Certificate

$ rpki-client -vvf rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/UzfctqkbQdUhGkTCFqljq6zH4rA.cer
File:                     UzfctqkbQdUhGkTCFqljq6zH4rA.cer (raw, json)
Hash identifier:          MK1fM3iuS4M69grXpaUhAKZNDVrM991F8O89msifwOM=
Subject key identifier:   53:37:DC:B6:A9:1B:41:D5:21:1A:44:C2:16:A9:63:AB:AC:C7:E2:B0
Authority key identifier: 0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
Certificate issuer:       /CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Certificate serial:       01C064
Authority info access:    rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
Manifest:                 rsync://rpki.apnic.net/member_repository/A9197FBC/373083801D9311E28ABE9EF608B02CD2/UzfctqkbQdUhGkTCFqljq6zH4rA.mft
caRepository:             rsync://rpki.apnic.net/member_repository/A9197FBC/373083801D9311E28ABE9EF608B02CD2/
Notify URL:               https://rrdp.apnic.net/notification.xml
Certificate not before:   Thu 28 Sep 2023 14:49:57 +0000
Certificate not after:    Sun 01 Dec 2024 00:00:00 +0000
Subordinate resources:    AS: 38211
                          IP: 203.135.176.0/21

Validation:               OK
Signature path:           rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 02 May 2024 21:10:22 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 114788 (0x1c064)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
        Validity
            Not Before: Sep 28 14:49:57 2023 GMT
            Not After : Dec  1 00:00:00 2024 GMT
        Subject: CN=A9197FBC/serialNumber=5337DCB6A91B41D5211A44C216A963ABACC7E2B0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:b8:de:98:34:d5:67:32:aa:e3:e5:d0:d0:5e:
                    9f:67:15:c7:ad:8c:87:5a:f8:64:ce:7a:27:24:56:
                    fe:f0:b0:49:83:0e:4e:dd:a6:9b:1f:c7:57:ad:f0:
                    db:2d:8c:bd:eb:b7:45:71:39:b9:25:e9:0c:ed:1a:
                    90:b1:bf:d1:1e:b3:a1:05:a2:fc:34:35:2d:79:bc:
                    e9:fe:7c:f5:48:90:b6:10:99:7a:8c:4c:56:60:60:
                    9c:80:15:bf:79:8c:92:53:0c:2a:b7:2e:e3:31:ca:
                    07:df:84:a1:a0:dc:f7:36:69:04:7e:1f:22:1f:78:
                    a2:74:60:80:95:ba:e5:1b:d2:5c:50:b9:f9:ed:14:
                    61:fd:ec:08:ce:dd:ee:fa:79:71:ca:4d:9f:f4:83:
                    da:6b:15:c7:7c:1c:b0:c0:73:f0:f1:e9:2c:10:b6:
                    df:3a:3a:64:02:33:e4:98:12:85:f5:f9:6e:07:6b:
                    c5:c7:36:4a:35:03:5c:36:ea:77:47:06:e5:ad:58:
                    ee:13:07:63:58:54:08:2e:53:21:e3:0a:89:df:31:
                    b8:1b:79:83:ec:19:f0:8d:cc:fd:53:65:cb:3c:6d:
                    40:2f:80:8d:ba:24:aa:a0:80:85:c2:e3:f6:e8:13:
                    a4:bc:df:11:39:6e:0d:ce:f3:1b:72:d7:62:13:2a:
                    ab:fb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                53:37:DC:B6:A9:1B:41:D5:21:1A:44:C2:16:A9:63:AB:AC:C7:E2:B0
            X509v3 Authority Key Identifier:
                keyid:0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                CA Repository - URI:rsync://rpki.apnic.net/member_repository/A9197FBC/373083801D9311E28ABE9EF608B02CD2/
                RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A9197FBC/373083801D9311E28ABE9EF608B02CD2/UzfctqkbQdUhGkTCFqljq6zH4rA.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  38211

            sbgp-ipAddrBlock: critical
                IPv4:
                  203.135.176.0/21

    Signature Algorithm: sha256WithRSAEncryption
         76:04:56:cd:a0:c8:40:54:17:f8:7f:e2:75:c6:24:3c:f1:12:
         f4:2e:7e:ac:71:ca:02:f5:3f:f4:a7:6b:b6:0a:0c:6d:96:39:
         60:9a:c2:30:f1:75:31:14:6d:77:cc:a4:44:b9:b1:1b:df:fc:
         b8:18:81:e6:b5:fc:53:d7:9b:94:7b:77:cd:0f:f7:04:58:dc:
         f3:55:0b:bd:1d:59:3e:a7:ea:90:d2:80:8a:cb:31:1f:28:9d:
         60:bd:22:9f:6b:69:d5:72:d0:16:f3:6d:b2:e0:b3:76:30:34:
         ff:53:14:cc:0c:e0:8a:17:3d:e3:79:34:46:80:3a:1a:32:9a:
         14:bd:68:cd:b9:a5:2f:05:ca:fc:11:6f:58:e5:1e:9d:45:3f:
         e6:5d:31:c7:17:a8:f8:65:97:1f:86:9c:29:db:1a:a6:75:d6:
         db:14:32:14:8c:21:b0:b5:df:ba:4b:77:f0:e5:6c:e8:e5:c4:
         df:26:56:6c:a1:f3:f2:1d:55:92:39:bc:2f:87:3b:1c:f2:b9:
         c8:e3:82:43:fc:8d:55:6f:c7:90:d3:90:10:b3:fd:8a:14:df:
         72:7b:ab:82:0f:b6:2c:52:90:ae:0c:65:3e:0c:01:a0:cb:45:
         55:df:11:6c:af:c6:aa:53:2a:34:38:09:2f:29:84:fc:f5:3f:
         f5:46:a5:27
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 25 22:34:25 2024 by rpki-client on console-fra.rpki-client.org