Certificate

$ rpki-client -vvf rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/07sK_xlZ4CkmxzdUiny-QQ25CWs.cer
File:                     07sK_xlZ4CkmxzdUiny-QQ25CWs.cer (raw, json)
Hash identifier:          /mRFWbCs01NihDWjYk/8WpN4MpXim90tQtJ+yj5/2cI=
Subject key identifier:   D3:BB:0A:FF:19:59:E0:29:26:C7:37:54:8A:7C:BE:41:0D:B9:09:6B
Authority key identifier: 0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
Certificate issuer:       /CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Certificate serial:       01DA77
Authority info access:    rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
Manifest:                 rsync://rpki.apnic.net/member_repository/A9155A79/1B5C1F40B0F211ED8DCBEB82C4F9AE02/07sK_xlZ4CkmxzdUiny-QQ25CWs.mft
caRepository:             rsync://rpki.apnic.net/member_repository/A9155A79/1B5C1F40B0F211ED8DCBEB82C4F9AE02/
Notify URL:               https://rrdp.apnic.net/notification.xml
Certificate not before:   Thu 25 Jan 2024 14:57:35 +0000
Certificate not after:    Mon 31 Mar 2025 00:00:00 +0000
Subordinate resources:    AS: 137218
                          IP: 103.56.2.0/23
                          IP: 2400:cd20::/32

Validation:               OK
Signature path:           rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 29 Nov 2024 20:43:15 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 121463 (0x1da77)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
        Validity
            Not Before: Jan 25 14:57:35 2024 GMT
            Not After : Mar 31 00:00:00 2025 GMT
        Subject: CN=A9155A79/serialNumber=D3BB0AFF1959E02926C737548A7CBE410DB9096B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:df:62:bf:62:15:d0:eb:6b:76:69:12:10:eb:f2:
                    13:c3:66:68:0a:3a:18:ac:ba:5f:f6:4c:d3:92:5f:
                    13:6f:28:97:f6:c2:3b:67:2b:43:45:ef:29:79:a6:
                    f0:a0:63:f9:4e:79:a3:32:71:91:c8:54:0d:a9:af:
                    25:9e:53:69:4e:9b:31:51:e2:74:8b:bb:79:21:55:
                    f5:42:60:c2:69:1c:c6:f6:ea:c8:6e:1e:de:96:79:
                    f4:bf:ab:72:a4:46:1c:f1:3c:21:78:c2:0b:31:70:
                    8b:14:77:62:6c:a2:42:44:34:1c:57:92:51:84:c1:
                    eb:db:52:e4:1e:99:82:78:1d:85:58:cf:da:f3:3d:
                    8f:1b:8a:36:4f:c2:39:24:6b:fa:7c:f8:89:f5:24:
                    bf:58:33:19:e2:14:77:1e:99:ca:47:94:c8:39:8d:
                    2f:34:5e:51:f8:4f:8f:77:f5:20:e3:97:21:51:71:
                    f8:27:c7:60:23:0c:6e:fa:bd:c2:7c:d3:b3:3e:8f:
                    0d:89:58:21:84:a6:d4:ca:28:db:ca:99:6d:64:92:
                    5c:7d:73:4e:24:e3:f3:9e:4c:4a:5c:ca:72:11:65:
                    71:97:31:ef:ed:17:24:42:1f:cc:f7:ae:d5:93:ed:
                    d7:51:22:90:25:dc:c0:be:eb:ba:67:64:6e:51:d4:
                    0e:b3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D3:BB:0A:FF:19:59:E0:29:26:C7:37:54:8A:7C:BE:41:0D:B9:09:6B
            X509v3 Authority Key Identifier:
                keyid:0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                CA Repository - URI:rsync://rpki.apnic.net/member_repository/A9155A79/1B5C1F40B0F211ED8DCBEB82C4F9AE02/
                RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A9155A79/1B5C1F40B0F211ED8DCBEB82C4F9AE02/07sK_xlZ4CkmxzdUiny-QQ25CWs.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  137218

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.56.2.0/23
                IPv6:
                  2400:cd20::/32

    Signature Algorithm: sha256WithRSAEncryption
         4f:30:0c:23:61:21:9e:82:96:91:2c:cf:81:15:89:f1:9c:dd:
         bc:09:fb:29:25:16:25:5f:b4:5f:51:fe:4a:ce:2b:91:e4:ba:
         34:af:25:ad:0d:03:df:bd:88:04:7b:22:3a:18:2d:b7:fc:dc:
         01:b7:21:d6:19:49:a7:a1:c1:ba:61:76:3a:29:41:54:48:75:
         52:65:93:73:f7:19:25:05:6f:6c:61:c4:86:1d:73:49:94:97:
         06:9e:a7:29:e3:1b:09:1c:dc:7c:6e:6c:88:0d:d3:6b:08:1f:
         7e:a0:2f:7d:e3:cb:85:69:6a:28:1d:1e:22:d1:5a:cf:38:03:
         68:68:02:5f:eb:6c:4e:8c:93:74:7f:02:49:0d:64:55:ae:ea:
         76:2d:c6:0c:2c:2a:e4:e4:86:ac:e8:64:22:93:fc:83:c4:cb:
         8b:d1:2e:55:de:a5:2e:63:11:12:63:1a:86:a3:06:bf:23:3b:
         76:d8:23:08:6e:8a:8d:e8:25:6b:d9:c1:62:00:6e:51:a4:6e:
         8d:07:48:af:b6:cb:9d:80:57:25:36:79:48:81:a8:e5:26:93:
         ef:88:41:d5:8f:dc:dc:de:f5:b0:33:9f:12:67:63:93:f6:0a:
         b0:dc:37:3a:1e:ba:d4:7c:fa:96:41:da:3f:3a:e1:c1:30:2e:
         93:9c:80:eb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----