Certificate

$ rpki-client -vvf rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5wYdsiKDjeaKk84h7ykbBVQthyY.cer
File:                     5wYdsiKDjeaKk84h7ykbBVQthyY.cer (raw, json)
Hash identifier:          pDQYn6Q6+0wSu73LbXdHGKHfTwfCYya+l9Xkkky8DB8=
Subject key identifier:   E7:06:1D:B2:22:83:8D:E6:8A:93:CE:21:EF:29:1B:05:54:2D:87:26
Authority key identifier: 0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
Certificate issuer:       /CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Certificate serial:       01D391
Authority info access:    rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
Manifest:                 rsync://rpki.apnic.net/member_repository/A919D3C2/72D7CFD623F811E79589D752C4F9AE02/5wYdsiKDjeaKk84h7ykbBVQthyY.mft
caRepository:             rsync://rpki.apnic.net/member_repository/A919D3C2/72D7CFD623F811E79589D752C4F9AE02/
Notify URL:               https://rrdp.apnic.net/notification.xml
Certificate not before:   Thu 21 Dec 2023 19:21:46 +0000
Certificate not after:    Sun 02 Mar 2025 00:00:00 +0000
Subordinate resources:    AS: 38826
                          AS: 132221
                          IP: 103.243.84.0/22
                          IP: 119.15.96.0/20
                          IP: 175.106.4.0/22
                          IP: 2400:5000::/32

Validation:               OK
Signature path:           rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 04 Dec 2024 01:13:26 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 119697 (0x1d391)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
        Validity
            Not Before: Dec 21 19:21:46 2023 GMT
            Not After : Mar  2 00:00:00 2025 GMT
        Subject: CN=A919D3C2/serialNumber=E7061DB222838DE68A93CE21EF291B05542D8726
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d2:e2:f2:b6:9c:7a:7e:9e:dd:fa:06:83:86:7a:
                    71:d2:36:ac:ee:40:1e:00:47:97:a5:ab:9b:21:6c:
                    af:a9:cd:36:5b:69:46:ea:02:55:bc:dd:97:54:88:
                    0e:a7:5b:bb:64:46:50:73:fe:cc:9e:ac:fa:a8:52:
                    39:49:ae:3a:bb:3b:f3:d6:ee:79:3e:a4:a2:f6:5e:
                    a4:3e:94:bf:33:61:d1:97:35:31:57:1f:e6:48:25:
                    72:19:c1:f7:68:e9:9c:65:d4:86:4b:da:84:8d:3a:
                    55:a9:e8:95:6c:6b:a0:d6:81:0b:a1:78:1c:c3:48:
                    33:0a:52:88:7f:00:d3:f7:3d:29:62:84:d5:b6:57:
                    3c:a6:44:74:7f:de:4b:2c:b9:28:18:9a:52:b6:0f:
                    15:f9:89:38:bc:ac:9f:db:ba:5f:10:8c:4e:73:3a:
                    1e:65:a9:64:d9:2f:f3:ed:5c:a2:a9:7c:dc:31:2a:
                    35:c3:32:8b:4e:e4:ce:d6:60:c6:c8:e2:64:d0:22:
                    55:27:a2:72:3e:b7:6f:79:d2:c3:e5:e5:79:1e:3f:
                    4d:18:a6:04:ab:de:7a:0c:ea:c9:47:71:7e:af:1b:
                    65:a6:08:bc:dc:56:c0:8a:4d:23:14:e7:82:47:02:
                    e6:14:5e:e6:9b:76:5f:9c:4c:df:f9:ff:e7:53:ae:
                    8a:2f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E7:06:1D:B2:22:83:8D:E6:8A:93:CE:21:EF:29:1B:05:54:2D:87:26
            X509v3 Authority Key Identifier:
                keyid:0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                CA Repository - URI:rsync://rpki.apnic.net/member_repository/A919D3C2/72D7CFD623F811E79589D752C4F9AE02/
                RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A919D3C2/72D7CFD623F811E79589D752C4F9AE02/5wYdsiKDjeaKk84h7ykbBVQthyY.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  38826
                  132221

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.243.84.0/22
                  119.15.96.0/20
                  175.106.4.0/22
                IPv6:
                  2400:5000::/32

    Signature Algorithm: sha256WithRSAEncryption
         6a:04:dc:2d:2b:d6:da:df:f9:35:b8:fb:e9:73:2a:f1:2e:5b:
         78:0f:c2:f0:54:b9:b6:bd:58:9d:ce:ed:eb:52:f0:f2:f6:70:
         f9:8b:e5:5f:8a:0e:3e:e5:d9:35:4b:5f:3c:dc:62:2f:83:03:
         5e:ad:4d:de:a7:1d:80:69:53:ea:c0:9a:79:af:b8:b4:92:b0:
         4d:8f:87:9a:fd:84:ae:2f:5a:3a:56:6f:06:f9:4d:ae:ec:17:
         97:65:dd:69:f4:c3:83:11:7e:38:29:50:4e:42:7d:f8:ee:6a:
         e1:2e:02:b6:4b:a3:45:7f:09:90:90:08:42:b8:c8:58:54:3b:
         2c:70:70:e4:9b:40:f5:7b:cc:26:d2:a8:a1:7c:22:05:c7:33:
         17:cf:87:00:36:52:a7:84:2b:ed:00:51:07:0f:bb:44:76:c2:
         f5:a1:20:ce:a0:1f:0e:16:16:fd:22:3e:d9:ba:0c:98:39:ff:
         fa:98:cf:3d:fa:f9:06:63:97:86:60:73:5c:4d:fd:7a:70:1f:
         60:d1:ec:9f:ce:ab:34:b1:27:80:4f:be:aa:25:d0:56:43:5f:
         b5:10:fb:89:9d:dc:7a:49:e6:b3:7e:a5:54:54:53:ac:11:53:
         e5:ee:95:6e:a5:85:8b:a1:53:bb:13:5c:63:76:ba:3b:65:a1:
         64:5a:58:3d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 27 02:21:27 2024 by rpki-client on console-fra.rpki-client.org