Certificate

$ rpki-client -vvf rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FSj2PSjz4TZpAsa2SvWGbMuo2sQ.cer
File:                     FSj2PSjz4TZpAsa2SvWGbMuo2sQ.cer (raw, json)
Hash identifier:          7kfyTpuByNDXj7Z5BNQHJB2qicR+MzBKs388s9V7O5g=
Subject key identifier:   15:28:F6:3D:28:F3:E1:36:69:02:C6:B6:4A:F5:86:6C:CB:A8:DA:C4
Authority key identifier: 0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
Certificate issuer:       /CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Certificate serial:       01BA97
Authority info access:    rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
Manifest:                 rsync://rpki.apnic.net/member_repository/A9189BB3/A4478674DFCE11EB959B501FC4F9AE02/FSj2PSjz4TZpAsa2SvWGbMuo2sQ.mft
caRepository:             rsync://rpki.apnic.net/member_repository/A9189BB3/A4478674DFCE11EB959B501FC4F9AE02/
Notify URL:               https://rrdp.apnic.net/notification.xml
Certificate not before:   Thu 31 Aug 2023 19:16:29 +0000
Certificate not after:    Thu 31 Oct 2024 00:00:00 +0000
Subordinate resources:    AS: 23896
                          AS: 23939
                          AS: 45795
                          AS: 45817
                          IP: 202.79.176.0/21
                          IP: 2401:7800::/32

Validation:               OK
Signature path:           rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 26 Apr 2024 19:32:22 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 113303 (0x1ba97)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
        Validity
            Not Before: Aug 31 19:16:29 2023 GMT
            Not After : Oct 31 00:00:00 2024 GMT
        Subject: CN=A9189BB3/serialNumber=1528F63D28F3E1366902C6B64AF5866CCBA8DAC4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:24:b9:90:07:0d:4f:14:2c:ae:0c:2f:3b:3e:
                    f4:21:ef:08:75:6c:b0:f4:b3:d4:30:a2:1f:4b:18:
                    3a:7a:ea:c8:64:0a:a3:fe:5d:b2:ff:fd:74:a1:0f:
                    2f:57:86:37:39:dd:cb:f4:ae:9b:11:28:4a:e7:9c:
                    22:60:18:fd:97:fb:74:38:be:22:4f:a8:90:39:5e:
                    74:d7:71:dc:46:cb:73:c7:8a:5e:be:f3:45:cc:ce:
                    f2:8c:94:07:fe:ab:69:52:b2:ea:d0:56:7d:ee:14:
                    72:14:65:30:45:4d:80:8a:b6:b2:5f:4b:2d:f4:f5:
                    fa:f1:ce:76:62:b7:e9:29:a3:2b:9d:33:ef:97:f6:
                    26:b0:79:cc:1f:17:5d:34:81:15:55:75:75:20:7c:
                    68:e7:6b:ba:44:45:a5:b1:b0:a6:58:b3:82:1e:36:
                    0d:5f:86:66:8c:58:c1:c8:4b:7f:71:5f:ff:27:0d:
                    02:0c:a0:b3:9f:62:d6:d6:07:1a:9b:6b:cb:88:80:
                    ff:b3:07:46:a1:7c:2c:6c:f5:6d:aa:5f:42:b5:b1:
                    4f:ac:bf:93:5f:35:65:72:f9:ab:64:71:54:59:b5:
                    80:1b:7e:4e:7e:46:9b:f1:09:e3:77:d1:6a:54:f4:
                    5f:3b:2d:24:11:c5:3d:52:bd:84:6d:b9:4f:db:67:
                    ff:6d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                15:28:F6:3D:28:F3:E1:36:69:02:C6:B6:4A:F5:86:6C:CB:A8:DA:C4
            X509v3 Authority Key Identifier:
                keyid:0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                CA Repository - URI:rsync://rpki.apnic.net/member_repository/A9189BB3/A4478674DFCE11EB959B501FC4F9AE02/
                RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A9189BB3/A4478674DFCE11EB959B501FC4F9AE02/FSj2PSjz4TZpAsa2SvWGbMuo2sQ.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  23896
                  23939
                  45795
                  45817

            sbgp-ipAddrBlock: critical
                IPv4:
                  202.79.176.0/21
                IPv6:
                  2401:7800::/32

    Signature Algorithm: sha256WithRSAEncryption
         bf:5f:8e:22:6a:7e:9a:fa:d1:c1:55:93:bd:07:92:d8:8c:6a:
         94:e7:c4:2b:a0:a4:2c:0a:54:b2:c0:34:a9:7b:a4:cb:93:05:
         c4:cc:2a:33:80:90:d8:58:da:bd:64:5a:35:33:7d:83:ad:d9:
         0f:20:72:41:56:43:b7:db:6c:9e:75:d0:ec:29:15:b9:70:8b:
         c8:2d:47:eb:97:59:8a:8e:c5:50:80:c7:7d:e6:d6:b9:8d:3e:
         4e:b7:39:0e:b9:f3:c8:9b:37:39:d8:a8:ce:2f:f2:94:b3:44:
         85:3f:73:5f:ef:33:74:ec:79:b5:14:5d:83:a9:b9:e0:74:bf:
         66:09:f1:42:08:77:e3:81:2f:3c:92:a3:7a:c3:22:4a:ad:bd:
         88:69:67:47:62:1f:35:84:2b:14:c3:72:2e:d5:64:46:ca:89:
         14:c8:c3:57:96:7f:c7:1a:da:54:d2:56:24:ca:b7:1a:4d:01:
         ee:cb:6e:48:6d:7c:dd:b8:a5:52:a6:a1:6b:c8:50:58:8d:9e:
         ba:93:24:d0:0e:95:aa:73:75:98:97:f6:a8:4b:65:35:cc:6e:
         d0:dd:0c:a2:53:df:8a:3f:bb:cc:37:3e:21:1e:d1:ce:57:f5:
         2e:7a:4d:ea:1e:d9:fc:ba:f6:03:73:97:52:c8:28:c5:ee:d5:
         cf:8e:43:12
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 19 20:21:25 2024 by rpki-client on console-fra.rpki-client.org