Certificate

$ rpki-client -vvf rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KYEeHbBovbur-3q2lfhYmL1hjGk.cer
File:                     KYEeHbBovbur-3q2lfhYmL1hjGk.cer (raw, json)
Hash identifier:          tm3t0QWWCgROL8XmnKSDlFPHu7g5hi3mtadt+jvB3mU=
Subject key identifier:   29:81:1E:1D:B0:68:BD:BB:AB:FB:7A:B6:95:F8:58:98:BD:61:8C:69
Authority key identifier: 0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
Certificate issuer:       /CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Certificate serial:       021558
Authority info access:    rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
Manifest:                 rsync://rpki.apnic.net/member_repository/A91B0CAE/7C644EE66A7111EEA5B4CB26C4F9AE02/KYEeHbBovbur-3q2lfhYmL1hjGk.mft
caRepository:             rsync://rpki.apnic.net/member_repository/A91B0CAE/7C644EE66A7111EEA5B4CB26C4F9AE02/
Notify URL:               https://rrdp.apnic.net/notification.xml
Certificate not before:   Wed 23 Oct 2024 04:31:20 +0000
Certificate not after:    Sat 31 Jan 2026 00:00:00 +0000
Subordinate resources:    AS: 151961
                          IP: 223.130.8.0/23
                          IP: 2401:4560::/32

Validation:               OK
Signature path:           rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 04 Dec 2024 01:13:26 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 136536 (0x21558)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
        Validity
            Not Before: Oct 23 04:31:20 2024 GMT
            Not After : Jan 31 00:00:00 2026 GMT
        Subject: CN=A91B0CAE/serialNumber=29811E1DB068BDBBABFB7AB695F85898BD618C69
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:3c:9a:0f:5e:ad:51:10:c5:d3:77:69:2a:8c:
                    62:1f:bb:2b:67:46:bb:18:a5:fa:ce:7e:a3:79:29:
                    9f:21:a4:39:96:6e:fa:1b:0a:2f:2c:1a:fa:b0:e7:
                    b2:8c:2b:94:2a:8c:3e:14:21:91:c5:27:cf:cd:c7:
                    ce:3c:b4:77:ce:38:25:17:21:1c:36:a4:0a:8b:e9:
                    b6:14:12:3b:91:19:44:1c:27:d1:77:ee:72:41:f8:
                    13:33:3b:af:13:f2:59:c6:40:70:cb:95:95:ab:eb:
                    e1:0f:54:ab:4c:53:cf:55:04:2e:7c:84:e3:3e:a1:
                    0d:07:94:96:3f:7e:4b:fd:08:04:ed:0a:15:ff:da:
                    9b:2c:fb:b7:36:3a:fa:d3:1f:57:cf:b7:65:ff:b8:
                    ff:af:da:85:e8:2c:bd:e1:47:06:c7:51:e8:0c:f0:
                    dd:08:ac:b8:b1:d0:11:9c:08:41:28:06:36:f9:94:
                    db:0b:8e:4b:ee:d8:38:45:9d:11:95:7e:72:30:6f:
                    15:b7:ce:75:c8:ac:87:46:02:8f:6d:dd:63:03:e6:
                    46:56:21:cf:64:96:c0:e9:c8:4c:e3:cd:d4:ee:b7:
                    d7:a3:4d:fa:5c:27:ec:9b:1d:be:3c:b9:c5:0a:a8:
                    85:ce:f6:73:54:45:22:7c:59:a9:44:d9:54:cc:81:
                    ac:e1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                29:81:1E:1D:B0:68:BD:BB:AB:FB:7A:B6:95:F8:58:98:BD:61:8C:69
            X509v3 Authority Key Identifier:
                keyid:0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                CA Repository - URI:rsync://rpki.apnic.net/member_repository/A91B0CAE/7C644EE66A7111EEA5B4CB26C4F9AE02/
                RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A91B0CAE/7C644EE66A7111EEA5B4CB26C4F9AE02/KYEeHbBovbur-3q2lfhYmL1hjGk.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  151961

            sbgp-ipAddrBlock: critical
                IPv4:
                  223.130.8.0/23
                IPv6:
                  2401:4560::/32

    Signature Algorithm: sha256WithRSAEncryption
         57:82:ca:58:60:e4:2d:84:da:98:fd:0d:02:d6:75:bf:76:78:
         f6:63:7c:e4:96:cb:81:58:6b:55:b6:6e:3c:63:71:d4:c0:17:
         21:1f:d1:d3:fd:19:0c:a8:4b:78:9e:7c:5b:c2:c3:06:66:5c:
         f9:01:76:82:e5:20:01:e5:80:d5:1b:14:a9:8e:af:dd:b8:0f:
         54:5e:cf:6c:e7:f7:b9:73:e2:f8:d3:e0:24:6f:44:31:e2:1c:
         39:c4:e1:09:ea:e4:f0:54:0d:f0:79:3b:2e:84:8f:a0:ce:3d:
         9e:03:d3:a0:2a:f6:a9:f9:23:f2:c8:44:7d:91:71:19:c1:76:
         fb:a9:04:56:a3:ee:55:29:13:53:8a:b4:02:b9:30:d8:69:7f:
         fc:41:e4:2f:e8:80:cc:d4:66:38:c5:f9:c3:f6:6c:40:93:bf:
         10:df:08:05:f7:4a:09:31:3a:11:31:3a:a2:18:4f:8b:0c:60:
         7f:91:47:07:b0:a9:63:86:4a:0e:b8:16:b9:3f:1e:2d:49:b9:
         2b:b9:a1:31:a1:ac:8d:3b:b9:a2:0a:dd:78:59:26:d9:f0:51:
         24:67:68:94:df:27:5c:1c:42:9d:aa:f1:d4:be:c7:ae:3f:91:
         f4:12:94:08:91:35:d7:e4:c9:cf:e9:c7:b0:73:7a:cc:23:b4:
         53:13:d9:91
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----