Certificate

$ rpki-client -vvf rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/EBEGw3VRsRR1-6qyOQEVt6zygC0.cer
File:                     EBEGw3VRsRR1-6qyOQEVt6zygC0.cer (raw, json)
Hash identifier:          HiYJjTSteSJaeBPzkW8rpalZpNbscxulS/+/hpGjJHA=
Subject key identifier:   10:11:06:C3:75:51:B1:14:75:FB:AA:B2:39:01:15:B7:AC:F2:80:2D
Authority key identifier: 0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
Certificate issuer:       /CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Certificate serial:       0225F5
Authority info access:    rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
Manifest:                 rsync://rpki.apnic.net/member_repository/A91BF286/1CE2B0C4669411EEA0452951C4F9AE02/EBEGw3VRsRR1-6qyOQEVt6zygC0.mft
caRepository:             rsync://rpki.apnic.net/member_repository/A91BF286/1CE2B0C4669411EEA0452951C4F9AE02/
Notify URL:               https://rrdp.apnic.net/notification.xml
Certificate not before:   Tue 31 Dec 2024 03:50:14 +0000
Certificate not after:    Mon 02 Mar 2026 00:00:00 +0000
Subordinate resources:    IP: 103.126.92.0/22
                          IP: 2404:8c0::/32
Validation:               OK
Signature path:           rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 21 Feb 2025 05:15:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 140789 (0x225f5)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A90DC5BE
        Validity
            Not Before: Dec 31 03:50:14 2024 GMT
            Not After : Mar  2 00:00:00 2026 GMT
        Subject: CN=A91BF286
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:fc:8f:70:ff:68:c9:b8:4a:8b:01:f8:00:f7:95:
                    d5:db:3c:e1:a4:27:de:0e:8f:a2:80:5f:8f:11:3c:
                    84:e7:cd:d5:c5:e9:dd:70:e7:16:66:1b:be:bc:26:
                    60:85:fd:bc:b5:b5:d6:c3:41:1f:f0:47:75:9c:aa:
                    9e:32:79:fc:8c:3d:df:e7:89:cf:86:00:47:e7:a4:
                    cf:b8:f8:73:ea:8b:f8:22:eb:6c:5b:27:9b:2b:bf:
                    45:f5:9a:ee:3e:70:92:d6:fa:a4:40:e9:8f:7f:9b:
                    97:f4:ab:9c:ff:b6:a7:40:4b:e9:4c:1d:35:52:a1:
                    50:36:3c:1d:79:a3:49:8c:91:78:c7:af:40:cb:ab:
                    6b:8a:0c:4b:5b:dc:a0:97:95:33:67:34:6d:5c:c0:
                    cc:b0:e7:a7:63:ae:c4:46:7d:08:45:d0:5f:1b:83:
                    fa:7f:56:21:bf:78:15:2d:24:16:cc:91:9c:48:7b:
                    f7:60:7b:ee:e3:ee:8a:5f:e8:09:23:94:b5:18:86:
                    6d:eb:12:13:26:f0:b5:72:cf:26:88:b1:1e:aa:c0:
                    00:74:7d:4d:ad:0d:2d:f5:53:4b:d2:ad:41:00:0a:
                    52:67:5d:fc:e8:4e:ef:d8:5b:37:a6:ef:e4:6b:55:
                    9e:dc:d6:bc:28:7d:9d:ec:88:57:f0:0c:85:e0:62:
                    6e:fb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                10:11:06:C3:75:51:B1:14:75:FB:AA:B2:39:01:15:B7:AC:F2:80:2D
            X509v3 Authority Key Identifier:
                keyid:0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                CA Repository - URI:rsync://rpki.apnic.net/member_repository/A91BF286/1CE2B0C4669411EEA0452951C4F9AE02/
                RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A91BF286/1CE2B0C4669411EEA0452951C4F9AE02/EBEGw3VRsRR1-6qyOQEVt6zygC0.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.126.92.0/22
                IPv6:
                  2404:8c0::/32

    Signature Algorithm: sha256WithRSAEncryption
         5a:d1:88:b5:30:e8:bb:5b:ed:d4:5a:5a:e0:57:2d:77:27:6d:
         a0:53:81:9e:ab:f3:83:86:60:68:34:87:b7:a0:c4:a3:70:e8:
         d0:dd:4c:94:33:6e:b7:c7:f9:05:bd:4a:a9:e0:e9:d5:10:4e:
         2b:08:ec:ec:b3:da:71:e8:23:da:1a:43:aa:dc:56:cf:fb:1a:
         3a:a4:7c:c4:cd:ef:51:62:04:d9:1b:8f:ac:37:2f:2f:97:7a:
         63:93:62:9c:2a:a0:d0:76:d9:51:81:d9:a4:eb:17:17:ca:b5:
         9a:77:9a:40:ba:94:9f:d4:bf:5a:83:99:11:49:25:b2:94:f4:
         af:1b:4c:0c:cb:e4:02:a3:91:8b:04:d7:0e:d1:93:48:6e:98:
         01:92:89:73:e7:30:44:34:25:23:e3:d0:f2:3a:fd:a2:a3:62:
         9c:68:cd:6d:f2:b8:54:c4:d4:5a:61:74:89:14:1d:54:01:1a:
         37:e0:36:44:b3:6f:77:08:f2:e6:65:0f:f8:00:a0:51:74:9c:
         8c:e8:6d:a9:eb:b8:19:85:8a:64:56:99:d9:fe:95:bc:f8:5e:
         4a:94:47:45:ca:11:c3:0e:a6:18:d0:e9:39:2d:3e:29:8c:ec:
         f5:ac:5f:e7:1d:29:96:6e:72:82:45:21:6d:3c:7f:82:8e:83:
         2d:62:dc:14
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 20:57:07 2025 by rpki-client