Certificate

$ rpki-client -vvf rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/RmieTZ937kzGyKiOZ57P7zdS9Dc.cer
File:                     RmieTZ937kzGyKiOZ57P7zdS9Dc.cer (raw, json)
Hash identifier:          GjO3y7LNODtay5wOyNpUT3p7kNt8FX0NUN3OL3tPYFY=
Subject key identifier:   46:68:9E:4D:9F:77:EE:4C:C6:C8:A8:8E:67:9E:CF:EF:37:52:F4:37
Authority key identifier: 0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
Certificate issuer:       /CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Certificate serial:       018E6C
Authority info access:    rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
Manifest:                 rsync://rpki.apnic.net/member_repository/A91AC4F3/CFC6DCB80C0411EA889F9955C4F9AE02/RmieTZ937kzGyKiOZ57P7zdS9Dc.mft
caRepository:             rsync://rpki.apnic.net/member_repository/A91AC4F3/CFC6DCB80C0411EA889F9955C4F9AE02/
Notify URL:               https://rrdp.apnic.net/notification.xml
Certificate not before:   Wed 01 Mar 2023 08:13:48 +0000
Certificate not after:    Wed 29 May 2024 00:00:00 +0000
Subordinate resources:    AS: 45118
                          IP: 202.158.253.0 -- 202.158.255.255
                          IP: 203.100.61.0/24
                          IP: 2405:8c40::/32

Validation:               OK
Signature path:           rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 04 Apr 2024 09:37:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 101996 (0x18e6c)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
        Validity
            Not Before: Mar  1 08:13:48 2023 GMT
            Not After : May 29 00:00:00 2024 GMT
        Subject: CN=A91AC4F3/serialNumber=46689E4D9F77EE4CC6C8A88E679ECFEF3752F437
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:6e:35:4f:56:26:6b:c7:8f:b1:aa:83:7d:05:
                    8e:aa:cd:27:82:60:b7:25:a7:90:ae:4b:24:1a:76:
                    aa:64:54:6d:a4:f6:37:f5:70:bd:19:b1:da:44:dc:
                    05:a6:7b:9a:ba:8b:b5:77:59:23:11:18:6a:d0:17:
                    76:a7:c1:64:30:de:31:49:e0:d0:e6:6a:6d:b9:6f:
                    0c:6c:7e:b5:d4:93:b2:fb:e8:3a:74:54:60:06:c2:
                    1d:90:1b:2a:c6:c1:3a:70:6c:d9:dd:0e:8d:51:52:
                    72:62:9e:61:2f:c9:1d:42:dd:50:ca:9c:2b:d7:27:
                    4f:ba:71:47:1d:ab:75:82:4b:69:d2:ac:bc:02:78:
                    a7:b8:18:f4:c6:b7:1a:5e:54:ba:7f:df:9e:f9:8a:
                    d4:65:a7:14:50:8c:5d:05:fc:49:17:05:53:22:b3:
                    c3:81:2b:8d:3b:03:48:f1:3b:db:6e:08:b7:96:31:
                    5c:67:b4:9d:2d:16:19:49:d6:48:ba:2c:78:0e:f3:
                    aa:67:7a:b5:d6:7d:78:61:a8:9b:3f:ce:2d:b3:93:
                    c9:d4:36:25:c9:29:ae:a3:90:34:e4:cc:c6:a0:2e:
                    e6:eb:4e:89:8b:f8:86:e8:76:07:72:0f:86:88:88:
                    03:8e:b5:cd:39:db:97:0b:ec:a1:95:27:d6:be:b8:
                    0a:1f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                46:68:9E:4D:9F:77:EE:4C:C6:C8:A8:8E:67:9E:CF:EF:37:52:F4:37
            X509v3 Authority Key Identifier:
                keyid:0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                CA Repository - URI:rsync://rpki.apnic.net/member_repository/A91AC4F3/CFC6DCB80C0411EA889F9955C4F9AE02/
                RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A91AC4F3/CFC6DCB80C0411EA889F9955C4F9AE02/RmieTZ937kzGyKiOZ57P7zdS9Dc.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  45118

            sbgp-ipAddrBlock: critical
                IPv4:
                  202.158.253.0-202.158.255.255
                  203.100.61.0/24
                IPv6:
                  2405:8c40::/32

    Signature Algorithm: sha256WithRSAEncryption
         da:bb:bf:df:03:c1:fc:04:d9:37:54:5a:51:17:45:fc:cd:03:
         d8:31:8a:05:ce:fc:88:e2:54:d4:4d:80:26:0e:ef:ab:26:df:
         0a:0e:bf:37:c5:47:cc:a5:41:31:2a:fa:97:fe:be:d6:c1:9b:
         a5:4f:fb:7f:c2:e9:d3:35:1e:b0:43:4e:32:36:ac:8d:86:76:
         8a:58:d6:7f:d8:f4:6c:b4:b9:a6:8d:07:e9:73:47:9d:45:68:
         e3:f1:2d:4f:33:d3:c7:ec:56:e2:d4:db:bc:cb:6f:6c:2b:3e:
         17:52:a4:b4:16:07:3c:5d:b3:b7:ff:fc:45:70:cb:1f:49:e0:
         b0:44:28:65:f4:14:b3:1b:5d:a2:a6:8e:ee:3e:56:cc:81:e9:
         b6:ba:9c:3b:e4:05:2c:31:1f:3f:69:c8:d5:36:fe:fe:9c:c5:
         18:65:67:2a:fb:52:93:48:67:ba:03:38:36:89:6d:5b:e9:bc:
         d2:a9:1d:2e:5a:81:48:9a:6f:94:1c:55:7b:de:8b:60:11:d3:
         d4:ec:96:c1:d7:dd:ce:47:58:2b:c5:a0:8c:4e:09:e4:64:a3:
         d7:96:9f:95:42:32:cb:b4:a7:b5:0d:22:4d:57:c3:49:3e:d2:
         2e:8e:89:73:d0:77:81:59:93:3b:41:cb:18:be:eb:6b:61:08:
         d4:07:86:c5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 28 10:51:23 2024 by rpki-client on console-ams.rpki-client.org