Certificate

$ rpki-client -vvf rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5qVLrX0XbkRHqelPJEgDJ8G0DJ4.cer
File:                     5qVLrX0XbkRHqelPJEgDJ8G0DJ4.cer (raw, json)
Hash identifier:          aNeW6Ve9tdtGiLkvf7A9dUF5uDHgksvhm6q5h7KN8Q8=
Subject key identifier:   E6:A5:4B:AD:7D:17:6E:44:47:A9:E9:4F:24:48:03:27:C1:B4:0C:9E
Authority key identifier: 0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
Certificate issuer:       /CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Certificate serial:       01C43A
Authority info access:    rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
Manifest:                 rsync://rpki.apnic.net/member_repository/A91293F4/1F695EEC8E7F11EAA9584C67C4F9AE02/5qVLrX0XbkRHqelPJEgDJ8G0DJ4.mft
caRepository:             rsync://rpki.apnic.net/member_repository/A91293F4/1F695EEC8E7F11EAA9584C67C4F9AE02/
Notify URL:               https://rrdp.apnic.net/notification.xml
Certificate not before:   Mon 16 Oct 2023 13:21:48 +0000
Certificate not after:    Sun 01 Dec 2024 00:00:00 +0000
Subordinate resources:    AS: 45355
                          IP: 45.117.244.0/22
                          IP: 103.1.180.0/22
                          IP: 202.129.228.0/22
                          IP: 2400:6d00::/32

Validation:               OK
Signature path:           rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 01 May 2024 09:10:59 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 115770 (0x1c43a)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
        Validity
            Not Before: Oct 16 13:21:48 2023 GMT
            Not After : Dec  1 00:00:00 2024 GMT
        Subject: CN=A91293F4/serialNumber=E6A54BAD7D176E4447A9E94F24480327C1B40C9E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:57:5a:9d:ef:e2:b5:86:eb:fb:6f:74:39:f8:
                    c6:3d:82:ef:a3:7c:8e:eb:cf:ac:3b:1d:19:1d:ab:
                    2d:04:71:aa:9a:13:1f:b2:49:f8:a2:18:b1:f1:95:
                    fd:36:63:eb:38:35:7e:21:2b:6b:b0:9b:68:be:7c:
                    ef:e4:73:df:19:8e:85:5a:46:32:62:1d:ae:f5:b0:
                    3d:36:a5:bd:7e:3d:b4:6d:d4:a3:0d:48:56:3d:9c:
                    43:b2:be:f8:c1:0e:73:af:3e:5e:30:b3:58:0f:e9:
                    5f:3a:b8:3d:b9:b4:8f:aa:48:91:9e:f2:14:01:9e:
                    e0:04:34:25:0f:ef:43:83:88:b4:e7:8c:65:fa:0f:
                    ae:67:d3:4a:ed:b6:d3:81:fb:b9:ba:f9:74:73:ce:
                    8c:10:a9:ea:6f:f0:6b:21:55:48:fb:45:b0:72:52:
                    58:25:27:37:e4:f4:f7:dd:88:ef:2c:7a:7b:a4:f7:
                    20:14:7e:40:92:0a:96:04:73:af:01:61:f1:cc:80:
                    ee:ba:49:3e:f2:70:13:2c:32:0c:5c:4b:56:32:5a:
                    c9:40:49:2d:bb:19:eb:c2:75:75:1a:8c:41:4f:22:
                    b8:10:2b:71:d9:68:ff:5f:c0:ba:a4:12:ef:69:7f:
                    5e:eb:44:34:fd:2d:98:db:5f:45:76:26:30:a7:cf:
                    36:19
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E6:A5:4B:AD:7D:17:6E:44:47:A9:E9:4F:24:48:03:27:C1:B4:0C:9E
            X509v3 Authority Key Identifier:
                keyid:0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                CA Repository - URI:rsync://rpki.apnic.net/member_repository/A91293F4/1F695EEC8E7F11EAA9584C67C4F9AE02/
                RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A91293F4/1F695EEC8E7F11EAA9584C67C4F9AE02/5qVLrX0XbkRHqelPJEgDJ8G0DJ4.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  45355

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.117.244.0/22
                  103.1.180.0/22
                  202.129.228.0/22
                IPv6:
                  2400:6d00::/32

    Signature Algorithm: sha256WithRSAEncryption
         3b:7a:49:17:b6:4d:ac:54:5e:f1:16:d5:20:1e:90:90:7b:67:
         a9:7b:6d:65:5d:a1:7a:b0:eb:f5:6e:e2:c3:77:65:da:f6:f5:
         dd:0b:b8:9c:16:5b:66:0c:cd:e6:40:a0:2c:48:93:8f:d8:ac:
         ca:76:4c:62:71:e0:23:d9:91:ea:d5:bf:68:73:73:cd:75:c6:
         2c:69:75:8e:fa:3b:86:24:29:d8:d2:48:4f:43:98:b8:3a:38:
         06:c3:9a:a6:90:ed:31:76:fb:f4:90:46:9e:b0:7c:85:87:d6:
         c5:83:9a:a0:b3:fe:05:7f:0b:96:f2:72:68:32:70:c8:4b:5b:
         a8:ae:11:8d:ca:a5:bc:a5:94:50:4e:d8:04:f1:83:7b:95:b3:
         54:18:26:af:f5:55:ee:df:eb:90:d6:f6:da:a9:63:48:c6:37:
         0d:fd:76:e0:0f:e2:f0:38:07:56:73:3a:1c:1b:dd:9e:00:b9:
         f9:7f:f1:81:e4:f4:08:10:2a:40:59:d7:9d:4a:f8:41:e8:b0:
         d5:22:83:28:06:7a:c5:13:53:af:39:1a:1c:63:9f:e7:3b:34:
         c2:fd:a8:f6:43:6f:1a:ce:15:67:35:dc:c7:a3:56:ca:13:b0:
         40:34:09:50:e4:eb:f7:d0:5f:9f:52:51:ae:82:13:ff:2d:20:
         72:55:77:d1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 24 11:03:43 2024 by rpki-client on console-ams.rpki-client.org