Certificate

$ rpki-client -vvf rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Ny2TbjjYucsfcBIhn_ghcrkL7lg.cer
File:                     Ny2TbjjYucsfcBIhn_ghcrkL7lg.cer (raw, json)
Hash identifier:          UvVaOsVTzi4rWlRVaSFAbmfI2Vk2rKHoKuIK72uPaaQ=
Subject key identifier:   37:2D:93:6E:38:D8:B9:CB:1F:70:12:21:9F:F8:21:72:B9:0B:EE:58
Authority key identifier: 0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
Certificate issuer:       /CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Certificate serial:       01CD6F
Authority info access:    rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
Manifest:                 rsync://rpki.apnic.net/member_repository/A91C9D5D/DD6F28720A8B11EABCF9CE52C4F9AE02/Ny2TbjjYucsfcBIhn_ghcrkL7lg.mft
caRepository:             rsync://rpki.apnic.net/member_repository/A91C9D5D/DD6F28720A8B11EABCF9CE52C4F9AE02/
Notify URL:               https://rrdp.apnic.net/notification.xml
Certificate not before:   Tue 28 Nov 2023 19:29:23 +0000
Certificate not after:    Fri 31 Jan 2025 00:00:00 +0000
Subordinate resources:    AS: 137029
                          IP: 103.102.136.0/22
                          IP: 2401:e3c0::/32

Validation:               OK
Signature path:           rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 04 Dec 2024 01:13:26 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 118127 (0x1cd6f)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
        Validity
            Not Before: Nov 28 19:29:23 2023 GMT
            Not After : Jan 31 00:00:00 2025 GMT
        Subject: CN=A91C9D5D/serialNumber=372D936E38D8B9CB1F7012219FF82172B90BEE58
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:42:61:c7:ae:34:73:e5:50:0a:c8:87:65:5e:
                    6f:c2:ca:a8:70:65:90:15:79:94:26:2a:68:80:7f:
                    c5:2d:ce:7f:1f:34:29:8d:a5:dc:66:b1:ec:66:4b:
                    53:af:04:60:bc:97:16:83:5d:09:f6:47:66:99:ac:
                    81:33:6a:3a:48:d0:a3:e2:b8:6d:5c:13:3e:a5:ae:
                    6f:59:87:84:73:5b:04:19:2d:4d:68:f7:df:1b:55:
                    fe:aa:9c:43:5b:97:57:8b:bc:26:36:42:b3:89:e9:
                    00:7e:e7:d1:90:df:cb:bd:e1:f7:c8:1a:98:b1:c7:
                    a0:73:a4:1b:5d:c5:c9:c9:df:2b:d9:04:9e:94:18:
                    13:1e:b1:6c:bc:c8:79:e6:cd:41:5d:3b:1d:79:d6:
                    bd:42:2e:a3:4a:ab:41:29:7e:92:f5:7d:1c:95:c6:
                    f4:5e:8a:11:ce:24:49:d6:7e:fc:2f:5b:08:40:12:
                    06:2b:6c:c2:5b:71:cc:97:64:19:77:63:9f:39:92:
                    29:ac:08:29:61:41:a4:c0:32:aa:0e:05:04:27:2c:
                    d8:45:d6:ed:53:70:1b:0a:c9:03:e1:3d:77:96:4a:
                    00:bf:78:1a:71:62:de:d8:05:22:9b:1e:a7:75:c4:
                    5d:f3:a7:5f:3f:96:f1:a3:7f:4a:5a:0c:ab:88:57:
                    12:67
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                37:2D:93:6E:38:D8:B9:CB:1F:70:12:21:9F:F8:21:72:B9:0B:EE:58
            X509v3 Authority Key Identifier:
                keyid:0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                CA Repository - URI:rsync://rpki.apnic.net/member_repository/A91C9D5D/DD6F28720A8B11EABCF9CE52C4F9AE02/
                RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A91C9D5D/DD6F28720A8B11EABCF9CE52C4F9AE02/Ny2TbjjYucsfcBIhn_ghcrkL7lg.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  137029

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.102.136.0/22
                IPv6:
                  2401:e3c0::/32

    Signature Algorithm: sha256WithRSAEncryption
         1a:61:d6:11:8e:7e:33:d1:5f:80:62:56:3d:95:38:0f:cc:28:
         6a:43:88:76:b9:14:ab:a3:78:9e:af:e1:3f:52:39:cd:08:df:
         4a:ff:36:ce:f0:c8:95:7f:ae:1f:22:36:6c:4f:51:05:92:1d:
         d5:49:89:4e:47:ed:58:5b:58:3b:14:db:69:f2:2b:de:dd:08:
         b9:1a:66:e3:42:1b:ad:80:ac:49:12:6d:e5:22:8e:56:ad:2c:
         56:9a:3e:f6:15:47:5f:65:96:45:fa:62:3a:ab:4a:2e:d5:6b:
         9f:8d:8e:ca:f8:56:9b:11:b0:42:33:41:a2:a4:2f:a5:04:aa:
         76:b5:36:86:ed:e6:ba:28:b2:24:b8:72:3e:44:0d:49:f5:54:
         e0:bf:77:bc:01:32:76:e1:28:cd:fa:01:a2:43:75:ff:f6:21:
         a8:37:04:9d:40:25:ca:32:52:b1:01:d7:e3:22:5d:a7:90:b0:
         72:01:20:9f:a6:df:16:f0:ec:ea:1d:76:2b:d0:96:31:1c:d6:
         99:1a:b1:80:9b:4c:77:c0:33:c6:e3:12:f4:ce:cd:7c:1c:0b:
         95:a1:18:58:f7:23:11:a8:cf:4d:c1:61:f3:b0:76:bb:89:9f:
         e9:bf:b2:e0:1f:c0:c4:7b:30:89:ae:04:f2:a4:5c:62:cf:c7:
         09:b3:32:0b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----