Certificate

$ rpki-client -vvf rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6Shcog-fi_-sepc7SeB-zEJbURg.cer
File:                     6Shcog-fi_-sepc7SeB-zEJbURg.cer (raw, json)
Hash identifier:          rS0/mRd2aeFNdOp0VnhtIkANCMSFblfzVhwRMICDMRE=
Subject key identifier:   E9:28:5C:A2:0F:9F:8B:FF:AC:7A:97:3B:49:E0:7E:CC:42:5B:51:18
Authority key identifier: 0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
Certificate issuer:       /CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Certificate serial:       01FA4F
Authority info access:    rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
Manifest:                 rsync://rpki.apnic.net/member_repository/A9193EEB/706D842469B011EAA4B29942C4F9AE02/6Shcog-fi_-sepc7SeB-zEJbURg.mft
caRepository:             rsync://rpki.apnic.net/member_repository/A9193EEB/706D842469B011EAA4B29942C4F9AE02/
Notify URL:               https://rrdp.apnic.net/notification.xml
Certificate not before:   Thu 20 Jun 2024 20:28:47 +0000
Certificate not after:    Wed 30 Jul 2025 00:00:00 +0000
Subordinate resources:    IP: 103.93.12.0/22
                          IP: 2401:2340::/32

Validation:               OK
Signature path:           rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 30 Nov 2024 02:50:13 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 129615 (0x1fa4f)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
        Validity
            Not Before: Jun 20 20:28:47 2024 GMT
            Not After : Jul 30 00:00:00 2025 GMT
        Subject: CN=A9193EEB/serialNumber=E9285CA20F9F8BFFAC7A973B49E07ECC425B5118
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:46:cb:ca:e4:0c:fd:ef:26:16:30:2e:8d:b2:
                    19:62:0b:9c:61:07:03:cf:d0:06:43:3c:e6:ff:54:
                    79:d5:5e:25:2c:02:1d:b6:a7:c6:7f:52:08:a6:42:
                    c5:6b:d0:a4:7a:23:93:6a:68:09:8c:bf:7c:08:64:
                    4a:ab:2d:8d:a8:f7:9e:6a:f7:0b:11:a3:5c:20:8a:
                    5f:72:39:b0:88:74:d2:04:a5:9f:f9:ec:fe:49:86:
                    b8:8d:7d:b4:18:bd:e5:76:21:ea:82:b4:90:7d:ef:
                    e1:8c:f9:ce:2d:b3:e7:37:ce:50:ea:0d:d1:8a:8b:
                    2f:e6:e9:4e:fa:3c:e3:4e:55:17:b2:14:72:67:9b:
                    69:6e:66:d5:f4:5c:33:b0:0b:87:18:58:23:ff:f5:
                    fa:43:45:b8:7c:0f:6c:0f:91:ff:e4:40:ca:bc:35:
                    e8:be:fc:2b:cb:ae:25:ca:05:cf:66:48:52:ce:cb:
                    ec:96:fb:08:5c:46:0c:ad:53:03:6e:84:d1:3e:cd:
                    a2:b0:73:88:c9:fb:f2:0b:f7:13:d2:61:28:22:c6:
                    f1:66:10:c3:7a:ca:ef:a5:2c:b9:1c:a3:16:db:75:
                    e2:df:64:6c:b6:63:77:30:30:93:26:22:52:90:76:
                    18:01:5b:b1:d1:64:f9:35:d0:6b:b4:3d:39:80:a6:
                    32:a3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E9:28:5C:A2:0F:9F:8B:FF:AC:7A:97:3B:49:E0:7E:CC:42:5B:51:18
            X509v3 Authority Key Identifier:
                keyid:0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                CA Repository - URI:rsync://rpki.apnic.net/member_repository/A9193EEB/706D842469B011EAA4B29942C4F9AE02/
                RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A9193EEB/706D842469B011EAA4B29942C4F9AE02/6Shcog-fi_-sepc7SeB-zEJbURg.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.93.12.0/22
                IPv6:
                  2401:2340::/32

    Signature Algorithm: sha256WithRSAEncryption
         47:5c:44:4e:2d:d2:4b:50:2b:6e:83:04:b7:29:46:40:c9:0b:
         e9:87:b8:e5:1d:50:4d:d0:db:06:8f:25:0f:5d:48:cd:92:62:
         70:80:ac:1b:e4:53:ca:b8:28:f7:d9:01:cd:05:ef:31:aa:c0:
         c3:8a:48:25:77:53:01:c9:eb:35:cb:ca:ac:95:22:15:77:b3:
         17:86:7d:3c:e4:aa:23:ed:be:eb:94:ff:be:c6:15:db:8a:d8:
         58:2d:88:1e:f6:32:71:e5:74:2d:a6:55:5b:67:d1:98:01:66:
         e3:ba:f5:91:a9:9b:26:c4:f8:b9:81:cb:c4:41:15:53:6f:a4:
         28:9a:91:1e:b9:bc:0a:82:c6:10:89:3b:17:ef:bb:96:e2:58:
         67:f0:4d:2f:b8:ae:76:77:de:90:1b:22:09:79:85:b8:0f:4a:
         f1:2b:98:f5:34:95:ac:39:ba:af:91:45:78:9a:72:11:28:5b:
         68:ff:a7:ff:cb:36:37:60:cf:0c:75:bb:9e:e2:0b:20:e6:e1:
         2c:96:a1:32:52:92:cf:e0:d5:be:f8:ec:37:39:80:d4:b6:35:
         4e:03:57:03:78:5c:6c:be:0b:bc:3a:8f:66:74:9b:06:e2:a8:
         85:2f:24:c9:c8:ae:86:e5:a1:a8:a4:af:fe:13:96:ef:02:c6:
         b3:f6:88:c3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 03:59:18 2024 by rpki-client on console-ams.rpki-client.org