Certificate

$ rpki-client -vvf rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MEMWh1gvk10cjEugENwarX1sqr8.cer
File:                     MEMWh1gvk10cjEugENwarX1sqr8.cer (raw, json)
Hash identifier:          1PaB+pYJa+n/M7UGBSo7tLX6pufbz9sG0/wasBkGcto=
Subject key identifier:   30:43:16:87:58:2F:93:5D:1C:8C:4B:A0:10:DC:1A:AD:7D:6C:AA:BF
Authority key identifier: 0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
Certificate issuer:       /CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Certificate serial:       01C31A
Authority info access:    rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
Manifest:                 rsync://rpki.apnic.net/member_repository/A914E337/DF8CD732FC1311EBBF774B3CC4F9AE02/MEMWh1gvk10cjEugENwarX1sqr8.mft
caRepository:             rsync://rpki.apnic.net/member_repository/A914E337/DF8CD732FC1311EBBF774B3CC4F9AE02/
Notify URL:               https://rrdp.apnic.net/notification.xml
Certificate not before:   Tue 10 Oct 2023 14:10:40 +0000
Certificate not after:    Sun 01 Dec 2024 00:00:00 +0000
Subordinate resources:    AS: 142639
                          IP: 103.171.140.0/23
                          IP: 2001:df7:4980::/48

Validation:               OK
Signature path:           rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 02 May 2024 00:57:28 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 115482 (0x1c31a)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
        Validity
            Not Before: Oct 10 14:10:40 2023 GMT
            Not After : Dec  1 00:00:00 2024 GMT
        Subject: CN=A914E337/serialNumber=30431687582F935D1C8C4BA010DC1AAD7D6CAABF
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:da:85:e8:12:e1:f7:a0:99:91:f4:f9:5d:b4:8e:
                    9c:61:a4:0b:fa:66:54:ba:88:58:d5:22:d2:f1:97:
                    8a:d9:04:fe:60:5a:95:57:f2:8e:d5:9d:70:a7:c5:
                    a7:6f:04:53:8d:03:b4:54:fa:e8:64:47:a0:98:0f:
                    4c:dd:c0:f3:5c:6a:bd:0f:c8:07:05:28:ed:a3:c6:
                    29:c5:d1:50:ec:00:b6:fc:d6:ff:b2:15:45:33:39:
                    22:c9:09:bf:94:02:20:75:83:93:28:46:b7:67:df:
                    5b:33:63:d9:dd:c9:1c:6b:b6:3c:69:b4:b6:0b:4a:
                    f3:6a:3c:04:2f:1d:1f:38:c4:e6:72:c1:82:44:71:
                    cd:93:e9:16:9b:d4:78:19:cd:a1:63:1b:62:5d:62:
                    53:46:fd:46:34:24:85:ed:7f:ab:2b:e3:ad:8a:79:
                    b6:0d:2b:ea:71:64:39:ab:32:76:54:a8:64:39:af:
                    0d:be:26:28:1d:50:bc:c1:bc:60:cc:a2:bf:78:c4:
                    10:41:11:53:e7:57:ea:f5:bf:97:0e:01:28:3f:b8:
                    ad:ed:2f:e4:b0:97:06:1f:a4:75:7b:9e:56:27:82:
                    32:00:80:c1:13:e7:7f:59:c4:cd:36:d8:fc:c4:d6:
                    b1:a4:50:89:c0:42:b3:6e:07:48:19:3a:26:66:e8:
                    33:7d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                30:43:16:87:58:2F:93:5D:1C:8C:4B:A0:10:DC:1A:AD:7D:6C:AA:BF
            X509v3 Authority Key Identifier:
                keyid:0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                CA Repository - URI:rsync://rpki.apnic.net/member_repository/A914E337/DF8CD732FC1311EBBF774B3CC4F9AE02/
                RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A914E337/DF8CD732FC1311EBBF774B3CC4F9AE02/MEMWh1gvk10cjEugENwarX1sqr8.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  142639

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.171.140.0/23
                IPv6:
                  2001:df7:4980::/48

    Signature Algorithm: sha256WithRSAEncryption
         87:87:1b:23:02:2e:c3:6e:c8:63:d2:ec:9f:c8:9d:5b:2b:9c:
         85:2d:6a:85:0e:ad:b5:fd:b1:24:24:4f:52:a9:d8:86:f1:45:
         02:5a:5c:82:b0:38:5d:97:2a:1a:3b:9e:46:d1:a6:45:c8:8e:
         b0:77:6b:11:5b:e2:a6:cf:cd:f6:a6:1e:45:97:51:b8:77:cc:
         1e:5a:f3:28:dd:9d:e7:50:84:93:d2:c2:38:56:af:40:31:bf:
         6d:19:b1:df:bd:d2:0d:6f:cf:e1:94:9e:28:0f:bd:3f:6e:73:
         3d:91:0a:df:5a:9d:bb:0d:95:25:4b:8a:f6:ea:9e:08:01:e7:
         bd:b2:f2:82:9b:0b:1f:37:99:97:1e:91:89:dd:95:81:99:5c:
         7a:3c:03:91:31:d0:cb:ee:ad:f6:99:23:25:56:bf:b2:09:a6:
         1d:8d:ab:b6:7f:c8:b0:6e:5d:cb:25:94:ec:d1:6e:62:d1:c4:
         94:08:7a:f3:73:62:a8:56:74:85:70:b1:02:fe:0f:70:6a:d1:
         09:ec:4a:7c:c1:47:02:89:0b:da:60:65:87:ce:63:e4:dd:fb:
         b0:81:b6:c6:a2:3a:d0:f5:8d:f7:57:f0:65:a5:5f:58:db:d0:
         94:9d:41:bd:3f:ef:57:20:19:ba:44:2a:52:f8:8d:43:a5:91:
         ea:9a:01:de
-----BEGIN CERTIFICATE-----
MIIGKzCCBROgAwIBAgIDAcMaMA0GCSqGSIb3DQEBCwUAMEYxETAPBgNVBAMTCEE5
MERDNUJFMTEwLwYDVQQFEygwRTY1QTRGNUZEMzZCNUJENjhFQjNDOTIzNDA4OTc4
QzkwN0FBNzlGMB4XDTIzMTAxMDE0MTA0MFoXDTI0MTIwMTAwMDAwMFowRjERMA8G
A1UEAxMIQTkxNEUzMzcxMTAvBgNVBAUTKDMwNDMxNjg3NTgyRjkzNUQxQzhDNEJB
MDEwREMxQUFEN0Q2Q0FBQkYwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB
AQDahegS4fegmZH0+V20jpxhpAv6ZlS6iFjVItLxl4rZBP5gWpVX8o7VnXCnxadv
BFONA7RU+uhkR6CYD0zdwPNcar0PyAcFKO2jxinF0VDsALb81v+yFUUzOSLJCb+U
AiB1g5MoRrdn31szY9ndyRxrtjxptLYLSvNqPAQvHR84xOZywYJEcc2T6Rab1HgZ
zaFjG2JdYlNG/UY0JIXtf6sr462KebYNK+pxZDmrMnZUqGQ5rw2+JigdULzBvGDM
or94xBBBEVPnV+r1v5cOASg/uK3tL+SwlwYfpHV7nlYngjIAgMET539ZxM022PzE
1rGkUInAQrNuB0gZOiZm6DN9AgMBAAGjggMgMIIDHDAdBgNVHQ4EFgQUMEMWh1gv
k10cjEugENwarX1sqr8wHwYDVR0jBBgwFoAUDmWk9f02tb1o6zySNAiXjJB6p58w
DgYDVR0PAQH/BAQDAgEGMA8GA1UdEwEB/wQFMAMBAf8wcwYDVR0fBGwwajBooGag
ZIZicnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2
NjExRTJCQjQ2OEY3QzcyRkQxRkYyL0RtV2s5ZjAydGIxbzZ6eVNOQWlYakpCNnA1
OC5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L3JlcG9zaXRvcnkvOTgwNjUyRTBCNzdFMTFFN0E5NkEzOTUyMUE0
RjRGQjQvRG1XazlmMDJ0YjFvNnp5U05BaVhqSkI2cDU4LmNlcjBKBgNVHSABAf8E
QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj
Lm5ldC9SUEtJL0NQUy5wZGYwggEoBggrBgEFBQcBCwSCARowggEWMF8GCCsGAQUF
BzAFhlNyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5
MTRFMzM3L0RGOENENzMyRkMxMzExRUJCRjc3NEIzQ0M0RjlBRTAyLzB+BggrBgEF
BQcwCoZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9B
OTE0RTMzNy9ERjhDRDczMkZDMTMxMUVCQkY3NzRCM0NDNEY5QUUwMi9NRU1XaDFn
dmsxMGNqRXVnRU53YXJYMXNxcjgubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3Jy
ZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwGgYIKwYBBQUHAQgBAf8ECzAJ
oAcwBQIDAi0vMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIAATAGAwQBZ6uMMA8EAgAC
MAkDBwAgAQ33SYAwDQYJKoZIhvcNAQELBQADggEBAIeHGyMCLsNuyGPS7J/InVsr
nIUtaoUOrbX9sSQkT1Kp2IbxRQJaXIKwOF2XKho7nkbRpkXIjrB3axFb4qbPzfam
HkWXUbh3zB5a8yjdnedQhJPSwjhWr0Axv20Zsd+90g1vz+GUnigPvT9ucz2RCt9a
nbsNlSVLivbqnggB572y8oKbCx83mZcekYndlYGZXHo8A5Ex0MvurfaZIyVWv7IJ
ph2Nq7Z/yLBuXcsllOzRbmLRxJQIevNzYqhWdIVwsQL+D3Bq0QnsSnzBRwKJC9pg
ZYfOY+Td+7CBtsaiOtD1jfdX8GWlX1jb0JSdQb0/71cgGbpEKlL4jUOlkeqaAd4=
-----END CERTIFICATE-----
Generated at Thu Apr 25 02:01:56 2024 by rpki-client on console-ams.rpki-client.org