Certificate

$ rpki-client -vvf rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/HSs9CKRCyE-NagqVKfNZz9p-UD8.cer
File:                     HSs9CKRCyE-NagqVKfNZz9p-UD8.cer (raw, json)
Hash identifier:          3hHPPKR5DEMBXQ0cOK8Nv/E7cgNNAQ37UzlbG400Kow=
Subject key identifier:   1D:2B:3D:08:A4:42:C8:4F:8D:6A:0A:95:29:F3:59:CF:DA:7E:50:3F
Authority key identifier: 0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
Certificate issuer:       /CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Certificate serial:       013BA6
Authority info access:    rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
Manifest:                 rsync://rpki.apnic.net/member_repository/A91358E5/FB9EA2105FC511EB8D7D862AC4F9AE02/HSs9CKRCyE-NagqVKfNZz9p-UD8.mft
caRepository:             rsync://rpki.apnic.net/member_repository/A91358E5/FB9EA2105FC511EB8D7D862AC4F9AE02/
Notify URL:               https://rrdp.apnic.net/notification.xml
Certificate not before:   Tue 21 Dec 2021 03:03:24 +0000
Certificate not after:    Fri 01 Jul 2022 00:00:00 +0000
Subordinate resources:    IP: 2400:cf80::/32

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 80806 (0x13ba6)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
        Validity
            Not Before: Dec 21 03:03:24 2021 GMT
            Not After : Jul  1 00:00:00 2022 GMT
        Subject: CN=A91358E5/serialNumber=1D2B3D08A442C84F8D6A0A9529F359CFDA7E503F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:08:07:25:dc:c3:4b:20:e6:da:96:be:a1:92:
                    60:bf:97:08:f4:52:ff:fc:29:35:a8:b4:84:e9:e4:
                    7e:3a:28:d0:73:14:53:d3:86:c1:55:a5:16:06:69:
                    44:49:a0:c6:71:66:99:82:39:b7:d9:30:d8:6f:17:
                    a4:08:fb:7c:a5:4c:cb:af:0b:f5:77:d8:cb:a7:9b:
                    f2:86:2e:6d:7b:17:8c:10:eb:46:c5:da:21:cc:3c:
                    10:ea:fd:7e:e1:2d:51:f3:04:2c:f2:cb:02:8f:cd:
                    ba:07:b7:27:4f:5c:7c:2c:45:16:49:b1:e0:5e:b6:
                    f7:16:86:37:e9:6c:cf:d0:99:3c:a0:9c:e2:5d:26:
                    48:88:83:6d:e9:5a:e1:d1:4d:8c:5c:d0:af:b0:9e:
                    7f:63:ee:5d:ef:84:29:f4:15:2c:91:c7:53:b9:35:
                    2c:ee:a4:6f:d0:29:5f:fb:4c:5a:9f:a3:35:83:4a:
                    31:3c:2f:9c:67:c0:ea:8a:5d:83:f2:c6:88:bc:20:
                    41:34:f2:e5:69:9f:6a:c6:05:22:69:0b:d6:b4:dd:
                    1d:23:db:60:4f:16:b5:05:26:a3:03:96:14:60:3a:
                    ca:6d:45:30:3e:bc:5f:1a:cf:1a:49:36:26:f5:86:
                    b6:28:ec:01:1d:7e:ac:10:bc:8c:74:84:df:5d:99:
                    04:d9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1D:2B:3D:08:A4:42:C8:4F:8D:6A:0A:95:29:F3:59:CF:DA:7E:50:3F
            X509v3 Authority Key Identifier:
                keyid:0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                CA Repository - URI:rsync://rpki.apnic.net/member_repository/A91358E5/FB9EA2105FC511EB8D7D862AC4F9AE02/
                RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A91358E5/FB9EA2105FC511EB8D7D862AC4F9AE02/HSs9CKRCyE-NagqVKfNZz9p-UD8.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv6:
                  2400:cf80::/32

    Signature Algorithm: sha256WithRSAEncryption
         30:da:5c:93:0c:60:af:ad:9a:a1:71:ac:d4:68:d9:7c:a4:17:
         5a:57:05:b2:f5:45:69:cf:47:f6:05:57:92:45:c1:97:48:a5:
         03:8d:64:0b:33:b2:78:38:87:39:72:38:b2:ca:91:32:cb:88:
         ea:00:cf:68:2c:4f:86:26:68:7f:86:91:5b:18:44:38:7b:3d:
         b8:42:25:59:00:76:c7:57:c5:b6:b4:c6:c9:0f:f5:15:c4:7a:
         4a:8f:11:6b:de:07:88:ee:1d:03:0f:0f:be:3e:f5:f9:8f:9a:
         1d:e3:1e:5a:f6:f8:83:5b:95:b6:73:1c:29:4f:47:ed:0d:0d:
         05:99:16:0c:95:82:14:b3:38:d3:e0:63:d5:54:f5:e4:bf:d7:
         6e:c4:5a:0a:e3:4f:13:5f:c4:6a:2b:44:44:12:db:e2:3b:39:
         91:d0:0a:cc:bb:35:ae:6b:74:0f:58:ac:1e:b5:53:88:94:8e:
         55:72:eb:05:a6:40:4e:0e:5a:13:81:97:97:5c:86:4c:1a:3c:
         d5:bb:2e:90:41:9c:57:bb:7f:14:46:5f:43:83:bd:be:b5:f7:
         48:93:46:05:6a:5f:1f:29:a6:af:7e:ab:17:d1:da:73:5f:ed:
         36:b0:9b:8f:cc:8b:56:29:90:81:3f:71:5c:01:cb:e9:c0:a7:
         d1:0f:97:c0
-----BEGIN CERTIFICATE-----
MIIF/zCCBOegAwIBAgIDATumMA0GCSqGSIb3DQEBCwUAMEYxETAPBgNVBAMTCEE5
MERDNUJFMTEwLwYDVQQFEygwRTY1QTRGNUZEMzZCNUJENjhFQjNDOTIzNDA4OTc4
QzkwN0FBNzlGMB4XDTIxMTIyMTAzMDMyNFoXDTIyMDcwMTAwMDAwMFowRjERMA8G
A1UEAxMIQTkxMzU4RTUxMTAvBgNVBAUTKDFEMkIzRDA4QTQ0MkM4NEY4RDZBMEE5
NTI5RjM1OUNGREE3RTUwM0YwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB
AQC9CAcl3MNLIObalr6hkmC/lwj0Uv/8KTWotITp5H46KNBzFFPThsFVpRYGaURJ
oMZxZpmCObfZMNhvF6QI+3ylTMuvC/V32Munm/KGLm17F4wQ60bF2iHMPBDq/X7h
LVHzBCzyywKPzboHtydPXHwsRRZJseBetvcWhjfpbM/QmTygnOJdJkiIg23pWuHR
TYxc0K+wnn9j7l3vhCn0FSyRx1O5NSzupG/QKV/7TFqfozWDSjE8L5xnwOqKXYPy
xoi8IEE08uVpn2rGBSJpC9a03R0j22BPFrUFJqMDlhRgOsptRTA+vF8azxpJNib1
hrYo7AEdfqwQvIx0hN9dmQTZAgMBAAGjggL0MIIC8DAdBgNVHQ4EFgQUHSs9CKRC
yE+NagqVKfNZz9p+UD8wHwYDVR0jBBgwFoAUDmWk9f02tb1o6zySNAiXjJB6p58w
DgYDVR0PAQH/BAQDAgEGMA8GA1UdEwEB/wQFMAMBAf8wcwYDVR0fBGwwajBooGag
ZIZicnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2
NjExRTJCQjQ2OEY3QzcyRkQxRkYyL0RtV2s5ZjAydGIxbzZ6eVNOQWlYakpCNnA1
OC5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L3JlcG9zaXRvcnkvOTgwNjUyRTBCNzdFMTFFN0E5NkEzOTUyMUE0
RjRGQjQvRG1XazlmMDJ0YjFvNnp5U05BaVhqSkI2cDU4LmNlcjBKBgNVHSABAf8E
QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj
Lm5ldC9SUEtJL0NQUy5wZGYwggEoBggrBgEFBQcBCwSCARowggEWMF8GCCsGAQUF
BzAFhlNyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5
MTM1OEU1L0ZCOUVBMjEwNUZDNTExRUI4RDdEODYyQUM0RjlBRTAyLzB+BggrBgEF
BQcwCoZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9B
OTEzNThFNS9GQjlFQTIxMDVGQzUxMUVCOEQ3RDg2MkFDNEY5QUUwMi9IU3M5Q0tS
Q3lFLU5hZ3FWS2ZOWno5cC1VRDgubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3Jy
ZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwIAYIKwYBBQUHAQcBAf8EETAP
MA0EAgACMAcDBQAkAM+AMA0GCSqGSIb3DQEBCwUAA4IBAQAw2lyTDGCvrZqhcazU
aNl8pBdaVwWy9UVpz0f2BVeSRcGXSKUDjWQLM7J4OIc5cjiyypEyy4jqAM9oLE+G
Jmh/hpFbGEQ4ez24QiVZAHbHV8W2tMbJD/UVxHpKjxFr3geI7h0DDw++PvX5j5od
4x5a9viDW5W2cxwpT0ftDQ0FmRYMlYIUszjT4GPVVPXkv9duxFoK408TX8RqK0RE
EtviOzmR0ArMuzWua3QPWKwetVOIlI5VcusFpkBODloTgZeXXIZMGjzVuy6QQZxX
u38URl9Dg72+tfdIk0YFal8fKaavfqsX0dpzX+02sJuPzItWKZCBP3FcAcvpwKfR
D5fA
-----END CERTIFICATE-----