Certificate

$ rpki-client -vvf rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8n_4duRl5zyaUv04SNvXZb-yNdQ.cer
File:                     8n_4duRl5zyaUv04SNvXZb-yNdQ.cer (raw, json)
Hash identifier:          A5G4OumPiEa+0kt7eIOxjHeqOzfrCu2M0HuD9HKGpd0=
Subject key identifier:   F2:7F:F8:76:E4:65:E7:3C:9A:52:FD:38:48:DB:D7:65:BF:B2:35:D4
Authority key identifier: 0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
Certificate issuer:       /CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Certificate serial:       01CD68
Authority info access:    rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
Manifest:                 rsync://rpki.apnic.net/member_repository/A91175FF/E176D67AD09511E9B345A05DC4F9AE02/8n_4duRl5zyaUv04SNvXZb-yNdQ.mft
caRepository:             rsync://rpki.apnic.net/member_repository/A91175FF/E176D67AD09511E9B345A05DC4F9AE02/
Notify URL:               https://rrdp.apnic.net/notification.xml
Certificate not before:   Tue 28 Nov 2023 18:45:04 +0000
Certificate not after:    Fri 31 Jan 2025 00:00:00 +0000
Subordinate resources:    AS: 133142
                          IP: 103.101.215.0/24
                          IP: 2001:df6:f000::/48

Validation:               OK
Signature path:           rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 25 Apr 2024 02:16:37 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 118120 (0x1cd68)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
        Validity
            Not Before: Nov 28 18:45:04 2023 GMT
            Not After : Jan 31 00:00:00 2025 GMT
        Subject: CN=A91175FF/serialNumber=F27FF876E465E73C9A52FD3848DBD765BFB235D4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e7:d2:60:52:e2:c3:37:2c:2a:69:37:82:f5:f7:
                    a3:18:32:fc:34:91:a7:58:97:e0:e5:b0:12:a4:8d:
                    57:6c:80:ea:70:f5:08:cc:f5:92:b8:d8:af:08:31:
                    24:46:74:95:d5:fb:e3:51:59:b7:98:13:9d:d4:44:
                    eb:ab:9a:ce:87:76:32:ae:0e:12:77:c7:e9:0c:a0:
                    ed:6a:b5:1a:a8:c6:ba:c3:30:18:d7:19:3f:14:12:
                    21:6c:37:d7:a7:08:d0:96:cc:e4:e7:82:9d:7e:87:
                    4a:0c:73:89:4e:62:c2:7f:14:4b:12:90:d1:c6:1b:
                    86:98:b8:35:64:71:3c:d1:8a:c3:ac:bf:4b:e7:5f:
                    3f:ea:1c:da:ce:9b:a9:51:d4:ba:4e:4c:28:af:dc:
                    1c:0a:7f:b1:ba:38:66:e4:7b:44:87:4e:e0:a3:ab:
                    c7:ca:40:de:46:33:c5:d6:2e:98:c6:f7:97:1f:76:
                    3c:a8:45:47:01:3e:5d:6a:5f:52:2e:d9:6d:5b:8a:
                    ca:e3:dc:f2:14:84:20:6b:e6:c9:24:7b:79:73:c0:
                    dc:18:a3:5d:21:e2:45:eb:90:87:4e:d9:61:38:d1:
                    c6:56:8f:d2:e3:3a:bb:31:d5:a9:10:82:d1:3a:60:
                    bd:44:64:76:9d:56:75:10:7e:12:d1:2b:e1:ec:64:
                    81:27
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F2:7F:F8:76:E4:65:E7:3C:9A:52:FD:38:48:DB:D7:65:BF:B2:35:D4
            X509v3 Authority Key Identifier:
                keyid:0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                CA Repository - URI:rsync://rpki.apnic.net/member_repository/A91175FF/E176D67AD09511E9B345A05DC4F9AE02/
                RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A91175FF/E176D67AD09511E9B345A05DC4F9AE02/8n_4duRl5zyaUv04SNvXZb-yNdQ.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  133142

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.101.215.0/24
                IPv6:
                  2001:df6:f000::/48

    Signature Algorithm: sha256WithRSAEncryption
         66:c0:10:d0:87:f8:1f:5f:48:e6:0a:4d:74:96:0c:1b:42:1a:
         25:0e:93:1e:64:3b:f1:bf:df:4c:43:61:1f:fa:3a:23:f7:3b:
         3c:fb:73:42:95:e5:97:6b:3c:78:92:62:a1:d0:48:ef:ea:33:
         56:4d:69:89:bc:b3:46:4d:b5:a4:65:ed:95:62:5a:5b:48:57:
         9d:2f:d3:9a:85:ab:9d:c9:94:b5:0c:43:a8:6e:40:c4:c3:3b:
         f5:1e:a8:b4:98:55:b9:89:a3:e7:52:6a:48:11:0f:91:d6:53:
         4f:1f:f6:1c:14:37:14:3e:ac:e2:b8:e1:c0:fe:53:16:11:74:
         6a:1e:c2:32:d2:bf:df:d6:14:af:a4:d3:4c:8c:a6:a1:c1:6d:
         36:aa:8a:da:ef:63:70:a6:63:b5:7a:54:fd:22:35:88:87:49:
         24:fc:c2:91:25:35:be:99:58:37:d7:2a:3f:eb:12:93:0f:13:
         7c:14:01:7a:46:4e:0c:95:a5:f4:9d:7b:bf:53:34:55:bb:d5:
         d0:c7:c8:00:53:10:da:b0:26:36:37:f0:0b:33:38:8e:55:5c:
         80:3f:c2:51:38:d2:3b:32:62:f7:11:a4:c0:3d:57:d8:9d:86:
         d6:4f:cb:6d:73:5f:09:5f:ba:e8:1c:8a:c4:47:5d:6d:71:cd:
         8e:b9:b5:e2
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----