Certificate

$ rpki-client -vvf rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/E72mTG8bWiwzOUc2NU6ejmvK4lY.cer
File:                     E72mTG8bWiwzOUc2NU6ejmvK4lY.cer (raw, json)
Hash identifier:          e6URYvml3TJ0TmJMdAB3o6tdCUCcZv6o9Vj1RhhvdAI=
Subject key identifier:   13:BD:A6:4C:6F:1B:5A:2C:33:39:47:36:35:4E:9E:8E:6B:CA:E2:56
Authority key identifier: 0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
Certificate issuer:       /CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Certificate serial:       01B8AB
Authority info access:    rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
Manifest:                 rsync://rpki.apnic.net/member_repository/A91F1C8C/23E5D5DEDF9911EA9F85D982C4F9AE02/E72mTG8bWiwzOUc2NU6ejmvK4lY.mft
caRepository:             rsync://rpki.apnic.net/member_repository/A91F1C8C/23E5D5DEDF9911EA9F85D982C4F9AE02/
Notify URL:               https://rrdp.apnic.net/notification.xml
Certificate not before:   Thu 24 Aug 2023 19:56:59 +0000
Certificate not after:    Thu 31 Oct 2024 00:00:00 +0000
Subordinate resources:    AS: 140992
                          AS: 150719
                          IP: 103.154.160.0/23
                          IP: 2001:df4:9080::/48

Validation:               OK
Signature path:           rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 02 May 2024 13:35:35 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 112811 (0x1b8ab)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
        Validity
            Not Before: Aug 24 19:56:59 2023 GMT
            Not After : Oct 31 00:00:00 2024 GMT
        Subject: CN=A91F1C8C/serialNumber=13BDA64C6F1B5A2C33394736354E9E8E6BCAE256
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cf:27:95:8f:76:bb:fd:34:02:e2:04:c4:53:9c:
                    04:92:cf:be:c9:0e:0e:7b:a1:3a:bf:65:ea:e2:b5:
                    7a:5b:ee:1e:10:c8:c0:d4:1e:a9:cc:e5:0b:a9:7c:
                    d6:df:81:ea:a8:40:83:98:ee:48:1e:98:d7:40:b7:
                    84:04:b3:36:f1:09:24:b2:2e:a7:a9:7e:67:06:74:
                    ef:0c:b0:60:8b:28:fc:81:49:9e:0c:12:79:60:97:
                    1f:eb:e0:fa:da:06:18:69:a2:1f:37:1f:2a:16:1d:
                    49:44:ea:85:1c:06:10:f1:6e:c4:bf:1d:b2:2c:6e:
                    d2:2e:84:72:43:7b:60:e1:4f:4d:6b:9c:e6:56:6c:
                    bc:0a:bd:16:35:08:e1:9c:45:a6:88:93:a7:28:7e:
                    b0:6a:99:20:17:cb:ef:29:f5:2e:90:31:d9:11:8c:
                    b2:3f:cb:09:cf:d0:01:5e:20:a7:9e:39:61:17:68:
                    1c:06:ec:7c:61:dc:ad:bd:6e:04:f7:20:58:f8:53:
                    96:cc:1a:63:e1:b5:7c:db:c9:f8:53:33:d8:09:53:
                    74:88:bd:3b:33:f2:71:8d:2d:fe:69:74:90:5f:b8:
                    30:50:d1:40:cc:ef:06:d0:f2:18:33:66:3b:e5:2d:
                    8b:b1:12:19:a6:12:f4:42:74:c0:b0:02:dc:30:03:
                    5a:5d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                13:BD:A6:4C:6F:1B:5A:2C:33:39:47:36:35:4E:9E:8E:6B:CA:E2:56
            X509v3 Authority Key Identifier:
                keyid:0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                CA Repository - URI:rsync://rpki.apnic.net/member_repository/A91F1C8C/23E5D5DEDF9911EA9F85D982C4F9AE02/
                RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A91F1C8C/23E5D5DEDF9911EA9F85D982C4F9AE02/E72mTG8bWiwzOUc2NU6ejmvK4lY.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  140992
                  150719

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.154.160.0/23
                IPv6:
                  2001:df4:9080::/48

    Signature Algorithm: sha256WithRSAEncryption
         8b:6a:48:b6:b3:98:13:e0:b4:15:14:f4:53:61:ab:90:31:58:
         26:86:8b:8f:c9:1a:56:d4:2e:6a:90:83:a0:13:00:10:a6:d7:
         02:e5:0d:62:17:e3:b2:fd:98:91:6b:28:9a:8a:74:55:85:e2:
         33:ea:1d:4d:08:c0:30:99:2d:01:74:15:ce:13:be:f1:b4:c8:
         e4:cd:53:da:d4:ef:6c:32:2e:58:ee:b8:bc:88:57:f8:c6:6c:
         60:4c:bc:b4:24:91:82:15:1d:62:a4:19:7b:a2:de:38:83:da:
         ef:96:f7:1c:46:91:25:5f:a6:f4:9e:6d:a7:2c:fd:d5:44:ec:
         88:fc:3a:2c:62:94:9e:59:1a:95:1a:41:23:fe:4a:fd:2a:e7:
         ec:2c:ca:40:29:7c:20:3e:0b:63:f7:d6:d0:97:2b:2e:c9:28:
         2a:80:9b:d5:43:b8:5a:e8:bc:bf:e7:3f:2e:85:8f:d2:77:72:
         4d:b6:eb:e5:65:53:49:bb:74:c9:74:52:ff:00:9f:ea:ee:9a:
         3b:ea:64:99:1f:8d:21:51:2a:ee:e9:9e:73:16:8e:1d:b7:22:
         4e:8b:4c:f0:c6:80:d6:9e:79:2f:6c:1c:4a:25:86:b7:6a:2f:
         87:7f:bd:6f:78:75:01:f5:74:36:90:ae:9a:f4:f8:7b:fc:60:
         93:74:fb:5a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 25 14:22:42 2024 by rpki-client on console-fra.rpki-client.org