Certificate

$ rpki-client -vvf rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CpP_fFNb7YcmpwitYz9tlXXxx5g.cer
File:                     CpP_fFNb7YcmpwitYz9tlXXxx5g.cer (raw, json)
Hash identifier:          jJGwcUPPS7pvLb4FYItAT7DI4LkOaQtKmV2ycxEEc5o=
Subject key identifier:   0A:93:FF:7C:53:5B:ED:87:26:A7:08:AD:63:3F:6D:95:75:F1:C7:98
Authority key identifier: 0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
Certificate issuer:       /CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Certificate serial:       01E224
Authority info access:    rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
Manifest:                 rsync://rpki.apnic.net/member_repository/A91BF0DF/16A0BF24EADC11E799C11F45C4F9AE02/CpP_fFNb7YcmpwitYz9tlXXxx5g.mft
caRepository:             rsync://rpki.apnic.net/member_repository/A91BF0DF/16A0BF24EADC11E799C11F45C4F9AE02/
Notify URL:               https://rrdp.apnic.net/notification.xml
Certificate not before:   Fri 01 Mar 2024 23:54:18 +0000
Certificate not after:    Mon 01 Jul 2024 00:00:00 +0000
Subordinate resources:    IP: 2001:df0:3200::/48

Validation:               OK
Signature path:           rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 05 Apr 2024 04:49:26 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 123428 (0x1e224)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
        Validity
            Not Before: Mar  1 23:54:18 2024 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=A91BF0DF/serialNumber=0A93FF7C535BED8726A708AD633F6D9575F1C798
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:8d:46:d4:bb:c8:3b:cf:57:8f:6d:36:10:59:
                    74:c1:a0:5f:00:23:37:b4:6a:38:4f:11:fe:ee:74:
                    3a:e5:60:cc:62:b8:76:18:5c:ff:f6:88:a8:63:d3:
                    16:7a:fe:fa:da:c1:5c:e3:db:7e:37:3c:a6:02:90:
                    32:2b:bf:4f:0d:ec:f8:da:0b:73:95:ef:47:90:03:
                    ba:4a:ee:50:a7:bb:04:0f:95:e3:6c:70:55:d3:f0:
                    eb:cd:db:13:79:6e:12:12:fc:79:a3:1c:96:26:16:
                    77:44:2a:87:35:2f:60:6a:04:1a:e0:86:f5:e2:1c:
                    8e:38:31:96:ea:ad:cd:82:75:1c:ca:87:8e:7d:03:
                    df:29:6d:77:59:2b:88:5d:41:88:72:0d:d1:7a:ba:
                    1b:90:c3:66:43:8f:36:eb:34:20:8d:8a:5f:ad:46:
                    13:74:28:c0:e7:73:7a:29:79:75:6c:58:29:62:ce:
                    15:1d:56:66:89:c9:2b:2c:4d:03:47:71:05:3d:56:
                    2e:9c:8f:fc:c7:2d:d9:3f:72:b3:b7:ed:99:1e:27:
                    7f:ce:8e:27:f5:a5:f1:04:62:0e:c0:aa:e1:c2:7a:
                    59:be:3c:fc:79:39:f2:ec:1a:f7:01:3c:13:2c:d2:
                    c3:cd:6f:f3:ae:ed:31:b3:63:3b:3f:e2:d7:01:67:
                    61:75
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0A:93:FF:7C:53:5B:ED:87:26:A7:08:AD:63:3F:6D:95:75:F1:C7:98
            X509v3 Authority Key Identifier:
                keyid:0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                CA Repository - URI:rsync://rpki.apnic.net/member_repository/A91BF0DF/16A0BF24EADC11E799C11F45C4F9AE02/
                RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A91BF0DF/16A0BF24EADC11E799C11F45C4F9AE02/CpP_fFNb7YcmpwitYz9tlXXxx5g.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:df0:3200::/48

    Signature Algorithm: sha256WithRSAEncryption
         45:4e:31:c3:88:d8:bf:22:f8:84:27:26:d5:23:13:d0:9e:d6:
         8d:29:77:ec:fb:76:0d:af:f5:76:44:ef:9f:df:c0:55:25:dd:
         6f:52:cb:32:82:2f:5b:54:52:d1:9f:3e:a1:92:af:cd:d0:73:
         b0:86:48:2d:e1:82:89:5f:b6:1b:28:93:59:21:b2:94:ad:f9:
         3e:48:7a:b5:c5:f0:76:10:c3:c1:39:c1:fd:23:17:a9:a5:d8:
         fb:0e:3e:8e:07:a9:a0:d3:0f:66:01:56:e0:a2:d9:80:45:f5:
         f5:75:14:c4:4d:98:cb:f8:58:11:b4:12:bf:3b:63:d7:5e:40:
         a8:94:a1:7a:61:2c:49:1a:c1:44:1f:b1:82:50:16:35:f0:ba:
         f7:64:00:16:2b:ac:af:e4:3a:08:31:0a:64:0b:6d:9d:62:30:
         93:e5:98:f3:30:6a:1d:79:24:64:27:c5:a6:2c:34:77:aa:50:
         fe:a9:56:b1:99:47:c6:f1:16:6f:74:c3:5f:16:ab:5b:fc:15:
         c4:c6:2f:21:cb:bc:0f:14:3a:b2:28:ff:2f:42:3c:e1:28:d5:
         46:73:c6:64:b1:5d:97:c9:b9:84:f2:ae:07:4b:24:6d:fb:aa:
         f5:83:e0:44:37:84:78:d4:f8:7c:79:35:d1:3e:40:a3:9f:0f:
         9c:66:6f:4d
-----BEGIN CERTIFICATE-----
MIIGATCCBOmgAwIBAgIDAeIkMA0GCSqGSIb3DQEBCwUAMEYxETAPBgNVBAMTCEE5
MERDNUJFMTEwLwYDVQQFEygwRTY1QTRGNUZEMzZCNUJENjhFQjNDOTIzNDA4OTc4
QzkwN0FBNzlGMB4XDTI0MDMwMTIzNTQxOFoXDTI0MDcwMTAwMDAwMFowRjERMA8G
A1UEAxMIQTkxQkYwREYxMTAvBgNVBAUTKDBBOTNGRjdDNTM1QkVEODcyNkE3MDhB
RDYzM0Y2RDk1NzVGMUM3OTgwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB
AQDCjUbUu8g7z1ePbTYQWXTBoF8AIze0ajhPEf7udDrlYMxiuHYYXP/2iKhj0xZ6
/vrawVzj2343PKYCkDIrv08N7PjaC3OV70eQA7pK7lCnuwQPleNscFXT8OvN2xN5
bhIS/HmjHJYmFndEKoc1L2BqBBrghvXiHI44MZbqrc2CdRzKh459A98pbXdZK4hd
QYhyDdF6uhuQw2ZDjzbrNCCNil+tRhN0KMDnc3opeXVsWClizhUdVmaJySssTQNH
cQU9Vi6cj/zHLdk/crO37ZkeJ3/Ojif1pfEEYg7AquHCelm+PPx5OfLsGvcBPBMs
0sPNb/Ou7TGzYzs/4tcBZ2F1AgMBAAGjggL2MIIC8jAdBgNVHQ4EFgQUCpP/fFNb
7YcmpwitYz9tlXXxx5gwHwYDVR0jBBgwFoAUDmWk9f02tb1o6zySNAiXjJB6p58w
DgYDVR0PAQH/BAQDAgEGMA8GA1UdEwEB/wQFMAMBAf8wcwYDVR0fBGwwajBooGag
ZIZicnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2
NjExRTJCQjQ2OEY3QzcyRkQxRkYyL0RtV2s5ZjAydGIxbzZ6eVNOQWlYakpCNnA1
OC5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L3JlcG9zaXRvcnkvOTgwNjUyRTBCNzdFMTFFN0E5NkEzOTUyMUE0
RjRGQjQvRG1XazlmMDJ0YjFvNnp5U05BaVhqSkI2cDU4LmNlcjBKBgNVHSABAf8E
QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj
Lm5ldC9SUEtJL0NQUy5wZGYwggEoBggrBgEFBQcBCwSCARowggEWMF8GCCsGAQUF
BzAFhlNyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5
MUJGMERGLzE2QTBCRjI0RUFEQzExRTc5OUMxMUY0NUM0RjlBRTAyLzB+BggrBgEF
BQcwCoZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9B
OTFCRjBERi8xNkEwQkYyNEVBREMxMUU3OTlDMTFGNDVDNEY5QUUwMi9DcFBfZkZO
YjdZY21wd2l0WXo5dGxYWHh4NWcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3Jy
ZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwIgYIKwYBBQUHAQcBAf8EEzAR
MA8EAgACMAkDBwAgAQ3wMgAwDQYJKoZIhvcNAQELBQADggEBAEVOMcOI2L8i+IQn
JtUjE9Ce1o0pd+z7dg2v9XZE75/fwFUl3W9SyzKCL1tUUtGfPqGSr83Qc7CGSC3h
golfthsok1khspSt+T5IerXF8HYQw8E5wf0jF6ml2PsOPo4HqaDTD2YBVuCi2YBF
9fV1FMRNmMv4WBG0Er87Y9deQKiUoXphLEkawUQfsYJQFjXwuvdkABYrrK/kOggx
CmQLbZ1iMJPlmPMwah15JGQnxaYsNHeqUP6pVrGZR8bxFm90w18Wq1v8FcTGLyHL
vA8UOrIo/y9CPOEo1UZzxmSxXZfJuYTyrgdLJG37qvWD4EQ3hHjU+Hx5NdE+QKOf
D5xmb00=
-----END CERTIFICATE-----
Generated at Fri Mar 29 06:02:07 2024 by rpki-client on console-fra.rpki-client.org