Certificate

$ rpki-client -vvf rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/P8Fw6N9a2_obY3C3RQ8o-uCzWhg.cer
File:                     P8Fw6N9a2_obY3C3RQ8o-uCzWhg.cer (raw, json)
Hash identifier:          fGyCc+9xVTVmLiXxnrwGbqmODoJOHfdsMi4igg7OJ2s=
Subject key identifier:   3F:C1:70:E8:DF:5A:DB:FA:1B:63:70:B7:45:0F:28:FA:E0:B3:5A:18
Authority key identifier: 0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
Certificate issuer:       /CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Certificate serial:       01E0C9
Authority info access:    rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
Manifest:                 rsync://rpki.apnic.net/member_repository/A917357E/602D76D85D7311ECA3248853C4F9AE02/P8Fw6N9a2_obY3C3RQ8o-uCzWhg.mft
caRepository:             rsync://rpki.apnic.net/member_repository/A917357E/602D76D85D7311ECA3248853C4F9AE02/
Notify URL:               https://rrdp.apnic.net/notification.xml
Certificate not before:   Tue 27 Feb 2024 04:07:57 +0000
Certificate not after:    Sat 31 Aug 2024 00:00:00 +0000
Subordinate resources:    AS: 152591
                          IP: 103.151.46.0/23
                          IP: 2400:3fa0::/32

Validation:               OK
Signature path:           rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 02 May 2024 21:10:22 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 123081 (0x1e0c9)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
        Validity
            Not Before: Feb 27 04:07:57 2024 GMT
            Not After : Aug 31 00:00:00 2024 GMT
        Subject: CN=A917357E/serialNumber=3FC170E8DF5ADBFA1B6370B7450F28FAE0B35A18
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:39:d9:7e:d4:34:9f:2b:80:5c:18:9b:5b:f0:
                    a5:16:3d:d0:df:84:f1:b1:f8:fc:8f:3e:c1:cf:60:
                    eb:74:03:73:8e:58:86:ab:18:15:f1:ab:6e:ed:cb:
                    10:c2:47:8a:94:3a:74:b3:fd:53:75:32:ad:f4:bf:
                    b7:cd:47:56:60:47:33:bf:73:0d:11:55:4b:aa:72:
                    d6:26:ac:eb:ce:e7:6b:cb:65:f8:f0:82:f7:24:bc:
                    7c:d8:42:c5:48:ae:54:2f:fb:9e:4e:83:0d:e5:2c:
                    6d:5d:1f:e4:8f:39:f2:e0:e4:ba:d5:60:e0:20:b8:
                    72:b3:2c:8f:a1:80:a0:6a:47:49:5b:87:f0:76:74:
                    c3:e5:1e:d8:62:cf:07:ee:62:e3:5d:9a:e2:a9:d7:
                    bb:72:4a:1d:a5:94:7d:b6:27:01:ae:73:ed:79:12:
                    ab:8a:71:42:09:f3:77:f1:55:b3:83:87:91:0e:16:
                    84:74:db:73:51:9d:27:fc:f8:e0:41:85:03:95:73:
                    fa:5f:5d:8c:f2:c3:57:80:44:55:52:37:5b:d4:e1:
                    e0:22:3c:08:b0:d9:b8:ad:94:d8:70:f1:4d:48:23:
                    a6:66:c1:fe:df:18:33:60:cf:4d:48:33:bd:43:2c:
                    a8:aa:ba:cb:4e:8e:b1:d7:6f:81:01:b1:d0:3a:04:
                    a6:49
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3F:C1:70:E8:DF:5A:DB:FA:1B:63:70:B7:45:0F:28:FA:E0:B3:5A:18
            X509v3 Authority Key Identifier:
                keyid:0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                CA Repository - URI:rsync://rpki.apnic.net/member_repository/A917357E/602D76D85D7311ECA3248853C4F9AE02/
                RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A917357E/602D76D85D7311ECA3248853C4F9AE02/P8Fw6N9a2_obY3C3RQ8o-uCzWhg.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  152591

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.151.46.0/23
                IPv6:
                  2400:3fa0::/32

    Signature Algorithm: sha256WithRSAEncryption
         b3:35:8f:ae:00:27:93:b6:43:1f:2f:ec:e3:9c:74:93:97:b1:
         28:93:df:2f:3c:c3:4d:4d:7e:ae:b2:f0:a7:6c:f8:ef:1b:26:
         59:4a:a0:25:84:7b:43:4d:0e:9c:3c:dc:d8:eb:d3:6f:d0:8a:
         f2:51:eb:fa:dd:e4:0b:8b:20:9c:68:33:7a:77:56:1f:77:d7:
         96:bf:63:75:46:44:ee:4c:24:0f:dd:c0:b0:8d:e6:6e:8b:1d:
         67:0b:3c:d2:f3:af:33:8e:01:3c:15:0c:e3:ba:ff:60:86:f1:
         3d:0e:87:ac:9c:08:5a:92:48:f8:27:b0:a6:44:93:03:80:4b:
         d9:b7:67:4c:f0:bd:f9:1f:35:96:b6:9b:47:cd:6d:8c:e1:fb:
         b6:fa:a8:9b:ed:77:46:41:33:2a:d8:64:9c:ad:7e:ae:61:76:
         4e:b8:d2:f7:9b:7c:33:86:99:53:d7:f3:47:17:25:10:94:7b:
         bc:8a:64:67:17:88:a9:ee:10:a5:87:5b:67:74:60:e4:88:b5:
         91:63:80:8c:d2:19:9b:09:d6:b9:de:ef:6c:d7:f2:38:c9:a3:
         22:19:3a:31:25:f3:9b:5e:22:8a:46:f0:cd:11:04:ee:9b:b7:
         af:42:8c:cd:1e:75:9f:b1:db:f6:79:de:09:ea:f5:2a:88:a6:
         af:f4:3c:f2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----