Certificate

$ rpki-client -vvf rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/V5EYsUjifRVxdRVougcP4eYsfrk.cer
File:                     V5EYsUjifRVxdRVougcP4eYsfrk.cer (raw, json)
Hash identifier:          EbcOA3H/58LryWmJ/mmNURQ9+6BZNIUmaa3J0XJDTgc=
Subject key identifier:   57:91:18:B1:48:E2:7D:15:71:75:15:68:BA:07:0F:E1:E6:2C:7E:B9
Authority key identifier: 0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
Certificate issuer:       /CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Certificate serial:       01F1FC
Authority info access:    rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
Manifest:                 rsync://rpki.apnic.net/member_repository/A91647F5/D69896E6A0C811EEA7B8D02CC4F9AE02/V5EYsUjifRVxdRVougcP4eYsfrk.mft
caRepository:             rsync://rpki.apnic.net/member_repository/A91647F5/D69896E6A0C811EEA7B8D02CC4F9AE02/
Notify URL:               https://rrdp.apnic.net/notification.xml
Certificate not before:   Wed 15 May 2024 08:05:11 +0000
Certificate not after:    Tue 01 Jul 2025 00:00:00 +0000
Subordinate resources:    IP: 203.28.216.0/22

Validation:               OK
Signature path:           rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 30 Nov 2024 02:50:13 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 127484 (0x1f1fc)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
        Validity
            Not Before: May 15 08:05:11 2024 GMT
            Not After : Jul  1 00:00:00 2025 GMT
        Subject: CN=A91647F5/serialNumber=579118B148E27D1571751568BA070FE1E62C7EB9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:61:3e:ad:c7:f6:55:06:5f:3f:de:3c:c6:c4:
                    24:1c:58:ee:ce:01:43:2b:8f:16:31:73:09:1e:62:
                    52:7d:02:a6:26:cd:3f:47:9b:7f:10:ef:c0:83:1f:
                    eb:4b:8b:1a:32:60:54:43:ab:79:96:04:3a:07:f2:
                    55:1a:b8:dc:e8:81:80:2c:1e:0c:0e:8e:2a:1c:e4:
                    a5:35:21:7b:41:33:a2:d0:d6:0f:3d:85:3c:2a:68:
                    f7:9d:9c:65:9c:11:08:0f:4f:52:78:e9:6b:89:22:
                    a4:b5:77:47:a0:8d:24:fe:d3:02:b0:b0:c6:bf:e7:
                    8b:e6:c7:ac:45:2b:79:f4:7d:2a:37:0e:d7:b2:e3:
                    c4:c8:46:b0:46:19:89:c0:bb:1d:40:00:52:cd:3b:
                    dc:42:3c:f5:26:36:13:8c:17:50:4b:b4:6a:c1:97:
                    b4:13:4c:54:ee:81:51:1d:8c:22:e1:d0:2b:13:6d:
                    8b:8d:3f:fc:ec:93:f0:ce:50:de:59:24:3d:d8:73:
                    24:a1:de:81:ae:3a:fd:ec:c1:d5:d0:f1:12:05:2e:
                    f5:a1:ae:ac:d3:62:cb:10:0b:58:63:19:f0:d3:63:
                    f6:56:98:c3:ce:82:1c:0a:0b:e8:6c:2d:00:ba:84:
                    7d:b5:b7:9f:c6:86:50:eb:a1:11:66:4c:e7:e9:29:
                    51:1f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                57:91:18:B1:48:E2:7D:15:71:75:15:68:BA:07:0F:E1:E6:2C:7E:B9
            X509v3 Authority Key Identifier:
                keyid:0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                CA Repository - URI:rsync://rpki.apnic.net/member_repository/A91647F5/D69896E6A0C811EEA7B8D02CC4F9AE02/
                RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A91647F5/D69896E6A0C811EEA7B8D02CC4F9AE02/V5EYsUjifRVxdRVougcP4eYsfrk.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  203.28.216.0/22

    Signature Algorithm: sha256WithRSAEncryption
         cd:0b:49:1b:56:7c:1b:9c:45:43:d0:59:6f:3b:92:4e:6f:96:
         d1:de:b3:5f:3d:55:ba:9e:bc:e5:bf:4e:5c:87:d0:b6:ff:66:
         b2:1b:a4:4d:7c:c0:55:90:80:ee:d7:42:ae:bf:fe:15:1d:62:
         ea:f6:81:9b:21:76:1f:6a:2a:c9:47:e9:db:bd:78:bf:b6:5e:
         92:97:d1:97:e2:2e:83:c4:9c:83:09:dc:9b:af:a7:77:7d:bb:
         ce:0f:bc:1d:f0:b7:78:30:e3:6e:aa:9e:78:fe:a0:f2:70:ca:
         c8:6e:19:92:ad:e9:9b:54:ce:b5:69:8a:0b:a2:1d:27:cb:bd:
         08:6b:45:43:d1:40:de:00:8e:21:fc:9f:c3:63:cf:17:ca:62:
         b2:ac:20:35:91:ba:ac:4a:b6:74:c0:55:08:22:e7:3a:09:a0:
         3e:1f:34:50:5e:bc:3a:b6:04:03:48:d3:69:da:28:d8:2a:35:
         37:08:18:49:bc:b5:33:9c:60:72:a8:a0:ef:2f:4b:4e:93:89:
         9d:c3:e3:1c:91:2a:1d:5f:d5:ed:bd:80:4a:05:36:62:1f:13:
         d9:4c:6b:66:b4:f5:35:75:6f:07:0e:09:fa:ca:9f:70:01:74:
         60:a6:c3:9b:df:dc:82:aa:30:1d:12:a9:e6:a9:86:88:f0:ca:
         9f:c2:90:52
-----BEGIN CERTIFICATE-----
MIIF/jCCBOagAwIBAgIDAfH8MA0GCSqGSIb3DQEBCwUAMEYxETAPBgNVBAMTCEE5
MERDNUJFMTEwLwYDVQQFEygwRTY1QTRGNUZEMzZCNUJENjhFQjNDOTIzNDA4OTc4
QzkwN0FBNzlGMB4XDTI0MDUxNTA4MDUxMVoXDTI1MDcwMTAwMDAwMFowRjERMA8G
A1UEAxMIQTkxNjQ3RjUxMTAvBgNVBAUTKDU3OTExOEIxNDhFMjdEMTU3MTc1MTU2
OEJBMDcwRkUxRTYyQzdFQjkwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB
AQDMYT6tx/ZVBl8/3jzGxCQcWO7OAUMrjxYxcwkeYlJ9AqYmzT9Hm38Q78CDH+tL
ixoyYFRDq3mWBDoH8lUauNzogYAsHgwOjioc5KU1IXtBM6LQ1g89hTwqaPednGWc
EQgPT1J46WuJIqS1d0egjST+0wKwsMa/54vmx6xFK3n0fSo3Dtey48TIRrBGGYnA
ux1AAFLNO9xCPPUmNhOMF1BLtGrBl7QTTFTugVEdjCLh0CsTbYuNP/zsk/DOUN5Z
JD3YcySh3oGuOv3swdXQ8RIFLvWhrqzTYssQC1hjGfDTY/ZWmMPOghwKC+hsLQC6
hH21t5/GhlDroRFmTOfpKVEfAgMBAAGjggLzMIIC7zAdBgNVHQ4EFgQUV5EYsUji
fRVxdRVougcP4eYsfrkwHwYDVR0jBBgwFoAUDmWk9f02tb1o6zySNAiXjJB6p58w
DgYDVR0PAQH/BAQDAgEGMA8GA1UdEwEB/wQFMAMBAf8wcwYDVR0fBGwwajBooGag
ZIZicnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2
NjExRTJCQjQ2OEY3QzcyRkQxRkYyL0RtV2s5ZjAydGIxbzZ6eVNOQWlYakpCNnA1
OC5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L3JlcG9zaXRvcnkvOTgwNjUyRTBCNzdFMTFFN0E5NkEzOTUyMUE0
RjRGQjQvRG1XazlmMDJ0YjFvNnp5U05BaVhqSkI2cDU4LmNlcjBKBgNVHSABAf8E
QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj
Lm5ldC9SUEtJL0NQUy5wZGYwggEoBggrBgEFBQcBCwSCARowggEWMF8GCCsGAQUF
BzAFhlNyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5
MTY0N0Y1L0Q2OTg5NkU2QTBDODExRUVBN0I4RDAyQ0M0RjlBRTAyLzB+BggrBgEF
BQcwCoZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9B
OTE2NDdGNS9ENjk4OTZFNkEwQzgxMUVFQTdCOEQwMkNDNEY5QUUwMi9WNUVZc1Vq
aWZSVnhkUlZvdWdjUDRlWXNmcmsubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3Jy
ZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8EEDAO
MAwEAgABMAYDBALLHNgwDQYJKoZIhvcNAQELBQADggEBAM0LSRtWfBucRUPQWW87
kk5vltHes189VbqevOW/TlyH0Lb/ZrIbpE18wFWQgO7XQq6//hUdYur2gZshdh9q
KslH6du9eL+2XpKX0ZfiLoPEnIMJ3Juvp3d9u84PvB3wt3gw426qnnj+oPJwyshu
GZKt6ZtUzrVpiguiHSfLvQhrRUPRQN4AjiH8n8NjzxfKYrKsIDWRuqxKtnTAVQgi
5zoJoD4fNFBevDq2BANI02naKNgqNTcIGEm8tTOcYHKooO8vS06TiZ3D4xyRKh1f
1e29gEoFNmIfE9lMa2a09TV1bwcOCfrKn3ABdGCmw5vf3IKqMB0Sqeaphojwyp/C
kFI=
-----END CERTIFICATE-----
Generated at Sat Nov 23 05:03:32 2024 by rpki-client on console-fra.rpki-client.org