Certificate

$ rpki-client -vvf rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CB6icKn0s2sOyJai0hSO5Ok-Xys.cer
File:                     CB6icKn0s2sOyJai0hSO5Ok-Xys.cer (raw, json)
Hash identifier:          8BLW7obX5231lRjS3roNCx544zlESJEmLTer+oXYZkE=
Subject key identifier:   08:1E:A2:70:A9:F4:B3:6B:0E:C8:96:A2:D2:14:8E:E4:E9:3E:5F:2B
Authority key identifier: 0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
Certificate issuer:       /CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Certificate serial:       021CAF
Authority info access:    rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
Manifest:                 rsync://rpki.apnic.net/member_repository/A91BB921/DDB8E14C756211EEBB825257C4F9AE02/CB6icKn0s2sOyJai0hSO5Ok-Xys.mft
caRepository:             rsync://rpki.apnic.net/member_repository/A91BB921/DDB8E14C756211EEBB825257C4F9AE02/
Notify URL:               https://rrdp.apnic.net/notification.xml
Certificate not before:   Thu 21 Nov 2024 03:56:45 +0000
Certificate not after:    Tue 30 Dec 2025 00:00:00 +0000
Subordinate resources:    AS: 147056
                          IP: 103.173.187.0/24
                          IP: 2001:df7:a680::/48

Validation:               OK
Signature path:           rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 04 Dec 2024 02:50:13 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 138415 (0x21caf)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
        Validity
            Not Before: Nov 21 03:56:45 2024 GMT
            Not After : Dec 30 00:00:00 2025 GMT
        Subject: CN=A91BB921/serialNumber=081EA270A9F4B36B0EC896A2D2148EE4E93E5F2B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9c:9c:7e:7a:b4:5e:ed:87:3c:d7:5c:ca:f6:e0:
                    2f:37:52:f2:f2:f8:cc:22:1a:62:41:ea:b8:ce:3e:
                    09:bf:2b:20:09:9c:fd:12:45:30:2f:ba:83:ab:35:
                    48:b7:3e:d4:3b:0d:ad:55:a9:e6:84:32:33:8f:12:
                    b8:c8:9b:c3:9d:eb:18:19:8a:0a:94:45:ab:45:12:
                    2d:38:e9:05:50:a6:a8:19:25:b6:f6:57:58:72:41:
                    9a:19:3c:eb:73:bd:b3:02:1c:ca:68:8f:6e:25:fd:
                    79:16:cb:80:cc:e3:1b:62:c9:e9:66:b9:d1:01:1a:
                    d7:22:5a:4a:6c:7c:ad:0d:7a:86:da:5f:84:2d:ab:
                    0d:21:1f:23:a2:cc:36:40:2a:d8:e5:bd:9b:51:cd:
                    68:fc:19:b6:21:48:c4:61:8c:0e:0b:6e:3d:24:89:
                    0d:bc:3b:cc:3d:51:90:d8:b9:b6:df:19:d7:f5:03:
                    e9:15:a6:2b:5d:99:22:43:e3:e8:b4:43:7f:4d:d4:
                    15:ac:93:66:c7:0d:10:6a:bd:80:a2:f2:3e:bf:87:
                    34:dc:61:a7:bb:4b:81:f3:f8:9a:86:c0:52:34:c9:
                    c7:eb:4b:b5:fb:49:cf:5f:8b:db:0e:ad:24:a9:7b:
                    d4:87:bf:6c:22:79:b4:9e:8f:f7:1a:6d:34:be:47:
                    85:67
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                08:1E:A2:70:A9:F4:B3:6B:0E:C8:96:A2:D2:14:8E:E4:E9:3E:5F:2B
            X509v3 Authority Key Identifier:
                keyid:0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                CA Repository - URI:rsync://rpki.apnic.net/member_repository/A91BB921/DDB8E14C756211EEBB825257C4F9AE02/
                RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A91BB921/DDB8E14C756211EEBB825257C4F9AE02/CB6icKn0s2sOyJai0hSO5Ok-Xys.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  147056

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.173.187.0/24
                IPv6:
                  2001:df7:a680::/48

    Signature Algorithm: sha256WithRSAEncryption
         89:33:01:81:2a:63:13:83:8f:cf:8e:c9:4f:d1:23:7e:57:20:
         36:88:10:7d:b0:54:b9:eb:de:cd:ee:19:2d:6f:22:dc:f0:fc:
         9f:dc:dc:72:90:a4:03:9b:7c:2c:96:d2:33:22:4a:b2:39:62:
         27:bc:db:4a:41:88:5e:14:14:a5:43:b7:69:f0:8c:04:c8:46:
         7f:09:a8:f6:2b:a7:37:90:50:f2:11:f0:37:c0:38:e0:48:62:
         d0:70:37:ba:04:af:8c:30:ff:c0:8c:b8:57:2a:ad:0a:7f:c5:
         ff:75:47:11:5d:52:14:2f:03:36:41:a2:e1:62:43:0b:d3:18:
         e6:83:d5:5c:c0:43:7e:74:9f:7d:44:8c:b4:9a:91:3f:11:0b:
         47:07:f8:1a:19:f6:bf:c4:3a:c0:74:d9:43:1b:f4:4a:7e:a1:
         da:6e:76:36:36:c3:0e:cd:bb:21:d9:b0:b8:6a:e9:9d:c2:7d:
         1a:74:f1:21:49:af:0c:e2:fb:14:5b:01:25:b4:39:0a:6c:a4:
         52:43:2c:dd:92:14:15:44:d8:35:2d:b7:12:9a:69:ea:7e:7f:
         e5:09:ca:48:05:e9:52:3b:54:8e:09:20:98:5e:4e:a4:de:4a:
         8c:2d:e2:f5:f7:08:e9:35:3b:7a:94:9a:4f:8e:49:e0:ce:e6:
         fa:e7:16:6d
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----