Certificate

$ rpki-client -vvf rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/IL0_f5mO1D1fxPhindDBiOx92uA.cer
File:                     IL0_f5mO1D1fxPhindDBiOx92uA.cer (raw, json)
Hash identifier:          REMV+6NKy6u4G5s5vbl2MZPQe24ckaKSgzmye/eONxg=
Subject key identifier:   20:BD:3F:7F:99:8E:D4:3D:5F:C4:F8:62:9D:D0:C1:88:EC:7D:DA:E0
Authority key identifier: 0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
Certificate issuer:       /CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Certificate serial:       01C5F2
Authority info access:    rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
Manifest:                 rsync://rpki.apnic.net/member_repository/A918E9A4/0D5DC524730211EEB5CCC244C4F9AE02/IL0_f5mO1D1fxPhindDBiOx92uA.mft
caRepository:             rsync://rpki.apnic.net/member_repository/A918E9A4/0D5DC524730211EEB5CCC244C4F9AE02/
Notify URL:               https://rrdp.apnic.net/notification.xml
Certificate not before:   Wed 25 Oct 2023 06:45:21 +0000
Certificate not after:    Fri 31 Jan 2025 00:00:00 +0000
Subordinate resources:    AS: 151955
                          IP: 36.50.37.0/24

Validation:               OK
Signature path:           rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 09 May 2024 10:14:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 116210 (0x1c5f2)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
        Validity
            Not Before: Oct 25 06:45:21 2023 GMT
            Not After : Jan 31 00:00:00 2025 GMT
        Subject: CN=A918E9A4/serialNumber=20BD3F7F998ED43D5FC4F8629DD0C188EC7DDAE0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:f9:65:b0:8a:02:c5:ed:58:d6:ff:6d:c5:11:
                    09:67:64:c0:1f:dd:b9:da:e6:a0:0c:92:1b:f8:e9:
                    f7:0f:d4:e5:f7:27:b1:d7:c3:a5:34:2e:cf:8b:64:
                    3e:71:c5:b3:ce:96:4a:a8:e2:18:10:e4:12:82:3c:
                    10:c1:c1:49:95:1c:89:70:76:87:f3:20:82:b0:a6:
                    23:dc:ee:54:a4:95:52:42:45:cc:14:7a:8b:2a:89:
                    aa:d7:cb:32:31:34:57:92:da:e1:b0:40:c2:92:cf:
                    f8:e1:1e:3e:e6:c1:c3:05:9f:6e:e2:8e:af:4a:e2:
                    8c:27:c8:08:a5:94:1c:d5:a2:59:7d:ff:d8:f8:8d:
                    03:f6:c5:29:e7:f6:53:1d:10:9c:71:3f:b9:5e:4e:
                    ae:08:27:7d:25:ca:13:22:00:0b:de:da:83:54:29:
                    d4:f0:96:92:c7:f4:42:8f:87:7e:e2:ed:62:c6:35:
                    4b:3c:a1:79:5e:1f:b1:9c:95:f0:9d:a8:e2:df:a5:
                    c7:8e:2b:d0:f1:b3:d5:be:95:48:00:63:bb:15:29:
                    34:dd:73:1b:08:97:af:b9:bd:af:8f:cd:37:52:89:
                    7f:d8:86:5a:ac:b6:57:b3:60:f0:32:2a:8b:5d:1d:
                    ed:3f:63:5d:f6:d5:ae:ae:fa:80:e9:e9:e8:60:89:
                    c9:31
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                20:BD:3F:7F:99:8E:D4:3D:5F:C4:F8:62:9D:D0:C1:88:EC:7D:DA:E0
            X509v3 Authority Key Identifier:
                keyid:0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                CA Repository - URI:rsync://rpki.apnic.net/member_repository/A918E9A4/0D5DC524730211EEB5CCC244C4F9AE02/
                RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A918E9A4/0D5DC524730211EEB5CCC244C4F9AE02/IL0_f5mO1D1fxPhindDBiOx92uA.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  151955

            sbgp-ipAddrBlock: critical
                IPv4:
                  36.50.37.0/24

    Signature Algorithm: sha256WithRSAEncryption
         1f:46:8c:1b:85:f3:1e:bb:67:1a:a8:3c:9a:b8:d7:0b:6b:42:
         92:6b:20:d6:b4:13:bb:3a:5a:63:93:86:36:6d:85:ad:40:e6:
         ee:fe:e8:9a:3a:35:95:f7:7e:65:28:73:27:19:bf:8d:68:90:
         e3:01:7b:e5:65:4d:c1:d4:40:ab:c7:ff:e0:1d:fc:68:0b:3e:
         91:bf:bd:a7:83:b5:5d:51:00:ce:51:6b:26:df:ac:67:76:6a:
         14:62:1b:aa:79:c9:63:a8:46:be:3f:7d:e6:f0:7d:59:5c:4f:
         fc:e9:21:09:b2:b0:6e:83:bf:ce:3a:77:f5:57:7a:2a:73:bd:
         0c:07:30:f0:39:81:d7:ec:5b:94:81:d5:df:0c:73:72:a2:4b:
         5a:e0:c0:d4:e7:11:12:52:0d:0a:bd:53:73:df:e4:de:b8:a1:
         cd:00:d2:fa:9c:8a:67:41:65:98:ac:cc:66:49:c2:41:62:2d:
         17:2d:5b:dd:6e:07:f4:ed:70:0e:eb:7d:ba:b4:f7:0b:ab:12:
         7a:d0:2d:3b:85:c5:3b:fe:48:95:3a:0a:ff:e1:0d:36:e6:75:
         78:a1:bb:fd:f7:ca:71:82:6f:20:21:65:d6:92:fd:f0:5a:f2:
         94:be:52:2a:01:33:b1:7b:1c:96:d5:d6:c5:3f:cc:e5:1f:4d:
         3e:f6:9d:cd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 2 12:24:26 2024 by rpki-client on console-ams.rpki-client.org