Certificate

$ rpki-client -vvf rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/M4C0z-46-B-M_blgJdUQiKEpZAs.cer
File:                     M4C0z-46-B-M_blgJdUQiKEpZAs.cer (raw, json)
Hash identifier:          GiLc9ZYHMLbJ8gE2m4rSvHb1MWOYQMO+8JRts+gcblE=
Subject key identifier:   33:80:B4:CF:EE:3A:F8:1F:8C:FD:B9:60:25:D5:10:88:A1:29:64:0B
Authority key identifier: 0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
Certificate issuer:       /CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Certificate serial:       0170D4
Authority info access:    rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
Manifest:                 rsync://rpki.apnic.net/member_repository/A9129AAC/DB9101D0391011E9A0E25B52C4F9AE02/M4C0z-46-B-M_blgJdUQiKEpZAs.mft
caRepository:             rsync://rpki.apnic.net/member_repository/A9129AAC/DB9101D0391011E9A0E25B52C4F9AE02/
Notify URL:               https://rrdp.apnic.net/notification.xml
Certificate not before:   Sat 01 Oct 2022 01:18:13 +0000
Certificate not after:    Tue 31 Jan 2023 00:00:00 +0000
Subordinate resources:    IP: 2403:5180::/32

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 94420 (0x170d4)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
        Validity
            Not Before: Oct  1 01:18:13 2022 GMT
            Not After : Jan 31 00:00:00 2023 GMT
        Subject: CN=A9129AAC/serialNumber=3380B4CFEE3AF81F8CFDB96025D51088A129640B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9b:4b:29:92:d2:4d:46:bc:3e:18:36:a7:cd:db:
                    47:a2:df:c6:53:be:79:0d:7c:bc:12:0d:20:3b:0b:
                    64:2b:1a:07:92:1b:09:16:3f:06:77:2c:df:e7:11:
                    77:55:fb:bb:14:9e:72:ce:a6:5f:95:55:c6:a1:90:
                    9f:67:0f:71:fd:fa:34:72:b9:2c:85:c7:54:39:be:
                    4c:c2:ce:f0:27:46:c4:91:3e:b4:9a:59:57:18:e1:
                    1f:0e:39:ee:3f:58:e5:d0:70:05:3b:93:67:9c:bb:
                    23:0d:41:78:12:7f:51:6a:4e:75:91:6d:86:98:8d:
                    37:e0:c3:bc:49:2c:dc:f6:cf:58:78:17:fe:8d:a7:
                    ef:fa:de:2f:fd:05:99:c5:e8:00:11:7f:17:3f:12:
                    83:02:3a:32:e6:53:b2:36:c8:b9:37:8d:fd:db:3e:
                    42:a2:15:63:a6:39:11:af:99:d8:87:fd:f3:25:fb:
                    1f:8d:23:47:2a:c5:77:d1:01:6e:62:97:88:ed:c6:
                    9d:52:9d:5d:21:27:17:e2:4d:84:99:84:f3:d0:41:
                    23:f2:cf:99:bf:e8:fa:cf:ae:7a:d9:c9:5a:1f:b1:
                    5b:25:d7:30:31:78:99:54:7c:ef:b6:34:dd:f6:05:
                    e6:81:12:b5:54:a8:61:2b:74:fc:c9:ce:51:cb:11:
                    43:df
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                33:80:B4:CF:EE:3A:F8:1F:8C:FD:B9:60:25:D5:10:88:A1:29:64:0B
            X509v3 Authority Key Identifier:
                keyid:0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                CA Repository - URI:rsync://rpki.apnic.net/member_repository/A9129AAC/DB9101D0391011E9A0E25B52C4F9AE02/
                RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A9129AAC/DB9101D0391011E9A0E25B52C4F9AE02/M4C0z-46-B-M_blgJdUQiKEpZAs.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv6:
                  2403:5180::/32

    Signature Algorithm: sha256WithRSAEncryption
         4d:b5:9c:8d:7b:a3:e8:5e:30:c1:51:9d:79:52:4c:75:cb:02:
         bb:d7:1d:b3:f6:25:f4:e7:ab:63:97:e4:bd:3f:75:71:7b:12:
         30:d4:c6:64:92:13:26:59:a1:1c:93:27:9d:36:93:a4:95:3b:
         4d:30:d8:e5:9d:0c:72:f4:79:d2:ca:7d:06:9d:08:4f:a9:97:
         fb:a1:2a:f6:24:cc:8e:57:66:5b:d6:48:dd:fd:b6:d4:4a:80:
         4e:cd:75:53:43:08:cd:e1:94:93:1e:4d:9a:72:89:f3:cb:bf:
         3b:d7:ae:cc:f7:21:8e:22:85:7f:9c:47:55:9d:00:4c:35:cd:
         82:7c:f3:24:87:31:fc:fc:5c:ed:aa:aa:f2:0a:02:cb:c5:de:
         87:fe:27:81:ef:9e:b6:2d:d0:7c:e8:94:3f:0b:3d:b9:96:d6:
         67:fa:73:2f:18:6d:94:9f:da:10:88:da:34:dc:27:d2:3c:2b:
         25:ff:77:17:c4:f7:19:fa:d3:2c:f0:29:02:ec:0c:a0:b9:8b:
         7e:af:c9:8f:0c:33:f9:67:27:a6:e2:8b:ff:5d:75:66:97:71:
         da:a5:3f:5b:21:02:bf:da:43:69:7a:6a:b5:7b:74:92:3c:ba:
         fb:ab:5e:7d:4e:e8:6d:be:62:50:34:f4:15:5e:53:3b:a3:64:
         7e:7d:56:10
-----BEGIN CERTIFICATE-----
MIIF/zCCBOegAwIBAgIDAXDUMA0GCSqGSIb3DQEBCwUAMEYxETAPBgNVBAMTCEE5
MERDNUJFMTEwLwYDVQQFEygwRTY1QTRGNUZEMzZCNUJENjhFQjNDOTIzNDA4OTc4
QzkwN0FBNzlGMB4XDTIyMTAwMTAxMTgxM1oXDTIzMDEzMTAwMDAwMFowRjERMA8G
A1UEAxMIQTkxMjlBQUMxMTAvBgNVBAUTKDMzODBCNENGRUUzQUY4MUY4Q0ZEQjk2
MDI1RDUxMDg4QTEyOTY0MEIwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB
AQCbSymS0k1GvD4YNqfN20ei38ZTvnkNfLwSDSA7C2QrGgeSGwkWPwZ3LN/nEXdV
+7sUnnLOpl+VVcahkJ9nD3H9+jRyuSyFx1Q5vkzCzvAnRsSRPrSaWVcY4R8OOe4/
WOXQcAU7k2ecuyMNQXgSf1FqTnWRbYaYjTfgw7xJLNz2z1h4F/6Np+/63i/9BZnF
6AARfxc/EoMCOjLmU7I2yLk3jf3bPkKiFWOmORGvmdiH/fMl+x+NI0cqxXfRAW5i
l4jtxp1SnV0hJxfiTYSZhPPQQSPyz5m/6PrPrnrZyVofsVsl1zAxeJlUfO+2NN32
BeaBErVUqGErdPzJzlHLEUPfAgMBAAGjggL0MIIC8DAdBgNVHQ4EFgQUM4C0z+46
+B+M/blgJdUQiKEpZAswHwYDVR0jBBgwFoAUDmWk9f02tb1o6zySNAiXjJB6p58w
DgYDVR0PAQH/BAQDAgEGMA8GA1UdEwEB/wQFMAMBAf8wcwYDVR0fBGwwajBooGag
ZIZicnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2
NjExRTJCQjQ2OEY3QzcyRkQxRkYyL0RtV2s5ZjAydGIxbzZ6eVNOQWlYakpCNnA1
OC5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L3JlcG9zaXRvcnkvOTgwNjUyRTBCNzdFMTFFN0E5NkEzOTUyMUE0
RjRGQjQvRG1XazlmMDJ0YjFvNnp5U05BaVhqSkI2cDU4LmNlcjBKBgNVHSABAf8E
QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj
Lm5ldC9SUEtJL0NQUy5wZGYwggEoBggrBgEFBQcBCwSCARowggEWMF8GCCsGAQUF
BzAFhlNyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5
MTI5QUFDL0RCOTEwMUQwMzkxMDExRTlBMEUyNUI1MkM0RjlBRTAyLzB+BggrBgEF
BQcwCoZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9B
OTEyOUFBQy9EQjkxMDFEMDM5MTAxMUU5QTBFMjVCNTJDNEY5QUUwMi9NNEMwei00
Ni1CLU1fYmxnSmRVUWlLRXBaQXMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3Jy
ZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwIAYIKwYBBQUHAQcBAf8EETAP
MA0EAgACMAcDBQAkA1GAMA0GCSqGSIb3DQEBCwUAA4IBAQBNtZyNe6PoXjDBUZ15
Ukx1ywK71x2z9iX056tjl+S9P3VxexIw1MZkkhMmWaEckyedNpOklTtNMNjlnQxy
9HnSyn0GnQhPqZf7oSr2JMyOV2Zb1kjd/bbUSoBOzXVTQwjN4ZSTHk2aconzy787
167M9yGOIoV/nEdVnQBMNc2CfPMkhzH8/FztqqryCgLLxd6H/ieB7562LdB86JQ/
Cz25ltZn+nMvGG2Un9oQiNo03CfSPCsl/3cXxPcZ+tMs8CkC7AyguYt+r8mPDDP5
Zyem4ov/XXVml3HapT9bIQK/2kNpemq1e3SSPLr7q159TuhtvmJQNPQVXlM7o2R+
fVYQ
-----END CERTIFICATE-----