Certificate

$ rpki-client -vvf rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QMW9PelSuS6VkhpP1t99sHtKKSE.cer
File:                     QMW9PelSuS6VkhpP1t99sHtKKSE.cer (raw, json)
Hash identifier:          akzBm5JtG29DRmDlxnHvZY1O6GrptoQwTTMuW3riYGs=
Subject key identifier:   40:C5:BD:3D:E9:52:B9:2E:95:92:1A:4F:D6:DF:7D:B0:7B:4A:29:21
Authority key identifier: 0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
Certificate issuer:       /CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Certificate serial:       01CBF2
Authority info access:    rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
Manifest:                 rsync://rpki.apnic.net/member_repository/A915D963/90E80BC897E211EB9B39D531C4F9AE02/QMW9PelSuS6VkhpP1t99sHtKKSE.mft
caRepository:             rsync://rpki.apnic.net/member_repository/A915D963/90E80BC897E211EB9B39D531C4F9AE02/
Notify URL:               https://rrdp.apnic.net/notification.xml
Certificate not before:   Tue 21 Nov 2023 07:44:48 +0000
Certificate not after:    Mon 01 Jul 2024 00:00:00 +0000
Subordinate resources:    AS: 142044
                          IP: 103.81.55.0/24
                          IP: 103.165.161.0/24
                          IP: 2001:df6:6d80::/48

Validation:               OK
Signature path:           rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 02 May 2024 21:10:22 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 117746 (0x1cbf2)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
        Validity
            Not Before: Nov 21 07:44:48 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=A915D963/serialNumber=40C5BD3DE952B92E95921A4FD6DF7DB07B4A2921
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ed:40:50:0b:43:da:4a:5d:c7:4d:c9:92:d2:86:
                    2f:57:70:ee:42:43:62:f0:b7:fe:84:58:83:bc:49:
                    97:17:54:26:8b:49:8e:14:36:14:e2:ed:cc:e5:c1:
                    a4:37:97:1c:c4:da:f5:3d:3d:d8:e2:5b:2f:73:4e:
                    67:c6:10:76:2a:16:86:5a:ae:76:84:e8:c2:13:41:
                    d8:07:4c:c8:99:64:b4:85:f2:c0:d8:25:6e:c6:d1:
                    22:78:4b:e5:31:67:a0:c3:e5:e9:87:0e:24:eb:9c:
                    c2:f9:8b:01:49:a7:61:ef:6c:82:09:a4:be:51:87:
                    70:92:9d:c9:31:17:fe:fd:0b:6c:fb:39:b7:07:91:
                    d8:8f:8c:32:28:61:ec:ca:37:fb:63:22:ef:09:54:
                    9c:21:52:ec:1d:20:5b:91:69:e4:c3:6f:06:dd:bf:
                    41:59:e7:11:5a:0f:8c:87:03:0e:24:ee:fc:d1:b2:
                    83:5e:e8:ce:0e:da:00:04:39:07:c1:7f:3a:35:d2:
                    d2:69:e5:3f:5e:cd:15:dd:51:c1:02:90:41:ac:b5:
                    4d:95:0f:6d:d1:8c:f0:5f:fe:34:36:01:ff:00:13:
                    e3:15:af:6b:38:9c:7d:94:4c:9c:aa:a6:52:e1:49:
                    56:96:82:cd:80:8e:34:77:6f:8f:d8:01:11:b8:b3:
                    b5:a3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                40:C5:BD:3D:E9:52:B9:2E:95:92:1A:4F:D6:DF:7D:B0:7B:4A:29:21
            X509v3 Authority Key Identifier:
                keyid:0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                CA Repository - URI:rsync://rpki.apnic.net/member_repository/A915D963/90E80BC897E211EB9B39D531C4F9AE02/
                RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A915D963/90E80BC897E211EB9B39D531C4F9AE02/QMW9PelSuS6VkhpP1t99sHtKKSE.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  142044

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.81.55.0/24
                  103.165.161.0/24
                IPv6:
                  2001:df6:6d80::/48

    Signature Algorithm: sha256WithRSAEncryption
         c2:68:fb:a5:59:64:6d:93:6b:29:91:fc:7b:5e:61:63:11:20:
         ac:72:64:66:99:86:e9:2e:c1:68:fe:e3:1d:26:69:cc:74:0e:
         c2:0d:76:4b:87:29:75:e3:05:d5:94:84:e7:d2:41:1a:8d:2e:
         46:f2:8a:1a:c5:d9:52:98:0b:06:f6:2b:d8:24:e6:21:93:f0:
         92:0a:25:79:3b:2e:72:f5:63:9c:59:41:ba:ea:17:65:66:34:
         1a:3a:f8:90:d3:7c:13:8d:ca:1f:91:4f:e1:17:ee:77:a2:4b:
         67:cf:b7:0a:de:3c:ab:13:4d:cb:f2:0a:aa:e6:ce:f3:89:ee:
         c9:2d:31:87:ed:37:9e:ec:63:68:ac:67:8e:bb:af:cb:6e:8c:
         8e:0a:3b:e2:a3:21:b5:3b:85:57:8e:91:bd:08:26:d4:fe:3a:
         6f:2f:d9:07:c2:24:54:73:02:cc:b3:58:27:60:97:24:a7:46:
         58:da:38:f8:24:67:62:e4:b6:82:42:ff:07:06:e3:0c:b4:db:
         00:ef:bc:5e:78:43:ab:0b:4c:1f:29:ff:31:cf:73:d8:fe:66:
         ed:3f:fa:ed:78:f7:da:59:c4:7b:15:aa:5c:aa:47:97:15:06:
         42:23:bb:52:09:df:61:b1:ea:87:9a:68:04:df:06:c6:a1:93:
         3c:89:52:32
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 25 22:34:22 2024 by rpki-client on console-fra.rpki-client.org