Certificate

$ rpki-client -vvf rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2r-ztZ99cW_VLUWnQa8Vmvfq97o.cer
File:                     2r-ztZ99cW_VLUWnQa8Vmvfq97o.cer (raw, json)
Hash identifier:          qyERjLrjDKbcsOajUDbI9OaHtU4JdXGBy+iUMKpi/zo=
Subject key identifier:   DA:BF:B3:B5:9F:7D:71:6F:D5:2D:45:A7:41:AF:15:9A:F7:EA:F7:BA
Authority key identifier: 0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
Certificate issuer:       /CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Certificate serial:       01D1CB
Authority info access:    rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
Manifest:                 rsync://rpki.apnic.net/member_repository/A91AEAE7/E182579690F311EB9D2E0E4FC4F9AE02/2r-ztZ99cW_VLUWnQa8Vmvfq97o.mft
caRepository:             rsync://rpki.apnic.net/member_repository/A91AEAE7/E182579690F311EB9D2E0E4FC4F9AE02/
Notify URL:               https://rrdp.apnic.net/notification.xml
Certificate not before:   Wed 13 Dec 2023 18:10:56 +0000
Certificate not after:    Sun 02 Mar 2025 00:00:00 +0000
Subordinate resources:    IP: 103.95.77.0 -- 103.95.79.255
                          IP: 202.176.15.0/24

Validation:               OK
Signature path:           rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 05 Apr 2024 14:50:26 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 119243 (0x1d1cb)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
        Validity
            Not Before: Dec 13 18:10:56 2023 GMT
            Not After : Mar  2 00:00:00 2025 GMT
        Subject: CN=A91AEAE7/serialNumber=DABFB3B59F7D716FD52D45A741AF159AF7EAF7BA
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:a3:ec:71:97:3b:70:a6:04:8f:a7:7b:cd:f2:
                    15:f1:15:92:c7:1d:08:13:89:71:b3:51:7d:77:cc:
                    66:7e:2f:4a:b2:8c:63:97:83:63:43:0c:98:5e:79:
                    13:f9:b0:27:61:9e:8c:a9:5a:37:17:5b:c5:ed:25:
                    8a:3b:30:32:42:c0:a1:73:4e:35:f5:f6:e3:60:5c:
                    23:4d:71:db:2c:4d:43:66:41:5c:58:f1:b7:8a:a4:
                    7e:16:a9:07:b9:99:bc:eb:a2:bf:02:b6:ff:41:18:
                    1d:a4:9f:bf:89:5d:1e:13:4f:e8:8f:a9:a2:af:9f:
                    a3:1d:a8:30:ab:b0:ad:ce:83:fe:a3:2e:c5:35:c9:
                    89:0f:38:3e:65:b8:fa:b8:73:a0:cc:12:c2:0f:6c:
                    d1:75:c3:e2:40:e3:54:f5:22:5e:00:75:1f:fc:bc:
                    46:5f:9c:e7:c0:ae:85:ba:85:b3:da:da:10:e9:c1:
                    a7:ff:f6:9f:fc:43:75:07:51:53:bd:65:d6:70:67:
                    38:34:10:14:4a:61:27:b1:da:3c:b9:a4:b4:c9:f2:
                    f3:00:7a:b2:9e:f8:fe:b3:a1:21:24:42:1f:6c:5a:
                    89:54:d1:d1:47:3b:45:d4:e2:5e:6e:a3:9f:d4:fe:
                    df:6c:02:74:c7:74:02:52:d8:87:6e:58:3e:08:3c:
                    3b:a1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DA:BF:B3:B5:9F:7D:71:6F:D5:2D:45:A7:41:AF:15:9A:F7:EA:F7:BA
            X509v3 Authority Key Identifier:
                keyid:0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                CA Repository - URI:rsync://rpki.apnic.net/member_repository/A91AEAE7/E182579690F311EB9D2E0E4FC4F9AE02/
                RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A91AEAE7/E182579690F311EB9D2E0E4FC4F9AE02/2r-ztZ99cW_VLUWnQa8Vmvfq97o.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.95.77.0-103.95.79.255
                  202.176.15.0/24

    Signature Algorithm: sha256WithRSAEncryption
         49:d7:dd:37:ff:6e:cf:ff:05:3b:d5:18:01:ea:a4:77:53:37:
         0f:5c:e8:58:f4:b1:ad:d1:b4:fb:fc:e2:d0:84:db:00:6e:79:
         4e:bf:d4:68:4f:01:46:00:98:93:d5:ea:de:99:6c:56:07:a7:
         31:3e:5a:93:dc:2c:ff:7a:26:ec:0b:2f:82:9c:6d:b0:41:7a:
         1c:9c:c4:85:86:18:5f:20:a5:ee:c1:d6:d0:62:d7:bb:ec:79:
         39:00:ab:f3:a4:f9:b0:a1:b3:98:84:ad:4d:4a:f4:24:3c:20:
         a6:d2:51:b3:09:70:44:69:df:05:9e:78:73:60:d3:b6:b8:49:
         7b:aa:d7:14:32:59:60:c5:1c:b9:e1:bc:4b:4d:9c:ef:2a:7d:
         02:77:44:11:4f:88:e7:be:38:3f:dc:df:53:49:c6:3e:16:02:
         fa:2d:81:5b:43:bf:f8:b4:b5:5e:f5:4e:82:7c:27:f0:bb:f7:
         cf:4c:d6:8b:c2:20:f8:50:25:b4:10:cb:6c:15:88:22:9a:b5:
         bb:e5:83:ca:df:2d:43:8b:0f:2f:d7:e6:06:19:6e:aa:37:4c:
         19:cd:40:20:5f:ec:11:c5:58:51:db:87:c5:f8:72:f0:e7:05:
         38:0e:fe:0f:ca:c5:ef:5d:37:42:ac:4e:13:43:67:52:47:d9:
         68:b2:df:2d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 29 15:35:22 2024 by rpki-client on console-fra.rpki-client.org