Certificate

$ rpki-client -vvf rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QmfPXQMASo_v3yE5XQ_oJFSLE8E.cer
File:                     QmfPXQMASo_v3yE5XQ_oJFSLE8E.cer (raw, json)
Hash identifier:          bDZeLHzVkTCSlxlTErUmtqk8hrDaYj+f15iScRWIaPs=
Subject key identifier:   42:67:CF:5D:03:00:4A:8F:EF:DF:21:39:5D:0F:E8:24:54:8B:13:C1
Authority key identifier: 0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
Certificate issuer:       /CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Certificate serial:       01BF92
Authority info access:    rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
Manifest:                 rsync://rpki.apnic.net/member_repository/A91FCEB1/EFB875C808C911E68C778878C4F9AE02/QmfPXQMASo_v3yE5XQ_oJFSLE8E.mft
caRepository:             rsync://rpki.apnic.net/member_repository/A91FCEB1/EFB875C808C911E68C778878C4F9AE02/
Notify URL:               https://rrdp.apnic.net/notification.xml
Certificate not before:   Mon 25 Sep 2023 22:39:00 +0000
Certificate not after:    Sun 01 Dec 2024 00:00:00 +0000
Subordinate resources:    AS: 4631
                          AS: 135514

Validation:               OK
Signature path:           rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 01 May 2024 14:50:25 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 114578 (0x1bf92)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
        Validity
            Not Before: Sep 25 22:39:00 2023 GMT
            Not After : Dec  1 00:00:00 2024 GMT
        Subject: CN=A91FCEB1/serialNumber=4267CF5D03004A8FEFDF21395D0FE824548B13C1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:20:b9:40:9d:cd:21:45:3e:d3:b5:d1:ae:39:
                    6f:5e:88:fd:32:09:29:aa:78:0c:ce:7e:05:47:f2:
                    6b:f6:29:41:12:99:3a:ec:b6:e1:27:80:96:87:a6:
                    97:33:39:c2:6a:4f:5f:c6:93:1e:16:92:86:1e:84:
                    82:60:c1:f8:d8:04:8e:de:68:28:ee:fc:07:5a:95:
                    5f:f2:2f:c9:cd:d6:b4:fd:9a:11:75:9a:19:55:03:
                    b3:a9:7c:9a:65:72:05:db:7e:8e:ca:62:64:59:7a:
                    db:b7:db:27:4f:47:3d:97:81:9f:fb:19:b7:53:5a:
                    b4:51:95:73:5b:75:4b:c6:47:9e:bf:61:0f:c0:ca:
                    bf:5e:51:02:52:e2:e0:b7:8b:90:7d:69:c5:25:ea:
                    e6:d7:70:62:87:4c:2d:29:6c:21:e4:1f:db:6e:8d:
                    b1:7f:c2:f4:d2:82:f6:be:2d:9f:63:ba:09:3b:d5:
                    7c:d7:90:51:f1:7c:8b:69:e6:ef:85:86:dc:0e:f1:
                    34:37:8d:13:fc:43:20:e2:28:92:21:99:07:b8:6a:
                    51:4e:c0:04:be:d8:31:f9:58:6f:b2:d8:1b:f0:f7:
                    f7:e0:88:17:d4:3b:61:44:a2:d7:4a:b5:e6:ca:d2:
                    c0:a9:86:33:1e:05:ac:15:01:c9:42:c5:f0:ca:55:
                    83:05
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                42:67:CF:5D:03:00:4A:8F:EF:DF:21:39:5D:0F:E8:24:54:8B:13:C1
            X509v3 Authority Key Identifier:
                keyid:0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                CA Repository - URI:rsync://rpki.apnic.net/member_repository/A91FCEB1/EFB875C808C911E68C778878C4F9AE02/
                RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A91FCEB1/EFB875C808C911E68C778878C4F9AE02/QmfPXQMASo_v3yE5XQ_oJFSLE8E.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  4631
                  135514

    Signature Algorithm: sha256WithRSAEncryption
         1f:c6:eb:ce:d2:7a:eb:a3:dd:b4:2d:5b:a9:73:a2:38:45:ac:
         35:3f:77:a1:b9:42:cf:27:bb:3f:84:8c:5f:15:fa:81:46:a1:
         64:b3:88:d2:8c:91:57:3f:1c:64:b4:98:45:ea:bd:9d:06:f2:
         e7:bf:6b:c5:c8:46:d1:68:4d:28:76:50:c5:ff:16:97:d5:d7:
         98:eb:5c:26:27:55:0c:6f:ad:99:3a:00:eb:ed:c6:3d:7f:21:
         13:38:72:68:18:b3:98:5c:87:fe:f7:1c:f5:f2:e3:f8:58:4a:
         af:6f:fb:8a:c0:eb:ac:b7:54:a8:99:6b:b9:c9:8b:c0:08:ed:
         c3:c5:23:e2:5f:61:65:8e:20:94:4a:a9:4b:9a:7c:78:e9:6e:
         78:8c:9b:3d:70:92:de:43:e4:12:c5:35:2e:2f:d2:6f:ad:e9:
         8d:ec:fa:9f:bb:09:15:71:67:59:af:fa:2d:16:ae:6c:63:cf:
         8a:a9:61:88:41:9c:06:f0:43:66:16:de:51:1b:7c:9b:d1:de:
         36:b3:d3:27:55:92:1c:12:69:01:64:0f:b9:c8:89:d2:c5:14:
         54:9f:d9:53:82:33:e9:b3:16:45:4d:7b:d5:b4:cb:59:96:e2:
         81:98:64:f4:77:0e:ab:c3:ca:be:49:74:6c:ee:96:50:2c:23:
         8c:20:d8:b5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 24 15:51:00 2024 by rpki-client on console-ams.rpki-client.org