Certificate

$ rpki-client -vvf rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/M77xZK7T_RPWmutR5aDM85n5QUQ.cer
File:                     M77xZK7T_RPWmutR5aDM85n5QUQ.cer (raw, json)
Hash identifier:          Vub1b+6tdpWnmMJX2KHNhUp8DwRxSV7L4CNo9+ULBAY=
Subject key identifier:   33:BE:F1:64:AE:D3:FD:13:D6:9A:EB:51:E5:A0:CC:F3:99:F9:41:44
Authority key identifier: 0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
Certificate issuer:       /CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Certificate serial:       01D66E
Authority info access:    rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
Manifest:                 rsync://rpki.apnic.net/member_repository/A91E2E37/4AC69388AA3D11EE9B839632C4F9AE02/M77xZK7T_RPWmutR5aDM85n5QUQ.mft
caRepository:             rsync://rpki.apnic.net/member_repository/A91E2E37/4AC69388AA3D11EE9B839632C4F9AE02/
Notify URL:               https://rrdp.apnic.net/notification.xml
Certificate not before:   Wed 03 Jan 2024 13:37:58 +0000
Certificate not after:    Mon 31 Mar 2025 00:00:00 +0000
Subordinate resources:    AS: 152195
                          IP: 36.50.230.0/23
                          IP: 2401:5de0::/32

Validation:               OK
Signature path:           rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 30 Nov 2024 02:50:13 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 120430 (0x1d66e)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
        Validity
            Not Before: Jan  3 13:37:58 2024 GMT
            Not After : Mar 31 00:00:00 2025 GMT
        Subject: CN=A91E2E37/serialNumber=33BEF164AED3FD13D69AEB51E5A0CCF399F94144
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:af:2f:32:e3:af:dc:62:29:86:ae:e9:d2:a5:
                    fc:5f:d2:ef:d4:99:a1:0f:7f:c7:05:9c:c7:4c:73:
                    56:4f:d8:f6:42:96:26:8e:52:65:5e:75:6a:87:02:
                    a5:13:1d:65:19:0a:95:40:6c:36:3c:69:2d:95:35:
                    5d:5f:7c:bc:1e:b3:f4:3b:cf:a1:ab:91:30:c3:24:
                    cb:4d:f8:c6:39:f4:61:a0:b6:81:cd:23:54:5c:9c:
                    d4:55:76:98:b9:66:87:b1:f5:50:90:11:6b:65:3b:
                    a2:52:b1:67:6d:ef:d9:76:f3:eb:6f:bf:6c:6e:8b:
                    b8:00:2f:1f:97:9f:40:66:9c:f7:97:a5:89:e9:45:
                    83:df:2a:88:ce:f3:1c:42:bc:c1:8b:98:ed:32:f6:
                    8f:f4:eb:c0:fd:30:12:35:04:7e:0b:3f:b6:fa:3a:
                    d8:ff:cf:9a:74:b3:0d:b2:ca:49:32:26:60:64:28:
                    81:2e:69:49:5f:30:fa:c1:4a:08:71:ca:b6:77:c4:
                    06:f1:1c:37:ae:85:87:fe:c3:5e:02:36:b3:2a:30:
                    4d:d1:d1:8b:0e:fa:7d:3c:a0:bc:aa:2c:86:71:08:
                    53:ed:b4:11:99:1d:2a:88:78:66:e8:da:86:ac:44:
                    62:da:f5:9f:e3:a9:6c:a5:e3:13:ea:fc:43:42:db:
                    13:d3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                33:BE:F1:64:AE:D3:FD:13:D6:9A:EB:51:E5:A0:CC:F3:99:F9:41:44
            X509v3 Authority Key Identifier:
                keyid:0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                CA Repository - URI:rsync://rpki.apnic.net/member_repository/A91E2E37/4AC69388AA3D11EE9B839632C4F9AE02/
                RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A91E2E37/4AC69388AA3D11EE9B839632C4F9AE02/M77xZK7T_RPWmutR5aDM85n5QUQ.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  152195

            sbgp-ipAddrBlock: critical
                IPv4:
                  36.50.230.0/23
                IPv6:
                  2401:5de0::/32

    Signature Algorithm: sha256WithRSAEncryption
         75:d9:5a:14:6a:60:29:e0:0d:20:3a:21:aa:c2:dc:ab:37:83:
         99:f7:e9:82:a8:2a:96:cc:97:b5:b6:f6:3f:76:eb:71:3f:4a:
         e4:64:63:c0:c6:16:05:1e:58:47:11:2b:f5:ff:54:5e:7e:e2:
         66:a0:78:f7:82:0b:62:c6:42:34:f0:8f:4d:a4:82:d7:fe:e6:
         87:e9:b8:d5:8c:94:da:21:41:6a:63:ce:ca:38:79:75:42:c7:
         8d:bc:65:75:5b:e5:b5:bb:7c:1c:45:ea:9e:c6:7b:90:22:1e:
         5a:e0:23:e7:39:0f:25:40:70:58:25:83:68:cf:c7:70:4a:c0:
         30:47:7d:0f:ce:81:22:bd:a2:27:6e:9a:61:c3:d1:be:7a:a5:
         93:2f:a9:5f:0f:3d:aa:9b:f9:db:50:22:1f:41:73:7b:32:d0:
         ba:cd:60:12:0d:e7:c9:8d:d4:61:b2:59:1e:95:d5:a5:0f:b1:
         6e:ed:fe:d4:7c:ac:9b:52:04:97:4d:8e:12:51:a6:a7:63:ae:
         f9:55:7e:58:0b:1c:d3:9d:a5:e5:a5:f5:18:fd:14:6a:0c:0a:
         75:0e:8e:5c:cf:29:73:4b:e4:eb:2c:dd:de:31:74:f6:fc:c3:
         75:8e:93:42:4f:fb:28:5e:c7:3a:36:cf:79:93:ce:6f:41:7f:
         73:e5:07:27
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 05:03:26 2024 by rpki-client on console-fra.rpki-client.org