Certificate

$ rpki-client -vvf rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3QKn6NfJdXxle9pq2dV_BYgf-lc.cer
File:                     3QKn6NfJdXxle9pq2dV_BYgf-lc.cer (raw, json)
Hash identifier:          Jx0/9ANY3HsOsc6jhrtqRlpy0tK3IkBvBu+dEYmsa5g=
Subject key identifier:   DD:02:A7:E8:D7:C9:75:7C:65:7B:DA:6A:D9:D5:7F:05:88:1F:FA:57
Authority key identifier: 0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
Certificate issuer:       /CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Certificate serial:       01DC73
Authority info access:    rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
Manifest:                 rsync://rpki.apnic.net/member_repository/A91754CB/53BE4DBEFDD111ED98733067C4F9AE02/3QKn6NfJdXxle9pq2dV_BYgf-lc.mft
caRepository:             rsync://rpki.apnic.net/member_repository/A91754CB/53BE4DBEFDD111ED98733067C4F9AE02/
Notify URL:               https://rrdp.apnic.net/notification.xml
Certificate not before:   Thu 01 Feb 2024 06:30:24 +0000
Certificate not after:    Mon 01 Jul 2024 00:00:00 +0000
Subordinate resources:    AS: 135159
                          IP: 2406:9280::/32

Validation:               OK
Signature path:           rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 05 Apr 2024 12:49:35 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 121971 (0x1dc73)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
        Validity
            Not Before: Feb  1 06:30:24 2024 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=A91754CB/serialNumber=DD02A7E8D7C9757C657BDA6AD9D57F05881FFA57
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:d4:02:9a:3f:f4:6a:38:14:62:46:f7:89:ef:
                    e0:80:e1:ed:28:7a:b6:00:df:ab:f6:3c:2e:08:cc:
                    3c:f9:e8:29:a8:ae:aa:31:a0:be:32:42:8f:c2:25:
                    3e:63:fd:bd:5b:57:e2:8b:48:a7:e0:5e:34:7d:ff:
                    29:85:e6:22:e8:92:6e:ae:9c:55:41:9b:b4:85:0f:
                    92:54:e8:2d:5d:21:43:9d:25:82:e1:36:8b:12:c4:
                    28:53:12:b8:dc:e7:72:7e:01:68:84:ef:2f:cf:6d:
                    05:12:f2:46:50:d2:f0:74:f8:87:ef:2a:a2:e7:f5:
                    49:f7:ea:b3:9e:40:dd:ad:f7:30:82:53:fa:9f:c4:
                    cc:93:69:98:3c:fc:88:5a:f1:bf:aa:91:59:c5:e4:
                    2b:6b:9e:cc:a1:f6:67:e4:3e:9d:4c:53:7b:91:fc:
                    24:41:43:fc:c9:6a:64:a8:f0:fa:88:cc:a6:bf:f9:
                    50:19:df:eb:db:0a:7a:54:86:42:3c:92:aa:df:67:
                    62:40:b2:03:92:f3:48:90:b8:b9:0d:e3:86:3e:1f:
                    82:d2:30:bd:94:06:01:2e:47:3b:fc:ed:3e:6b:36:
                    5a:49:7f:4c:f1:88:3b:50:49:60:08:b4:de:31:60:
                    0f:cf:1d:7c:bb:65:2b:58:1c:1b:d0:a6:0c:13:a3:
                    04:b1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DD:02:A7:E8:D7:C9:75:7C:65:7B:DA:6A:D9:D5:7F:05:88:1F:FA:57
            X509v3 Authority Key Identifier:
                keyid:0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                CA Repository - URI:rsync://rpki.apnic.net/member_repository/A91754CB/53BE4DBEFDD111ED98733067C4F9AE02/
                RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A91754CB/53BE4DBEFDD111ED98733067C4F9AE02/3QKn6NfJdXxle9pq2dV_BYgf-lc.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  135159

            sbgp-ipAddrBlock: critical
                IPv6:
                  2406:9280::/32

    Signature Algorithm: sha256WithRSAEncryption
         c6:80:1f:bc:ff:1d:8b:01:25:90:c6:e7:8f:62:77:78:9a:06:
         0f:44:0d:90:84:60:97:d5:8c:6f:0e:32:2c:ea:eb:08:01:a3:
         b7:47:89:73:ae:fe:0e:b2:3d:7e:27:c0:b6:19:e8:1a:75:f4:
         a0:b6:fe:17:b1:dc:41:60:75:a7:1f:c4:e9:00:29:f7:9d:5c:
         82:79:90:53:65:95:04:83:b6:90:99:71:c2:58:e4:f3:70:e9:
         a7:8e:d2:c1:d3:bf:c2:c4:26:77:ba:ed:66:79:d4:ea:b8:7d:
         8a:fa:98:1b:f0:10:d1:d0:d2:cf:0e:9b:bd:58:36:34:e9:7c:
         1f:e2:3b:3b:a8:a9:b8:bf:ca:58:72:a7:ab:c0:ae:82:bd:df:
         d3:00:14:e9:4f:97:b6:00:34:3e:c9:01:69:72:2e:d5:af:de:
         ab:b0:e8:dc:9f:a1:69:a3:b5:a6:14:9a:aa:b0:62:28:f2:f5:
         79:e5:a1:57:ec:15:1e:1e:16:f6:e8:d5:1c:1b:cd:a6:53:56:
         df:cf:eb:b0:51:f5:4c:83:92:b9:f2:b8:b8:15:b4:2f:73:3e:
         b1:a9:53:91:c9:c0:91:1b:30:99:72:8a:51:72:c0:7a:97:d7:
         c4:d9:5f:48:f1:4c:eb:46:ad:06:45:5f:68:c9:30:20:75:53:
         a9:01:90:ac
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 29 13:44:47 2024 by rpki-client on console-ams.rpki-client.org