Certificate

$ rpki-client -vvf rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JYF_igWRLi1r1ZvvH5UTfpPcmTM.cer
File:                     JYF_igWRLi1r1ZvvH5UTfpPcmTM.cer (raw, json)
Hash identifier:          WRxCjsn7bZZR2O1DifimXAd9vlx0wpD6zBm4z/uiSSA=
Subject key identifier:   25:81:7F:8A:05:91:2E:2D:6B:D5:9B:EF:1F:95:13:7E:93:DC:99:33
Authority key identifier: 0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
Certificate issuer:       /CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Certificate serial:       01F9DC
Authority info access:    rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
Manifest:                 rsync://rpki.apnic.net/member_repository/A91949C1/14323D742DD511EF9E505E5DC4F9AE02/JYF_igWRLi1r1ZvvH5UTfpPcmTM.mft
caRepository:             rsync://rpki.apnic.net/member_repository/A91949C1/14323D742DD511EF9E505E5DC4F9AE02/
Notify URL:               https://rrdp.apnic.net/notification.xml
Certificate not before:   Wed 19 Jun 2024 00:44:33 +0000
Certificate not after:    Tue 30 Sep 2025 00:00:00 +0000
Subordinate resources:    AS: 149635

Validation:               OK
Signature path:           rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 27 Sep 2024 21:14:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 129500 (0x1f9dc)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
        Validity
            Not Before: Jun 19 00:44:33 2024 GMT
            Not After : Sep 30 00:00:00 2025 GMT
        Subject: CN=A91949C1/serialNumber=25817F8A05912E2D6BD59BEF1F95137E93DC9933
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:93:2f:06:4e:7b:ca:1b:ea:46:75:5b:ab:57:
                    7c:e2:e8:8e:70:50:9b:5c:f6:ac:f8:f4:da:76:2f:
                    fa:51:0f:b3:4c:b2:4b:15:83:a1:4a:44:53:30:84:
                    cd:96:8e:44:d2:00:f5:eb:98:c6:06:cf:ff:8b:5e:
                    b5:3d:fc:df:3b:ed:6e:f2:8a:1e:16:d3:2e:16:da:
                    76:7e:a3:65:43:63:5f:52:2b:2f:4f:b9:e1:ef:eb:
                    47:41:6b:62:a6:87:38:e5:4f:0e:f2:9b:09:19:f4:
                    08:47:87:58:b0:ed:de:ba:05:e7:83:52:a0:b2:f5:
                    d0:24:bc:9d:5c:25:b9:5f:73:81:29:6d:39:de:8f:
                    7a:5b:c2:63:52:ef:c2:a1:d8:86:71:41:3c:50:69:
                    d2:61:e3:9f:e5:8a:24:c9:46:7b:e6:70:4f:7f:b0:
                    d4:76:46:0c:cc:ed:73:7b:4b:ac:d5:c2:fe:65:1e:
                    f2:03:b3:18:3c:eb:2f:7e:d8:33:33:18:cc:f2:0a:
                    b7:53:f1:67:39:24:eb:27:5c:42:b0:44:33:ee:3d:
                    73:ef:db:4a:8f:0a:48:ef:53:f6:d4:6f:08:e2:b5:
                    cf:01:ed:7e:33:5f:81:7a:74:d4:18:63:42:dd:40:
                    12:15:b9:a7:24:a9:53:70:c0:df:c6:2a:fc:4f:28:
                    6e:e9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                25:81:7F:8A:05:91:2E:2D:6B:D5:9B:EF:1F:95:13:7E:93:DC:99:33
            X509v3 Authority Key Identifier:
                keyid:0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                CA Repository - URI:rsync://rpki.apnic.net/member_repository/A91949C1/14323D742DD511EF9E505E5DC4F9AE02/
                RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A91949C1/14323D742DD511EF9E505E5DC4F9AE02/JYF_igWRLi1r1ZvvH5UTfpPcmTM.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  149635

    Signature Algorithm: sha256WithRSAEncryption
         88:5f:7e:ac:84:69:0d:f4:26:51:5b:eb:d8:b9:91:b3:46:1b:
         31:2b:a7:ff:d3:f3:af:46:13:88:87:36:51:8b:7b:62:d6:97:
         49:2d:fb:5d:cb:a0:7c:b4:3f:10:1c:48:4b:f3:1c:e3:a5:4e:
         c4:9e:2f:97:6c:fc:47:9e:8c:cb:7e:9d:23:dc:31:34:7f:6b:
         79:da:25:ad:cf:6b:2c:68:a7:2b:be:3d:a5:78:76:57:fa:78:
         52:23:d0:2c:49:18:18:f7:96:7d:47:6c:a9:b5:93:39:cc:af:
         da:2c:06:b3:1c:66:4d:a8:36:c5:44:a5:e8:73:7e:95:d3:9d:
         d1:b6:bc:5a:42:18:14:b5:63:54:5a:3b:89:92:37:6f:76:9c:
         51:ae:61:1b:6d:5a:7b:72:08:2e:4a:1d:78:06:e4:56:cb:e0:
         3c:ed:31:a4:18:d6:34:67:6e:73:bd:ce:3a:f9:98:92:14:4c:
         29:45:1a:c1:66:3d:ff:b4:f2:40:8d:6f:2c:24:f5:7b:30:6c:
         e8:50:62:9b:54:6d:71:5c:b1:35:58:09:ac:18:4d:9b:20:04:
         69:07:f0:5f:e1:1e:8c:c5:d5:46:a3:de:28:c8:7c:30:26:27:
         13:69:39:fc:bd:9a:0b:f5:15:49:b6:be:6b:94:0b:40:a1:f0:
         bf:1d:ee:43
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 20 23:03:05 2024 by rpki-client on console-ams.rpki-client.org