Certificate

$ rpki-client -vvf rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/C9CviCcBmOQG0urp3K7J-w67gMU.cer
File:                     C9CviCcBmOQG0urp3K7J-w67gMU.cer (raw, json)
Hash identifier:          DAFpG7yXnTblgzgflQ4FLeh9Wdm7YNhE44oFg6jDDl8=
Subject key identifier:   0B:D0:AF:88:27:01:98:E4:06:D2:EA:E9:DC:AE:C9:FB:0E:BB:80:C5
Authority key identifier: 0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
Certificate issuer:       /CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Certificate serial:       01CE08
Authority info access:    rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
Manifest:                 rsync://rpki.apnic.net/member_repository/A9164F37/706D447E336F11E3AF64E98F5911EA32/C9CviCcBmOQG0urp3K7J-w67gMU.mft
caRepository:             rsync://rpki.apnic.net/member_repository/A9164F37/706D447E336F11E3AF64E98F5911EA32/
Notify URL:               https://rrdp.apnic.net/notification.xml
Certificate not before:   Thu 30 Nov 2023 15:50:15 +0000
Certificate not after:    Mon 30 Dec 2024 00:00:00 +0000
Subordinate resources:    AS: 131454
                          IP: 103.242.40.0/22

Validation:               OK
Signature path:           rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 30 Nov 2024 02:50:13 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 118280 (0x1ce08)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
        Validity
            Not Before: Nov 30 15:50:15 2023 GMT
            Not After : Dec 30 00:00:00 2024 GMT
        Subject: CN=A9164F37/serialNumber=0BD0AF88270198E406D2EAE9DCAEC9FB0EBB80C5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:de:e9:af:2b:c7:69:c0:33:9b:a9:60:3b:b6:ee:
                    c7:a6:45:0d:51:f9:93:a3:8e:8c:4e:c7:1c:b0:bb:
                    70:fc:40:5c:cb:a7:fb:a2:22:33:fa:bf:76:4b:01:
                    3e:b0:02:46:4c:6f:fe:f8:82:85:77:3b:ed:0e:ca:
                    c5:ba:ca:18:32:f8:52:06:f6:bf:e4:95:71:53:f9:
                    13:27:b7:a5:f1:e0:79:18:76:9f:27:6d:f1:43:97:
                    9d:25:1f:9c:c8:04:56:8e:22:a1:6f:9d:30:ef:78:
                    e1:57:e6:0b:92:c7:5b:1a:84:85:16:a1:de:13:0a:
                    91:b3:d3:b8:a5:e4:19:dd:e4:07:5b:b8:15:36:bc:
                    0b:62:cd:1d:26:b7:5e:b8:47:29:4d:e8:50:d6:ca:
                    66:3d:41:7e:c0:b1:cc:9c:e8:c9:a3:5c:f1:e3:ba:
                    30:34:50:22:64:77:cb:c9:0b:d9:eb:2b:a1:ee:2d:
                    ae:9c:cc:a3:9e:b6:e4:9e:37:99:49:24:2e:42:1b:
                    0d:5f:d5:c6:41:9c:05:08:6f:2f:9b:a3:5d:a5:2b:
                    d7:3f:58:0c:69:53:e0:95:88:c8:01:98:2d:8c:6b:
                    dd:cb:5e:cf:8a:15:ca:98:e9:4a:1b:ed:5d:32:3f:
                    01:e6:e0:bf:9d:70:48:93:a8:6f:68:eb:69:a2:01:
                    b1:a3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0B:D0:AF:88:27:01:98:E4:06:D2:EA:E9:DC:AE:C9:FB:0E:BB:80:C5
            X509v3 Authority Key Identifier:
                keyid:0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                CA Repository - URI:rsync://rpki.apnic.net/member_repository/A9164F37/706D447E336F11E3AF64E98F5911EA32/
                RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A9164F37/706D447E336F11E3AF64E98F5911EA32/C9CviCcBmOQG0urp3K7J-w67gMU.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  131454

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.242.40.0/22

    Signature Algorithm: sha256WithRSAEncryption
         87:7e:c4:ea:08:d7:44:e2:8e:e3:c8:49:a6:7a:99:f9:00:5c:
         4d:68:c8:cb:31:4b:5e:6b:8e:c3:a4:bf:ef:d3:a4:8e:e0:d7:
         a8:5c:d3:c9:9b:1b:2b:9b:f6:44:72:a5:01:71:4f:6d:2e:32:
         e7:ab:c0:34:c8:be:33:ae:2a:89:23:e6:e0:2e:df:0c:6c:42:
         f2:a3:a7:e2:ca:32:30:a3:80:58:8c:7c:89:11:c4:00:0b:a8:
         6b:ba:f3:20:f6:d5:6e:63:10:57:4f:c6:33:62:bd:b1:ae:bd:
         77:3d:c3:37:69:51:27:bc:53:c0:26:9b:1d:04:eb:12:c1:7c:
         14:38:9d:58:6d:9f:75:bd:d9:b7:23:fa:5f:45:e5:04:b3:9e:
         f4:16:71:dd:55:7a:86:a2:d3:2d:07:4b:39:ae:ff:fd:71:4e:
         ac:64:4c:10:38:6c:4f:ca:42:05:38:28:82:8f:0e:31:31:2d:
         34:d4:9e:4c:3f:12:5b:f3:b7:86:b1:b0:d5:d2:b2:74:91:a3:
         60:17:fb:17:fe:55:80:2d:fa:8a:14:c2:9c:21:a5:69:93:c5:
         81:9d:15:cc:5a:f0:a5:68:6c:6b:9b:ce:c7:3b:43:dc:67:c6:
         a3:4e:e8:07:55:d2:69:f4:c2:ef:5a:5d:c0:6b:e6:cc:f1:57:
         9a:aa:7f:c6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 05:03:15 2024 by rpki-client on console-fra.rpki-client.org