Certificate

$ rpki-client -vvf rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JBKHZDDirPShqD5aV1x_l6srOy4.cer
File:                     JBKHZDDirPShqD5aV1x_l6srOy4.cer (raw, json)
Hash identifier:          a58D8rxXbyS8Iv3mcby1rJmvpHS8Gsw985SQzYq2vr8=
Subject key identifier:   24:12:87:64:30:E2:AC:F4:A1:A8:3E:5A:57:5C:7F:97:AB:2B:3B:2E
Authority key identifier: 0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
Certificate issuer:       /CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Certificate serial:       01B584
Authority info access:    rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
Manifest:                 rsync://rpki.apnic.net/member_repository/A918BBEF/F791C37EA04211EB85699E21C4F9AE02/JBKHZDDirPShqD5aV1x_l6srOy4.mft
caRepository:             rsync://rpki.apnic.net/member_repository/A918BBEF/F791C37EA04211EB85699E21C4F9AE02/
Notify URL:               https://rrdp.apnic.net/notification.xml
Certificate not before:   Mon 07 Aug 2023 17:28:43 +0000
Certificate not after:    Thu 31 Oct 2024 00:00:00 +0000
Subordinate resources:    IP: 103.97.32.0/22
                          IP: 2001:df6:100::/48

Validation:               OK
Signature path:           rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 03 May 2024 00:57:55 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 112004 (0x1b584)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
        Validity
            Not Before: Aug  7 17:28:43 2023 GMT
            Not After : Oct 31 00:00:00 2024 GMT
        Subject: CN=A918BBEF/serialNumber=2412876430E2ACF4A1A83E5A575C7F97AB2B3B2E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:82:3b:53:6b:17:62:3d:65:c6:32:f5:e6:16:
                    3e:b9:ed:e1:fd:d8:c8:4d:23:78:ad:3c:ec:4d:bc:
                    15:54:3b:0b:b7:38:5b:4b:5b:6f:6f:76:81:ea:ad:
                    0a:93:00:2a:d0:19:98:4a:cd:19:52:3d:38:8e:54:
                    f7:d8:24:b4:0d:29:f1:2c:ac:84:7f:76:ba:95:5b:
                    e0:9b:b5:36:32:cf:50:92:ea:3e:af:ae:c4:ed:38:
                    f4:df:94:89:ba:c8:28:13:f4:93:7f:eb:32:0f:ef:
                    68:c5:3b:73:25:f1:4a:ab:9e:99:0d:e2:c6:91:02:
                    b6:47:4b:0e:00:72:d7:d1:19:d6:69:70:00:ba:6a:
                    07:fc:98:04:5b:f3:1c:79:23:18:65:ee:dc:b3:df:
                    80:be:00:72:80:d5:54:fb:30:5a:12:a3:4e:8a:e2:
                    82:88:1c:6e:47:65:45:c1:0c:62:f4:ca:36:7c:2a:
                    0e:a4:67:79:44:38:39:c7:ae:dd:a6:f1:e9:d8:9d:
                    10:96:95:78:3a:32:b6:39:55:9d:cb:ed:89:7e:93:
                    8e:c2:b4:8d:ed:be:3a:5a:86:56:be:74:8e:ee:78:
                    66:82:a9:86:85:08:89:b8:63:9c:36:81:18:6b:4d:
                    e8:19:67:3c:7b:c6:10:c0:61:11:3c:ef:fc:9d:9e:
                    6c:dd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                24:12:87:64:30:E2:AC:F4:A1:A8:3E:5A:57:5C:7F:97:AB:2B:3B:2E
            X509v3 Authority Key Identifier:
                keyid:0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                CA Repository - URI:rsync://rpki.apnic.net/member_repository/A918BBEF/F791C37EA04211EB85699E21C4F9AE02/
                RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A918BBEF/F791C37EA04211EB85699E21C4F9AE02/JBKHZDDirPShqD5aV1x_l6srOy4.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.97.32.0/22
                IPv6:
                  2001:df6:100::/48

    Signature Algorithm: sha256WithRSAEncryption
         b0:05:3a:77:07:b6:eb:5f:18:47:30:84:7a:d0:eb:f2:11:15:
         e9:36:98:5e:14:dd:c6:15:59:29:09:fd:6f:e6:57:fb:42:14:
         68:c4:ef:4e:e1:f6:d3:c7:a3:a3:5c:f1:6c:d6:18:56:5d:00:
         d6:ba:b2:0c:ae:83:5f:f6:93:54:47:82:75:20:b2:85:2e:f6:
         ed:70:02:25:4c:d1:5c:79:03:29:d4:92:7c:27:f1:4e:08:b8:
         c9:c7:ef:f4:5e:37:b4:25:04:c1:1a:f4:94:ff:f5:a8:7f:88:
         82:be:97:3b:9b:52:2b:0e:2d:12:22:5c:00:71:18:8a:40:8e:
         41:44:0f:95:73:27:b9:34:71:24:16:bc:a2:66:6f:f2:35:b4:
         f2:18:6e:73:37:fc:b0:13:74:18:64:72:31:e9:dc:c6:71:2f:
         ac:00:f0:c4:be:99:55:f1:37:b7:14:d4:0b:94:36:d5:9c:3c:
         9c:67:e5:d5:69:44:9b:80:dc:13:a9:6e:87:8b:3c:5e:07:aa:
         fb:37:63:69:f8:e5:b4:68:62:6b:17:e3:27:92:0a:bb:bb:a9:
         06:12:5c:61:5c:b8:60:e5:c0:5b:33:b3:3b:35:f2:c8:78:b2:
         8e:c0:98:96:88:af:23:98:40:9f:58:19:f9:fa:8f:6a:23:d7:
         3d:69:ae:5c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 26 02:48:59 2024 by rpki-client on console-ams.rpki-client.org