Certificate

$ rpki-client -vvf rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/K0TIiRquK4of20jr9KV-mJrrc2M.cer
File:                     K0TIiRquK4of20jr9KV-mJrrc2M.cer (raw, json)
Hash identifier:          3bjfGY04w6NyGZ1k9e9xTeoWgMT2TbQgULMNiS+YhH0=
Subject key identifier:   2B:44:C8:89:1A:AE:2B:8A:1F:DB:48:EB:F4:A5:7E:98:9A:EB:73:63
Authority key identifier: 0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
Certificate issuer:       /CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Certificate serial:       01D19C
Authority info access:    rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
Manifest:                 rsync://rpki.apnic.net/member_repository/A918BBBA/F913C0BA4C4211EC96658A31C4F9AE02/K0TIiRquK4of20jr9KV-mJrrc2M.mft
caRepository:             rsync://rpki.apnic.net/member_repository/A918BBBA/F913C0BA4C4211EC96658A31C4F9AE02/
Notify URL:               https://rrdp.apnic.net/notification.xml
Certificate not before:   Tue 12 Dec 2023 19:48:36 +0000
Certificate not after:    Fri 31 Jan 2025 00:00:00 +0000
Subordinate resources:    IP: 103.174.168.0/23
                          IP: 2001:df7:cc80::/48

Validation:               OK
Signature path:           rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 03 May 2024 07:49:47 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 119196 (0x1d19c)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
        Validity
            Not Before: Dec 12 19:48:36 2023 GMT
            Not After : Jan 31 00:00:00 2025 GMT
        Subject: CN=A918BBBA/serialNumber=2B44C8891AAE2B8A1FDB48EBF4A57E989AEB7363
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d8:03:33:0d:f5:a2:79:90:1c:8b:e8:5d:3b:a0:
                    9c:78:a7:87:ef:11:dc:c0:8d:3b:57:25:9e:35:7c:
                    d0:54:68:0d:58:1f:16:d1:1d:3d:ea:17:0c:72:cb:
                    f2:ef:76:bc:71:16:06:f2:d2:f7:64:7d:7e:94:08:
                    2b:a3:ba:9b:2c:97:1e:3d:c3:05:d9:8c:b5:70:2c:
                    86:dd:5f:63:e5:b1:de:b9:11:18:bf:ea:7d:a7:3f:
                    ba:5d:5d:6e:5f:6f:6a:76:9c:13:a7:f9:ca:fc:bb:
                    f1:79:66:a5:d0:6a:05:48:d0:d9:03:11:53:7f:6e:
                    3e:ff:72:b8:ac:58:d0:a2:c0:c9:fc:03:5f:27:f2:
                    4d:b2:a1:1d:e6:72:64:b1:94:8c:57:c2:4e:22:15:
                    ac:34:3b:89:17:a1:3b:a4:46:1d:70:ac:fc:1e:d6:
                    1d:02:57:e7:0b:aa:d0:47:64:ab:2e:69:95:2d:7e:
                    57:9f:66:a4:67:49:bd:37:12:5e:5a:80:b8:a2:9d:
                    1c:79:f2:1a:0e:fa:84:6d:81:9a:ac:5a:62:33:6c:
                    a7:45:79:a7:5d:c0:5d:41:ce:e7:83:e8:b5:f0:ee:
                    7c:8a:46:b4:2e:5d:b1:82:27:af:b1:50:37:0b:e3:
                    d7:00:69:85:5c:cf:17:65:3c:d6:55:11:a6:e5:d1:
                    47:bd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2B:44:C8:89:1A:AE:2B:8A:1F:DB:48:EB:F4:A5:7E:98:9A:EB:73:63
            X509v3 Authority Key Identifier:
                keyid:0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                CA Repository - URI:rsync://rpki.apnic.net/member_repository/A918BBBA/F913C0BA4C4211EC96658A31C4F9AE02/
                RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A918BBBA/F913C0BA4C4211EC96658A31C4F9AE02/K0TIiRquK4of20jr9KV-mJrrc2M.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.174.168.0/23
                IPv6:
                  2001:df7:cc80::/48

    Signature Algorithm: sha256WithRSAEncryption
         23:56:06:41:2a:c4:28:be:ef:55:fd:7c:25:0a:d9:7d:cb:5e:
         2e:9f:30:97:01:17:d7:3b:67:62:b2:ec:3c:df:16:ef:e6:6b:
         cd:82:77:28:45:85:f1:b1:29:55:ae:e6:bc:2a:bd:3d:f7:87:
         6c:39:22:e7:c7:97:a5:59:ac:32:1c:39:ea:f3:f9:5a:32:35:
         39:ba:5c:e7:c7:64:ad:a3:c2:03:a5:23:df:69:0f:bd:97:58:
         bd:1f:21:e1:f6:24:78:7b:35:12:8d:ca:fb:7a:9f:ae:6e:94:
         8b:d1:f3:76:e7:31:19:bc:75:42:9d:ce:56:f8:66:9e:d5:3a:
         9c:70:05:c4:1e:e3:84:bb:e9:24:87:a3:84:98:5d:d4:75:89:
         cf:f6:9d:20:1a:f9:51:96:76:da:a7:aa:47:5e:39:ee:75:b0:
         b3:27:96:ab:64:32:c5:5a:e8:4f:48:dc:ec:90:8e:27:15:16:
         ce:45:26:46:01:4b:b5:78:92:4c:63:0b:62:29:7b:35:fb:e0:
         21:e4:e5:9c:5d:7a:5a:30:f7:ca:0d:f8:9e:1d:8f:8b:95:4f:
         c4:a8:cf:26:2b:f4:66:0e:0a:9e:c5:63:6d:8b:69:8f:eb:ca:
         37:85:28:ff:5a:0e:c9:bc:9d:44:80:81:dd:58:36:ee:13:65:
         fd:aa:19:c3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----