Certificate

$ rpki-client -vvf rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/T6Nopi7SXGJ44jsb_6JRoUmqL1g.cer
File:                     T6Nopi7SXGJ44jsb_6JRoUmqL1g.cer (raw, json)
Hash identifier:          0ZWqmJvXPmMBJrruRRCG8xdEwRMuA/ZfRZHifSvMBdk=
Subject key identifier:   4F:A3:68:A6:2E:D2:5C:62:78:E2:3B:1B:FF:A2:51:A1:49:AA:2F:58
Authority key identifier: 0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
Certificate issuer:       /CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Certificate serial:       01DCBB
Authority info access:    rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
Manifest:                 rsync://rpki.apnic.net/member_repository/A916548C/C7731D249E5511ED8D92BD79C4F9AE02/T6Nopi7SXGJ44jsb_6JRoUmqL1g.mft
caRepository:             rsync://rpki.apnic.net/member_repository/A916548C/C7731D249E5511ED8D92BD79C4F9AE02/
Notify URL:               https://rrdp.apnic.net/notification.xml
Certificate not before:   Thu 01 Feb 2024 20:12:58 +0000
Certificate not after:    Thu 01 May 2025 00:00:00 +0000
Subordinate resources:    AS: 150737
                          IP: 103.77.116.0/23

Validation:               OK
Signature path:           rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 23 Apr 2024 16:59:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 122043 (0x1dcbb)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
        Validity
            Not Before: Feb  1 20:12:58 2024 GMT
            Not After : May  1 00:00:00 2025 GMT
        Subject: CN=A916548C/serialNumber=4FA368A62ED25C6278E23B1BFFA251A149AA2F58
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:67:a8:97:39:5c:a0:26:a7:39:1b:84:c2:8d:
                    4f:2f:36:8d:ba:cc:fa:6a:64:6b:b3:10:6d:50:77:
                    b2:27:d9:75:64:f6:f8:32:a3:4f:e3:bf:26:68:a2:
                    13:be:66:d5:2e:26:8f:8e:f7:81:90:48:14:5c:d0:
                    4c:c5:b7:12:76:ce:10:1b:29:13:12:ec:a4:76:86:
                    fb:77:c3:16:45:b2:b7:1b:88:95:c0:24:e7:2e:e8:
                    eb:20:7e:54:f9:a0:92:eb:2d:68:66:bb:80:81:67:
                    49:80:cc:9c:13:32:ad:cf:54:81:e7:d8:df:c4:3e:
                    52:6a:6c:6a:5e:ee:3b:f7:29:67:67:94:00:bb:c1:
                    88:06:93:31:73:56:49:12:01:1d:e6:71:c2:e6:66:
                    74:1e:52:10:1b:29:f2:2a:f6:71:ee:db:c6:33:fe:
                    4e:33:aa:b4:8d:18:27:26:f9:05:2b:3f:95:ee:30:
                    4a:60:a4:ba:d7:68:ef:da:c3:9a:03:c6:2f:2f:d9:
                    6b:ff:a9:0e:21:30:08:63:4b:e3:68:9c:0d:d0:c8:
                    d3:47:4e:ba:48:e4:50:d9:37:2d:fa:ff:5e:63:88:
                    28:9d:74:30:86:4f:2c:eb:ac:ea:f9:d8:df:06:ae:
                    19:dd:09:61:cd:3a:af:60:64:38:ac:2d:a5:f6:93:
                    db:6f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4F:A3:68:A6:2E:D2:5C:62:78:E2:3B:1B:FF:A2:51:A1:49:AA:2F:58
            X509v3 Authority Key Identifier:
                keyid:0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                CA Repository - URI:rsync://rpki.apnic.net/member_repository/A916548C/C7731D249E5511ED8D92BD79C4F9AE02/
                RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A916548C/C7731D249E5511ED8D92BD79C4F9AE02/T6Nopi7SXGJ44jsb_6JRoUmqL1g.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  150737

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.77.116.0/23

    Signature Algorithm: sha256WithRSAEncryption
         9f:ca:db:06:14:54:ef:d2:73:9c:3d:bb:15:c3:91:bb:95:97:
         00:4d:4b:cc:40:0c:a4:80:cd:fd:5b:3b:fc:bc:0b:11:72:aa:
         5c:0c:cb:e0:38:9c:e6:f3:27:cf:27:f2:23:32:ef:0a:42:8c:
         66:99:f0:6d:a0:8c:d6:e2:2e:e5:60:b0:30:da:5a:d0:41:38:
         55:cf:b4:f8:d4:c5:db:24:52:5c:0d:8f:e9:d4:1c:bb:cc:79:
         6c:0c:94:4b:25:41:72:61:c3:2d:51:48:e2:95:17:4e:98:f7:
         01:f0:1c:02:6c:5d:49:ac:45:59:64:e4:bc:e9:94:f1:70:c7:
         89:e8:d4:8e:53:7a:0e:bc:b2:2a:39:10:ee:67:1a:c8:9c:ae:
         fa:d5:ef:38:77:7f:9b:19:8e:57:fe:84:02:a8:50:01:a3:9a:
         ab:07:92:98:45:53:88:ef:64:ab:aa:cd:d0:f7:bb:64:9b:37:
         02:42:84:34:59:21:a2:c3:ec:ad:e8:f0:9d:bc:d4:39:ac:dd:
         48:a0:f0:f6:e5:82:3d:ba:98:3d:c8:ad:e8:12:8e:a5:86:97:
         81:b1:28:f6:55:35:80:9a:9a:da:1f:fe:80:10:f6:51:99:27:
         6e:97:65:ba:cf:c8:de:9d:c3:16:7e:eb:93:a3:c7:b7:8b:45:
         32:7a:2e:9a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 16 17:34:40 2024 by rpki-client on console-ams.rpki-client.org