Certificate

$ rpki-client -vvf rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6wFhqozbHyTNf-E9XlzlIXulj4I.cer
File:                     6wFhqozbHyTNf-E9XlzlIXulj4I.cer (raw, json)
Hash identifier:          sX92sEZiL1Fmg8/HbkypO6lo9i6sZU/UZYvhpjqJV6o=
Subject key identifier:   EB:01:61:AA:8C:DB:1F:24:CD:7F:E1:3D:5E:5C:E5:21:7B:A5:8F:82
Authority key identifier: 0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
Certificate issuer:       /CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Certificate serial:       01D82F
Authority info access:    rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
Manifest:                 rsync://rpki.apnic.net/member_repository/A91FC77C/1C32D4B0E8AA11E7A230DF14C4F9AE02/6wFhqozbHyTNf-E9XlzlIXulj4I.mft
caRepository:             rsync://rpki.apnic.net/member_repository/A91FC77C/1C32D4B0E8AA11E7A230DF14C4F9AE02/
Notify URL:               https://rrdp.apnic.net/notification.xml
Certificate not before:   Fri 12 Jan 2024 17:08:04 +0000
Certificate not after:    Sun 02 Mar 2025 00:00:00 +0000
Subordinate resources:    AS: 137079
                          IP: 103.104.32.0/23
                          IP: 103.107.246.0/23
                          IP: 116.206.130.0/23
                          IP: 2402:5d40::/32

Validation:               OK
Signature path:           rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 30 Nov 2024 02:50:13 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 120879 (0x1d82f)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
        Validity
            Not Before: Jan 12 17:08:04 2024 GMT
            Not After : Mar  2 00:00:00 2025 GMT
        Subject: CN=A91FC77C/serialNumber=EB0161AA8CDB1F24CD7FE13D5E5CE5217BA58F82
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:94:30:c2:72:a9:19:1e:b9:ef:ec:5f:c2:59:c7:
                    64:93:4c:28:fc:c5:23:d4:39:ea:b0:8c:64:b7:8f:
                    2a:52:38:cd:ca:25:44:99:31:32:db:98:41:ad:d5:
                    5c:64:c8:c7:6d:f1:cb:12:fb:e9:73:05:8e:79:38:
                    d8:86:e4:8c:69:a3:00:65:ee:10:95:05:8a:af:88:
                    b4:a9:69:e4:35:0d:b5:35:52:d8:10:32:e6:8a:d1:
                    d7:41:a3:7e:ba:30:28:e1:01:cf:88:69:fd:5b:d9:
                    a5:50:4a:b6:6e:4b:b8:21:3a:9b:d6:1b:af:13:d1:
                    b1:c0:e5:89:c0:84:1f:0e:b3:d5:e2:bd:f1:83:1c:
                    6e:29:97:20:0c:37:6f:70:5e:db:02:2c:e4:b0:03:
                    a0:3d:28:bc:7b:2e:ce:14:04:a6:f6:0c:1f:9a:31:
                    43:ec:06:e7:15:56:17:66:4e:80:78:d1:3a:c2:e5:
                    31:cb:24:b3:34:6e:78:c3:99:c3:99:01:39:70:af:
                    e7:7d:18:d1:8b:b5:ba:47:c7:18:df:01:06:e5:66:
                    bd:53:d2:fe:d1:22:3e:0e:37:20:e7:a1:b1:01:ee:
                    c6:93:a9:4e:5e:1f:a4:39:bf:fe:ec:62:94:f9:5e:
                    23:5a:2f:ba:fb:1d:6a:fe:0a:c9:7b:42:20:d6:18:
                    89:75
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EB:01:61:AA:8C:DB:1F:24:CD:7F:E1:3D:5E:5C:E5:21:7B:A5:8F:82
            X509v3 Authority Key Identifier:
                keyid:0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                CA Repository - URI:rsync://rpki.apnic.net/member_repository/A91FC77C/1C32D4B0E8AA11E7A230DF14C4F9AE02/
                RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A91FC77C/1C32D4B0E8AA11E7A230DF14C4F9AE02/6wFhqozbHyTNf-E9XlzlIXulj4I.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  137079

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.104.32.0/23
                  103.107.246.0/23
                  116.206.130.0/23
                IPv6:
                  2402:5d40::/32

    Signature Algorithm: sha256WithRSAEncryption
         a8:de:02:7a:9c:ad:06:4e:12:85:e4:c8:d3:63:90:2a:87:a0:
         84:3b:c4:d7:d8:bd:74:4c:4b:a7:0b:48:b6:20:8d:9f:73:6e:
         ec:35:2b:87:51:9a:72:1e:79:17:77:f8:eb:ad:bd:4a:55:e0:
         77:80:3f:26:4f:ee:d1:2c:8a:7a:ef:ce:a0:93:7e:2b:3f:4a:
         69:10:8d:cf:78:4c:f0:7c:0d:52:32:1c:a2:71:34:1f:87:84:
         1e:48:03:29:9d:3d:b8:3c:4e:73:1c:ee:f1:de:58:3a:87:cc:
         e3:8b:ba:6e:70:15:66:23:17:ee:6e:06:e7:22:20:0c:01:51:
         5b:9e:69:83:b8:1c:a9:03:e8:2b:79:33:89:a8:a4:4e:4e:50:
         43:08:8d:89:ae:4d:83:63:b0:b1:0b:25:44:15:a3:a3:97:4b:
         d8:d6:93:b4:3f:26:67:63:6b:43:a9:e2:ed:35:28:ab:42:88:
         d0:66:b2:02:d8:0b:da:1b:a9:d6:c9:c9:a6:8b:bf:47:a7:4b:
         02:03:f9:09:b7:a2:15:c4:3b:d0:78:3f:09:01:c0:b8:df:f7:
         77:34:f4:8b:f1:96:5d:6d:a8:32:c8:56:11:84:29:fe:f0:7c:
         d0:5c:7c:f2:b0:98:7b:f4:4b:1a:d0:8e:e0:ba:0d:e2:f2:80:
         a0:62:18:d8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 03:59:18 2024 by rpki-client on console-ams.rpki-client.org