Certificate

$ rpki-client -vvf rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Fg4AAV0rWBU_NILo3pR7X0rXhxg.cer
File:                     Fg4AAV0rWBU_NILo3pR7X0rXhxg.cer (raw, json)
Hash identifier:          9a1zN6MWukuoCI+0bUzz9HEBXHypETH6+Kf4IzY04Vo=
Subject key identifier:   16:0E:00:01:5D:2B:58:15:3F:34:82:E8:DE:94:7B:5F:4A:D7:87:18
Authority key identifier: 0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
Certificate issuer:       /CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Certificate serial:       0208E6
Authority info access:    rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
Manifest:                 rsync://rpki.apnic.net/member_repository/A91295B6/F0730C88216911EEB56F2249C4F9AE02/Fg4AAV0rWBU_NILo3pR7X0rXhxg.mft
caRepository:             rsync://rpki.apnic.net/member_repository/A91295B6/F0730C88216911EEB56F2249C4F9AE02/
Notify URL:               https://rrdp.apnic.net/notification.xml
Certificate not before:   Mon 26 Aug 2024 13:25:13 +0000
Certificate not after:    Tue 30 Sep 2025 00:00:00 +0000
Subordinate resources:    AS: 151606
                          IP: 103.238.66.0/23
                          IP: 2401:18a0::/32

Validation:               OK
Signature path:           rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 30 Nov 2024 02:50:13 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 133350 (0x208e6)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
        Validity
            Not Before: Aug 26 13:25:13 2024 GMT
            Not After : Sep 30 00:00:00 2025 GMT
        Subject: CN=A91295B6/serialNumber=160E00015D2B58153F3482E8DE947B5F4AD78718
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d1:53:a8:51:d6:46:2f:ed:29:05:99:36:ec:90:
                    2c:c2:56:d6:ef:7a:79:2c:cb:aa:0f:09:9f:30:70:
                    14:1f:57:83:7f:9a:ee:6f:ce:f4:46:80:3a:8d:0a:
                    a0:3c:0f:d3:4e:da:1b:db:6b:2a:f6:ad:6e:74:e3:
                    50:a3:09:e9:55:a6:ef:4d:35:06:49:67:f0:93:80:
                    89:56:48:fb:f4:df:fa:8c:4e:07:4c:c7:09:1a:d6:
                    88:28:2b:42:da:4c:19:4c:79:c7:7a:96:6c:d3:9e:
                    2c:64:3f:24:ed:87:55:9a:6f:d5:6d:9d:6e:14:fd:
                    47:ac:75:b9:98:43:d1:00:7f:b6:bb:94:77:07:05:
                    58:1c:1d:0d:f2:72:df:0a:37:7b:ac:7e:3f:3e:f2:
                    1d:71:ee:a4:c5:ca:30:d5:da:87:41:f0:c8:f6:25:
                    8b:c8:0a:fa:5f:11:04:19:92:9b:6b:91:b8:c0:69:
                    0a:8f:d5:5a:ca:2b:ea:7b:c5:94:95:7d:8c:f8:ca:
                    9f:e9:ca:4b:fe:00:7c:5b:0e:c7:86:4b:07:b1:ae:
                    2c:c8:95:d6:23:d8:62:6d:e0:da:a3:41:07:90:d9:
                    e6:4f:9e:da:ac:2c:49:59:3d:3c:70:b1:b9:0c:d5:
                    3b:0d:5c:be:c1:f0:7d:ec:11:f0:6e:d4:a9:6f:1d:
                    f8:eb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                16:0E:00:01:5D:2B:58:15:3F:34:82:E8:DE:94:7B:5F:4A:D7:87:18
            X509v3 Authority Key Identifier:
                keyid:0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                CA Repository - URI:rsync://rpki.apnic.net/member_repository/A91295B6/F0730C88216911EEB56F2249C4F9AE02/
                RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A91295B6/F0730C88216911EEB56F2249C4F9AE02/Fg4AAV0rWBU_NILo3pR7X0rXhxg.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  151606

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.238.66.0/23
                IPv6:
                  2401:18a0::/32

    Signature Algorithm: sha256WithRSAEncryption
         be:df:d0:55:24:9a:9b:81:83:69:6d:cb:1f:c9:e1:0d:f9:f6:
         84:01:e1:36:e9:10:17:99:9a:5f:34:62:18:1e:80:82:10:ac:
         6e:28:2d:3a:eb:47:6a:00:ec:3b:58:c5:94:f8:ee:1e:7d:fb:
         05:b0:82:71:97:25:2b:98:d3:6c:55:53:28:7f:eb:30:83:1b:
         15:68:8a:2a:01:16:2d:74:e9:87:cc:30:f0:01:f6:6b:26:17:
         65:2c:ff:03:47:88:31:41:fd:50:a3:94:06:94:84:63:46:80:
         4f:30:11:d2:db:b0:03:ac:1e:fe:9e:11:6b:99:f8:77:52:ed:
         78:d3:13:ab:47:f7:0c:11:4e:e9:01:0b:bc:ff:a4:b9:a7:49:
         69:81:0e:69:06:2e:95:94:a9:20:c6:d9:5e:4b:3e:7c:e2:6b:
         fb:70:e8:07:16:28:32:eb:f2:08:2f:cd:b3:cc:80:f7:40:56:
         3e:2c:74:2d:ba:61:39:9d:c9:9c:e3:5a:3d:c8:ab:a9:6a:8f:
         c8:69:13:a7:94:ce:54:a0:1c:a3:7c:c1:bd:df:bd:05:8e:b7:
         bb:ae:1a:17:5e:62:b0:c8:18:c0:93:3f:82:9f:32:fc:fb:e2:
         62:16:79:30:b7:76:8f:e1:8d:39:89:84:bf:a8:29:7e:e9:1a:
         15:4b:ef:02
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----