Certificate

$ rpki-client -vvf rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PefvwEame5klu7vcYTKxKXXbSm0.cer
File:                     PefvwEame5klu7vcYTKxKXXbSm0.cer (raw, json)
Hash identifier:          p3N5FbSl8qZXPvUhUEksB+rhACnpjYr25jIUUPXvbEk=
Subject key identifier:   3D:E7:EF:C0:46:A6:7B:99:25:BB:BB:DC:61:32:B1:29:75:DB:4A:6D
Authority key identifier: 0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
Certificate issuer:       /CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Certificate serial:       01B632
Authority info access:    rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
Manifest:                 rsync://rpki.apnic.net/member_repository/A9176190/C37300E8AE1811EAA5090072C4F9AE02/PefvwEame5klu7vcYTKxKXXbSm0.mft
caRepository:             rsync://rpki.apnic.net/member_repository/A9176190/C37300E8AE1811EAA5090072C4F9AE02/
Notify URL:               https://rrdp.apnic.net/notification.xml
Certificate not before:   Thu 10 Aug 2023 15:36:08 +0000
Certificate not after:    Thu 31 Oct 2024 00:00:00 +0000
Subordinate resources:    AS: 137990
                          IP: 103.119.128.0/22
                          IP: 202.43.225.0 -- 202.43.227.255
                          IP: 2403:43c0::/32

Validation:               OK
Signature path:           rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 01 May 2024 11:36:35 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 112178 (0x1b632)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
        Validity
            Not Before: Aug 10 15:36:08 2023 GMT
            Not After : Oct 31 00:00:00 2024 GMT
        Subject: CN=A9176190/serialNumber=3DE7EFC046A67B9925BBBBDC6132B12975DB4A6D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:5b:4a:47:44:85:14:ad:7a:9b:22:2a:fe:74:
                    d0:4f:aa:5b:ed:dc:7d:e2:60:79:8b:ae:c3:4e:79:
                    0c:80:d6:34:7a:23:ed:a8:34:86:88:3f:b3:65:d6:
                    81:e3:3d:07:e9:49:47:e7:fc:bd:0f:14:11:50:ff:
                    4b:89:81:b2:35:d8:3e:e6:92:22:f1:52:fd:e9:f8:
                    c3:0a:65:11:19:83:d9:38:2f:86:69:79:3c:75:bc:
                    ee:f8:3c:ea:a5:2d:1f:7b:52:89:ce:21:18:17:dd:
                    92:32:f0:2f:61:3f:45:69:d3:c8:fe:a1:78:8b:dc:
                    c8:8d:ce:20:21:69:e6:09:fe:70:38:cd:91:a4:93:
                    7f:a6:42:d3:39:9e:02:95:d5:e6:61:01:7e:e1:ac:
                    3d:e4:02:0d:69:52:3a:9b:92:5e:b1:9d:ef:24:6f:
                    e4:d1:31:92:54:5f:09:8c:ae:46:fe:cf:05:52:e4:
                    47:98:fa:3d:f6:0e:30:30:ca:8c:ff:5a:22:9e:46:
                    38:f3:c4:11:f7:a2:a7:cb:a5:f9:2b:1b:be:7e:d2:
                    02:13:49:61:46:71:2d:60:ed:96:06:14:e1:89:10:
                    a9:7d:4d:c1:11:b4:a1:8d:d6:a6:e5:7a:1b:97:ea:
                    43:76:1a:c4:90:a8:81:b8:1c:a0:4a:52:74:bc:51:
                    0d:5f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3D:E7:EF:C0:46:A6:7B:99:25:BB:BB:DC:61:32:B1:29:75:DB:4A:6D
            X509v3 Authority Key Identifier:
                keyid:0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                CA Repository - URI:rsync://rpki.apnic.net/member_repository/A9176190/C37300E8AE1811EAA5090072C4F9AE02/
                RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A9176190/C37300E8AE1811EAA5090072C4F9AE02/PefvwEame5klu7vcYTKxKXXbSm0.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  137990

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.119.128.0/22
                  202.43.225.0-202.43.227.255
                IPv6:
                  2403:43c0::/32

    Signature Algorithm: sha256WithRSAEncryption
         a4:6f:ea:ca:8a:39:44:c5:08:2d:08:8c:d1:a8:2f:05:e3:b2:
         56:33:29:9b:4f:aa:3a:46:67:39:9d:da:54:65:75:83:01:2a:
         b9:79:80:38:e2:9b:fa:b4:d1:74:f5:87:5b:3d:33:e1:14:2f:
         f1:80:0e:6d:98:d5:d8:fe:d4:93:e3:ba:9d:44:20:cd:b6:df:
         d3:68:71:05:10:cb:79:86:79:14:44:f1:f2:c0:b4:d7:f0:88:
         c8:bd:40:06:b0:fd:74:4c:94:d3:67:13:3e:52:33:9d:38:f2:
         57:53:7d:11:61:07:a3:66:b5:7b:b9:de:2c:4f:b9:9e:d2:02:
         fe:41:31:5e:7f:5c:2b:4c:a4:90:5b:79:48:9d:9e:a7:f5:07:
         7c:6f:49:89:44:cc:f7:0b:72:37:31:9b:18:17:57:5c:b8:58:
         09:20:25:71:f4:10:5e:b0:8c:b8:12:68:4b:99:03:5a:14:aa:
         81:3d:fd:a4:d9:e2:04:8a:c1:e2:e5:bd:79:eb:ca:70:d5:b9:
         c5:1a:f2:f1:44:d7:f7:1a:bf:36:28:5e:cc:ab:e1:be:de:c8:
         ed:8b:ce:fb:e6:ae:2d:db:44:1f:26:6a:4b:14:e9:0a:17:c6:
         8b:24:e7:9b:30:6c:af:bb:e8:96:38:b5:ea:1b:0b:65:a8:ed:
         61:8e:17:ba
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 24 12:31:25 2024 by rpki-client on console-fra.rpki-client.org