Certificate

$ rpki-client -vvf rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/SE6_M3ULIcrwKNDOIZuUYdH7qmY.cer
File:                     SE6_M3ULIcrwKNDOIZuUYdH7qmY.cer (raw, json)
Hash identifier:          n/Tb/KoMW9bzeoPyP2unIj6FCOOLjlS0xeRbnrBn9yA=
Subject key identifier:   48:4E:BF:33:75:0B:21:CA:F0:28:D0:CE:21:9B:94:61:D1:FB:AA:66
Authority key identifier: 0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
Certificate issuer:       /CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Certificate serial:       01EAB7
Authority info access:    rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
Manifest:                 rsync://rpki.apnic.net/member_repository/A915C449/58EA48EA9DD611EB92CF3714C4F9AE02/SE6_M3ULIcrwKNDOIZuUYdH7qmY.mft
caRepository:             rsync://rpki.apnic.net/member_repository/A915C449/58EA48EA9DD611EB92CF3714C4F9AE02/
Notify URL:               https://rrdp.apnic.net/notification.xml
Certificate not before:   Tue 09 Apr 2024 15:19:48 +0000
Certificate not after:    Tue 01 Jul 2025 00:00:00 +0000
Subordinate resources:    AS: 142034
                          IP: 103.165.84.0/23
                          IP: 2407:47c0::/32

Validation:               OK
Signature path:           rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 25 Apr 2024 15:38:26 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 125623 (0x1eab7)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
        Validity
            Not Before: Apr  9 15:19:48 2024 GMT
            Not After : Jul  1 00:00:00 2025 GMT
        Subject: CN=A915C449/serialNumber=484EBF33750B21CAF028D0CE219B9461D1FBAA66
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e0:99:6e:e9:45:91:7c:29:32:7d:1f:83:5d:ad:
                    01:ec:b8:51:2b:55:b5:d9:46:33:27:94:29:18:49:
                    ea:a5:ac:bb:0e:b0:80:99:a6:fa:37:65:ec:48:d3:
                    6d:eb:e7:2c:e9:f5:4b:a6:9c:e3:f8:41:80:76:a3:
                    35:42:8e:7c:c7:89:78:8f:67:26:64:c8:4a:bd:09:
                    78:5c:9e:b6:a1:e8:cf:3c:f1:d6:84:5e:37:63:6c:
                    3a:00:77:95:a3:32:e4:41:cc:16:9d:7e:b9:a4:bd:
                    3f:1e:c4:91:2c:c0:f0:a7:fe:da:83:92:2a:18:4d:
                    75:25:37:83:94:04:35:b1:21:0e:f9:4a:be:e0:8b:
                    e7:b7:8f:1f:a4:dd:ba:81:ad:73:dd:f0:ad:a3:0f:
                    0a:5b:fd:b1:2f:7f:ad:7b:60:a7:0d:1b:1d:9a:a9:
                    8b:82:51:0f:f3:3e:a7:b2:6e:49:7b:09:c0:9d:5a:
                    8e:00:f7:27:e1:bb:7e:da:69:09:cb:15:62:55:b3:
                    f7:32:e9:01:e4:1e:b5:d7:7b:9b:a4:81:67:6e:a0:
                    6d:9e:b1:1e:ff:95:ba:f8:61:a3:5f:f8:9a:94:fc:
                    36:74:e7:1b:97:c9:f4:5a:9d:8b:f2:77:a5:d8:8a:
                    9b:6b:00:1a:a1:f5:88:7b:c1:dd:0e:be:66:94:d1:
                    6f:2f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                48:4E:BF:33:75:0B:21:CA:F0:28:D0:CE:21:9B:94:61:D1:FB:AA:66
            X509v3 Authority Key Identifier:
                keyid:0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                CA Repository - URI:rsync://rpki.apnic.net/member_repository/A915C449/58EA48EA9DD611EB92CF3714C4F9AE02/
                RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A915C449/58EA48EA9DD611EB92CF3714C4F9AE02/SE6_M3ULIcrwKNDOIZuUYdH7qmY.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  142034

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.165.84.0/23
                IPv6:
                  2407:47c0::/32

    Signature Algorithm: sha256WithRSAEncryption
         92:e6:26:85:61:e2:50:13:0c:94:9a:6e:51:59:b5:14:1f:c4:
         8b:c6:31:c3:94:ae:19:88:64:2a:67:7b:46:8a:ef:0d:dd:26:
         e4:b9:f2:e8:c4:4b:97:d7:fb:20:a8:59:1e:9a:73:29:06:2d:
         f2:c4:44:f6:ab:fe:7b:10:25:ae:e5:47:b8:80:59:b4:dd:b1:
         b0:08:30:17:9b:f7:47:40:1c:aa:f4:a9:7f:8f:f3:69:8d:da:
         2e:82:ed:24:c5:3a:c8:df:57:fa:13:d2:6c:3b:72:82:c6:97:
         89:d1:cb:5b:22:fc:16:fe:5c:d0:ae:63:c0:99:41:a6:1e:bb:
         c3:a6:5c:e2:57:59:00:9a:dc:c5:5a:b3:82:fc:ea:f5:0c:06:
         23:72:54:3a:8e:24:73:fb:79:24:2f:42:cd:62:a0:a7:ae:e1:
         ea:5b:0c:df:54:80:98:33:ed:17:64:e3:a3:a9:5b:70:4d:b3:
         47:d8:21:24:4c:8b:74:45:96:0e:f9:57:74:ae:f7:14:67:d3:
         3e:d5:a4:c5:58:78:13:ed:1f:84:49:eb:bc:8a:14:56:dc:74:
         91:22:ff:22:4a:42:fe:e4:b1:d4:3d:05:e5:cc:08:8a:57:2d:
         00:2d:99:8c:19:c5:2a:ed:5f:bd:70:5e:e3:7a:ac:c9:17:1a:
         c6:19:10:f5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 18 16:11:37 2024 by rpki-client on console-fra.rpki-client.org