Certificate

$ rpki-client -vvf rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NfWNhhxBvf6ka4xykLGqxnDnzBs.cer
File:                     NfWNhhxBvf6ka4xykLGqxnDnzBs.cer (raw, json)
Hash identifier:          oII1MHkLIMHtDzIp7DIb+FgZsNnyBb6LLj3WPx3iZo8=
Subject key identifier:   35:F5:8D:86:1C:41:BD:FE:A4:6B:8C:72:90:B1:AA:C6:70:E7:CC:1B
Authority key identifier: 0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
Certificate issuer:       /CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Certificate serial:       01A07E
Authority info access:    rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
Manifest:                 rsync://rpki.apnic.net/member_repository/A91B35BB/5789B1A43C0011EAB8179734C4F9AE02/NfWNhhxBvf6ka4xykLGqxnDnzBs.mft
caRepository:             rsync://rpki.apnic.net/member_repository/A91B35BB/5789B1A43C0011EAB8179734C4F9AE02/
Notify URL:               https://rrdp.apnic.net/notification.xml
Certificate not before:   Mon 01 May 2023 23:53:10 +0000
Certificate not after:    Mon 01 Jul 2024 00:00:00 +0000
Subordinate resources:    AS: 138669
                          IP: 103.136.10.0/24

Validation:               OK
Signature path:           rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 05 Apr 2024 04:49:26 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 106622 (0x1a07e)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
        Validity
            Not Before: May  1 23:53:10 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=A91B35BB/serialNumber=35F58D861C41BDFEA46B8C7290B1AAC670E7CC1B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:14:00:30:f9:d2:99:ac:17:07:c7:3a:ee:21:
                    7b:b5:ef:f8:44:2a:83:1b:50:77:5a:eb:e3:52:2c:
                    48:d3:04:8c:9c:af:d5:7c:81:80:38:d6:18:94:d6:
                    2d:64:3e:b7:94:e4:63:0e:cb:da:b1:5e:17:67:7b:
                    9f:a6:50:3b:3c:1a:ff:83:32:bf:49:6c:ae:7b:d9:
                    19:c0:2f:cc:b3:20:d3:ed:47:ff:17:60:40:a5:10:
                    65:84:9a:37:9e:e2:5b:a1:11:03:8b:15:f5:3f:7f:
                    ef:42:85:f6:be:c0:0e:f8:2b:b9:aa:5d:4f:05:a2:
                    8c:94:4e:b0:e0:c8:10:b2:32:26:cc:da:86:62:fc:
                    5d:05:86:93:66:2c:ea:7e:60:f8:d6:38:26:48:0c:
                    4a:47:ab:01:97:d7:11:69:0a:3c:d1:d2:bd:a5:cc:
                    bd:36:00:15:84:2d:52:83:41:42:56:ed:ba:17:09:
                    29:18:01:2b:16:95:8c:a1:8c:6e:6a:69:1c:5f:89:
                    68:27:d8:53:10:e4:9c:7b:be:7c:ed:e3:96:85:b3:
                    40:c9:86:c3:5d:f6:da:98:c1:74:46:57:d4:5e:3f:
                    64:eb:c5:44:c7:99:1f:93:66:7f:6f:67:f1:fc:4f:
                    1f:9c:91:8e:05:ca:fa:ec:d7:37:9a:43:70:1f:f7:
                    53:99
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                35:F5:8D:86:1C:41:BD:FE:A4:6B:8C:72:90:B1:AA:C6:70:E7:CC:1B
            X509v3 Authority Key Identifier:
                keyid:0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                CA Repository - URI:rsync://rpki.apnic.net/member_repository/A91B35BB/5789B1A43C0011EAB8179734C4F9AE02/
                RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A91B35BB/5789B1A43C0011EAB8179734C4F9AE02/NfWNhhxBvf6ka4xykLGqxnDnzBs.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  138669

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.136.10.0/24

    Signature Algorithm: sha256WithRSAEncryption
         89:b4:7b:bb:33:7a:43:98:53:02:bf:1f:a7:b9:03:36:84:1a:
         bf:9d:7d:58:57:0a:e4:61:48:b9:47:19:93:18:74:5d:19:87:
         9d:07:38:be:3d:0b:19:d2:b6:d4:87:62:b1:6e:10:1c:32:73:
         90:85:b7:2d:4c:c2:9d:2c:c9:f4:69:d2:ca:6f:48:32:c2:80:
         4b:ae:0e:9c:d8:ce:a3:7d:49:80:d1:23:02:c6:58:d2:de:a8:
         a8:ca:cc:b0:5b:40:d2:7a:97:3f:12:15:ce:b3:b9:63:e9:fb:
         68:d4:ec:36:ba:47:8e:6d:e0:7f:6e:b1:30:01:b4:91:69:c1:
         1e:3f:b6:21:43:a8:f9:4f:9d:e4:b9:60:3d:57:4a:ea:35:4c:
         c1:83:ba:78:9f:e7:ff:e8:96:8c:83:5d:7c:ed:6f:38:1c:26:
         3d:77:72:69:ac:93:c4:6c:f3:27:fb:ae:e5:d3:51:8f:4c:b1:
         21:28:1e:b2:b1:4c:61:25:85:b1:db:64:94:47:4a:b5:d4:3a:
         6b:e8:4e:60:56:3e:f3:42:58:f2:4e:51:b8:85:49:97:21:b4:
         ee:c0:a7:b5:af:13:a5:f3:ed:f8:d9:78:9a:7e:f8:19:cf:e9:
         9e:67:93:5e:ab:26:fa:d7:3e:53:d5:b5:84:0c:06:18:3f:06:
         d7:9d:67:39
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 29 06:02:16 2024 by rpki-client on console-fra.rpki-client.org