Certificate

$ rpki-client -vvf rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1zeXYY6FX6yWIhuDcZ1a3qR_mCk.cer
File:                     1zeXYY6FX6yWIhuDcZ1a3qR_mCk.cer (raw, json)
Hash identifier:          M0sXRgHCDp8Hfmy1dg0NtKEmSh7osR12xpHjo/92G/k=
Subject key identifier:   D7:37:97:61:8E:85:5F:AC:96:22:1B:83:71:9D:5A:DE:A4:7F:98:29
Authority key identifier: 0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
Certificate issuer:       /CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Certificate serial:       01A48A
Authority info access:    rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
Manifest:                 rsync://rpki.apnic.net/member_repository/A91D253A/E0EB8380BE1811ED9C216D64C4F9AE02/1zeXYY6FX6yWIhuDcZ1a3qR_mCk.mft
caRepository:             rsync://rpki.apnic.net/member_repository/A91D253A/E0EB8380BE1811ED9C216D64C4F9AE02/
Notify URL:               https://rrdp.apnic.net/notification.xml
Certificate not before:   Mon 22 May 2023 19:47:02 +0000
Certificate not after:    Tue 30 Jul 2024 00:00:00 +0000
Subordinate resources:    IP: 103.54.120.0/22

Validation:               OK
Signature path:           rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 05 Apr 2024 04:49:26 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 107658 (0x1a48a)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
        Validity
            Not Before: May 22 19:47:02 2023 GMT
            Not After : Jul 30 00:00:00 2024 GMT
        Subject: CN=A91D253A/serialNumber=D73797618E855FAC96221B83719D5ADEA47F9829
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:97:53:16:de:f5:c5:46:53:75:15:08:b7:83:
                    57:7d:86:dd:b7:4d:a9:bc:7c:80:80:8f:6a:c7:ce:
                    96:36:f2:15:cf:6c:2d:8b:04:b1:fd:9c:55:5c:c6:
                    7e:ea:bb:a5:df:c5:d5:b9:ac:c5:b2:10:d7:88:a3:
                    05:fb:05:24:d4:8b:32:4a:c8:83:34:13:00:b0:6b:
                    3e:39:0b:76:92:ee:5a:42:96:e7:3c:c8:43:3a:51:
                    20:dd:25:d7:c9:d4:5a:e0:2f:55:54:a2:07:11:85:
                    8d:da:b6:5e:09:90:58:f2:ee:5a:fd:ed:fd:36:a8:
                    d2:24:2a:01:eb:2c:2d:e0:f1:90:3d:00:20:8f:13:
                    f6:69:4c:66:95:c2:a8:da:fc:84:19:77:0e:1e:6e:
                    00:af:4c:45:28:c9:95:c9:7d:89:fe:c6:92:3a:f1:
                    b4:8c:9e:5b:fc:b0:82:2f:99:2a:2b:ca:51:3a:99:
                    ec:e6:13:2b:51:b2:0f:70:e0:2a:a1:2a:c2:03:e4:
                    8b:fd:d2:0e:24:86:26:8d:6d:85:05:54:4c:00:2e:
                    d9:be:a4:ed:4c:39:c0:e1:ae:27:39:71:08:ad:77:
                    f4:3a:e6:95:09:d6:6d:2a:03:66:fb:92:3d:ae:e8:
                    60:60:bb:74:87:72:85:3e:a4:f9:29:a2:d5:f6:5b:
                    e9:a5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D7:37:97:61:8E:85:5F:AC:96:22:1B:83:71:9D:5A:DE:A4:7F:98:29
            X509v3 Authority Key Identifier:
                keyid:0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                CA Repository - URI:rsync://rpki.apnic.net/member_repository/A91D253A/E0EB8380BE1811ED9C216D64C4F9AE02/
                RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A91D253A/E0EB8380BE1811ED9C216D64C4F9AE02/1zeXYY6FX6yWIhuDcZ1a3qR_mCk.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.54.120.0/22

    Signature Algorithm: sha256WithRSAEncryption
         8d:f1:0b:b4:13:ee:46:b7:1e:16:23:6b:b7:a9:60:25:dc:15:
         fb:32:70:35:b8:85:1d:6a:d6:cc:24:07:db:0e:4b:04:2b:2d:
         07:7c:7d:ff:98:fc:28:08:0e:55:10:ab:6f:cb:30:5d:c4:5a:
         21:87:46:b9:ce:69:d9:4c:7e:e3:a3:ad:12:b9:e8:42:28:1a:
         13:c0:99:a9:cb:20:f2:91:94:c9:42:bc:60:ef:7e:2e:0a:03:
         ab:a7:77:47:3c:49:83:39:fe:91:2c:10:0f:ef:45:1d:75:d8:
         c2:4d:b9:b4:a4:9c:50:78:fa:73:29:46:49:8a:18:b3:d2:bc:
         20:e2:8c:30:d6:d5:6a:4a:6a:6f:2f:e6:6e:ce:d2:c2:ea:2a:
         85:9d:33:f1:4b:03:0b:28:16:e1:e2:b2:f2:45:9b:01:73:2e:
         13:e5:f1:0e:c3:99:b0:78:a8:e2:d8:92:e0:d9:6d:eb:50:78:
         4f:14:51:34:57:7e:7b:cc:68:0e:f9:ff:50:47:d0:b0:93:14:
         80:12:bb:02:cd:54:f6:b8:75:91:22:10:96:5c:d8:33:7a:74:
         74:e5:29:5d:27:64:15:d9:aa:f7:9b:c5:e4:39:08:9c:95:fa:
         97:54:28:4a:71:61:26:76:ea:59:40:91:ac:1f:80:99:0c:a8:
         6e:01:65:36
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 29 05:46:47 2024 by rpki-client on console-ams.rpki-client.org