Certificate

$ rpki-client -vvf rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/It6TcViumN6iIR-bvJp10O0NRDY.cer
File:                     It6TcViumN6iIR-bvJp10O0NRDY.cer (raw, json)
Hash identifier:          /NXD2vdtkQE2VO4DNeukusM+Bt6nvou9WF4nqnH5Ra8=
Subject key identifier:   22:DE:93:71:58:AE:98:DE:A2:21:1F:9B:BC:9A:75:D0:ED:0D:44:36
Authority key identifier: 0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
Certificate issuer:       /CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Certificate serial:       020855
Authority info access:    rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
Manifest:                 rsync://rpki.apnic.net/member_repository/A9189B41/726E3AD0605911EF9C223760C4F9AE02/It6TcViumN6iIR-bvJp10O0NRDY.mft
caRepository:             rsync://rpki.apnic.net/member_repository/A9189B41/726E3AD0605911EF9C223760C4F9AE02/
Notify URL:               https://rrdp.apnic.net/notification.xml
Certificate not before:   Thu 22 Aug 2024 07:38:02 +0000
Certificate not after:    Mon 01 Dec 2025 00:00:00 +0000
Subordinate resources:    AS: 153304
                          IP: 2001:df4:31c0::/48

Validation:               OK
Signature path:           rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 31 Oct 2024 13:02:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 133205 (0x20855)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
        Validity
            Not Before: Aug 22 07:38:02 2024 GMT
            Not After : Dec  1 00:00:00 2025 GMT
        Subject: CN=A9189B41/serialNumber=22DE937158AE98DEA2211F9BBC9A75D0ED0D4436
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:b3:24:fb:d6:bc:95:cc:c0:16:1a:30:0a:70:
                    8e:93:9c:c1:7b:9d:be:74:32:83:ff:ea:6d:0e:be:
                    84:c0:e6:11:ff:56:a2:62:a2:d8:f2:04:27:14:17:
                    c8:3d:68:3d:9d:8c:53:86:f9:6d:1c:ff:e9:81:a1:
                    94:2f:93:71:11:74:72:ba:53:d1:a3:76:89:b1:79:
                    79:dd:3e:5d:30:b7:7f:fd:9d:31:04:03:08:76:68:
                    3b:af:a1:29:26:4c:bc:ba:fa:f6:29:d5:62:41:c5:
                    f7:79:6f:ab:66:3b:99:7f:39:57:c5:1d:e0:81:37:
                    49:39:8f:b9:c6:bf:3f:84:19:4a:a3:67:f0:48:f8:
                    f4:d2:6c:38:87:09:75:b3:36:b3:08:af:28:e8:84:
                    17:e9:e2:99:a2:59:96:ff:dd:02:8c:ad:8c:87:1c:
                    c2:6a:d9:e2:1d:47:23:42:69:3c:fb:5a:9b:2a:1d:
                    08:a1:80:2f:48:35:f1:2a:28:26:18:ff:58:40:ff:
                    0b:d3:60:d1:44:60:04:08:ba:b8:a8:81:5b:56:c4:
                    e7:fc:56:46:fa:b5:0a:84:d0:3f:d0:2e:64:8f:9c:
                    b0:ef:e6:54:e8:93:45:6c:76:8b:83:55:e1:18:08:
                    31:86:ef:02:22:60:42:87:0f:ca:1b:79:77:3d:44:
                    34:e5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                22:DE:93:71:58:AE:98:DE:A2:21:1F:9B:BC:9A:75:D0:ED:0D:44:36
            X509v3 Authority Key Identifier:
                keyid:0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                CA Repository - URI:rsync://rpki.apnic.net/member_repository/A9189B41/726E3AD0605911EF9C223760C4F9AE02/
                RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A9189B41/726E3AD0605911EF9C223760C4F9AE02/It6TcViumN6iIR-bvJp10O0NRDY.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  153304

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:df4:31c0::/48

    Signature Algorithm: sha256WithRSAEncryption
         b8:12:30:99:f3:4d:f9:d9:4e:7b:69:29:ae:9b:b1:60:25:fa:
         86:23:dd:9e:06:c8:22:59:5a:b7:eb:cb:71:a7:8b:a1:1b:15:
         ff:91:b9:e5:c9:6f:a4:e9:a0:cd:ae:e4:0b:7d:66:ec:5f:6b:
         f5:e5:9b:5e:cb:d1:0b:33:5c:c6:bf:f6:30:8b:e8:17:17:41:
         c8:d4:94:15:bc:6e:c2:3d:92:da:5d:a5:32:f9:ff:15:bd:62:
         56:ba:95:a2:07:1c:ee:21:fc:a6:3d:40:de:fc:7f:f2:8f:f6:
         3c:eb:c8:a9:04:33:cb:7b:2b:37:43:97:b7:19:cc:01:66:a4:
         32:f3:28:32:c1:b1:86:19:05:ed:a0:89:bb:11:c7:74:54:88:
         3d:50:f3:bd:da:5d:56:02:97:05:c0:4a:4b:cb:a9:40:a0:18:
         86:57:1b:8f:4f:7c:97:f8:ee:4d:a1:0d:94:b2:11:78:d4:18:
         b1:4e:17:44:67:0b:13:27:52:cd:98:bf:ce:48:7f:06:0e:1b:
         a1:1e:21:b6:20:98:e2:ee:db:75:8a:f4:e3:4f:97:74:08:a0:
         ee:d0:b9:25:88:1c:c9:f8:68:44:cb:8a:aa:b0:be:dc:34:57:
         13:cb:d8:f6:1c:0c:d3:2e:8c:ec:e7:18:91:3c:01:93:cc:d1:
         e4:51:0c:85
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 24 13:56:28 2024 by rpki-client on console-fra.rpki-client.org