Certificate

$ rpki-client -vvf rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7q5SkjsLrnLJg9AQX1Cd8hC8CRw.cer
File:                     7q5SkjsLrnLJg9AQX1Cd8hC8CRw.cer (raw, json)
Hash identifier:          xq9511BuxKi46COamR6gP+9J8SAxocbKruRMjW6a7kE=
Subject key identifier:   EE:AE:52:92:3B:0B:AE:72:C9:83:D0:10:5F:50:9D:F2:10:BC:09:1C
Authority key identifier: 0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
Certificate issuer:       /CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Certificate serial:       02166D
Authority info access:    rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
Manifest:                 rsync://rpki.apnic.net/member_repository/A9193369/A51C4CAA4EFE11EE9D911C6EC4F9AE02/7q5SkjsLrnLJg9AQX1Cd8hC8CRw.mft
caRepository:             rsync://rpki.apnic.net/member_repository/A9193369/A51C4CAA4EFE11EE9D911C6EC4F9AE02/
Notify URL:               https://rrdp.apnic.net/notification.xml
Certificate not before:   Sat 26 Oct 2024 15:37:14 +0000
Certificate not after:    Tue 30 Dec 2025 00:00:00 +0000
Subordinate resources:    AS: 133619

Validation:               OK
Signature path:           rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 04 Dec 2024 01:13:26 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 136813 (0x2166d)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
        Validity
            Not Before: Oct 26 15:37:14 2024 GMT
            Not After : Dec 30 00:00:00 2025 GMT
        Subject: CN=A9193369/serialNumber=EEAE52923B0BAE72C983D0105F509DF210BC091C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:75:4f:21:8c:22:98:06:cf:6f:84:23:7c:f3:
                    ca:43:0d:65:fa:df:ca:b2:29:00:59:99:fb:92:42:
                    42:82:33:2d:14:e6:50:15:bb:04:52:a6:8d:4e:db:
                    3c:64:24:ea:d4:f8:4d:9d:86:50:ef:83:b0:1d:95:
                    b3:3d:5e:bb:47:7d:2d:43:53:09:38:61:ca:14:c5:
                    0e:be:49:e1:02:cb:33:c5:e7:58:c0:ce:4d:b1:a8:
                    79:55:43:a1:c9:1c:02:31:7f:91:ad:63:ac:bf:01:
                    6c:f4:14:d8:8b:68:90:cb:18:d2:01:55:c8:d3:34:
                    c7:4c:70:c5:1f:aa:93:e9:95:32:b6:08:48:39:19:
                    dc:47:b1:35:1a:4c:1e:1a:3c:e1:3b:0e:44:40:b6:
                    02:8e:75:12:d5:79:c7:ee:3e:23:a1:04:21:d8:b2:
                    db:7e:10:33:59:f6:4f:15:8f:1a:1c:d9:03:6b:d4:
                    5e:30:09:f0:df:ab:cc:b6:b9:8b:24:b0:2d:01:3a:
                    ea:47:d7:b1:17:c1:55:ef:63:95:e1:45:1d:50:44:
                    a4:9d:62:86:df:bd:7a:5b:01:80:22:c9:01:0e:d4:
                    ac:26:de:7c:95:c9:11:48:aa:96:ea:4c:8f:8e:14:
                    ec:18:5f:7c:78:6d:3b:e7:22:68:58:e3:2a:4d:2f:
                    ff:51
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EE:AE:52:92:3B:0B:AE:72:C9:83:D0:10:5F:50:9D:F2:10:BC:09:1C
            X509v3 Authority Key Identifier:
                keyid:0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                CA Repository - URI:rsync://rpki.apnic.net/member_repository/A9193369/A51C4CAA4EFE11EE9D911C6EC4F9AE02/
                RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A9193369/A51C4CAA4EFE11EE9D911C6EC4F9AE02/7q5SkjsLrnLJg9AQX1Cd8hC8CRw.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  133619

    Signature Algorithm: sha256WithRSAEncryption
         0d:94:2b:d0:bb:8d:bf:2a:55:74:2c:6e:b1:7d:cc:3c:cb:d9:
         36:c3:83:0f:ca:30:a6:33:a2:2f:cd:1f:7a:74:e7:f4:c8:e3:
         a8:c8:43:04:48:69:b7:b8:8b:81:ea:29:5f:ef:73:76:35:ae:
         93:14:a4:67:4f:da:f2:6e:3d:27:e3:30:5b:7a:32:e5:14:b1:
         08:a2:46:56:82:17:1d:02:c4:01:57:04:1e:7b:09:e5:3c:16:
         da:e2:fc:e9:e7:b4:0a:3b:95:a9:ed:43:1c:f9:b5:aa:37:a3:
         c6:44:a2:1b:f7:12:d9:66:d0:02:60:a4:09:30:4a:8a:38:d4:
         44:98:e2:0c:f3:5d:3a:a7:1a:4b:d3:e4:9c:3f:73:f6:99:20:
         2e:23:b1:51:79:e7:35:7d:0b:60:1d:df:f3:bb:63:a9:b3:5c:
         79:23:20:10:e3:6b:93:30:72:66:c6:08:e4:11:15:db:dd:e5:
         1a:4f:bd:a9:0a:25:7e:5e:43:0f:54:eb:76:eb:49:85:31:14:
         f3:c1:41:86:6c:df:0c:d2:82:3c:24:a9:5e:f8:b4:d8:e1:a8:
         1f:8e:99:98:d4:45:60:7e:58:77:f3:fa:8a:74:a7:98:df:5f:
         fd:96:75:ea:ca:91:10:0b:f7:e1:58:16:44:8d:54:17:f0:6e:
         57:5f:9e:b2
-----BEGIN CERTIFICATE-----
MIIF+TCCBOGgAwIBAgIDAhZtMA0GCSqGSIb3DQEBCwUAMEYxETAPBgNVBAMTCEE5
MERDNUJFMTEwLwYDVQQFEygwRTY1QTRGNUZEMzZCNUJENjhFQjNDOTIzNDA4OTc4
QzkwN0FBNzlGMB4XDTI0MTAyNjE1MzcxNFoXDTI1MTIzMDAwMDAwMFowRjERMA8G
A1UEAxMIQTkxOTMzNjkxMTAvBgNVBAUTKEVFQUU1MjkyM0IwQkFFNzJDOTgzRDAx
MDVGNTA5REYyMTBCQzA5MUMwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB
AQC0dU8hjCKYBs9vhCN888pDDWX638qyKQBZmfuSQkKCMy0U5lAVuwRSpo1O2zxk
JOrU+E2dhlDvg7AdlbM9XrtHfS1DUwk4YcoUxQ6+SeECyzPF51jAzk2xqHlVQ6HJ
HAIxf5GtY6y/AWz0FNiLaJDLGNIBVcjTNMdMcMUfqpPplTK2CEg5GdxHsTUaTB4a
POE7DkRAtgKOdRLVecfuPiOhBCHYstt+EDNZ9k8Vjxoc2QNr1F4wCfDfq8y2uYsk
sC0BOupH17EXwVXvY5XhRR1QRKSdYobfvXpbAYAiyQEO1Kwm3nyVyRFIqpbqTI+O
FOwYX3x4bTvnImhY4ypNL/9RAgMBAAGjggLuMIIC6jAdBgNVHQ4EFgQU7q5SkjsL
rnLJg9AQX1Cd8hC8CRwwHwYDVR0jBBgwFoAUDmWk9f02tb1o6zySNAiXjJB6p58w
DgYDVR0PAQH/BAQDAgEGMA8GA1UdEwEB/wQFMAMBAf8wcwYDVR0fBGwwajBooGag
ZIZicnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2
NjExRTJCQjQ2OEY3QzcyRkQxRkYyL0RtV2s5ZjAydGIxbzZ6eVNOQWlYakpCNnA1
OC5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L3JlcG9zaXRvcnkvOTgwNjUyRTBCNzdFMTFFN0E5NkEzOTUyMUE0
RjRGQjQvRG1XazlmMDJ0YjFvNnp5U05BaVhqSkI2cDU4LmNlcjBKBgNVHSABAf8E
QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj
Lm5ldC9SUEtJL0NQUy5wZGYwggEoBggrBgEFBQcBCwSCARowggEWMF8GCCsGAQUF
BzAFhlNyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5
MTkzMzY5L0E1MUM0Q0FBNEVGRTExRUU5RDkxMUM2RUM0RjlBRTAyLzB+BggrBgEF
BQcwCoZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9B
OTE5MzM2OS9BNTFDNENBQTRFRkUxMUVFOUQ5MTFDNkVDNEY5QUUwMi83cTVTa2pz
THJuTEpnOUFRWDFDZDhoQzhDUncubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3Jy
ZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwGgYIKwYBBQUHAQgBAf8ECzAJ
oAcwBQIDAgnzMA0GCSqGSIb3DQEBCwUAA4IBAQANlCvQu42/KlV0LG6xfcw8y9k2
w4MPyjCmM6IvzR96dOf0yOOoyEMESGm3uIuB6ilf73N2Na6TFKRnT9rybj0n4zBb
ejLlFLEIokZWghcdAsQBVwQeewnlPBba4vzp57QKO5Wp7UMc+bWqN6PGRKIb9xLZ
ZtACYKQJMEqKONREmOIM8106pxpL0+ScP3P2mSAuI7FReec1fQtgHd/zu2Ops1x5
IyAQ42uTMHJmxgjkERXb3eUaT72pCiV+XkMPVOt260mFMRTzwUGGbN8M0oI8JKle
+LTY4agfjpmY1EVgflh38/qKdKeY31/9lnXqypEQC/fhWBZEjVQX8G5XX56y
-----END CERTIFICATE-----