Certificate

$ rpki-client -vvf rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/EnvYBqI30MrekRgrn8cmZZvi73E.cer
File:                     EnvYBqI30MrekRgrn8cmZZvi73E.cer (raw, json)
Hash identifier:          IeS3UUwcuohS0t+bJsQgW2d+jqYAMfsfXv/tq864/rA=
Subject key identifier:   12:7B:D8:06:A2:37:D0:CA:DE:91:18:2B:9F:C7:26:65:9B:E2:EF:71
Authority key identifier: 0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
Certificate issuer:       /CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Certificate serial:       01C145
Authority info access:    rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
Manifest:                 rsync://rpki.apnic.net/member_repository/A91D3876/262F7ACA977211EBBF6A5368C4F9AE02/EnvYBqI30MrekRgrn8cmZZvi73E.mft
caRepository:             rsync://rpki.apnic.net/member_repository/A91D3876/262F7ACA977211EBBF6A5368C4F9AE02/
Notify URL:               https://rrdp.apnic.net/notification.xml
Certificate not before:   Sun 01 Oct 2023 22:38:26 +0000
Certificate not after:    Sun 01 Dec 2024 00:00:00 +0000
Subordinate resources:    AS: 132015
                          IP: 103.199.80.0/24
                          IP: 103.215.20.0/23
                          IP: 103.246.186.0/24
                          IP: 2407:f80::/32

Validation:               OK
Signature path:           rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 04 Apr 2024 23:00:27 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 115013 (0x1c145)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
        Validity
            Not Before: Oct  1 22:38:26 2023 GMT
            Not After : Dec  1 00:00:00 2024 GMT
        Subject: CN=A91D3876/serialNumber=127BD806A237D0CADE91182B9FC726659BE2EF71
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:ff:fb:8e:34:e5:85:a3:88:59:06:7e:79:cf:
                    f1:2c:aa:07:19:9c:ed:73:44:f3:2a:6c:af:4a:3e:
                    c2:a7:53:93:d0:fd:39:d5:c5:32:da:da:b3:33:1c:
                    50:e4:97:40:84:8f:35:ab:15:0f:3b:c3:b3:cd:0e:
                    2a:dc:eb:47:79:c5:16:79:b0:eb:18:85:df:ee:c1:
                    32:15:53:d4:2e:e4:a5:68:b3:a8:b7:e4:2b:ae:a4:
                    60:1f:ed:6d:33:ba:f8:37:84:f0:9c:66:d0:b6:ad:
                    83:ae:c7:4d:f7:e4:ea:3d:b8:58:42:d7:e9:84:6a:
                    f3:ad:51:56:96:7b:81:c5:0d:a8:fa:40:60:bf:79:
                    23:f8:d0:ea:ae:05:1e:d4:02:50:e2:e2:40:88:c1:
                    76:51:ac:fc:42:97:f7:39:e8:ea:62:8e:ed:b3:d3:
                    47:94:17:6b:0f:49:73:f4:da:a7:1c:8d:94:fb:7b:
                    7b:11:ed:71:22:20:e2:b1:0c:cc:8a:8d:b8:06:5a:
                    01:1b:d3:65:56:ba:b8:bd:b2:a1:1f:20:68:a4:09:
                    65:fa:b9:35:d3:f5:9a:9c:f4:9c:46:63:4c:28:7f:
                    ab:c7:32:f2:db:06:af:0d:66:53:31:8e:f9:13:9f:
                    69:f4:e5:f9:02:8b:e4:ba:9b:fb:a9:10:13:32:fb:
                    d9:33
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                12:7B:D8:06:A2:37:D0:CA:DE:91:18:2B:9F:C7:26:65:9B:E2:EF:71
            X509v3 Authority Key Identifier:
                keyid:0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                CA Repository - URI:rsync://rpki.apnic.net/member_repository/A91D3876/262F7ACA977211EBBF6A5368C4F9AE02/
                RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A91D3876/262F7ACA977211EBBF6A5368C4F9AE02/EnvYBqI30MrekRgrn8cmZZvi73E.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  132015

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.199.80.0/24
                  103.215.20.0/23
                  103.246.186.0/24
                IPv6:
                  2407:f80::/32

    Signature Algorithm: sha256WithRSAEncryption
         8f:f1:e6:ba:8d:62:24:94:14:25:1f:ee:c7:0e:88:e1:91:77:
         ee:7c:c2:5e:0d:81:f2:7c:dc:b0:d8:da:46:3a:2e:37:fd:7f:
         d9:70:c6:0f:7e:99:58:c5:83:4e:68:07:72:e4:49:ca:71:a8:
         04:ff:fa:53:43:b3:62:d8:a7:14:41:e5:f4:aa:92:3c:bd:a8:
         8f:86:fd:49:6c:a4:4e:1f:f2:49:31:39:1a:45:e7:cc:29:e2:
         99:79:f5:04:4f:d4:24:9c:50:08:75:38:df:71:80:c4:e6:12:
         a3:12:7b:76:e2:12:ef:c9:b9:18:9c:19:62:9f:dc:0d:d0:4a:
         35:a9:bb:27:62:41:fc:af:41:98:3b:c9:66:c6:9a:1e:ac:ac:
         dd:09:cd:b5:1d:6d:b6:65:88:75:fb:be:83:0d:e4:b5:61:1b:
         dc:43:4e:5c:3c:50:d0:aa:2a:c0:15:d7:6e:96:f3:a1:18:8c:
         2a:04:2a:eb:eb:db:93:e1:22:08:99:d5:b1:e2:fe:0a:06:de:
         e7:8d:51:ae:d4:6c:9a:15:f8:f8:13:5f:0e:42:ab:f1:e2:06:
         60:16:ff:c2:c8:a9:58:80:0b:f1:93:fa:19:84:25:8b:1a:29:
         dc:fe:18:e6:1c:ea:ae:11:8f:8a:b5:bf:e4:c3:6a:9a:d5:18:
         00:3e:89:83
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 28 23:50:19 2024 by rpki-client on console-ams.rpki-client.org