Certificate

$ rpki-client -vvf rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7v0-hq90-Ug0ZAFrk0_D7xTILUY.cer
File:                     7v0-hq90-Ug0ZAFrk0_D7xTILUY.cer (raw, json)
Hash identifier:          FgcXffp0uh+MgmRv6l2+KlWkFiIDhZ5BG34f4LAzoNk=
Subject key identifier:   EE:FD:3E:86:AF:74:F9:48:34:64:01:6B:93:4F:C3:EF:14:C8:2D:46
Authority key identifier: 0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
Certificate issuer:       /CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Certificate serial:       01AAC7
Authority info access:    rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
Manifest:                 rsync://rpki.apnic.net/member_repository/A91C0FF9/DD6A765080CE11EB93501868C4F9AE02/7v0-hq90-Ug0ZAFrk0_D7xTILUY.mft
caRepository:             rsync://rpki.apnic.net/member_repository/A91C0FF9/DD6A765080CE11EB93501868C4F9AE02/
Notify URL:               https://rrdp.apnic.net/notification.xml
Certificate not before:   Mon 19 Jun 2023 17:28:35 +0000
Certificate not after:    Sat 31 Aug 2024 00:00:00 +0000
Subordinate resources:    AS: 132262
                          IP: 103.9.64.0/22
                          IP: 2403:d100::/32

Validation:               OK
Signature path:           rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 02 May 2024 05:07:47 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 109255 (0x1aac7)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
        Validity
            Not Before: Jun 19 17:28:35 2023 GMT
            Not After : Aug 31 00:00:00 2024 GMT
        Subject: CN=A91C0FF9/serialNumber=EEFD3E86AF74F9483464016B934FC3EF14C82D46
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:d5:f5:4c:32:77:3a:a9:ce:c9:19:b5:20:af:
                    4a:3b:b4:7b:c2:4c:61:9d:67:84:e1:a7:f0:6b:2d:
                    21:0e:74:99:9b:1e:13:60:6a:8d:98:d8:e6:90:84:
                    0b:54:03:65:76:b2:77:bb:d1:2f:a3:10:eb:ab:26:
                    f1:40:c9:84:dd:29:0f:10:89:bb:33:5d:e5:18:f3:
                    bd:38:07:50:f5:1e:d8:a4:3b:d5:80:9a:b0:ee:06:
                    26:56:fb:64:73:d0:51:f8:13:d6:e7:fd:1c:8e:d8:
                    f5:29:28:b0:06:aa:65:1f:1e:ee:e2:aa:fa:4f:e0:
                    5a:e3:bc:9b:9e:d6:78:f3:9f:dc:8f:4b:43:0d:fd:
                    06:cd:93:4c:6b:5f:2d:c6:e4:2e:32:5e:09:7f:d7:
                    70:45:9a:09:b9:4c:20:98:e3:ea:65:46:d5:1d:49:
                    c1:7a:36:a2:ce:09:4f:52:ca:68:f5:1b:4c:02:c6:
                    af:1e:30:6d:4a:8d:90:bc:f1:54:8f:81:4b:b6:09:
                    38:f3:cc:3a:4b:d8:86:80:fa:e9:66:2d:df:ef:53:
                    96:a7:dc:50:20:98:b0:ca:f9:87:04:dd:1a:aa:f7:
                    fe:8a:c6:ed:fa:02:db:c5:c4:b5:96:6f:fa:60:16:
                    7f:06:27:34:d2:cb:4e:c9:b0:30:f3:c6:da:f7:14:
                    32:81
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EE:FD:3E:86:AF:74:F9:48:34:64:01:6B:93:4F:C3:EF:14:C8:2D:46
            X509v3 Authority Key Identifier:
                keyid:0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                CA Repository - URI:rsync://rpki.apnic.net/member_repository/A91C0FF9/DD6A765080CE11EB93501868C4F9AE02/
                RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A91C0FF9/DD6A765080CE11EB93501868C4F9AE02/7v0-hq90-Ug0ZAFrk0_D7xTILUY.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  132262

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.9.64.0/22
                IPv6:
                  2403:d100::/32

    Signature Algorithm: sha256WithRSAEncryption
         55:af:4c:89:9a:5a:85:05:bb:7f:04:17:fc:21:92:92:c7:8d:
         07:5d:41:10:e3:59:6a:82:e8:79:c8:ee:30:8c:73:92:07:b1:
         70:35:5e:f1:b0:e6:c6:78:13:55:53:1d:69:22:49:82:1f:66:
         0a:91:38:58:f5:c4:d9:3f:27:e1:d0:f6:89:3d:70:65:f7:0a:
         ac:d3:bc:aa:47:8c:74:0f:1c:28:0d:e8:80:e7:ae:5e:66:be:
         b3:a7:57:e6:f5:8a:6d:76:ec:f4:9d:42:88:f1:b4:1e:1c:11:
         12:fe:74:b6:52:73:31:55:fd:ed:92:55:9d:66:c8:d1:62:2c:
         a7:3e:b4:29:36:2e:38:3a:68:ee:04:3d:f7:cf:f4:12:93:48:
         8a:13:db:ab:73:d8:69:30:68:4d:6b:75:7d:4e:50:58:e7:ac:
         85:a0:b7:18:1b:72:ac:d0:20:32:42:e6:99:75:85:af:ed:72:
         74:b0:1b:5f:e0:83:85:14:b6:c7:0a:1f:e3:99:0b:15:cc:c1:
         06:2b:8a:24:91:da:ce:05:27:57:58:07:67:b5:7c:b2:27:89:
         a7:bf:fe:ae:58:04:a1:e0:ec:50:aa:44:ea:b4:64:f7:ab:47:
         cc:bd:84:cd:bb:b1:54:f4:db:eb:4b:23:a9:15:e6:b2:15:ee:
         c8:51:98:da
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----