Certificate

$ rpki-client -vvf rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6Shcog-fi_-sepc7SeB-zEJbURg.cer
File:                     6Shcog-fi_-sepc7SeB-zEJbURg.cer (raw, json)
Hash identifier:          QbjQ2mJECVmwws1GOi5cIFPCUZh1DuJn1q2I3hmdYus=
Subject key identifier:   E9:28:5C:A2:0F:9F:8B:FF:AC:7A:97:3B:49:E0:7E:CC:42:5B:51:18
Authority key identifier: 0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
Certificate issuer:       /CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Certificate serial:       01A7F6
Authority info access:    rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
Manifest:                 rsync://rpki.apnic.net/member_repository/A9193EEB/706D842469B011EAA4B29942C4F9AE02/6Shcog-fi_-sepc7SeB-zEJbURg.mft
caRepository:             rsync://rpki.apnic.net/member_repository/A9193EEB/706D842469B011EAA4B29942C4F9AE02/
Notify URL:               https://rrdp.apnic.net/notification.xml
Certificate not before:   Fri 02 Jun 2023 19:28:50 +0000
Certificate not after:    Tue 30 Jul 2024 00:00:00 +0000
Subordinate resources:    IP: 103.93.12.0/22
                          IP: 2401:2340::/32

Validation:               OK
Signature path:           rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 02 May 2024 03:16:56 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 108534 (0x1a7f6)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
        Validity
            Not Before: Jun  2 19:28:50 2023 GMT
            Not After : Jul 30 00:00:00 2024 GMT
        Subject: CN=A9193EEB/serialNumber=E9285CA20F9F8BFFAC7A973B49E07ECC425B5118
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:46:cb:ca:e4:0c:fd:ef:26:16:30:2e:8d:b2:
                    19:62:0b:9c:61:07:03:cf:d0:06:43:3c:e6:ff:54:
                    79:d5:5e:25:2c:02:1d:b6:a7:c6:7f:52:08:a6:42:
                    c5:6b:d0:a4:7a:23:93:6a:68:09:8c:bf:7c:08:64:
                    4a:ab:2d:8d:a8:f7:9e:6a:f7:0b:11:a3:5c:20:8a:
                    5f:72:39:b0:88:74:d2:04:a5:9f:f9:ec:fe:49:86:
                    b8:8d:7d:b4:18:bd:e5:76:21:ea:82:b4:90:7d:ef:
                    e1:8c:f9:ce:2d:b3:e7:37:ce:50:ea:0d:d1:8a:8b:
                    2f:e6:e9:4e:fa:3c:e3:4e:55:17:b2:14:72:67:9b:
                    69:6e:66:d5:f4:5c:33:b0:0b:87:18:58:23:ff:f5:
                    fa:43:45:b8:7c:0f:6c:0f:91:ff:e4:40:ca:bc:35:
                    e8:be:fc:2b:cb:ae:25:ca:05:cf:66:48:52:ce:cb:
                    ec:96:fb:08:5c:46:0c:ad:53:03:6e:84:d1:3e:cd:
                    a2:b0:73:88:c9:fb:f2:0b:f7:13:d2:61:28:22:c6:
                    f1:66:10:c3:7a:ca:ef:a5:2c:b9:1c:a3:16:db:75:
                    e2:df:64:6c:b6:63:77:30:30:93:26:22:52:90:76:
                    18:01:5b:b1:d1:64:f9:35:d0:6b:b4:3d:39:80:a6:
                    32:a3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E9:28:5C:A2:0F:9F:8B:FF:AC:7A:97:3B:49:E0:7E:CC:42:5B:51:18
            X509v3 Authority Key Identifier:
                keyid:0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                CA Repository - URI:rsync://rpki.apnic.net/member_repository/A9193EEB/706D842469B011EAA4B29942C4F9AE02/
                RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A9193EEB/706D842469B011EAA4B29942C4F9AE02/6Shcog-fi_-sepc7SeB-zEJbURg.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.93.12.0/22
                IPv6:
                  2401:2340::/32

    Signature Algorithm: sha256WithRSAEncryption
         39:d7:f9:3d:2f:05:23:a9:09:93:35:02:76:32:2a:87:e7:ce:
         c5:b0:6e:c8:d5:22:5c:ec:fa:0e:90:97:a1:86:72:2b:ff:b8:
         8c:95:28:d3:4e:d7:df:40:23:92:70:38:e6:92:8c:79:7b:58:
         b6:c1:57:b6:dd:27:30:43:bc:e0:13:80:f4:93:dd:46:8d:19:
         db:f3:40:f8:1a:5c:08:2a:92:ed:d0:3e:3c:24:77:96:e1:de:
         e1:0d:ce:3f:7c:6d:fc:0f:ec:fc:08:b2:b8:a5:e4:e3:30:20:
         6e:8a:b1:f3:87:5f:7b:9d:3b:04:44:c0:fb:b7:af:e0:36:b3:
         8f:6c:af:f4:37:63:fe:73:13:97:41:53:e8:8d:38:79:47:90:
         d5:82:3f:ce:c8:4c:e3:91:33:44:14:59:6a:5e:d6:7c:cc:f6:
         ea:49:61:cb:e9:3f:b5:9f:da:2d:ab:04:aa:5f:05:39:54:18:
         6c:ab:9f:c0:ef:d0:49:8a:bc:c2:d8:cf:49:e5:3d:83:4b:fd:
         9a:d9:a9:74:e5:50:dc:3b:74:c3:0d:e6:6b:5e:a8:2b:d2:c0:
         ca:06:cc:44:c1:29:18:78:06:ad:d0:ed:62:93:2c:b4:76:00:
         b0:a4:c4:9f:c9:8c:ea:67:e1:33:bd:b4:74:d4:84:2d:20:b9:
         c2:f9:77:8b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 25 04:06:48 2024 by rpki-client on console-ams.rpki-client.org