Certificate

$ rpki-client -vvf rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FPn_SiOnILc7r-YDNT8R65c5Jxk.cer
File:                     FPn_SiOnILc7r-YDNT8R65c5Jxk.cer (raw, json)
Hash identifier:          Z3qZeCdh0zBNf51RajP5GR0my27MG5S8G581PsYIZuc=
Subject key identifier:   14:F9:FF:4A:23:A7:20:B7:3B:AF:E6:03:35:3F:11:EB:97:39:27:19
Authority key identifier: 0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
Certificate issuer:       /CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Certificate serial:       01DF6C
Authority info access:    rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
Manifest:                 rsync://rpki.apnic.net/member_repository/A91BF8F4/707765A838A111ED9F3C0C82C4F9AE02/FPn_SiOnILc7r-YDNT8R65c5Jxk.mft
caRepository:             rsync://rpki.apnic.net/member_repository/A91BF8F4/707765A838A111ED9F3C0C82C4F9AE02/
Notify URL:               https://rrdp.apnic.net/notification.xml
Certificate not before:   Sun 18 Feb 2024 18:18:52 +0000
Certificate not after:    Wed 28 May 2025 00:00:00 +0000
Subordinate resources:    AS: 149630
                          IP: 103.183.38.0/23
                          IP: 2001:df0:83c0::/48

Validation:               OK
Signature path:           rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 27 Apr 2024 02:50:25 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 122732 (0x1df6c)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
        Validity
            Not Before: Feb 18 18:18:52 2024 GMT
            Not After : May 28 00:00:00 2025 GMT
        Subject: CN=A91BF8F4/serialNumber=14F9FF4A23A720B73BAFE603353F11EB97392719
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:56:a0:bf:69:34:a6:17:68:23:da:0b:17:39:
                    73:cd:fb:5d:f6:4f:e9:c8:5c:59:06:ad:8d:08:b6:
                    b7:df:d6:d2:80:2a:7f:f3:83:86:1c:39:f4:50:55:
                    2d:57:51:f7:5d:3e:6a:45:28:b4:79:e2:dd:29:54:
                    8a:88:82:dc:9a:3a:fb:3a:68:02:19:f3:3f:de:9b:
                    49:d9:f0:42:98:6b:71:3b:77:3a:06:8f:ac:01:e2:
                    83:6b:4a:96:dd:59:d4:52:a8:92:e1:0f:a8:fa:ff:
                    7b:5c:48:7d:2e:17:a2:fd:bc:9b:26:b2:41:bb:9d:
                    c8:0f:84:d8:79:5f:36:f6:bf:b6:b2:e5:c1:11:32:
                    04:f8:5f:68:6a:97:14:cc:6e:99:76:29:4c:e1:81:
                    fe:2f:b4:73:8b:92:0d:f5:19:30:b8:8f:b3:62:01:
                    bf:ad:2e:db:e4:31:05:bc:9e:00:d2:c5:0e:30:2a:
                    6e:90:db:13:2a:b1:99:9a:2e:ee:83:e8:fe:b0:40:
                    a6:14:1a:56:93:8c:31:68:e0:94:f6:5d:cf:62:e6:
                    98:34:b0:86:35:a2:c2:e3:1f:41:1a:d1:7f:53:18:
                    6d:a2:ba:47:55:ff:a2:a5:d9:b5:97:c2:75:f8:9c:
                    0e:0b:ef:36:6e:00:9d:50:bb:cf:99:53:58:18:72:
                    8e:f9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                14:F9:FF:4A:23:A7:20:B7:3B:AF:E6:03:35:3F:11:EB:97:39:27:19
            X509v3 Authority Key Identifier:
                keyid:0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                CA Repository - URI:rsync://rpki.apnic.net/member_repository/A91BF8F4/707765A838A111ED9F3C0C82C4F9AE02/
                RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A91BF8F4/707765A838A111ED9F3C0C82C4F9AE02/FPn_SiOnILc7r-YDNT8R65c5Jxk.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  149630

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.183.38.0/23
                IPv6:
                  2001:df0:83c0::/48

    Signature Algorithm: sha256WithRSAEncryption
         45:ef:62:d4:f0:ea:11:97:29:38:a0:fa:3c:4f:58:c9:08:c7:
         48:85:50:ff:2e:b2:58:ea:a5:e7:90:33:6c:e8:d9:85:4f:6c:
         53:1d:90:fe:9d:37:6c:30:f2:73:49:e5:e2:fa:a8:60:d5:c8:
         b0:77:32:18:de:a2:5a:6d:f6:b1:dd:27:12:9d:63:bd:d8:46:
         56:c5:8a:87:1d:ce:a5:ca:e5:01:4f:38:7e:fe:e3:38:d5:2a:
         be:4c:0f:38:60:16:87:3a:a8:cf:b7:05:f1:88:fa:d2:fb:9c:
         d3:df:7f:af:5e:1d:ef:b7:2e:cf:60:71:0a:bb:2c:5d:b2:19:
         8d:ca:f2:96:4d:d4:0c:4e:79:1a:6b:51:59:89:73:6c:6d:09:
         67:ba:e7:1e:b9:84:9a:c2:43:89:39:56:4f:96:6a:6c:88:dd:
         20:7e:2a:45:c4:23:d7:f6:ea:1c:7b:a5:3e:30:d4:9c:9b:98:
         f1:08:a0:16:4e:5b:96:cc:da:98:05:91:68:98:28:b0:5a:10:
         21:13:84:77:b5:4c:af:9a:6a:a4:4f:1d:12:de:9c:bd:ba:1c:
         b1:04:59:38:ce:64:44:02:a3:67:ad:9b:d6:72:5f:64:c5:62:
         66:13:70:07:30:73:54:66:e0:e2:7d:e2:69:d5:a9:2d:ab:58:
         a5:4b:54:c9
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----