Certificate

$ rpki-client -vvf rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7q5SkjsLrnLJg9AQX1Cd8hC8CRw.cer
File:                     7q5SkjsLrnLJg9AQX1Cd8hC8CRw.cer (raw, json)
Hash identifier:          IYxhIjbznLuF9jBY0VEVXGq2p/XLFLB6FV2z6fo9/dA=
Subject key identifier:   EE:AE:52:92:3B:0B:AE:72:C9:83:D0:10:5F:50:9D:F2:10:BC:09:1C
Authority key identifier: 0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
Certificate issuer:       /CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Certificate serial:       01BC77
Authority info access:    rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
Manifest:                 rsync://rpki.apnic.net/member_repository/A9193369/A51C4CAA4EFE11EE9D911C6EC4F9AE02/7q5SkjsLrnLJg9AQX1Cd8hC8CRw.mft
caRepository:             rsync://rpki.apnic.net/member_repository/A9193369/A51C4CAA4EFE11EE9D911C6EC4F9AE02/
Notify URL:               https://rrdp.apnic.net/notification.xml
Certificate not before:   Sat 09 Sep 2023 10:50:16 +0000
Certificate not after:    Mon 30 Dec 2024 00:00:00 +0000
Subordinate resources:    AS: 133619

Validation:               OK
Signature path:           rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 09 May 2024 06:03:43 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 113783 (0x1bc77)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
        Validity
            Not Before: Sep  9 10:50:16 2023 GMT
            Not After : Dec 30 00:00:00 2024 GMT
        Subject: CN=A9193369/serialNumber=EEAE52923B0BAE72C983D0105F509DF210BC091C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:75:4f:21:8c:22:98:06:cf:6f:84:23:7c:f3:
                    ca:43:0d:65:fa:df:ca:b2:29:00:59:99:fb:92:42:
                    42:82:33:2d:14:e6:50:15:bb:04:52:a6:8d:4e:db:
                    3c:64:24:ea:d4:f8:4d:9d:86:50:ef:83:b0:1d:95:
                    b3:3d:5e:bb:47:7d:2d:43:53:09:38:61:ca:14:c5:
                    0e:be:49:e1:02:cb:33:c5:e7:58:c0:ce:4d:b1:a8:
                    79:55:43:a1:c9:1c:02:31:7f:91:ad:63:ac:bf:01:
                    6c:f4:14:d8:8b:68:90:cb:18:d2:01:55:c8:d3:34:
                    c7:4c:70:c5:1f:aa:93:e9:95:32:b6:08:48:39:19:
                    dc:47:b1:35:1a:4c:1e:1a:3c:e1:3b:0e:44:40:b6:
                    02:8e:75:12:d5:79:c7:ee:3e:23:a1:04:21:d8:b2:
                    db:7e:10:33:59:f6:4f:15:8f:1a:1c:d9:03:6b:d4:
                    5e:30:09:f0:df:ab:cc:b6:b9:8b:24:b0:2d:01:3a:
                    ea:47:d7:b1:17:c1:55:ef:63:95:e1:45:1d:50:44:
                    a4:9d:62:86:df:bd:7a:5b:01:80:22:c9:01:0e:d4:
                    ac:26:de:7c:95:c9:11:48:aa:96:ea:4c:8f:8e:14:
                    ec:18:5f:7c:78:6d:3b:e7:22:68:58:e3:2a:4d:2f:
                    ff:51
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EE:AE:52:92:3B:0B:AE:72:C9:83:D0:10:5F:50:9D:F2:10:BC:09:1C
            X509v3 Authority Key Identifier:
                keyid:0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                CA Repository - URI:rsync://rpki.apnic.net/member_repository/A9193369/A51C4CAA4EFE11EE9D911C6EC4F9AE02/
                RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A9193369/A51C4CAA4EFE11EE9D911C6EC4F9AE02/7q5SkjsLrnLJg9AQX1Cd8hC8CRw.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  133619

    Signature Algorithm: sha256WithRSAEncryption
         ab:80:a1:6a:3d:1d:8c:e0:db:3e:36:14:cd:5d:4f:cb:4a:56:
         78:e6:7c:d2:d7:19:22:80:83:5e:e8:a5:79:27:8f:8c:f7:b4:
         84:bc:33:b9:e3:02:b5:01:fa:d2:df:b2:69:ec:38:37:2f:50:
         08:df:5c:b9:31:6b:fc:0c:3e:2e:cc:04:8e:40:26:ef:26:74:
         41:f6:29:f4:5d:58:54:53:f2:96:38:49:cd:f6:fa:72:4e:a6:
         f1:5d:09:a4:db:ad:fe:07:d4:4c:10:95:52:32:8d:79:22:4f:
         2c:f0:bb:07:2a:82:dd:87:e1:c9:28:df:90:eb:94:98:0c:e0:
         68:e6:09:34:73:66:6e:fd:1e:32:eb:12:7f:a5:33:96:7c:29:
         f0:10:41:db:f4:27:3c:fa:2e:69:e5:2e:2a:35:f3:c0:5e:2f:
         d3:b0:cd:8b:c6:ee:7d:cf:bb:a6:db:4c:22:c4:96:10:5d:2c:
         41:94:1b:a2:27:ef:aa:f2:2f:f4:d3:2e:5a:83:15:92:04:4c:
         dd:5a:5d:5d:7e:e5:0f:81:4c:93:cc:03:ee:4f:08:e9:4f:c1:
         66:33:63:a4:95:87:d5:2c:10:dd:10:6e:89:11:14:e2:e6:50:
         e3:3c:30:52:c2:cc:d5:5e:a7:e0:73:ca:cd:97:07:32:b9:0d:
         c8:4a:e6:0e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 2 08:03:20 2024 by rpki-client on console-ams.rpki-client.org