Certificate

$ rpki-client -vvf rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MDzTzaeEJrW-h1GmNNZJrY-3oMM.cer
File:                     MDzTzaeEJrW-h1GmNNZJrY-3oMM.cer (raw, json)
Hash identifier:          XTdgE0Q2QluM3Mg2GCr73BGir6yvo9SaktVmJVzUj/Y=
Subject key identifier:   30:3C:D3:CD:A7:84:26:B5:BE:87:51:A6:34:D6:49:AD:8F:B7:A0:C3
Authority key identifier: 0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
Certificate issuer:       /CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Certificate serial:       01CA66
Authority info access:    rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
Manifest:                 rsync://rpki.apnic.net/member_repository/A9115F08/016BCEDE6A2D11EDBA1F5838C4F9AE02/MDzTzaeEJrW-h1GmNNZJrY-3oMM.mft
caRepository:             rsync://rpki.apnic.net/member_repository/A9115F08/016BCEDE6A2D11EDBA1F5838C4F9AE02/
Notify URL:               https://rrdp.apnic.net/notification.xml
Certificate not before:   Sun 12 Nov 2023 12:30:17 +0000
Certificate not after:    Fri 31 Jan 2025 00:00:00 +0000
Subordinate resources:    AS: 131243
                          IP: 103.41.114.0/23

Validation:               OK
Signature path:           rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 05 Apr 2024 04:49:26 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 117350 (0x1ca66)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
        Validity
            Not Before: Nov 12 12:30:17 2023 GMT
            Not After : Jan 31 00:00:00 2025 GMT
        Subject: CN=A9115F08/serialNumber=303CD3CDA78426B5BE8751A634D649AD8FB7A0C3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:d0:27:ee:5b:2c:5a:da:03:ce:48:b1:da:55:
                    e0:31:e4:8e:47:39:ac:f0:06:4a:35:d1:cb:4c:74:
                    87:0a:51:2d:77:00:ad:b2:4e:d5:8a:d9:72:ce:a8:
                    7b:de:d8:36:71:80:75:c9:83:e6:57:86:81:7f:16:
                    74:70:ac:bc:55:eb:43:58:a0:e7:44:3f:b8:05:96:
                    0f:4e:1a:94:56:f2:cf:64:75:c7:d3:de:64:28:8c:
                    7e:fd:66:12:47:9f:ae:fd:e8:1e:02:e7:89:68:a6:
                    21:d9:91:97:a9:91:0f:dd:00:a2:bb:4d:05:f1:5b:
                    f7:6a:17:8a:7a:20:ba:0b:1a:6e:e6:c1:e4:0e:a3:
                    8a:71:61:35:8a:60:6a:c9:95:aa:7b:d4:c7:e2:52:
                    9d:7e:96:6b:0d:db:fa:2c:74:3d:2a:37:da:db:26:
                    41:de:e4:91:cf:65:0b:ed:f7:4e:cf:3c:34:a9:19:
                    ad:6a:c7:aa:94:80:3e:fc:03:16:5d:59:35:60:af:
                    39:42:e3:bc:48:10:8a:f2:30:c5:5c:75:e9:76:60:
                    6e:04:d5:af:4d:cb:6b:6c:02:36:c5:f5:cd:1c:98:
                    3c:8b:00:67:b4:ea:3c:ed:5f:af:c5:48:ff:49:ee:
                    22:48:24:1b:79:9c:bc:11:18:9a:81:88:a8:ee:46:
                    03:d3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                30:3C:D3:CD:A7:84:26:B5:BE:87:51:A6:34:D6:49:AD:8F:B7:A0:C3
            X509v3 Authority Key Identifier:
                keyid:0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                CA Repository - URI:rsync://rpki.apnic.net/member_repository/A9115F08/016BCEDE6A2D11EDBA1F5838C4F9AE02/
                RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A9115F08/016BCEDE6A2D11EDBA1F5838C4F9AE02/MDzTzaeEJrW-h1GmNNZJrY-3oMM.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  131243

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.41.114.0/23

    Signature Algorithm: sha256WithRSAEncryption
         72:da:9d:c5:9f:c7:9c:4a:b7:11:b5:e9:cb:38:c2:49:50:91:
         58:05:54:3c:82:53:fe:50:8d:3c:0b:8e:9e:ae:be:d8:d2:76:
         32:0e:5f:78:b9:a6:5d:df:80:26:8e:c9:62:90:94:ce:52:71:
         6c:96:f5:bd:44:7b:1e:b0:ac:c8:fd:e4:96:f9:8e:95:ed:79:
         19:fc:56:f9:61:01:35:ce:bc:75:d0:e4:15:95:02:02:3c:e6:
         7a:69:0c:c7:d2:02:5c:99:25:2d:d2:cf:6f:99:3a:bf:16:b4:
         21:7a:de:fc:bd:75:60:c7:80:60:5d:e2:c9:10:47:25:25:4c:
         d1:72:1c:e8:08:6d:49:bc:f9:e0:bd:c3:7d:4d:2e:4a:20:38:
         2e:8e:e0:cd:0e:80:aa:8d:17:b4:4d:49:38:4d:f4:f6:32:b1:
         c7:20:04:8d:fe:1f:f0:5b:0f:79:fe:9e:4c:b3:fb:ef:02:1c:
         8b:ae:97:04:f4:b4:a7:32:d4:e2:dc:ce:ca:10:bc:68:94:ff:
         b7:ff:9f:22:e9:14:60:7c:71:93:fd:4a:1e:da:8e:cc:04:d5:
         8d:fe:7e:64:67:1f:21:1c:5d:2b:40:02:c7:8f:78:0e:27:36:
         38:fc:09:8c:1a:63:76:49:22:bb:83:00:27:1f:42:1f:64:c8:
         86:45:77:7b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 29 06:02:15 2024 by rpki-client on console-fra.rpki-client.org