Certificate

$ rpki-client -vvf rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1h3BeAj1jg-ZsoUs50hg-FPLINs.cer
File:                     1h3BeAj1jg-ZsoUs50hg-FPLINs.cer (raw, json)
Hash identifier:          /xpdpYGJDugW+kz52dIhMnFkChQgh8z8GLJH/u9E+XQ=
Subject key identifier:   D6:1D:C1:78:08:F5:8E:0F:99:B2:85:2C:E7:48:60:F8:53:CB:20:DB
Authority key identifier: 0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
Certificate issuer:       /CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Certificate serial:       0215F1
Authority info access:    rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
Manifest:                 rsync://rpki.apnic.net/member_repository/A916FD2B/3F86D79AA83511EDA776AB30C4F9AE02/1h3BeAj1jg-ZsoUs50hg-FPLINs.mft
caRepository:             rsync://rpki.apnic.net/member_repository/A916FD2B/3F86D79AA83511EDA776AB30C4F9AE02/
Notify URL:               https://rrdp.apnic.net/notification.xml
Certificate not before:   Thu 24 Oct 2024 16:54:50 +0000
Certificate not after:    Tue 30 Dec 2025 00:00:00 +0000
Subordinate resources:    AS: 150310
                          IP: 103.250.220.0/23
                          IP: 2001:df1:45c0::/48

Validation:               OK
Signature path:           rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 30 Nov 2024 02:50:13 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 136689 (0x215f1)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
        Validity
            Not Before: Oct 24 16:54:50 2024 GMT
            Not After : Dec 30 00:00:00 2025 GMT
        Subject: CN=A916FD2B/serialNumber=D61DC17808F58E0F99B2852CE74860F853CB20DB
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:99:a0:f4:6f:43:41:cd:49:fb:7b:c3:d4:52:42:
                    f6:70:43:15:f1:e0:b3:83:1f:36:a1:ad:27:c3:9e:
                    43:a1:07:ef:4d:7c:6b:79:db:72:66:1f:7d:90:67:
                    83:5d:f4:90:29:d3:37:cf:e0:be:f8:38:22:e3:00:
                    0e:5b:41:c8:db:32:99:2b:97:08:90:be:9e:80:13:
                    dd:1e:b9:41:1a:bc:5b:8a:76:57:61:71:44:d7:ec:
                    94:48:24:d9:65:09:ac:fc:5b:e2:5a:b5:af:35:ca:
                    81:f9:09:d2:ca:59:6c:6e:8c:38:67:46:59:ab:77:
                    60:d3:3c:d7:71:5e:ea:2a:1b:0e:75:70:b9:92:85:
                    50:94:c3:53:41:1b:bc:38:10:57:33:dd:07:34:fe:
                    d6:3d:7e:99:fd:56:73:f9:c6:14:66:fb:e4:58:53:
                    30:f2:fc:22:9f:bd:10:13:f7:ce:9a:26:c3:70:54:
                    59:96:38:2e:8b:7e:e4:ac:7e:2d:dc:e5:44:4e:1b:
                    1f:18:99:e3:0b:bd:b0:2d:ec:c6:08:52:45:1f:73:
                    d0:d7:8b:b4:2d:6b:27:27:e7:22:2b:4c:ed:83:3c:
                    f7:67:7c:0b:b6:4f:90:d0:50:c6:53:ec:c2:55:4d:
                    40:b6:64:c6:26:99:29:e6:d3:05:02:ff:42:a1:74:
                    88:4f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D6:1D:C1:78:08:F5:8E:0F:99:B2:85:2C:E7:48:60:F8:53:CB:20:DB
            X509v3 Authority Key Identifier:
                keyid:0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                CA Repository - URI:rsync://rpki.apnic.net/member_repository/A916FD2B/3F86D79AA83511EDA776AB30C4F9AE02/
                RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A916FD2B/3F86D79AA83511EDA776AB30C4F9AE02/1h3BeAj1jg-ZsoUs50hg-FPLINs.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  150310

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.250.220.0/23
                IPv6:
                  2001:df1:45c0::/48

    Signature Algorithm: sha256WithRSAEncryption
         4d:06:33:e7:f6:5f:12:7b:4c:cb:79:2f:72:cd:f0:53:41:7e:
         be:5b:c5:b6:cf:c4:f7:a4:e5:8c:e6:6f:7c:12:d5:6f:5c:6e:
         46:da:60:aa:18:c0:88:19:9a:60:2a:35:b7:b7:49:36:49:4a:
         98:f0:96:e7:6a:b5:65:65:55:f5:0f:4f:f7:93:ba:da:d9:34:
         b9:c7:1c:e6:bc:d8:a3:f5:79:b6:fe:97:45:79:ee:d8:36:64:
         b3:32:93:6d:ac:35:21:03:a7:7b:a7:12:bc:b0:13:b4:54:a5:
         bb:87:48:14:b0:d6:c5:52:6a:9c:b8:ac:cf:28:48:8f:09:c7:
         d9:86:57:56:c9:e7:c9:7e:ba:63:8a:76:86:13:f5:df:75:98:
         25:dc:fc:2e:4c:7d:a4:d5:a3:a1:2f:cc:fc:cb:13:0c:24:19:
         39:a5:90:fc:c8:63:ef:aa:ae:03:ad:c0:52:d1:0a:c0:ed:b1:
         f3:a4:0a:57:c4:46:54:ae:01:e7:fb:0d:1a:e2:d7:2f:45:88:
         cf:ed:c0:5c:0b:83:3f:73:15:ce:24:f6:42:d0:31:08:c5:c4:
         76:5a:9d:c5:10:07:52:c9:50:11:cb:d7:c1:18:02:e9:57:9c:
         be:1e:c1:59:2a:cb:fa:04:68:b3:13:50:46:f6:48:48:ad:f3:
         bf:12:6f:53
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----