Certificate

$ rpki-client -vvf rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9ucS_Fxp5y9pOW5eEULMf3jGj9E.cer
File:                     9ucS_Fxp5y9pOW5eEULMf3jGj9E.cer (raw, json)
Hash identifier:          0dtnAQjS7icOSPse50p/vPECsw4tgUDGMRhtaJFTP3Q=
Subject key identifier:   F6:E7:12:FC:5C:69:E7:2F:69:39:6E:5E:11:42:CC:7F:78:C6:8F:D1
Authority key identifier: 0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
Certificate issuer:       /CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Certificate serial:       01D8AD
Authority info access:    rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
Manifest:                 rsync://rpki.apnic.net/member_repository/A9149BFB/DE2DE646980011EB8071DD68C4F9AE02/9ucS_Fxp5y9pOW5eEULMf3jGj9E.mft
caRepository:             rsync://rpki.apnic.net/member_repository/A9149BFB/DE2DE646980011EB8071DD68C4F9AE02/
Notify URL:               https://rrdp.apnic.net/notification.xml
Certificate not before:   Tue 16 Jan 2024 15:15:51 +0000
Certificate not after:    Mon 30 Dec 2024 00:00:00 +0000
Subordinate resources:    IP: 203.10.4.0 -- 203.10.15.255

Validation:               OK
Signature path:           rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 04 Apr 2024 20:48:50 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 121005 (0x1d8ad)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
        Validity
            Not Before: Jan 16 15:15:51 2024 GMT
            Not After : Dec 30 00:00:00 2024 GMT
        Subject: CN=A9149BFB/serialNumber=F6E712FC5C69E72F69396E5E1142CC7F78C68FD1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:91:0f:88:17:96:05:b9:f6:5d:cf:ce:83:95:4a:
                    2a:c5:50:96:09:cd:81:81:50:e8:fd:7d:2a:e5:a6:
                    cc:c8:54:28:68:83:f7:10:00:19:4c:f8:f8:4a:f3:
                    78:35:00:7e:51:14:3f:24:50:8e:1a:1c:a1:42:bc:
                    e1:5f:92:ac:c2:39:46:0c:59:dc:c1:38:c4:90:c6:
                    00:e5:67:ee:25:b2:a6:95:d6:a7:d9:a7:89:1f:05:
                    6e:19:55:8b:7c:9f:d3:d7:48:31:22:0e:11:a8:84:
                    41:86:20:bd:23:c7:70:b1:5b:0c:59:86:7c:20:e9:
                    6d:fb:7a:70:2c:8f:2b:8e:77:5d:e7:3a:64:1e:89:
                    c2:35:fa:88:95:26:7e:9f:91:fb:75:6e:b9:d3:7a:
                    db:ad:53:f8:bc:93:5b:78:7c:0e:b0:df:e6:e0:3a:
                    ab:8e:0b:ee:89:a5:74:4e:f5:c2:6f:58:6c:0c:df:
                    e0:58:f7:46:6c:a4:ea:85:7a:cc:ee:2c:66:84:d9:
                    f0:f5:75:db:05:4d:96:4f:39:1b:b4:58:9e:27:29:
                    db:da:34:e5:f6:1b:61:46:c8:42:f1:a3:7c:d0:f3:
                    3b:59:a7:6c:74:9e:85:02:b2:05:1a:c8:67:28:4d:
                    dd:17:62:3a:1d:62:06:4f:78:aa:50:76:4c:7c:2e:
                    36:5d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F6:E7:12:FC:5C:69:E7:2F:69:39:6E:5E:11:42:CC:7F:78:C6:8F:D1
            X509v3 Authority Key Identifier:
                keyid:0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                CA Repository - URI:rsync://rpki.apnic.net/member_repository/A9149BFB/DE2DE646980011EB8071DD68C4F9AE02/
                RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A9149BFB/DE2DE646980011EB8071DD68C4F9AE02/9ucS_Fxp5y9pOW5eEULMf3jGj9E.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  203.10.4.0-203.10.15.255

    Signature Algorithm: sha256WithRSAEncryption
         9d:ea:d9:63:4b:3e:51:94:da:c9:00:1b:63:14:80:64:17:d2:
         6b:d4:10:2b:a8:ca:70:69:3a:cc:d6:40:fb:b2:9d:34:c6:12:
         3d:b2:57:57:90:4f:b8:8b:9e:60:ea:6a:80:a3:6e:ef:f2:61:
         4a:fb:4b:c6:5d:63:ab:e5:36:e2:15:c1:36:99:22:48:2b:30:
         ef:86:5e:23:9b:f5:d2:8c:85:eb:68:cf:26:cc:3f:fb:32:d0:
         41:d4:5b:36:e1:22:42:f1:0c:e8:11:fe:87:52:7f:7a:90:af:
         34:4b:22:70:e5:cb:ea:15:b2:f4:a0:6d:2b:2b:2c:db:a6:d4:
         1f:47:d8:84:e5:fe:db:85:87:94:e1:65:4d:ed:22:2c:6e:ef:
         7a:04:43:1b:72:d1:78:e0:67:65:85:22:97:db:67:b3:a2:f2:
         b2:f3:3f:5a:af:aa:45:08:13:97:80:97:69:54:62:93:ac:6c:
         d6:65:22:8a:1e:db:dd:4d:1d:d4:c4:84:f3:74:4d:10:88:2e:
         c3:7c:19:00:a9:ce:c7:64:a0:6e:0d:02:72:01:0d:1a:22:7c:
         e6:84:8a:a8:d7:7c:81:55:a1:86:64:ef:66:a7:2b:f5:48:94:
         a2:a9:3c:6f:bd:1a:0d:23:25:25:4c:8b:d1:d9:ee:63:3b:40:
         f3:15:3c:99
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 28 21:36:52 2024 by rpki-client on console-ams.rpki-client.org