Certificate

$ rpki-client -vvf rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/HJuixf6owDTaVR_a3GKlOnoC5ds.cer
File:                     HJuixf6owDTaVR_a3GKlOnoC5ds.cer (raw, json)
Hash identifier:          ijOTuJ121Q/uVm0c7tPOMi+0PeVVSoAWbwCMlDNTXfo=
Subject key identifier:   1C:9B:A2:C5:FE:A8:C0:34:DA:55:1F:DA:DC:62:A5:3A:7A:02:E5:DB
Authority key identifier: 0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
Certificate issuer:       /CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Certificate serial:       021386
Authority info access:    rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
Manifest:                 rsync://rpki.apnic.net/member_repository/A9193D86/C67D176E9A5F11EA9F626B5EC4F9AE02/HJuixf6owDTaVR_a3GKlOnoC5ds.mft
caRepository:             rsync://rpki.apnic.net/member_repository/A9193D86/C67D176E9A5F11EA9F626B5EC4F9AE02/
Notify URL:               https://rrdp.apnic.net/notification.xml
Certificate not before:   Thu 10 Oct 2024 17:49:56 +0000
Certificate not after:    Tue 30 Dec 2025 00:00:00 +0000
Subordinate resources:    IP: 103.100.60.0/22
                          IP: 2401:b940::/32

Validation:               OK
Signature path:           rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 29 Nov 2024 12:58:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 136070 (0x21386)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
        Validity
            Not Before: Oct 10 17:49:56 2024 GMT
            Not After : Dec 30 00:00:00 2025 GMT
        Subject: CN=A9193D86/serialNumber=1C9BA2C5FEA8C034DA551FDADC62A53A7A02E5DB
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:6e:0b:20:c8:f6:fd:3d:13:0d:96:bb:b5:0c:
                    d0:03:e5:74:da:c5:db:83:e6:be:d8:78:93:94:7b:
                    dc:86:fd:de:2a:13:23:8d:79:b7:2c:94:c0:2b:4b:
                    2c:6f:e0:33:9e:e3:26:b7:e6:fb:f3:a7:60:b8:07:
                    4c:3d:ed:8c:ef:76:df:33:d0:4c:c5:22:1c:2a:0d:
                    37:e4:66:86:33:04:fa:fd:ec:73:58:31:f2:4b:f4:
                    4e:8f:76:09:09:69:de:c4:cf:33:c6:3c:f7:a0:3a:
                    48:d4:fc:1b:c1:8f:b9:88:22:aa:d5:60:23:c0:e9:
                    9b:1a:af:d6:3d:86:d4:0b:ee:d5:6c:5f:3b:18:ac:
                    e2:41:b7:da:5e:6d:c4:d4:a7:d4:e7:0d:57:b4:ba:
                    ab:90:58:ff:93:8d:e0:c1:9a:28:32:40:26:b3:35:
                    2d:68:15:cd:b6:e7:1f:ed:03:a8:ee:ec:b2:8c:65:
                    6a:d2:07:1f:1d:ca:20:af:1f:76:ee:ac:ef:e3:ba:
                    df:b3:1c:7d:9b:db:a0:5f:e1:9d:39:a4:51:05:b6:
                    24:f0:87:eb:44:bc:11:aa:24:d7:c8:b3:a4:f3:b8:
                    73:9d:65:13:19:ff:81:aa:09:60:fe:37:2e:7c:7a:
                    3d:69:6e:3e:93:db:fb:7f:85:a4:7e:2f:a8:b4:b2:
                    4a:cb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1C:9B:A2:C5:FE:A8:C0:34:DA:55:1F:DA:DC:62:A5:3A:7A:02:E5:DB
            X509v3 Authority Key Identifier:
                keyid:0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                CA Repository - URI:rsync://rpki.apnic.net/member_repository/A9193D86/C67D176E9A5F11EA9F626B5EC4F9AE02/
                RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A9193D86/C67D176E9A5F11EA9F626B5EC4F9AE02/HJuixf6owDTaVR_a3GKlOnoC5ds.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.100.60.0/22
                IPv6:
                  2401:b940::/32

    Signature Algorithm: sha256WithRSAEncryption
         a9:67:cd:12:d8:27:63:de:57:c3:1b:f5:84:e3:71:af:0a:b6:
         ad:11:15:72:4b:bb:e4:2c:a6:3f:df:c9:27:62:6c:bf:74:54:
         1c:f9:fd:ba:15:26:a0:4b:e9:5c:29:1a:f8:8c:7f:53:64:35:
         92:18:9e:57:4a:ff:f2:5a:aa:e4:c7:f1:e4:17:11:2d:9d:f1:
         28:2b:ba:77:8e:cc:31:75:41:59:da:91:15:6a:e9:d4:7d:af:
         ba:31:6d:8a:f2:6b:97:98:13:de:32:17:02:ca:1d:2a:67:7b:
         e2:65:65:77:48:18:07:e5:7e:00:3f:6b:96:71:04:b6:18:a6:
         ab:74:44:f1:03:67:ca:f6:35:ab:7c:82:b5:d3:7e:52:c1:07:
         8b:f5:9f:2d:37:5c:84:00:bd:c8:13:af:da:62:1e:fd:33:2d:
         89:15:73:5d:3d:b9:03:04:3f:a1:60:bb:b7:12:3f:d5:c3:6c:
         82:4d:e3:1f:4d:55:9c:2f:f1:1f:7a:04:06:f9:33:b3:d9:98:
         65:4a:33:7d:51:c2:58:30:3b:e1:51:53:22:a1:4b:53:e4:f0:
         c2:c6:2b:36:bb:ce:be:c0:2f:ba:b4:24:e1:32:ac:29:62:30:
         2c:96:ca:cb:10:cf:2c:b3:b0:66:e5:9b:20:c4:8a:e2:77:c5:
         20:b1:1a:9b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----