Certificate

$ rpki-client -vvf rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6uK86DXkKxFfGLP-Do8n-EpHSZY.cer
File:                     6uK86DXkKxFfGLP-Do8n-EpHSZY.cer (raw, json)
Hash identifier:          zrUsvMSTmv64BN1VKjpe/kHYlYsZicbD7cDPkBhKWsc=
Subject key identifier:   EA:E2:BC:E8:35:E4:2B:11:5F:18:B3:FE:0E:8F:27:F8:4A:47:49:96
Authority key identifier: 0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
Certificate issuer:       /CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Certificate serial:       01CE88
Authority info access:    rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
Manifest:                 rsync://rpki.apnic.net/member_repository/A912C0DE/E47443D68FEE11EE90389E1CC4F9AE02/6uK86DXkKxFfGLP-Do8n-EpHSZY.mft
caRepository:             rsync://rpki.apnic.net/member_repository/A912C0DE/E47443D68FEE11EE90389E1CC4F9AE02/
Notify URL:               https://rrdp.apnic.net/notification.xml
Certificate not before:   Fri 01 Dec 2023 02:11:16 +0000
Certificate not after:    Mon 30 Sep 2024 00:00:00 +0000
Subordinate resources:    AS: 151404
                          IP: 103.68.106.0/24
                          IP: 2001:df2:9440::/48

Validation:               OK
Signature path:           rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 09 May 2024 03:13:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 118408 (0x1ce88)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
        Validity
            Not Before: Dec  1 02:11:16 2023 GMT
            Not After : Sep 30 00:00:00 2024 GMT
        Subject: CN=A912C0DE/serialNumber=EAE2BCE835E42B115F18B3FE0E8F27F84A474996
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:62:68:d8:72:a7:e6:ef:a4:ff:d4:65:36:95:
                    fe:30:3b:72:e8:cf:9f:b2:d9:0b:fc:0e:6f:7d:41:
                    d9:0e:82:c4:a9:31:69:d3:80:10:fd:43:87:81:df:
                    ff:1c:d4:95:e5:81:79:d7:fd:ca:c9:b3:8a:3e:ef:
                    8f:23:59:7e:81:e6:0a:d3:0f:95:94:26:cd:e0:ec:
                    74:e4:66:26:0e:fc:a2:7e:d9:eb:91:82:c1:0d:69:
                    5c:cd:9c:e2:64:af:34:67:a6:30:a7:b4:c4:6b:1a:
                    45:55:b0:3e:2e:29:d2:11:3b:b3:58:ae:b8:04:b3:
                    0d:0a:bc:bb:a7:32:fb:83:8c:0d:83:7b:3c:9c:c9:
                    89:64:2a:33:89:6f:24:93:9d:08:c8:db:e2:94:9e:
                    97:09:96:4b:6d:4b:98:5e:69:df:fd:55:88:4d:de:
                    5c:a8:05:46:cc:f7:c9:05:74:5b:e0:1c:1e:05:de:
                    f8:0a:8e:82:08:e8:38:ed:45:ef:46:4e:6d:b1:f6:
                    6d:d5:e8:57:2a:66:39:1e:69:e3:25:23:29:2c:27:
                    6d:da:79:c1:f7:92:9c:e4:aa:2e:a7:58:38:c5:0d:
                    46:64:09:28:e3:fb:65:7a:77:97:60:0d:99:c5:ad:
                    3b:08:0b:df:e1:61:13:66:dd:b0:34:f3:bd:e3:26:
                    40:fb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EA:E2:BC:E8:35:E4:2B:11:5F:18:B3:FE:0E:8F:27:F8:4A:47:49:96
            X509v3 Authority Key Identifier:
                keyid:0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                CA Repository - URI:rsync://rpki.apnic.net/member_repository/A912C0DE/E47443D68FEE11EE90389E1CC4F9AE02/
                RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A912C0DE/E47443D68FEE11EE90389E1CC4F9AE02/6uK86DXkKxFfGLP-Do8n-EpHSZY.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  151404

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.68.106.0/24
                IPv6:
                  2001:df2:9440::/48

    Signature Algorithm: sha256WithRSAEncryption
         00:34:83:b7:c2:f2:5f:0e:ae:7b:15:a9:bf:c7:0d:08:13:31:
         20:00:a1:2c:d9:ce:c0:88:24:a0:71:3c:13:16:97:09:05:e3:
         01:be:09:69:b5:d7:ac:df:35:04:86:36:8b:59:13:ed:7c:57:
         a0:a9:10:e9:1b:be:28:f4:71:bb:3d:0c:de:85:f4:b0:ce:4c:
         cd:3f:b2:2e:44:e2:3c:23:d2:5d:ec:8f:3c:3a:da:67:74:84:
         84:38:45:6a:8e:65:4e:d4:69:9c:e7:23:c5:18:14:53:df:cb:
         88:df:8e:e7:c9:cf:c3:54:ab:6c:29:28:5d:dd:61:ae:21:8d:
         94:a2:04:9c:ce:e8:bf:d9:e1:5e:65:67:a3:12:d1:6d:2e:ff:
         9e:2c:46:16:b3:6b:49:67:36:06:67:ef:a0:75:02:02:9e:93:
         15:dd:91:4c:44:61:dc:0c:43:b6:5c:d3:46:91:15:ae:97:5f:
         62:84:74:d4:75:6d:fb:4a:98:18:b4:b4:ec:32:a0:39:02:47:
         54:12:30:49:b5:fd:89:80:02:0b:f8:ca:fb:e0:a2:b6:60:08:
         46:ce:2f:c7:35:50:66:ea:d8:95:26:92:11:35:b3:00:dd:5a:
         4d:d2:d8:24:e3:0c:f3:02:67:fa:6c:a6:94:e0:9b:65:5d:b9:
         64:9e:06:5d
-----BEGIN CERTIFICATE-----
MIIGKzCCBROgAwIBAgIDAc6IMA0GCSqGSIb3DQEBCwUAMEYxETAPBgNVBAMTCEE5
MERDNUJFMTEwLwYDVQQFEygwRTY1QTRGNUZEMzZCNUJENjhFQjNDOTIzNDA4OTc4
QzkwN0FBNzlGMB4XDTIzMTIwMTAyMTExNloXDTI0MDkzMDAwMDAwMFowRjERMA8G
A1UEAxMIQTkxMkMwREUxMTAvBgNVBAUTKEVBRTJCQ0U4MzVFNDJCMTE1RjE4QjNG
RTBFOEYyN0Y4NEE0NzQ5OTYwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB
AQDAYmjYcqfm76T/1GU2lf4wO3Loz5+y2Qv8Dm99QdkOgsSpMWnTgBD9Q4eB3/8c
1JXlgXnX/crJs4o+748jWX6B5grTD5WUJs3g7HTkZiYO/KJ+2euRgsENaVzNnOJk
rzRnpjCntMRrGkVVsD4uKdIRO7NYrrgEsw0KvLunMvuDjA2DezycyYlkKjOJbyST
nQjI2+KUnpcJlkttS5head/9VYhN3lyoBUbM98kFdFvgHB4F3vgKjoII6DjtRe9G
Tm2x9m3V6FcqZjkeaeMlIyksJ23aecH3kpzkqi6nWDjFDUZkCSjj+2V6d5dgDZnF
rTsIC9/hYRNm3bA0873jJkD7AgMBAAGjggMgMIIDHDAdBgNVHQ4EFgQU6uK86DXk
KxFfGLP+Do8n+EpHSZYwHwYDVR0jBBgwFoAUDmWk9f02tb1o6zySNAiXjJB6p58w
DgYDVR0PAQH/BAQDAgEGMA8GA1UdEwEB/wQFMAMBAf8wcwYDVR0fBGwwajBooGag
ZIZicnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2
NjExRTJCQjQ2OEY3QzcyRkQxRkYyL0RtV2s5ZjAydGIxbzZ6eVNOQWlYakpCNnA1
OC5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L3JlcG9zaXRvcnkvOTgwNjUyRTBCNzdFMTFFN0E5NkEzOTUyMUE0
RjRGQjQvRG1XazlmMDJ0YjFvNnp5U05BaVhqSkI2cDU4LmNlcjBKBgNVHSABAf8E
QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj
Lm5ldC9SUEtJL0NQUy5wZGYwggEoBggrBgEFBQcBCwSCARowggEWMF8GCCsGAQUF
BzAFhlNyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5
MTJDMERFL0U0NzQ0M0Q2OEZFRTExRUU5MDM4OUUxQ0M0RjlBRTAyLzB+BggrBgEF
BQcwCoZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9B
OTEyQzBERS9FNDc0NDNENjhGRUUxMUVFOTAzODlFMUNDNEY5QUUwMi82dUs4NkRY
a0t4RmZHTFAtRG84bi1FcEhTWlkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3Jy
ZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwGgYIKwYBBQUHAQgBAf8ECzAJ
oAcwBQIDAk9sMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIAATAGAwQAZ0RqMA8EAgAC
MAkDBwAgAQ3ylEAwDQYJKoZIhvcNAQELBQADggEBAAA0g7fC8l8OrnsVqb/HDQgT
MSAAoSzZzsCIJKBxPBMWlwkF4wG+CWm116zfNQSGNotZE+18V6CpEOkbvij0cbs9
DN6F9LDOTM0/si5E4jwj0l3sjzw62md0hIQ4RWqOZU7UaZznI8UYFFPfy4jfjufJ
z8NUq2wpKF3dYa4hjZSiBJzO6L/Z4V5lZ6MS0W0u/54sRhaza0lnNgZn76B1AgKe
kxXdkUxEYdwMQ7Zc00aRFa6XX2KEdNR1bftKmBi0tOwyoDkCR1QSMEm1/YmAAgv4
yvvgorZgCEbOL8c1UGbq2JUmkhE1swDdWk3S2CTjDPMCZ/psppTgm2VduWSeBl0=
-----END CERTIFICATE-----
Generated at Thu May 2 04:20:34 2024 by rpki-client on console-ams.rpki-client.org