Certificate

$ rpki-client -vvf rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LIi8YKOEeXk7VUcMN37SPqAtByI.cer
File:                     LIi8YKOEeXk7VUcMN37SPqAtByI.cer (raw, json)
Hash identifier:          10Va9t78xk0RfpRyH3mgVjUaOt8zQpNcxtYm0n8F0Lc=
Subject key identifier:   2C:88:BC:60:A3:84:79:79:3B:55:47:0C:37:7E:D2:3E:A0:2D:07:22
Authority key identifier: 0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
Certificate issuer:       /CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Certificate serial:       01B054
Authority info access:    rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
Manifest:                 rsync://rpki.apnic.net/member_repository/A91D5114/34E19E88E5A211ED808CF377C4F9AE02/LIi8YKOEeXk7VUcMN37SPqAtByI.mft
caRepository:             rsync://rpki.apnic.net/member_repository/A91D5114/34E19E88E5A211ED808CF377C4F9AE02/
Notify URL:               https://rrdp.apnic.net/notification.xml
Certificate not before:   Sun 16 Jul 2023 17:21:07 +0000
Certificate not after:    Mon 30 Sep 2024 00:00:00 +0000
Subordinate resources:    IP: 103.96.0.0/22
                          IP: 113.212.88.0/22
                          IP: 2001:df1:c900::/48
                          IP: 2401:7340::/32

Validation:               OK
Signature path:           rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 04 Apr 2024 18:26:12 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 110676 (0x1b054)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
        Validity
            Not Before: Jul 16 17:21:07 2023 GMT
            Not After : Sep 30 00:00:00 2024 GMT
        Subject: CN=A91D5114/serialNumber=2C88BC60A38479793B55470C377ED23EA02D0722
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:23:6e:a2:18:d5:90:9f:39:f6:04:84:95:a6:
                    04:da:e9:97:45:aa:72:73:00:e9:17:b7:a1:1d:4d:
                    49:93:94:3d:5b:c7:44:03:14:50:51:ad:7a:d8:12:
                    12:15:1e:de:64:9f:a8:4e:fd:11:e8:ed:17:76:1e:
                    9e:9f:b9:e5:e8:18:90:89:e9:71:43:ad:18:51:59:
                    93:a1:0e:28:f0:8c:66:d1:10:7d:6a:2c:d8:7e:6d:
                    b3:f2:e2:68:8c:1f:6a:a7:2c:a2:83:73:2d:9e:e8:
                    90:9b:f4:70:47:52:b2:58:bd:6d:ac:a3:da:23:d5:
                    f9:e5:d0:0f:cb:8b:2b:e2:5c:c7:bb:30:2e:18:0f:
                    21:7d:94:0d:6c:f9:df:80:85:41:95:93:c8:fb:fb:
                    6a:3e:07:7e:77:90:54:82:b5:45:e1:9a:56:2a:34:
                    ef:c5:5d:16:1d:e6:96:e2:76:5b:64:0b:75:82:43:
                    5d:06:98:51:95:21:39:41:e5:2d:76:b6:47:c2:c7:
                    2c:56:63:7d:f4:f2:4c:4a:b1:83:92:eb:0c:e8:84:
                    a6:c9:d1:fc:09:46:7a:21:f2:f1:66:c0:94:0e:89:
                    53:4b:b5:5f:38:59:cf:7a:ff:ed:40:63:86:30:d2:
                    1e:31:4c:ae:d9:29:6d:d5:66:eb:c5:72:f8:4b:4e:
                    73:79
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2C:88:BC:60:A3:84:79:79:3B:55:47:0C:37:7E:D2:3E:A0:2D:07:22
            X509v3 Authority Key Identifier:
                keyid:0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                CA Repository - URI:rsync://rpki.apnic.net/member_repository/A91D5114/34E19E88E5A211ED808CF377C4F9AE02/
                RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A91D5114/34E19E88E5A211ED808CF377C4F9AE02/LIi8YKOEeXk7VUcMN37SPqAtByI.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.96.0.0/22
                  113.212.88.0/22
                IPv6:
                  2001:df1:c900::/48
                  2401:7340::/32

    Signature Algorithm: sha256WithRSAEncryption
         64:f5:6d:f7:63:ea:ef:19:f8:54:00:08:40:57:a7:e2:41:5f:
         da:77:30:62:83:42:0f:5a:fb:38:07:9b:2d:3c:6e:a9:db:77:
         ed:9b:91:98:b1:96:68:e1:b6:52:79:c7:4d:0f:57:eb:0d:fb:
         95:d0:7e:7f:ee:32:5a:7e:ce:2c:6f:c5:47:c7:a8:6d:b7:b4:
         a7:88:ed:c5:85:db:3a:35:71:63:a2:01:e3:cf:e8:5d:72:e5:
         b9:9d:0e:ff:e8:c5:93:dd:06:c2:ad:5e:f2:0b:55:c2:e6:cf:
         53:d6:cd:6c:78:cc:bc:5c:23:b8:17:68:e4:18:9f:48:e2:7c:
         be:63:0a:ff:63:68:ba:ea:ea:45:fb:6b:de:e6:51:f4:b0:9a:
         17:5f:7d:ab:5b:46:ef:1e:34:4b:f1:25:64:52:0c:e6:78:ff:
         86:99:65:fb:4b:21:a6:e3:2a:87:dd:81:fe:7d:ab:a1:2f:6a:
         92:3b:6f:a6:14:e6:b0:cd:65:cb:46:9a:58:bc:84:e9:75:b6:
         23:c8:62:04:93:9c:2f:81:4b:64:04:4e:86:38:5f:5c:54:04:
         12:ff:c8:ac:84:98:b6:6a:ee:c0:90:49:c3:07:0e:9d:e3:09:
         2a:12:ed:76:e3:0d:7c:35:e9:7c:a7:24:25:bc:14:51:d8:42:
         82:3f:5e:72
-----BEGIN CERTIFICATE-----
MIIGHDCCBQSgAwIBAgIDAbBUMA0GCSqGSIb3DQEBCwUAMEYxETAPBgNVBAMTCEE5
MERDNUJFMTEwLwYDVQQFEygwRTY1QTRGNUZEMzZCNUJENjhFQjNDOTIzNDA4OTc4
QzkwN0FBNzlGMB4XDTIzMDcxNjE3MjEwN1oXDTI0MDkzMDAwMDAwMFowRjERMA8G
A1UEAxMIQTkxRDUxMTQxMTAvBgNVBAUTKDJDODhCQzYwQTM4NDc5NzkzQjU1NDcw
QzM3N0VEMjNFQTAyRDA3MjIwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB
AQC3I26iGNWQnzn2BISVpgTa6ZdFqnJzAOkXt6EdTUmTlD1bx0QDFFBRrXrYEhIV
Ht5kn6hO/RHo7Rd2Hp6fueXoGJCJ6XFDrRhRWZOhDijwjGbREH1qLNh+bbPy4miM
H2qnLKKDcy2e6JCb9HBHUrJYvW2so9oj1fnl0A/LiyviXMe7MC4YDyF9lA1s+d+A
hUGVk8j7+2o+B353kFSCtUXhmlYqNO/FXRYd5pbidltkC3WCQ10GmFGVITlB5S12
tkfCxyxWY3308kxKsYOS6wzohKbJ0fwJRnoh8vFmwJQOiVNLtV84Wc96/+1AY4Yw
0h4xTK7ZKW3VZuvFcvhLTnN5AgMBAAGjggMRMIIDDTAdBgNVHQ4EFgQULIi8YKOE
eXk7VUcMN37SPqAtByIwHwYDVR0jBBgwFoAUDmWk9f02tb1o6zySNAiXjJB6p58w
DgYDVR0PAQH/BAQDAgEGMA8GA1UdEwEB/wQFMAMBAf8wcwYDVR0fBGwwajBooGag
ZIZicnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2
NjExRTJCQjQ2OEY3QzcyRkQxRkYyL0RtV2s5ZjAydGIxbzZ6eVNOQWlYakpCNnA1
OC5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L3JlcG9zaXRvcnkvOTgwNjUyRTBCNzdFMTFFN0E5NkEzOTUyMUE0
RjRGQjQvRG1XazlmMDJ0YjFvNnp5U05BaVhqSkI2cDU4LmNlcjBKBgNVHSABAf8E
QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj
Lm5ldC9SUEtJL0NQUy5wZGYwggEoBggrBgEFBQcBCwSCARowggEWMF8GCCsGAQUF
BzAFhlNyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5
MUQ1MTE0LzM0RTE5RTg4RTVBMjExRUQ4MDhDRjM3N0M0RjlBRTAyLzB+BggrBgEF
BQcwCoZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9B
OTFENTExNC8zNEUxOUU4OEU1QTIxMUVEODA4Q0YzNzdDNEY5QUUwMi9MSWk4WUtP
RWVYazdWVWNNTjM3U1BxQXRCeUkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3Jy
ZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwPQYIKwYBBQUHAQcBAf8ELjAs
MBIEAgABMAwDBAJnYAADBAJx1FgwFgQCAAIwEAMHACABDfHJAAMFACQBc0AwDQYJ
KoZIhvcNAQELBQADggEBAGT1bfdj6u8Z+FQACEBXp+JBX9p3MGKDQg9a+zgHmy08
bqnbd+2bkZixlmjhtlJ5x00PV+sN+5XQfn/uMlp+zixvxUfHqG23tKeI7cWF2zo1
cWOiAePP6F1y5bmdDv/oxZPdBsKtXvILVcLmz1PWzWx4zLxcI7gXaOQYn0jifL5j
Cv9jaLrq6kX7a97mUfSwmhdffatbRu8eNEvxJWRSDOZ4/4aZZftLIabjKofdgf59
q6EvapI7b6YU5rDNZctGmli8hOl1tiPIYgSTnC+BS2QEToY4X1xUBBL/yKyEmLZq
7sCQScMHDp3jCSoS7XbjDXw16XynJCW8FFHYQoI/XnI=
-----END CERTIFICATE-----
Generated at Thu Mar 28 19:44:46 2024 by rpki-client on console-fra.rpki-client.org