Certificate

$ rpki-client -vvf rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MpUupGGVY1bTd-vdS_oYcqjh5EM.cer
File:                     MpUupGGVY1bTd-vdS_oYcqjh5EM.cer (raw, json)
Hash identifier:          EZncrIQ9Fn+22l5A+lSM5KtvtjwjQ+KqBqETdLlEby0=
Subject key identifier:   32:95:2E:A4:61:95:63:56:D3:77:EB:DD:4B:FA:18:72:A8:E1:E4:43
Authority key identifier: 0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
Certificate issuer:       /CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Certificate serial:       015B03
Authority info access:    rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
Manifest:                 rsync://rpki.apnic.net/member_repository/A914CD2D/94FF1FBC588211EA95B47F51C4F9AE02/MpUupGGVY1bTd-vdS_oYcqjh5EM.mft
caRepository:             rsync://rpki.apnic.net/member_repository/A914CD2D/94FF1FBC588211EA95B47F51C4F9AE02/
Notify URL:               https://rrdp.apnic.net/notification.xml
Certificate not before:   Wed 08 Jun 2022 04:29:08 +0000
Certificate not after:    Sat 31 Aug 2024 00:00:00 +0000
Subordinate resources:    AS: 38606
                          AS: 132826
                          AS: 133020 -- 133021
                          AS: 134974
                          AS: 136728 -- 136729
                          IP: 103.19.32.0/22
                          IP: 110.92.24.0/21
                          IP: 202.61.64.0/22
                          IP: 203.55.67.0/24
                          IP: 203.171.6.0/23

Validation:               OK
Signature path:           rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 25 Apr 2024 19:33:40 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 88835 (0x15b03)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
        Validity
            Not Before: Jun  8 04:29:08 2022 GMT
            Not After : Aug 31 00:00:00 2024 GMT
        Subject: CN=A914CD2D/serialNumber=32952EA461956356D377EBDD4BFA1872A8E1E443
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:d1:e6:ee:2e:17:61:0c:be:c3:58:a6:28:2b:
                    0e:70:f1:3c:06:ff:15:cd:36:2a:e0:f6:39:61:4e:
                    a6:32:6e:7f:26:a6:66:a2:f4:a2:ee:07:6a:17:d3:
                    7b:a4:51:64:67:7b:b2:38:05:ce:25:c3:20:16:2d:
                    14:8b:f2:9e:6f:d3:1a:86:c3:9d:c5:d8:84:8f:52:
                    7b:e2:6b:a8:7d:1b:f7:a1:a9:95:24:36:76:0e:ee:
                    86:f7:c6:fa:97:57:62:a1:a1:e0:59:ab:4f:64:21:
                    b4:9b:5b:ac:4b:ed:e0:cd:04:25:e4:c9:9b:87:c5:
                    c3:c8:af:bd:0f:d8:9c:d4:03:12:58:45:4b:f6:5d:
                    90:ed:17:33:21:4f:94:2f:1b:b6:c1:d0:a9:37:c4:
                    ae:bd:a2:f6:b7:f0:ec:93:7d:d6:63:8a:ed:69:30:
                    10:23:b7:12:9b:f3:c2:7b:de:f2:83:81:12:16:fb:
                    a8:51:4b:0e:6a:95:38:d5:09:1f:d1:eb:19:86:63:
                    be:da:1e:62:29:18:d0:a9:5c:32:4d:b4:49:ea:98:
                    ef:4e:9e:42:78:2a:1d:67:d1:5d:65:9d:0a:e1:f1:
                    23:2e:6c:e2:bb:19:da:4e:cf:51:39:c8:3c:3f:de:
                    f2:80:ef:b4:2c:f7:5c:29:ba:e5:23:f9:66:6e:61:
                    c2:07
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                32:95:2E:A4:61:95:63:56:D3:77:EB:DD:4B:FA:18:72:A8:E1:E4:43
            X509v3 Authority Key Identifier:
                keyid:0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                CA Repository - URI:rsync://rpki.apnic.net/member_repository/A914CD2D/94FF1FBC588211EA95B47F51C4F9AE02/
                RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A914CD2D/94FF1FBC588211EA95B47F51C4F9AE02/MpUupGGVY1bTd-vdS_oYcqjh5EM.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  38606
                  132826
                  133020-133021
                  134974
                  136728-136729

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.19.32.0/22
                  110.92.24.0/21
                  202.61.64.0/22
                  203.55.67.0/24
                  203.171.6.0/23

    Signature Algorithm: sha256WithRSAEncryption
         b6:26:f1:ce:96:bf:a0:f6:a0:28:8a:23:2b:8c:b6:8b:5b:cc:
         22:15:f4:d1:78:d9:86:2b:e3:a7:07:97:85:45:70:ab:fc:f4:
         99:0d:f0:85:8d:4e:38:54:b9:6a:ae:e5:d0:e3:48:b9:8a:4a:
         68:09:8b:24:a7:34:10:71:98:79:37:f2:da:e7:e0:b6:94:11:
         74:df:c4:7e:e3:10:87:b8:19:96:f8:fe:e7:91:b9:0b:53:6c:
         84:04:b2:a7:74:ff:8a:65:4a:90:2f:12:b4:5a:ae:ce:27:e3:
         30:13:ea:78:49:a9:41:8b:cb:f5:d3:02:7e:b8:01:ae:ae:f3:
         8a:42:da:a5:3d:98:d0:9b:30:de:4a:1a:09:77:cc:10:96:08:
         d4:b0:1c:cd:83:27:14:5e:ea:fc:c4:3a:8a:32:68:a3:0a:cd:
         d9:2e:17:7d:85:dd:68:d1:68:3f:1f:97:60:3b:58:7e:3c:dc:
         79:c0:06:8d:26:28:fe:e0:11:61:d3:11:49:bd:f5:4b:8b:34:
         5e:50:72:67:1a:13:42:83:86:d7:e0:e5:09:46:aa:5c:f6:16:
         8d:86:1c:72:07:13:94:0f:59:35:e4:7c:56:7e:ce:ae:91:80:
         54:38:d3:b9:6c:66:ba:dd:04:25:ad:69:f2:51:f0:56:99:ab:
         09:13:46:3b
-----BEGIN CERTIFICATE-----
MIIGVDCCBTygAwIBAgIDAVsDMA0GCSqGSIb3DQEBCwUAMEYxETAPBgNVBAMTCEE5
MERDNUJFMTEwLwYDVQQFEygwRTY1QTRGNUZEMzZCNUJENjhFQjNDOTIzNDA4OTc4
QzkwN0FBNzlGMB4XDTIyMDYwODA0MjkwOFoXDTI0MDgzMTAwMDAwMFowRjERMA8G
A1UEAxMIQTkxNENEMkQxMTAvBgNVBAUTKDMyOTUyRUE0NjE5NTYzNTZEMzc3RUJE
RDRCRkExODcyQThFMUU0NDMwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB
AQC00ebuLhdhDL7DWKYoKw5w8TwG/xXNNirg9jlhTqYybn8mpmai9KLuB2oX03uk
UWRne7I4Bc4lwyAWLRSL8p5v0xqGw53F2ISPUnvia6h9G/ehqZUkNnYO7ob3xvqX
V2KhoeBZq09kIbSbW6xL7eDNBCXkyZuHxcPIr70P2JzUAxJYRUv2XZDtFzMhT5Qv
G7bB0Kk3xK69ova38OyTfdZjiu1pMBAjtxKb88J73vKDgRIW+6hRSw5qlTjVCR/R
6xmGY77aHmIpGNCpXDJNtEnqmO9OnkJ4Kh1n0V1lnQrh8SMubOK7GdpOz1E5yDw/
3vKA77Qs91wpuuUj+WZuYcIHAgMBAAGjggNJMIIDRTAdBgNVHQ4EFgQUMpUupGGV
Y1bTd+vdS/oYcqjh5EMwHwYDVR0jBBgwFoAUDmWk9f02tb1o6zySNAiXjJB6p58w
DgYDVR0PAQH/BAQDAgEGMA8GA1UdEwEB/wQFMAMBAf8wcwYDVR0fBGwwajBooGag
ZIZicnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2
NjExRTJCQjQ2OEY3QzcyRkQxRkYyL0RtV2s5ZjAydGIxbzZ6eVNOQWlYakpCNnA1
OC5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L3JlcG9zaXRvcnkvOTgwNjUyRTBCNzdFMTFFN0E5NkEzOTUyMUE0
RjRGQjQvRG1XazlmMDJ0YjFvNnp5U05BaVhqSkI2cDU4LmNlcjBKBgNVHSABAf8E
QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj
Lm5ldC9SUEtJL0NQUy5wZGYwggEoBggrBgEFBQcBCwSCARowggEWMF8GCCsGAQUF
BzAFhlNyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5
MTRDRDJELzk0RkYxRkJDNTg4MjExRUE5NUI0N0Y1MUM0RjlBRTAyLzB+BggrBgEF
BQcwCoZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9B
OTE0Q0QyRC85NEZGMUZCQzU4ODIxMUVBOTVCNDdGNTFDNEY5QUUwMi9NcFV1cEdH
VlkxYlRkLXZkU19vWWNxamg1RU0ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3Jy
ZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwPAYIKwYBBQUHAQgBAf8ELTAr
oCkwJwIDAJbOAgMCBtowCgIDAgecAgMCB50CAwIPPjAKAgMCFhgCAwIWGTA3Bggr
BgEFBQcBBwEB/wQoMCYwJAQCAAEwHgMEAmcTIAMEA25cGAMEAso9QAMEAMs3QwME
AcurBjANBgkqhkiG9w0BAQsFAAOCAQEAtibxzpa/oPagKIojK4y2i1vMIhX00XjZ
hivjpweXhUVwq/z0mQ3whY1OOFS5aq7l0ONIuYpKaAmLJKc0EHGYeTfy2ufgtpQR
dN/EfuMQh7gZlvj+55G5C1NshASyp3T/imVKkC8StFquzifjMBPqeEmpQYvL9dMC
frgBrq7zikLapT2Y0Jsw3koaCXfMEJYI1LAczYMnFF7q/MQ6ijJoowrN2S4XfYXd
aNFoPx+XYDtYfjzcecAGjSYo/uARYdMRSb31S4s0XlByZxoTQoOG1+DlCUaqXPYW
jYYccgcTlA9ZNeR8Vn7OrpGAVDjTuWxmut0EJa1p8lHwVpmrCRNGOw==
-----END CERTIFICATE-----
Generated at Thu Apr 18 20:11:02 2024 by rpki-client on console-fra.rpki-client.org