Certificate

$ rpki-client -vvf rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NEky8UqDlKfFRYa9Idpe461Ka7g.cer
File:                     NEky8UqDlKfFRYa9Idpe461Ka7g.cer (raw, json)
Hash identifier:          K7hHKWCe8jhHqAKuIANgodKc2Urr17tg8wdwqlAcMHc=
Subject key identifier:   34:49:32:F1:4A:83:94:A7:C5:45:86:BD:21:DA:5E:E3:AD:4A:6B:B8
Authority key identifier: 0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
Certificate issuer:       /CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Certificate serial:       016D39
Authority info access:    rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
Manifest:                 rsync://rpki.apnic.net/member_repository/A91CAC41/BA57EE381D8911E28E1630E308B02CD2/NEky8UqDlKfFRYa9Idpe461Ka7g.mft
caRepository:             rsync://rpki.apnic.net/member_repository/A91CAC41/BA57EE381D8911E28E1630E308B02CD2/
Notify URL:               https://rrdp.apnic.net/notification.xml
Certificate not before:   Fri 09 Sep 2022 05:56:58 +0000
Certificate not after:    Thu 01 Dec 2022 00:00:00 +0000
Subordinate resources:    AS: 24004

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 93497 (0x16d39)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
        Validity
            Not Before: Sep  9 05:56:58 2022 GMT
            Not After : Dec  1 00:00:00 2022 GMT
        Subject: CN=A91CAC41/serialNumber=344932F14A8394A7C54586BD21DA5EE3AD4A6BB8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f3:5a:24:71:8d:35:fd:30:c8:30:27:72:68:f9:
                    19:d3:d4:fe:4d:ea:94:a1:12:47:19:93:b9:20:fc:
                    43:99:3f:c1:64:1d:da:ad:12:15:e3:d6:94:c0:b3:
                    0a:7e:e9:d9:e4:26:b7:39:e0:39:30:71:e9:51:99:
                    fd:62:7f:f3:17:5d:49:94:f5:36:fa:0e:9b:86:f6:
                    0e:b4:2e:64:89:34:44:6b:c2:e7:cd:5a:d3:6c:b1:
                    d9:1a:2e:7c:b8:25:a7:b8:eb:0d:57:e7:ce:ad:cc:
                    a7:8d:87:18:43:6a:38:b4:72:2c:00:b0:a1:9c:dc:
                    23:88:7b:48:8e:9a:8b:be:eb:b6:27:e4:03:67:9d:
                    e2:23:09:50:20:72:be:4c:d0:15:5f:e2:2c:82:73:
                    87:16:48:49:5f:d7:93:90:50:36:78:8c:7d:aa:33:
                    ec:ce:f4:c6:75:2e:a2:40:0f:22:29:2e:32:b8:74:
                    ce:4d:be:03:4a:68:80:bf:77:4e:be:7a:1d:3c:53:
                    16:ad:f2:c1:a4:5a:ad:a9:e3:b7:69:74:44:fc:14:
                    68:62:9d:ab:b3:ea:de:08:59:d3:3c:a3:69:cf:ff:
                    8c:75:9a:72:ee:e2:83:c5:ad:b4:61:6f:df:b0:f3:
                    ab:5a:34:f3:7f:e4:b9:2f:45:29:be:95:e8:f4:c0:
                    02:fd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                34:49:32:F1:4A:83:94:A7:C5:45:86:BD:21:DA:5E:E3:AD:4A:6B:B8
            X509v3 Authority Key Identifier:
                keyid:0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                CA Repository - URI:rsync://rpki.apnic.net/member_repository/A91CAC41/BA57EE381D8911E28E1630E308B02CD2/
                RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A91CAC41/BA57EE381D8911E28E1630E308B02CD2/NEky8UqDlKfFRYa9Idpe461Ka7g.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  24004

    Signature Algorithm: sha256WithRSAEncryption
         91:2c:da:da:4c:ad:2d:ac:84:93:e8:6b:0b:53:82:fd:32:e3:
         64:44:ac:fa:3a:0f:e3:21:a0:43:43:db:02:62:81:44:b7:a7:
         31:46:80:75:76:25:ec:9c:2a:75:62:61:ef:da:58:e1:7a:aa:
         f3:62:c3:a5:a7:06:47:28:48:e0:2f:0e:e8:52:00:82:a6:4b:
         88:fe:1a:1a:b0:07:d6:ca:0f:3f:f8:bd:9c:27:f9:76:6a:b4:
         8d:cd:3e:b6:4d:3d:3c:a6:65:cb:0e:8d:7f:32:d7:70:ef:07:
         dc:15:5b:2b:d9:5f:e4:f4:6f:f3:b6:49:52:95:7c:e2:ea:70:
         d4:4c:59:e0:55:ca:cc:e0:54:2e:62:38:51:25:03:6e:b7:81:
         3a:92:17:0a:89:e5:67:c9:89:39:1c:4e:be:f1:17:f3:db:af:
         9e:6f:1c:ef:b6:3c:42:f3:de:59:ac:1d:7a:15:9a:b8:8c:ec:
         e9:ed:35:fa:8a:1c:fd:2b:3e:ae:91:f2:45:24:87:44:2f:ea:
         b3:d9:ea:0c:07:d6:6c:9e:6a:00:07:ca:78:9f:bd:c5:2d:b9:
         03:1d:0d:a0:ed:a3:fd:41:76:d2:2c:bf:28:2c:a7:5d:a9:be:
         76:12:ff:93:05:f7:a9:c7:c8:ab:bd:a5:83:2b:3a:da:24:18:
         1f:bd:ac:88
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----