Certificate

$ rpki-client -vvf rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FTtjqTdzsliYghhmVd7zBEbdhg0.cer
File:                     FTtjqTdzsliYghhmVd7zBEbdhg0.cer (raw, json)
Hash identifier:          JkcSaegbj/MCJ0coS6755QhTpKrloqOj8vr/WG5BEsQ=
Subject key identifier:   15:3B:63:A9:37:73:B2:58:98:82:18:66:55:DE:F3:04:46:DD:86:0D
Authority key identifier: 0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
Certificate issuer:       /CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Certificate serial:       01D107
Authority info access:    rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
Manifest:                 rsync://rpki.apnic.net/member_repository/A91810B4/77D52AA016B511ED9803A272C4F9AE02/FTtjqTdzsliYghhmVd7zBEbdhg0.mft
caRepository:             rsync://rpki.apnic.net/member_repository/A91810B4/77D52AA016B511ED9803A272C4F9AE02/
Notify URL:               https://rrdp.apnic.net/notification.xml
Certificate not before:   Mon 11 Dec 2023 03:58:47 +0000
Certificate not after:    Sun 02 Mar 2025 00:00:00 +0000
Subordinate resources:    AS: 136232
                          IP: 103.79.181.0/24
                          IP: 2001:df6:b600::/48

Validation:               OK
Signature path:           rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 25 Apr 2024 08:35:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 119047 (0x1d107)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
        Validity
            Not Before: Dec 11 03:58:47 2023 GMT
            Not After : Mar  2 00:00:00 2025 GMT
        Subject: CN=A91810B4/serialNumber=153B63A93773B2589882186655DEF30446DD860D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:7f:78:99:e8:31:39:52:2e:1a:e4:b3:81:79:
                    1c:7a:e7:23:73:6b:22:2b:a5:2f:44:b6:ad:b4:37:
                    b6:39:24:14:e4:3a:d8:2f:7b:43:69:b1:ad:4b:6c:
                    38:18:68:01:6d:89:13:41:e0:66:15:49:d2:87:16:
                    31:f3:1a:f5:ab:6b:0d:96:72:a2:ae:ce:9c:d9:20:
                    eb:3a:87:84:29:88:f6:8f:bf:fd:5f:b9:f1:38:f5:
                    6d:af:d9:1e:f8:68:91:aa:75:2a:07:de:5e:8d:9b:
                    14:89:b3:c6:99:f9:0a:69:7d:a9:7d:39:24:26:e0:
                    8e:84:fb:9e:5b:97:06:25:dc:ef:c5:fa:1b:6e:b0:
                    91:ca:8f:35:4d:62:48:9f:06:a8:f1:d7:b1:56:b6:
                    3e:a2:57:dc:d6:02:f7:96:08:60:67:28:5d:72:99:
                    85:0f:c8:95:3b:d9:a4:89:80:02:b9:3d:cf:fe:e4:
                    17:1a:33:c2:66:f3:32:fe:0c:0b:f2:7c:fe:a8:1c:
                    85:aa:e6:fa:73:69:22:9d:17:c9:b3:e4:a2:68:3b:
                    f3:67:15:1b:b3:d2:9b:41:cd:85:0c:97:67:f1:63:
                    1c:d8:cc:d0:b2:2b:4e:ba:91:f7:0b:e4:6c:12:ae:
                    47:96:6d:f2:29:ea:86:51:22:48:28:7c:43:6c:94:
                    7a:c1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                15:3B:63:A9:37:73:B2:58:98:82:18:66:55:DE:F3:04:46:DD:86:0D
            X509v3 Authority Key Identifier:
                keyid:0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                CA Repository - URI:rsync://rpki.apnic.net/member_repository/A91810B4/77D52AA016B511ED9803A272C4F9AE02/
                RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A91810B4/77D52AA016B511ED9803A272C4F9AE02/FTtjqTdzsliYghhmVd7zBEbdhg0.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  136232

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.79.181.0/24
                IPv6:
                  2001:df6:b600::/48

    Signature Algorithm: sha256WithRSAEncryption
         a9:1d:3f:2e:13:0a:a8:39:58:22:17:f3:d3:b3:cb:9e:56:37:
         20:5e:68:a9:4c:0b:32:33:b0:ee:b8:8d:bc:ce:d0:37:82:a8:
         56:5c:1a:a8:cc:ab:e6:9d:14:10:f3:fd:16:01:65:c0:fb:4c:
         3a:3e:8b:ef:8a:e2:90:a2:c4:d4:f7:2a:af:dd:66:43:7e:7f:
         d4:f1:91:43:6e:54:de:14:2f:bf:ad:ab:b2:d1:9f:87:7d:7c:
         24:db:a0:32:e4:0a:9d:0a:ea:f9:ba:41:6d:51:88:d7:e8:18:
         a7:c9:74:95:7d:d1:60:fe:48:45:e7:3e:8b:3a:bd:0c:91:5b:
         7c:8f:90:b8:8a:d8:5b:09:05:8a:2a:4e:2b:94:91:df:49:b7:
         91:98:e2:ea:3d:66:3e:3c:64:59:49:66:12:5e:2b:f8:dd:23:
         19:16:94:ff:39:90:3e:9b:e7:a2:2c:48:b3:72:2f:ee:9c:ad:
         03:cc:a4:de:07:d4:04:13:9d:46:2f:7c:c2:c4:0a:85:52:1b:
         31:03:98:ad:d7:b3:aa:c5:05:95:dd:06:58:66:f2:7e:20:93:
         96:d5:3f:e5:b3:6c:5b:93:74:af:e6:02:e7:4f:47:b5:1c:4a:
         29:c6:d6:a4:6e:9f:c9:2f:4e:18:8b:ac:70:ad:12:d8:b9:a0:
         ef:56:3f:74
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Thu Apr 18 10:06:02 2024 by rpki-client on console-fra.rpki-client.org