Certificate

$ rpki-client -vvf rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6V-g7fERLjIMIl57jVBBhmejCs8.cer
File:                     6V-g7fERLjIMIl57jVBBhmejCs8.cer (raw, json)
Hash identifier:          buQFSWemLmPsu3cQ7wKBmdn14MTxoo21fjUv1/WQLsI=
Subject key identifier:   E9:5F:A0:ED:F1:11:2E:32:0C:22:5E:7B:8D:50:41:86:67:A3:0A:CF
Authority key identifier: 0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
Certificate issuer:       /CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Certificate serial:       01BEF2
Authority info access:    rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
Manifest:                 rsync://rpki.apnic.net/member_repository/A91975B6/B5762DD6C27D11ED912B774BC4F9AE02/6V-g7fERLjIMIl57jVBBhmejCs8.mft
caRepository:             rsync://rpki.apnic.net/member_repository/A91975B6/B5762DD6C27D11ED912B774BC4F9AE02/
Notify URL:               https://rrdp.apnic.net/notification.xml
Certificate not before:   Thu 21 Sep 2023 18:04:17 +0000
Certificate not after:    Sun 01 Dec 2024 00:00:00 +0000
Subordinate resources:    AS: 138914
                          IP: 103.236.132.0/22

Validation:               OK
Signature path:           rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 27 Apr 2024 02:50:25 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 114418 (0x1bef2)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
        Validity
            Not Before: Sep 21 18:04:17 2023 GMT
            Not After : Dec  1 00:00:00 2024 GMT
        Subject: CN=A91975B6/serialNumber=E95FA0EDF1112E320C225E7B8D50418667A30ACF
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:6b:78:09:60:d5:e4:91:90:d4:1d:6a:3b:dd:
                    7a:66:ef:d7:a2:bd:ae:67:5c:86:23:55:47:7e:cd:
                    42:94:44:9c:94:41:46:52:03:64:36:e9:9b:6d:4e:
                    97:de:a1:7c:b4:e2:ec:9d:ae:d7:5d:f7:99:46:bc:
                    68:54:d8:42:73:1d:e4:d0:f1:66:46:a7:87:aa:91:
                    79:ea:38:d1:8b:48:2f:ff:30:bb:24:25:fe:78:a5:
                    b4:05:4c:73:f7:9f:9d:f4:18:fd:85:3b:3b:d7:0d:
                    5c:96:68:7f:62:87:6f:80:90:07:c9:15:66:2d:42:
                    94:b3:47:d0:8e:98:5b:b8:d0:3a:d3:1b:d0:09:64:
                    6f:ea:88:81:60:72:12:c2:3f:81:d4:4b:7e:be:78:
                    bb:9f:d7:79:95:14:e5:5d:83:41:69:7a:5e:8a:96:
                    3c:fc:87:70:c5:df:de:a7:42:0d:8e:9b:b3:8e:29:
                    99:a7:cf:6b:ec:c3:b5:e2:3c:23:cb:a2:81:c2:b2:
                    8a:34:dd:c2:0b:a3:36:cb:e2:bc:d8:af:84:1d:91:
                    55:9f:25:42:62:8f:35:8b:8c:88:27:45:ac:18:59:
                    64:61:09:9f:56:15:c4:b4:8d:9e:30:14:3c:b5:f8:
                    35:88:71:06:3f:50:7c:ff:5a:53:84:01:7e:19:83:
                    84:03
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E9:5F:A0:ED:F1:11:2E:32:0C:22:5E:7B:8D:50:41:86:67:A3:0A:CF
            X509v3 Authority Key Identifier:
                keyid:0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                CA Repository - URI:rsync://rpki.apnic.net/member_repository/A91975B6/B5762DD6C27D11ED912B774BC4F9AE02/
                RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A91975B6/B5762DD6C27D11ED912B774BC4F9AE02/6V-g7fERLjIMIl57jVBBhmejCs8.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  138914

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.236.132.0/22

    Signature Algorithm: sha256WithRSAEncryption
         0f:d4:5f:3f:0e:7b:61:8f:6e:32:8f:d0:26:78:ad:7d:00:98:
         f2:23:ce:0c:6f:d0:ee:0e:78:3b:9b:d6:6d:20:4b:6c:7f:86:
         45:7c:51:21:ad:01:f2:ea:c0:3f:b2:a5:c3:a8:75:34:d0:84:
         5a:2c:05:f2:6e:c8:48:98:a5:07:24:8a:d2:a9:14:07:ae:ab:
         f2:58:70:2a:82:af:00:04:a6:da:60:46:da:62:8d:37:f3:df:
         61:b2:f5:92:13:7d:f9:9b:b5:59:40:96:0e:74:8f:14:e1:f0:
         d5:7a:0d:14:89:a3:5e:f3:98:af:ec:cf:16:d4:fc:58:8e:3b:
         de:58:df:c5:78:ee:76:cb:93:40:08:60:61:56:94:42:bb:b3:
         53:b4:f1:12:41:c3:ef:22:0f:67:e1:a0:d1:32:28:a0:07:15:
         79:28:38:c0:05:bf:c9:0b:95:27:f8:5a:78:cf:6f:b6:7b:93:
         0c:45:1e:c8:54:af:02:0d:63:0e:87:45:5d:11:61:01:1a:c2:
         dc:2b:3b:49:ca:1c:db:37:2f:ae:44:41:ef:a8:5c:11:32:ef:
         6e:8a:48:0e:1c:d0:56:57:cc:02:e5:89:16:7e:9d:23:23:bf:
         fb:0e:ab:0f:21:70:21:11:28:a6:73:68:7c:a7:d3:45:3f:86:
         37:4d:3a:1e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 20 03:57:40 2024 by rpki-client on console-fra.rpki-client.org