Certificate

$ rpki-client -vvf rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/wN0sVYV6kv_nzcuilJmD1IpCudg.cer
File:                     wN0sVYV6kv_nzcuilJmD1IpCudg.cer (raw, json)
Hash identifier:          yF1tpNM+8hXJZujd3nrL4SSO+PbWGcoZYiZDeRHJ3js=
Subject key identifier:   C0:DD:2C:55:85:7A:92:FF:E7:CD:CB:A2:94:99:83:D4:8A:42:B9:D8
Authority key identifier: 74:01:65:A8:0D:10:71:97:0A:BC:09:C0:2B:71:C1:AC:7C:1D:6E:0E
Certificate issuer:       /CN=A90DC5BE/serialNumber=740165A80D1071970ABC09C02B71C1AC7C1D6E0E
Certificate serial:       59EE
Authority info access:    rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
Manifest:                 rsync://rpki.apnic.net/member_repository/A91326FF/94104B4A5F8E11EFB23E7945C4F9AE02/wN0sVYV6kv_nzcuilJmD1IpCudg.mft
caRepository:             rsync://rpki.apnic.net/member_repository/A91326FF/94104B4A5F8E11EFB23E7945C4F9AE02/
Notify URL:               https://rrdp.apnic.net/notification.xml
Certificate not before:   Wed 21 Aug 2024 07:25:50 +0000
Certificate not after:    Mon 01 Dec 2025 00:00:00 +0000
Subordinate resources:    IP: 160.30.141.0/24

Validation:               OK
Signature path:           rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 30 Oct 2024 17:50:28 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 23022 (0x59ee)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A90DC5BE/serialNumber=740165A80D1071970ABC09C02B71C1AC7C1D6E0E
        Validity
            Not Before: Aug 21 07:25:50 2024 GMT
            Not After : Dec  1 00:00:00 2025 GMT
        Subject: CN=A91326FF/serialNumber=C0DD2C55857A92FFE7CDCBA2949983D48A42B9D8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:52:4c:39:a2:3a:67:41:66:90:11:46:fe:73:
                    4d:fa:a6:c3:1f:d5:74:17:57:6a:77:9b:73:de:66:
                    6d:7d:dc:30:2d:48:39:a5:13:58:52:55:37:69:1c:
                    b2:3e:f6:47:48:d3:da:06:d4:c9:1a:3b:1d:b3:05:
                    85:78:56:51:0c:83:97:96:1a:2f:f9:08:a7:24:01:
                    40:5e:67:50:7b:88:12:c7:9f:d5:cd:3b:ba:91:1a:
                    19:66:a5:e9:83:50:3b:1b:e8:b9:42:3f:f9:5e:55:
                    a1:14:63:d8:bd:16:c7:31:d2:6e:fc:bb:9a:5b:16:
                    57:b9:30:b4:d3:ee:c3:6d:14:47:66:dd:b4:ec:10:
                    c0:00:f2:51:19:06:9a:09:51:69:a5:c9:de:6b:06:
                    35:4f:2e:73:f6:d0:2f:ef:c0:e8:00:7c:1d:85:55:
                    7d:a8:0a:c9:f4:2f:2b:b6:3b:23:3e:41:27:d4:ff:
                    61:22:7e:d4:ec:6d:e6:76:34:f7:2a:7c:30:ee:cb:
                    36:d0:4a:4a:fc:28:5f:4c:4f:b7:e4:da:dd:96:fa:
                    bd:10:d1:bd:5c:ef:aa:e1:8c:cf:97:05:f5:03:23:
                    76:3f:14:d6:6b:98:54:8f:53:27:e2:f1:58:89:3f:
                    08:35:03:38:88:19:78:12:6e:3a:7c:57:43:7b:db:
                    cd:1b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C0:DD:2C:55:85:7A:92:FF:E7:CD:CB:A2:94:99:83:D4:8A:42:B9:D8
            X509v3 Authority Key Identifier:
                keyid:74:01:65:A8:0D:10:71:97:0A:BC:09:C0:2B:71:C1:AC:7C:1D:6E:0E

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                CA Repository - URI:rsync://rpki.apnic.net/member_repository/A91326FF/94104B4A5F8E11EFB23E7945C4F9AE02/
                RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A91326FF/94104B4A5F8E11EFB23E7945C4F9AE02/wN0sVYV6kv_nzcuilJmD1IpCudg.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  160.30.141.0/24

    Signature Algorithm: sha256WithRSAEncryption
         59:97:d3:f2:f5:71:16:cd:36:1b:be:01:34:d7:42:20:93:ae:
         d1:c3:94:b9:93:88:5e:ff:61:97:e6:be:ea:53:19:89:5c:d5:
         f3:b3:fc:14:fb:d6:30:71:bf:32:54:6c:45:db:98:83:6c:54:
         b4:83:21:87:77:0d:a5:5c:3f:01:5d:f4:c0:6a:4a:51:82:be:
         40:22:1d:6f:ce:57:9b:39:4e:30:81:3f:c5:de:e9:f3:8c:0e:
         bc:1b:f8:a7:ee:13:e0:7f:7d:af:e8:b6:d0:a7:23:a5:da:99:
         e7:34:41:50:b5:6e:fc:bd:bb:46:7b:58:a0:5f:4d:6e:90:8a:
         af:ad:c8:38:44:b7:a8:9f:61:23:4c:a0:8d:7e:fb:25:f0:3b:
         bf:72:3c:d6:0f:e9:ae:99:a2:03:39:8b:0e:a4:b1:11:b4:e4:
         5d:cc:23:66:8a:ef:0f:1a:57:b2:f9:4a:a4:65:56:b6:2b:24:
         06:cf:92:63:70:e9:06:bf:db:64:98:5e:99:d0:f3:c1:2d:6c:
         d1:5d:e1:ce:30:b4:ca:ac:7d:14:95:3d:e1:45:3d:dc:0a:3b:
         f0:1b:17:ea:68:18:10:b9:24:fc:38:1e:77:62:0c:e1:31:a1:
         fb:e9:f2:48:db:2e:2a:12:e7:9a:16:75:1f:79:a1:26:4f:aa:
         4a:92:5b:97
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 23 20:55:02 2024 by rpki-client on console-ams.rpki-client.org