Certificate

$ rpki-client -vvf rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/UrIZlUKcRPin9OyZ5TBAhw1tOFs.cer
File:                     UrIZlUKcRPin9OyZ5TBAhw1tOFs.cer (raw, json)
Hash identifier:          VLAoBYHT4UufHoFDyYqAj25o4h0abmR8KEc0Chnmq+I=
Subject key identifier:   52:B2:19:95:42:9C:44:F8:A7:F4:EC:99:E5:30:40:87:0D:6D:38:5B
Authority key identifier: 0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
Certificate issuer:       /CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Certificate serial:       0193DA
Authority info access:    rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
Manifest:                 rsync://rpki.apnic.net/member_repository/A91A459D/5FAB972E7EF611EAA979A32DC4F9AE02/UrIZlUKcRPin9OyZ5TBAhw1tOFs.mft
caRepository:             rsync://rpki.apnic.net/member_repository/A91A459D/5FAB972E7EF611EAA979A32DC4F9AE02/
Notify URL:               https://rrdp.apnic.net/notification.xml
Certificate not before:   Wed 29 Mar 2023 18:14:31 +0000
Certificate not after:    Wed 29 May 2024 00:00:00 +0000
Subordinate resources:    AS: 138684
                          IP: 103.136.132.0/22
                          IP: 2404:93c0::/32

Validation:               OK
Signature path:           rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 04 Apr 2024 23:00:27 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 103386 (0x193da)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
        Validity
            Not Before: Mar 29 18:14:31 2023 GMT
            Not After : May 29 00:00:00 2024 GMT
        Subject: CN=A91A459D/serialNumber=52B21995429C44F8A7F4EC99E53040870D6D385B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:f4:48:11:be:c8:25:16:70:11:38:ba:0f:ff:
                    54:39:ab:9f:6e:a5:aa:0f:6b:0f:72:30:7e:c6:ad:
                    f7:e5:51:8f:e4:cb:14:12:7b:8e:ab:e7:8c:5b:7e:
                    c7:85:b9:5c:cb:5e:08:e3:00:b7:36:22:72:11:36:
                    94:50:95:f7:60:e9:78:0c:e2:93:80:69:b3:9f:df:
                    3d:38:6d:79:0f:07:51:41:a0:86:03:27:5c:94:69:
                    35:af:61:1a:96:d1:b8:93:b1:5d:23:64:5e:02:13:
                    06:98:75:ae:f4:32:ef:f7:81:c6:27:9b:fb:4b:e3:
                    74:e9:be:aa:d7:a1:1d:73:14:18:31:4c:4a:6a:80:
                    5a:41:fc:93:67:93:b9:04:89:7c:27:cb:df:a0:3a:
                    00:2b:91:1e:2a:c5:24:fe:cd:e2:b9:96:91:ac:50:
                    08:46:18:5c:d9:c3:f6:a5:cd:94:24:6e:3a:22:cb:
                    96:69:88:61:3c:77:d4:6b:ec:c5:a5:44:dd:05:d2:
                    a6:76:80:d1:48:76:53:f5:03:0f:12:82:b6:87:0f:
                    f7:ac:38:45:68:6a:1b:11:05:82:c1:1c:89:e2:4e:
                    6c:08:c8:a7:c7:e2:2a:db:fc:d3:aa:b8:06:77:4f:
                    d9:26:b0:e6:18:c0:f5:0c:11:b6:b5:32:52:5a:9e:
                    de:e7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                52:B2:19:95:42:9C:44:F8:A7:F4:EC:99:E5:30:40:87:0D:6D:38:5B
            X509v3 Authority Key Identifier:
                keyid:0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                CA Repository - URI:rsync://rpki.apnic.net/member_repository/A91A459D/5FAB972E7EF611EAA979A32DC4F9AE02/
                RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A91A459D/5FAB972E7EF611EAA979A32DC4F9AE02/UrIZlUKcRPin9OyZ5TBAhw1tOFs.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  138684

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.136.132.0/22
                IPv6:
                  2404:93c0::/32

    Signature Algorithm: sha256WithRSAEncryption
         c3:12:35:e7:bc:40:28:d9:4c:ef:d4:47:5f:fa:4b:c2:ca:24:
         f9:97:81:cc:b5:74:ba:14:43:d9:cf:bb:17:c5:3b:f3:28:2f:
         0a:d1:9b:b2:62:61:62:9b:f6:14:31:c1:7a:e8:90:63:af:d0:
         08:4f:54:f6:c5:e1:80:34:a6:1f:59:27:03:b0:f6:d2:89:b1:
         5e:e0:ec:ed:0a:90:82:27:91:8e:f4:53:21:29:c2:b7:e4:35:
         af:ac:69:9e:35:be:06:48:81:da:a4:5a:eb:49:c8:60:20:6c:
         d0:36:29:d9:ef:65:02:e5:05:82:bd:91:4e:58:6c:3f:ba:8a:
         63:7d:cb:c9:11:c0:c0:41:f5:28:5a:c3:93:70:f3:10:ac:52:
         0c:a7:33:70:5d:28:4b:4c:56:8a:23:40:7a:2b:78:c8:3e:80:
         36:73:c9:fe:5f:cd:d2:be:b4:88:e4:29:67:de:c0:62:a5:a3:
         63:f2:57:6b:63:a8:92:6e:55:45:7b:d0:6d:fd:6e:b0:03:60:
         68:37:d4:84:72:52:66:ac:a0:e4:a9:b3:48:61:50:52:f7:8f:
         5b:aa:40:91:4e:2e:51:d9:b4:1e:33:77:c1:f4:30:1f:5d:e9:
         47:9e:6d:ec:c6:1e:92:3b:eb:33:6a:a8:2b:37:76:66:a3:02:
         47:91:46:5d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 29 00:00:38 2024 by rpki-client on console-fra.rpki-client.org