Certificate

$ rpki-client -vvf rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2DPFFS4_LSebiQT4PQDdkKymK9U.cer
File:                     2DPFFS4_LSebiQT4PQDdkKymK9U.cer (raw, json)
Hash identifier:          6cA9vBa/EMfUJd32wzzUB8DR3SuZvSluzvIkMajjbPs=
Subject key identifier:   D8:33:C5:15:2E:3F:2D:27:9B:89:04:F8:3D:00:DD:90:AC:A6:2B:D5
Authority key identifier: 0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
Certificate issuer:       /CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Certificate serial:       01F9EF
Authority info access:    rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
Manifest:                 rsync://rpki.apnic.net/member_repository/A9186D9F/B290A3462E0411EF86F29D79C4F9AE02/2DPFFS4_LSebiQT4PQDdkKymK9U.mft
caRepository:             rsync://rpki.apnic.net/member_repository/A9186D9F/B290A3462E0411EF86F29D79C4F9AE02/
Notify URL:               https://rrdp.apnic.net/notification.xml
Certificate not before:   Wed 19 Jun 2024 06:25:23 +0000
Certificate not after:    Sun 31 Aug 2025 00:00:00 +0000
Subordinate resources:    AS: 152893

Validation:               OK
Signature path:           rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 14 Sep 2024 20:15:08 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 129519 (0x1f9ef)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
        Validity
            Not Before: Jun 19 06:25:23 2024 GMT
            Not After : Aug 31 00:00:00 2025 GMT
        Subject: CN=A9186D9F/serialNumber=D833C5152E3F2D279B8904F83D00DD90ACA62BD5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:19:51:7f:3b:f8:e3:30:f9:5f:c7:d9:c0:c4:
                    33:b0:e8:36:56:df:5a:81:ed:ad:8c:50:05:96:a8:
                    ae:41:85:09:e2:d4:6c:5b:97:52:5e:e9:88:d9:5d:
                    1b:5c:b5:c4:fa:93:9b:85:a5:91:68:35:db:65:6a:
                    60:a1:00:93:a2:28:b3:3e:1f:ae:52:9d:e2:21:7e:
                    2e:b0:68:ce:47:47:24:af:43:74:cc:ee:40:8a:15:
                    7c:b1:2c:ab:f2:98:4b:b5:3f:69:85:84:c5:c6:f4:
                    e4:34:48:8e:31:00:30:a3:48:aa:21:1a:5d:4e:a7:
                    5b:15:b7:63:db:eb:a9:d5:7e:5d:10:c6:9b:ad:00:
                    26:99:03:9a:d7:89:c4:45:42:cf:75:02:d5:ef:59:
                    b5:d9:71:0a:5b:7d:97:b6:05:a3:9e:21:cc:0f:bc:
                    e7:89:8b:af:d5:16:a7:ee:d0:a0:36:db:2c:1a:03:
                    cf:08:5e:3b:46:0c:47:89:03:d5:3e:f1:67:59:1c:
                    66:a5:7f:26:8e:65:56:d2:d8:17:56:ec:16:eb:c0:
                    14:e0:77:ee:de:da:65:b7:99:24:8d:1f:eb:b3:69:
                    1e:89:97:89:91:f4:07:50:5f:b1:83:f6:e0:7b:ff:
                    83:df:e7:35:27:53:76:e8:a4:b5:49:b9:c9:c2:fa:
                    d9:fb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D8:33:C5:15:2E:3F:2D:27:9B:89:04:F8:3D:00:DD:90:AC:A6:2B:D5
            X509v3 Authority Key Identifier:
                keyid:0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                CA Repository - URI:rsync://rpki.apnic.net/member_repository/A9186D9F/B290A3462E0411EF86F29D79C4F9AE02/
                RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A9186D9F/B290A3462E0411EF86F29D79C4F9AE02/2DPFFS4_LSebiQT4PQDdkKymK9U.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  152893

    Signature Algorithm: sha256WithRSAEncryption
         1a:ed:0d:82:c4:75:e3:6d:f2:6e:08:6e:ad:4d:fd:cb:83:3f:
         f4:d8:3d:d2:03:f6:65:ca:f5:4d:9e:63:2d:5c:b2:8a:40:75:
         c6:f0:a3:0a:5d:67:2f:a0:d6:d8:db:58:f1:a9:50:8f:cd:58:
         5c:30:a3:e5:2e:3b:19:25:76:58:2c:29:ba:0a:28:21:c8:b9:
         7d:5e:8a:bd:1f:4d:63:20:f7:f5:92:eb:1a:46:2c:32:28:a7:
         92:30:1b:98:cb:9c:67:01:1e:a0:50:dd:b5:51:f5:b4:81:5a:
         46:2e:5b:db:2a:77:71:25:b8:97:42:1f:61:70:f4:56:b9:dd:
         47:df:42:c4:82:b6:d8:c9:ff:1c:64:51:90:83:4b:5e:29:49:
         05:61:7b:5f:a5:c4:1a:50:33:67:d2:09:9e:bb:1e:f8:d3:e6:
         40:bf:f2:a9:8a:2c:3e:6e:ca:79:93:cc:56:fc:cd:4a:b9:d1:
         4c:80:9f:bb:7d:2e:8c:3b:56:7f:2d:98:d4:6e:e5:91:18:4d:
         18:79:ca:44:7c:b2:75:cc:02:67:90:91:1b:f7:6c:8c:b1:c0:
         01:92:ac:81:2c:38:1e:08:12:30:cf:f3:c6:76:00:8e:13:8e:
         e3:a1:3c:54:a3:db:01:bc:ff:94:9c:59:6d:a3:46:1e:f9:b2:
         28:c8:73:3d
-----BEGIN CERTIFICATE-----
MIIF+TCCBOGgAwIBAgIDAfnvMA0GCSqGSIb3DQEBCwUAMEYxETAPBgNVBAMTCEE5
MERDNUJFMTEwLwYDVQQFEygwRTY1QTRGNUZEMzZCNUJENjhFQjNDOTIzNDA4OTc4
QzkwN0FBNzlGMB4XDTI0MDYxOTA2MjUyM1oXDTI1MDgzMTAwMDAwMFowRjERMA8G
A1UEAxMIQTkxODZEOUYxMTAvBgNVBAUTKEQ4MzNDNTE1MkUzRjJEMjc5Qjg5MDRG
ODNEMDBERDkwQUNBNjJCRDUwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB
AQC1GVF/O/jjMPlfx9nAxDOw6DZW31qB7a2MUAWWqK5BhQni1Gxbl1Je6YjZXRtc
tcT6k5uFpZFoNdtlamChAJOiKLM+H65SneIhfi6waM5HRySvQ3TM7kCKFXyxLKvy
mEu1P2mFhMXG9OQ0SI4xADCjSKohGl1Op1sVt2Pb66nVfl0QxputACaZA5rXicRF
Qs91AtXvWbXZcQpbfZe2BaOeIcwPvOeJi6/VFqfu0KA22ywaA88IXjtGDEeJA9U+
8WdZHGalfyaOZVbS2BdW7BbrwBTgd+7e2mW3mSSNH+uzaR6Jl4mR9AdQX7GD9uB7
/4Pf5zUnU3bopLVJucnC+tn7AgMBAAGjggLuMIIC6jAdBgNVHQ4EFgQU2DPFFS4/
LSebiQT4PQDdkKymK9UwHwYDVR0jBBgwFoAUDmWk9f02tb1o6zySNAiXjJB6p58w
DgYDVR0PAQH/BAQDAgEGMA8GA1UdEwEB/wQFMAMBAf8wcwYDVR0fBGwwajBooGag
ZIZicnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2
NjExRTJCQjQ2OEY3QzcyRkQxRkYyL0RtV2s5ZjAydGIxbzZ6eVNOQWlYakpCNnA1
OC5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L3JlcG9zaXRvcnkvOTgwNjUyRTBCNzdFMTFFN0E5NkEzOTUyMUE0
RjRGQjQvRG1XazlmMDJ0YjFvNnp5U05BaVhqSkI2cDU4LmNlcjBKBgNVHSABAf8E
QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj
Lm5ldC9SUEtJL0NQUy5wZGYwggEoBggrBgEFBQcBCwSCARowggEWMF8GCCsGAQUF
BzAFhlNyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5
MTg2RDlGL0IyOTBBMzQ2MkUwNDExRUY4NkYyOUQ3OUM0RjlBRTAyLzB+BggrBgEF
BQcwCoZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9B
OTE4NkQ5Ri9CMjkwQTM0NjJFMDQxMUVGODZGMjlENzlDNEY5QUUwMi8yRFBGRlM0
X0xTZWJpUVQ0UFFEZGtLeW1LOVUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3Jy
ZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwGgYIKwYBBQUHAQgBAf8ECzAJ
oAcwBQIDAlU9MA0GCSqGSIb3DQEBCwUAA4IBAQAa7Q2CxHXjbfJuCG6tTf3Lgz/0
2D3SA/ZlyvVNnmMtXLKKQHXG8KMKXWcvoNbY21jxqVCPzVhcMKPlLjsZJXZYLCm6
CighyLl9Xoq9H01jIPf1kusaRiwyKKeSMBuYy5xnAR6gUN21UfW0gVpGLlvbKndx
JbiXQh9hcPRWud1H30LEgrbYyf8cZFGQg0teKUkFYXtfpcQaUDNn0gmeux740+ZA
v/Kpiiw+bsp5k8xW/M1KudFMgJ+7fS6MO1Z/LZjUbuWRGE0YecpEfLJ1zAJnkJEb
92yMscABkqyBLDgeCBIwz/PGdgCOE47joTxUo9sBvP+UnFlto0Ye+bIoyHM9
-----END CERTIFICATE-----
Generated at Sat Sep 7 22:41:18 2024 by rpki-client on console-ams.rpki-client.org