Certificate

$ rpki-client -vvf rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/C1O4Cmyciut01te7VxpSAM5V2PM.cer
File:                     C1O4Cmyciut01te7VxpSAM5V2PM.cer (raw, json)
Hash identifier:          WdpPDGkSiq+9cYNdQnNXofxLbob+yGmP6+5qqNKwOW4=
Subject key identifier:   0B:53:B8:0A:6C:9C:8A:EB:74:D6:D7:BB:57:1A:52:00:CE:55:D8:F3
Authority key identifier: 0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
Certificate issuer:       /CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Certificate serial:       02064F
Authority info access:    rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
Manifest:                 rsync://rpki.apnic.net/member_repository/A9155DEB/162CB274EA4C11EAA257B939C4F9AE02/C1O4Cmyciut01te7VxpSAM5V2PM.mft
caRepository:             rsync://rpki.apnic.net/member_repository/A9155DEB/162CB274EA4C11EAA257B939C4F9AE02/
Notify URL:               https://rrdp.apnic.net/notification.xml
Certificate not before:   Mon 12 Aug 2024 15:37:15 +0000
Certificate not after:    Sun 31 Aug 2025 00:00:00 +0000
Subordinate resources:    AS: 135494
                          IP: 103.219.232.0/23

Validation:               OK
Signature path:           rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 30 Nov 2024 02:50:13 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 132687 (0x2064f)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
        Validity
            Not Before: Aug 12 15:37:15 2024 GMT
            Not After : Aug 31 00:00:00 2025 GMT
        Subject: CN=A9155DEB/serialNumber=0B53B80A6C9C8AEB74D6D7BB571A5200CE55D8F3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f2:04:87:b1:d6:3d:59:0e:2f:b5:03:11:aa:03:
                    b6:db:60:69:f9:ef:2d:2d:58:7f:b3:6e:26:2b:e8:
                    de:c6:90:70:2d:7e:bb:28:1a:d9:0b:5a:0b:8d:eb:
                    d8:63:9c:d4:66:c7:9c:f3:96:76:13:b0:06:b4:9e:
                    4f:52:f5:82:b5:eb:8e:16:c9:b2:01:93:b6:65:a7:
                    41:81:cd:26:40:4c:c1:e9:4d:92:3b:46:34:71:72:
                    16:0e:a9:dd:c3:2d:1a:c6:61:b6:af:70:50:6c:81:
                    9f:f8:85:0e:ea:16:dc:7b:45:4e:63:f3:45:14:b0:
                    39:55:e3:36:d3:a8:ab:2e:32:98:25:5c:fe:c0:cd:
                    16:cf:09:cd:1f:bd:b1:cd:27:f7:0f:ca:fa:20:70:
                    ad:aa:d8:d4:f7:5f:10:fe:13:91:eb:f7:24:69:90:
                    2a:8b:5c:a8:1b:b8:1a:e0:d1:40:40:b4:76:be:b6:
                    8a:03:1d:6c:e7:f1:1b:7c:31:56:c3:2d:31:ed:37:
                    78:56:8d:37:e1:39:f1:41:20:30:68:47:fc:84:19:
                    e9:bd:fa:37:26:26:e3:4a:d2:11:e6:b0:00:b4:82:
                    1d:1f:3c:50:46:a9:86:85:de:e6:4d:de:f0:14:a6:
                    af:ec:26:d6:06:c3:11:18:51:91:9f:87:1a:4c:65:
                    2b:af
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0B:53:B8:0A:6C:9C:8A:EB:74:D6:D7:BB:57:1A:52:00:CE:55:D8:F3
            X509v3 Authority Key Identifier:
                keyid:0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                CA Repository - URI:rsync://rpki.apnic.net/member_repository/A9155DEB/162CB274EA4C11EAA257B939C4F9AE02/
                RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A9155DEB/162CB274EA4C11EAA257B939C4F9AE02/C1O4Cmyciut01te7VxpSAM5V2PM.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  135494

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.219.232.0/23

    Signature Algorithm: sha256WithRSAEncryption
         16:4d:30:4c:74:45:8c:fa:3a:c5:f2:64:82:17:1a:82:6b:c1:
         e7:cf:33:92:00:44:4d:9a:c3:20:32:18:19:90:4e:75:79:f2:
         2b:54:27:ef:92:d8:78:ee:14:a2:ad:18:fb:49:d1:88:a9:a7:
         dc:70:08:71:2a:77:5d:13:98:1f:a5:4b:26:0b:98:b2:83:66:
         d5:aa:04:62:bc:22:aa:ec:b5:8a:b6:41:b0:f7:6a:53:6f:73:
         d1:25:70:85:1c:e0:68:2d:a4:02:3c:14:f1:b6:69:71:19:9e:
         04:3a:ac:ac:6b:34:bc:f3:87:59:8b:11:02:ac:fc:a3:b2:63:
         e6:04:86:3b:67:d3:18:c8:0e:83:4a:fe:14:9c:8f:1e:0f:3a:
         81:8b:c3:fe:f5:3d:6e:14:49:70:6c:8c:0f:75:b0:66:ae:84:
         bc:6d:e8:45:15:f0:c0:94:bd:fd:71:07:b6:02:56:28:8e:e8:
         4e:7e:fe:10:52:ed:eb:e8:f0:07:92:76:6f:7d:b8:ab:31:ce:
         9d:08:dd:23:de:01:23:3e:e1:f7:7a:bf:56:66:65:80:2a:8a:
         17:8c:d3:44:4e:70:c2:52:1a:fe:5d:98:eb:9a:11:97:03:e0:
         23:eb:28:37:5d:80:36:5f:61:70:c3:29:41:0a:63:b0:ed:c1:
         4b:3b:10:32
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 03:59:27 2024 by rpki-client on console-ams.rpki-client.org