Certificate

$ rpki-client -vvf rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4klmeNb9TiLorA6f9s1YENb7eU0.cer
File:                     4klmeNb9TiLorA6f9s1YENb7eU0.cer (raw, json)
Hash identifier:          R3ysacK7/vGPd3M25NHEfj9Q1Ump4A/5/mYGUhNEebU=
Subject key identifier:   E2:49:66:78:D6:FD:4E:22:E8:AC:0E:9F:F6:CD:58:10:D6:FB:79:4D
Authority key identifier: 0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
Certificate issuer:       /CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Certificate serial:       01D923
Authority info access:    rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
Manifest:                 rsync://rpki.apnic.net/member_repository/A9177E33/A80ECE481D8611E2BE930ADE08B02CD2/4klmeNb9TiLorA6f9s1YENb7eU0.mft
caRepository:             rsync://rpki.apnic.net/member_repository/A9177E33/A80ECE481D8611E2BE930ADE08B02CD2/
Notify URL:               https://rrdp.apnic.net/notification.xml
Certificate not before:   Thu 18 Jan 2024 14:29:05 +0000
Certificate not after:    Thu 01 May 2025 00:00:00 +0000
Subordinate resources:    AS: 9264
                          AS: 18217

Validation:               OK
Signature path:           rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 01 May 2024 12:46:19 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 121123 (0x1d923)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
        Validity
            Not Before: Jan 18 14:29:05 2024 GMT
            Not After : May  1 00:00:00 2025 GMT
        Subject: CN=A9177E33/serialNumber=E2496678D6FD4E22E8AC0E9FF6CD5810D6FB794D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:fa:1b:5c:4d:c8:60:7a:10:7f:fc:5e:2a:55:
                    60:18:45:ec:e3:64:3c:6f:8a:76:60:65:ad:d0:18:
                    9e:f2:28:0a:fd:43:8f:c1:4c:42:40:a1:0a:c0:6d:
                    61:67:c5:db:0d:ce:62:b9:b0:4b:0b:7a:8a:c8:a4:
                    bc:d2:fc:41:de:f5:ca:9c:25:c8:91:ef:b9:94:30:
                    cb:4e:3b:62:9f:ca:6e:2d:61:26:09:83:5b:63:d7:
                    bf:f7:ee:a5:b9:50:f2:e3:ea:20:4a:30:34:87:58:
                    22:47:ab:90:56:53:04:70:90:28:61:2b:9e:3e:55:
                    42:a4:ce:c2:ea:b6:e3:cc:2e:09:4f:b6:2f:13:67:
                    7b:3a:6c:f5:bd:47:b6:6b:e7:bf:32:6f:c4:b0:d8:
                    40:1b:ac:dc:71:31:9f:2c:29:e4:ee:83:63:34:ca:
                    2f:cb:33:e9:f2:61:62:93:8b:83:85:1c:cc:17:48:
                    6a:a7:fc:f4:b9:e6:15:74:bd:8b:9d:87:5a:35:ef:
                    0c:c1:4b:99:91:10:94:c5:dc:3a:b8:c5:49:52:68:
                    b7:e0:63:87:bc:6c:77:21:2c:a0:87:0d:e2:ee:05:
                    cb:bb:27:07:f8:b7:91:64:7b:11:1f:b0:8d:86:67:
                    39:e0:5b:8c:f5:c9:a5:23:a7:c8:4e:49:cb:96:78:
                    23:e5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E2:49:66:78:D6:FD:4E:22:E8:AC:0E:9F:F6:CD:58:10:D6:FB:79:4D
            X509v3 Authority Key Identifier:
                keyid:0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                CA Repository - URI:rsync://rpki.apnic.net/member_repository/A9177E33/A80ECE481D8611E2BE930ADE08B02CD2/
                RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A9177E33/A80ECE481D8611E2BE930ADE08B02CD2/4klmeNb9TiLorA6f9s1YENb7eU0.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  9264
                  18217

    Signature Algorithm: sha256WithRSAEncryption
         04:13:d2:14:f0:ed:16:14:00:ca:a2:70:c6:92:a6:71:fe:0d:
         a1:2c:c4:0e:db:7d:97:91:e0:ed:db:f1:e2:ea:dc:c5:9f:7e:
         43:18:73:f5:ba:ce:2a:5b:1c:da:ec:a8:db:dd:a0:59:d1:10:
         7c:b4:37:b0:23:ff:ab:50:ff:c2:07:6f:7d:84:7a:5d:f9:31:
         82:f3:b5:df:e9:cb:8d:f9:12:ec:51:b5:8e:4d:34:eb:43:ee:
         dc:d6:4d:b4:7a:29:e5:4f:34:ca:be:3b:5f:1d:9a:fd:14:a7:
         4a:37:8d:be:f7:97:4f:e5:7c:cb:dd:58:6b:2d:01:9b:74:d4:
         80:2a:ac:23:21:e2:7c:ee:ae:0f:84:5b:d4:11:d1:f7:9c:a7:
         5a:e5:13:0f:5e:ad:13:d5:68:63:52:1b:68:f2:f5:06:dc:d2:
         3a:bd:7b:09:af:ae:2d:06:01:24:87:9e:39:cc:42:b7:b8:f1:
         8b:e6:2a:32:38:e3:fc:7f:0d:ae:e4:f5:31:1e:04:86:c1:0b:
         ea:25:93:37:b1:ab:fb:19:ad:22:6e:ef:c5:8e:43:ad:15:f6:
         44:b7:f6:31:f3:4e:9e:0f:ec:8d:f6:f3:2a:fb:39:ab:6c:ef:
         96:f0:6d:c9:3a:f9:ed:f4:38:56:19:72:63:3f:37:f3:53:59:
         f3:39:3a:52
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 24 13:24:03 2024 by rpki-client on console-ams.rpki-client.org