:17:7b:e6:
         7d:a3:94:e7:e9:fc:5b:02:d3:9b:82:9c:54:41:3c:c2:41:ba:
         bc:a7:9f:9b:8a:39:33:fe:d1:41:a8:76:24:ca:ad:9d:b1:5e:
         3f:b7:40:f0:4b:73:b9:ae:2b:c4:6c:d9:bc:22:a6:8b:e3:c6:
         53:23:b8:f0:a2:b7:db:9c:fa:e1:87:e1:09:7e:9e:83:85:f7:
         d3:b4:3a:97
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 19 22:41:13 2024 by rpki-client on console-fra.rpki-client.org