Certificate

$ rpki-client -vvf rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9M_KHWYL8WGz9AmtywwTwPqCJGQ.cer
File:                     9M_KHWYL8WGz9AmtywwTwPqCJGQ.cer (raw, json)
Hash identifier:          ahUqpygcf4VzSqS43OPouVjdH8rP/f6hPWGntWS6anI=
Subject key identifier:   F4:CF:CA:1D:66:0B:F1:61:B3:F4:09:AD:CB:0C:13:C0:FA:82:24:64
Authority key identifier: 0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
Certificate issuer:       /CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Certificate serial:       01AFC6
Authority info access:    rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
Manifest:                 rsync://rpki.apnic.net/member_repository/A91E2695/BB87AC4A47F811E880E4F410C4F9AE02/9M_KHWYL8WGz9AmtywwTwPqCJGQ.mft
caRepository:             rsync://rpki.apnic.net/member_repository/A91E2695/BB87AC4A47F811E880E4F410C4F9AE02/
Notify URL:               https://rrdp.apnic.net/notification.xml
Certificate not before:   Wed 12 Jul 2023 17:05:53 +0000
Certificate not after:    Sat 31 Aug 2024 00:00:00 +0000
Subordinate resources:    AS: 136558
                          IP: 103.92.208.0/24
                          IP: 103.101.53.0 -- 103.101.55.255
                          IP: 2405:65c0::/32

Validation:               OK
Signature path:           rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 27 Apr 2024 02:50:25 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 110534 (0x1afc6)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
        Validity
            Not Before: Jul 12 17:05:53 2023 GMT
            Not After : Aug 31 00:00:00 2024 GMT
        Subject: CN=A91E2695/serialNumber=F4CFCA1D660BF161B3F409ADCB0C13C0FA822464
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:68:77:62:8f:f3:be:19:2f:1f:5d:21:07:1c:
                    00:2c:28:56:1e:49:b9:0d:00:45:53:94:68:73:a2:
                    15:17:2e:4f:d7:0f:a9:b7:67:e2:13:49:aa:0d:58:
                    5c:05:86:99:d9:85:69:d6:50:d6:85:b6:eb:75:40:
                    04:8d:20:d2:57:0e:77:e8:58:99:26:9a:f5:d4:f5:
                    2a:3b:04:68:98:04:b5:a8:d8:51:b3:28:10:11:80:
                    83:41:99:ea:d6:2f:e4:a9:0d:3d:e1:e5:3f:9f:ba:
                    13:13:2c:91:d4:f1:97:2a:16:cf:58:fa:ef:b8:01:
                    31:44:cf:e0:f4:ef:cf:d1:5c:01:2f:8c:9d:ea:88:
                    f9:e2:4c:74:4c:6b:90:76:de:11:6b:31:df:da:45:
                    cb:c0:ab:0a:36:21:82:09:4f:00:e8:27:b7:02:52:
                    14:03:0f:36:60:4e:ca:fd:60:e7:d4:78:7c:28:5e:
                    37:bc:f0:10:28:68:f2:74:a2:62:47:d1:ad:8b:31:
                    d5:41:ab:bf:20:5e:15:42:60:77:ef:93:ad:65:b3:
                    1c:8b:33:66:06:d7:7e:d2:69:53:c4:4c:ee:6e:7f:
                    fe:e0:ce:03:af:98:ec:5a:b8:81:b6:53:05:a1:cb:
                    4e:f9:de:86:31:d6:fb:f8:5e:e9:5c:7a:6e:7c:60:
                    77:07
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F4:CF:CA:1D:66:0B:F1:61:B3:F4:09:AD:CB:0C:13:C0:FA:82:24:64
            X509v3 Authority Key Identifier:
                keyid:0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                CA Repository - URI:rsync://rpki.apnic.net/member_repository/A91E2695/BB87AC4A47F811E880E4F410C4F9AE02/
                RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A91E2695/BB87AC4A47F811E880E4F410C4F9AE02/9M_KHWYL8WGz9AmtywwTwPqCJGQ.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  136558

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.92.208.0/24
                  103.101.53.0-103.101.55.255
                IPv6:
                  2405:65c0::/32

    Signature Algorithm: sha256WithRSAEncryption
         31:e1:3a:4e:63:d7:05:4c:f4:d9:ac:63:15:fc:d4:80:4a:75:
         4d:71:43:6b:2c:31:9b:42:0f:7b:6a:5f:fc:7f:64:ff:83:59:
         c8:b0:97:33:8e:09:76:eb:02:b3:7c:ad:3c:cb:fe:0a:ab:b4:
         78:9d:86:b9:13:0f:7d:23:b0:93:59:68:ea:e5:bd:7a:bf:b6:
         52:16:50:a7:63:36:3e:98:87:83:b0:10:58:50:52:ad:d7:4c:
         6c:18:81:c1:27:4d:85:f2:2b:2f:6f:63:98:58:9e:65:38:b9:
         5a:49:3d:83:c7:6f:4d:5c:b1:2d:23:dd:c4:ec:98:47:8f:4e:
         bd:9a:d8:cd:51:6b:16:1f:0d:07:0d:f2:ee:b0:c7:08:d7:53:
         c8:56:60:13:72:c2:65:bc:84:7b:71:ef:2b:dc:6e:96:94:3b:
         81:a0:e6:55:c7:7f:60:b4:61:1c:11:10:29:66:96:93:c0:68:
         4d:0a:a8:d6:65:93:92:ce:43:7e:02:40:df:b9:90:61:7a:bc:
         2e:ba:6f:75:6f:e0:c1:8b:ee:f9:2e:49:85:d0:e6:4e:8f:63:
         db:8c:a2:07:ea:a0:b3:76:4a:9a:b6:0c:ea:3f:bd:92:7a:cb:
         f2:32:1c:9f:a8:e5:8e:2a:24:ce:65:27:78:e7:a4:b4:69:0f:
         b5:ec:ef:89
-----BEGIN CERTIFICATE-----
MIIGNzCCBR+gAwIBAgIDAa/GMA0GCSqGSIb3DQEBCwUAMEYxETAPBgNVBAMTCEE5
MERDNUJFMTEwLwYDVQQFEygwRTY1QTRGNUZEMzZCNUJENjhFQjNDOTIzNDA4OTc4
QzkwN0FBNzlGMB4XDTIzMDcxMjE3MDU1M1oXDTI0MDgzMTAwMDAwMFowRjERMA8G
A1UEAxMIQTkxRTI2OTUxMTAvBgNVBAUTKEY0Q0ZDQTFENjYwQkYxNjFCM0Y0MDlB
RENCMEMxM0MwRkE4MjI0NjQwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB
AQCmaHdij/O+GS8fXSEHHAAsKFYeSbkNAEVTlGhzohUXLk/XD6m3Z+ITSaoNWFwF
hpnZhWnWUNaFtut1QASNINJXDnfoWJkmmvXU9So7BGiYBLWo2FGzKBARgINBmerW
L+SpDT3h5T+fuhMTLJHU8ZcqFs9Y+u+4ATFEz+D078/RXAEvjJ3qiPniTHRMa5B2
3hFrMd/aRcvAqwo2IYIJTwDoJ7cCUhQDDzZgTsr9YOfUeHwoXje88BAoaPJ0omJH
0a2LMdVBq78gXhVCYHfvk61lsxyLM2YG137SaVPETO5uf/7gzgOvmOxauIG2UwWh
y0753oYx1vv4Xulcem58YHcHAgMBAAGjggMsMIIDKDAdBgNVHQ4EFgQU9M/KHWYL
8WGz9AmtywwTwPqCJGQwHwYDVR0jBBgwFoAUDmWk9f02tb1o6zySNAiXjJB6p58w
DgYDVR0PAQH/BAQDAgEGMA8GA1UdEwEB/wQFMAMBAf8wcwYDVR0fBGwwajBooGag
ZIZicnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2
NjExRTJCQjQ2OEY3QzcyRkQxRkYyL0RtV2s5ZjAydGIxbzZ6eVNOQWlYakpCNnA1
OC5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L3JlcG9zaXRvcnkvOTgwNjUyRTBCNzdFMTFFN0E5NkEzOTUyMUE0
RjRGQjQvRG1XazlmMDJ0YjFvNnp5U05BaVhqSkI2cDU4LmNlcjBKBgNVHSABAf8E
QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj
Lm5ldC9SUEtJL0NQUy5wZGYwggEoBggrBgEFBQcBCwSCARowggEWMF8GCCsGAQUF
BzAFhlNyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5
MUUyNjk1L0JCODdBQzRBNDdGODExRTg4MEU0RjQxMEM0RjlBRTAyLzB+BggrBgEF
BQcwCoZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9B
OTFFMjY5NS9CQjg3QUM0QTQ3RjgxMUU4ODBFNEY0MTBDNEY5QUUwMi85TV9LSFdZ
TDhXR3o5QW10eXd3VHdQcUNKR1EubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3Jy
ZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwGgYIKwYBBQUHAQgBAf8ECzAJ
oAcwBQIDAhVuMDwGCCsGAQUFBwEHAQH/BC0wKzAaBAIAATAUAwQAZ1zQMAwDBABn
ZTUDBANnZTAwDQQCAAIwBwMFACQFZcAwDQYJKoZIhvcNAQELBQADggEBADHhOk5j
1wVM9NmsYxX81IBKdU1xQ2ssMZtCD3tqX/x/ZP+DWciwlzOOCXbrArN8rTzL/gqr
tHidhrkTD30jsJNZaOrlvXq/tlIWUKdjNj6Yh4OwEFhQUq3XTGwYgcEnTYXyKy9v
Y5hYnmU4uVpJPYPHb01csS0j3cTsmEePTr2a2M1RaxYfDQcN8u6wxwjXU8hWYBNy
wmW8hHtx7yvcbpaUO4Gg5lXHf2C0YRwREClmlpPAaE0KqNZlk5LOQ34CQN+5kGF6
vC66b3Vv4MGL7vkuSYXQ5k6PY9uMogfqoLN2Spq2DOo/vZJ6y/IyHJ+o5Y4qJM5l
J3jnpLRpD7Xs74k=
-----END CERTIFICATE-----
Generated at Sat Apr 20 03:57:42 2024 by rpki-client on console-fra.rpki-client.org