Certificate

$ rpki-client -vvf rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GbtVMGL5Nj1g2muUaB8a1gSD1bc.cer
File:                     GbtVMGL5Nj1g2muUaB8a1gSD1bc.cer (raw, json)
Hash identifier:          ZvcDGW1DeAog7T9539eu1pSvAainwy5XxhaxrpNZRGQ=
Subject key identifier:   19:BB:55:30:62:F9:36:3D:60:DA:6B:94:68:1F:1A:D6:04:83:D5:B7
Authority key identifier: 0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
Certificate issuer:       /CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Certificate serial:       01DD44
Authority info access:    rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
Manifest:                 rsync://rpki.apnic.net/member_repository/A916C2B9/398E8A26C2A211EE91D9535CC4F9AE02/GbtVMGL5Nj1g2muUaB8a1gSD1bc.mft
caRepository:             rsync://rpki.apnic.net/member_repository/A916C2B9/398E8A26C2A211EE91D9535CC4F9AE02/
Notify URL:               https://rrdp.apnic.net/notification.xml
Certificate not before:   Sat 03 Feb 2024 14:40:57 +0000
Certificate not after:    Wed 28 May 2025 00:00:00 +0000
Subordinate resources:    AS: 152455

Validation:               OK
Signature path:           rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 09 May 2024 10:14:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 122180 (0x1dd44)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
        Validity
            Not Before: Feb  3 14:40:57 2024 GMT
            Not After : May 28 00:00:00 2025 GMT
        Subject: CN=A916C2B9/serialNumber=19BB553062F9363D60DA6B94681F1AD60483D5B7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:3d:51:61:9c:9a:13:32:9a:c0:dd:78:23:80:
                    97:0d:81:cb:89:aa:39:5a:f7:6c:1a:1f:e2:70:18:
                    60:b9:27:bc:af:5c:7c:08:90:fd:e3:c4:55:4a:9b:
                    3a:d5:9b:61:64:2e:78:76:b5:32:df:6c:0b:b0:98:
                    3c:9c:25:db:83:42:b6:91:2f:8b:d1:ae:0c:67:ff:
                    87:0d:c8:32:79:fe:4c:e6:a5:ea:10:90:a3:6e:6a:
                    c2:1e:31:cb:cd:55:f8:dd:3b:88:2a:88:57:6f:d9:
                    1b:ca:cf:56:56:35:e6:e3:9e:5d:73:3c:ff:54:a8:
                    1b:7e:8b:a2:8b:94:02:e4:5b:7b:1a:58:8f:e9:40:
                    f8:99:db:ea:4a:d0:d4:54:2f:81:1a:11:1b:59:34:
                    dc:bc:45:b0:26:4b:4a:53:62:11:e3:70:c9:12:08:
                    53:27:d3:ab:12:71:2b:9e:c2:2d:96:55:89:a4:64:
                    2c:ec:b1:a0:13:f0:a1:5d:df:eb:19:4c:22:d7:b8:
                    d0:d2:97:7c:5d:91:d5:e0:73:7c:f0:9a:d7:c8:1c:
                    72:8f:d6:ba:af:05:ce:86:e1:de:2e:b4:28:c2:69:
                    f5:8f:b9:ff:89:ac:8e:87:d4:f6:a6:fc:ea:86:63:
                    2d:a9:c1:61:ff:ac:d8:77:30:8f:74:8c:38:17:54:
                    d6:4b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                19:BB:55:30:62:F9:36:3D:60:DA:6B:94:68:1F:1A:D6:04:83:D5:B7
            X509v3 Authority Key Identifier:
                keyid:0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                CA Repository - URI:rsync://rpki.apnic.net/member_repository/A916C2B9/398E8A26C2A211EE91D9535CC4F9AE02/
                RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A916C2B9/398E8A26C2A211EE91D9535CC4F9AE02/GbtVMGL5Nj1g2muUaB8a1gSD1bc.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  152455

    Signature Algorithm: sha256WithRSAEncryption
         d4:8e:f1:66:58:a4:05:e7:03:95:96:33:e0:b6:6e:bc:30:0d:
         32:93:0d:b5:84:6b:cc:83:7c:d2:19:7e:11:88:af:b3:13:90:
         44:30:4f:32:06:9e:bc:86:5c:98:d0:a5:2b:f5:3a:fe:9c:3f:
         53:ce:db:35:51:91:a1:db:38:34:54:15:4a:07:03:06:9a:ad:
         ef:67:88:44:bd:a3:71:2c:b2:0e:88:55:2d:35:c2:34:22:69:
         23:d9:a8:51:7d:e7:c9:ba:a4:98:7b:ea:de:aa:71:1c:5c:9b:
         e8:38:f0:2c:2b:e6:91:83:75:b1:ff:c9:cd:ed:7b:c4:73:62:
         5f:18:64:37:0b:f9:65:a2:c8:ab:87:58:2e:7b:dc:9d:fe:3d:
         5c:da:b7:16:f0:8e:cd:cf:f3:99:45:cb:e7:68:f8:b7:d5:df:
         a7:39:08:41:9a:83:85:6e:b2:df:77:ec:7b:f6:67:11:e4:bc:
         ca:6a:b4:d2:28:23:a7:c7:fc:5b:02:41:b7:d3:b2:ae:83:f4:
         4a:3d:fe:d3:2c:1a:fb:4e:79:7f:a0:df:a1:97:65:1f:2d:59:
         36:47:d4:28:e2:9d:07:ef:6c:c1:1b:f8:48:2a:48:ed:51:30:
         5b:a1:6a:d8:9a:80:25:ec:8e:36:18:c9:1e:c1:b3:b5:9c:88:
         70:9a:03:4b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 2 11:35:09 2024 by rpki-client on console-fra.rpki-client.org