Certificate

$ rpki-client -vvf rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/M1EvnGdsMJ4181WPA7muZBm_dBU.cer
File:                     M1EvnGdsMJ4181WPA7muZBm_dBU.cer (raw, json)
Hash identifier:          WOzlKLJtf4vXNP0JdsNvAZ4aRBrXjA7bD/BmkKRmYIQ=
Subject key identifier:   33:51:2F:9C:67:6C:30:9E:35:F3:55:8F:03:B9:AE:64:19:BF:74:15
Authority key identifier: 0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
Certificate issuer:       /CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Certificate serial:       01A121
Authority info access:    rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
Manifest:                 rsync://rpki.apnic.net/member_repository/A91CB763/8F021F88E9A711EDB1C6B141C4F9AE02/M1EvnGdsMJ4181WPA7muZBm_dBU.mft
caRepository:             rsync://rpki.apnic.net/member_repository/A91CB763/8F021F88E9A711EDB1C6B141C4F9AE02/
Notify URL:               https://rrdp.apnic.net/notification.xml
Certificate not before:   Wed 03 May 2023 11:42:26 +0000
Certificate not after:    Tue 30 Jul 2024 00:00:00 +0000
Subordinate resources:    IP: 103.69.78.0/23
                          IP: 2400:f960::/32

Validation:               OK
Signature path:           rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 26 Apr 2024 06:50:50 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 106785 (0x1a121)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
        Validity
            Not Before: May  3 11:42:26 2023 GMT
            Not After : Jul 30 00:00:00 2024 GMT
        Subject: CN=A91CB763/serialNumber=33512F9C676C309E35F3558F03B9AE6419BF7415
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d1:6c:d6:03:ad:68:c8:5a:be:94:e5:f4:b5:80:
                    81:aa:2f:c2:37:ba:45:8c:60:8f:70:4c:dc:83:dc:
                    12:d7:29:ea:9e:d1:39:9a:3e:ec:47:83:f6:ee:ea:
                    c9:0a:7e:ae:a3:85:42:b3:d0:5d:e4:e3:50:1f:84:
                    da:09:6a:a7:b2:5b:37:b5:59:d1:32:50:3f:57:31:
                    10:dd:be:cd:da:29:46:33:f3:ed:53:35:db:2a:fb:
                    64:fb:9d:c5:b1:4e:38:c1:c0:8f:c2:42:dd:4b:3d:
                    b5:74:37:f0:e9:43:30:c3:0a:da:5c:c5:c1:90:80:
                    02:31:01:45:66:b7:77:a3:5e:64:d5:da:c1:eb:80:
                    64:33:f2:d4:5f:06:89:2f:cf:39:03:87:05:0f:74:
                    4b:6a:d5:87:c8:8f:45:9e:68:f3:a8:1b:4b:d0:0d:
                    1b:a4:34:b6:7e:8d:8c:7a:4d:70:5c:27:65:0e:97:
                    82:58:6f:c4:15:5a:3c:ca:6b:b9:2e:06:f5:f4:0f:
                    84:82:5b:85:26:e0:a5:cc:b2:ac:ab:dd:e9:77:b1:
                    bf:11:a0:6b:13:75:97:28:f8:62:7d:76:f8:65:8e:
                    76:41:18:e1:5a:f1:e4:81:7e:bf:28:1e:33:b8:75:
                    13:89:71:5a:fc:85:a6:58:26:d8:96:ee:5a:2b:14:
                    8e:d3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                33:51:2F:9C:67:6C:30:9E:35:F3:55:8F:03:B9:AE:64:19:BF:74:15
            X509v3 Authority Key Identifier:
                keyid:0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                CA Repository - URI:rsync://rpki.apnic.net/member_repository/A91CB763/8F021F88E9A711EDB1C6B141C4F9AE02/
                RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A91CB763/8F021F88E9A711EDB1C6B141C4F9AE02/M1EvnGdsMJ4181WPA7muZBm_dBU.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.69.78.0/23
                IPv6:
                  2400:f960::/32

    Signature Algorithm: sha256WithRSAEncryption
         85:80:91:bd:bb:c1:a4:d8:b1:ef:fb:f4:64:56:e9:35:3b:7c:
         b2:4c:9e:42:88:33:36:44:25:28:3c:34:87:5d:b1:c2:7b:12:
         8e:6b:ad:8b:b6:4d:22:4c:cc:ee:35:12:61:47:81:d5:3c:6d:
         41:50:22:df:dc:b2:e8:5a:35:13:85:57:79:a9:a8:f3:e7:47:
         50:1d:8e:c5:a6:0f:b5:75:74:f1:ab:4f:ce:b3:f4:a1:02:ef:
         5f:6d:9b:bf:cd:fc:9e:9a:89:1a:fc:c1:9f:bd:16:d0:db:74:
         16:dd:94:4a:fd:bd:07:e9:24:ac:36:fd:14:d2:19:cd:df:68:
         2a:5a:f4:89:a2:9f:07:c9:aa:6a:d2:2f:42:0c:51:64:cf:28:
         80:22:fc:ff:86:30:ab:51:a7:37:a6:6c:eb:79:e0:af:3b:8f:
         37:6f:2b:19:e0:68:de:91:c3:6a:f3:e7:06:82:8d:ba:fc:ac:
         ef:bf:94:a2:b5:4c:99:93:00:fc:5a:fa:3e:64:fd:81:7a:44:
         cc:01:40:5e:9e:95:a4:3d:4d:3b:0c:08:0b:46:ca:8a:39:60:
         2c:c6:b4:f8:f8:81:ed:3f:c8:73:a6:a1:21:51:10:e2:88:4c:
         11:57:eb:6e:e2:1d:64:c9:0e:ba:28:71:b8:95:e3:da:13:36:
         84:ef:fd:05
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 19 07:41:14 2024 by rpki-client on console-ams.rpki-client.org