Certificate

$ rpki-client -vvf rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Vpmm9S-QBXOCzelvdlJvf8oBk6M.cer
File:                     Vpmm9S-QBXOCzelvdlJvf8oBk6M.cer (raw, json)
Hash identifier:          PCGxEiRx4SBFDQ3hejQDOVc6GvJrwFc/86k50VOXbxk=
Subject key identifier:   56:99:A6:F5:2F:90:05:73:82:CD:E9:6F:76:52:6F:7F:CA:01:93:A3
Authority key identifier: 0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
Certificate issuer:       /CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Certificate serial:       01BD96
Authority info access:    rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
Manifest:                 rsync://rpki.apnic.net/member_repository/A91776E4/47428870E9F011ECA8358A84C4F9AE02/Vpmm9S-QBXOCzelvdlJvf8oBk6M.mft
caRepository:             rsync://rpki.apnic.net/member_repository/A91776E4/47428870E9F011ECA8358A84C4F9AE02/
Notify URL:               https://rrdp.apnic.net/notification.xml
Certificate not before:   Thu 14 Sep 2023 15:56:36 +0000
Certificate not after:    Sun 01 Dec 2024 00:00:00 +0000
Subordinate resources:    AS: 132721
                          AS: 136544
                          IP: 45.125.216.0/22
                          IP: 103.93.46.0/24
                          IP: 103.98.112.0/24
                          IP: 103.98.114.0/23
                          IP: 103.194.104.0/22
                          IP: 2401:2640::/32

Validation:               OK
Signature path:           rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 05 Apr 2024 04:49:26 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 114070 (0x1bd96)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
        Validity
            Not Before: Sep 14 15:56:36 2023 GMT
            Not After : Dec  1 00:00:00 2024 GMT
        Subject: CN=A91776E4/serialNumber=5699A6F52F90057382CDE96F76526F7FCA0193A3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:cf:02:6e:40:9a:e4:ef:64:f8:f8:93:c4:57:
                    02:0c:1c:42:cc:59:3b:b6:c2:eb:03:5c:45:e1:1a:
                    ce:a1:48:8e:97:87:01:03:89:b7:91:d5:72:4a:c0:
                    3e:7a:57:64:5b:dd:d2:18:86:2f:b9:1f:29:b4:3d:
                    d3:f6:bc:01:f5:65:f5:ab:15:44:1e:30:fa:20:ff:
                    9d:b7:3f:6a:5c:2c:00:89:43:d2:e1:e5:e3:11:f2:
                    52:80:56:1c:c5:22:f3:55:61:97:55:38:99:89:95:
                    70:55:28:80:6d:96:f6:15:a1:39:7c:60:e7:cb:f1:
                    66:e7:54:d1:ac:bf:55:e6:63:94:38:9e:f6:16:4f:
                    2e:a1:f4:40:bf:61:d6:d9:3e:c9:a4:05:14:92:c9:
                    d7:49:c3:f2:b9:24:83:8f:94:e8:6a:5f:41:e9:8c:
                    9d:05:51:9f:93:3e:6c:3c:c0:65:dc:86:19:d4:b2:
                    c0:c2:09:e0:c3:9a:a3:d8:53:14:4b:16:3e:0f:44:
                    65:6f:02:36:7d:4a:2a:48:83:a6:66:18:4f:b5:f5:
                    3e:2e:eb:ce:3f:69:9a:ed:84:c7:43:46:f4:ef:9d:
                    8e:ce:cc:c1:a6:d7:99:e6:ba:5b:e0:44:82:bd:ef:
                    45:c4:e0:35:73:da:22:5b:42:23:86:02:4b:f3:b8:
                    71:cd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                56:99:A6:F5:2F:90:05:73:82:CD:E9:6F:76:52:6F:7F:CA:01:93:A3
            X509v3 Authority Key Identifier:
                keyid:0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                CA Repository - URI:rsync://rpki.apnic.net/member_repository/A91776E4/47428870E9F011ECA8358A84C4F9AE02/
                RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A91776E4/47428870E9F011ECA8358A84C4F9AE02/Vpmm9S-QBXOCzelvdlJvf8oBk6M.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  132721
                  136544

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.125.216.0/22
                  103.93.46.0/24
                  103.98.112.0/24
                  103.98.114.0/23
                  103.194.104.0/22
                IPv6:
                  2401:2640::/32

    Signature Algorithm: sha256WithRSAEncryption
         9b:6c:52:07:33:ad:84:fc:8e:d8:8d:67:96:0a:3a:d7:9e:34:
         5d:d6:c4:01:9c:01:c5:51:c5:a2:f0:f7:ae:10:40:78:02:f6:
         af:fd:92:ed:dc:57:94:b4:fb:4c:6f:20:81:66:5a:96:b4:76:
         60:73:b8:37:d3:b5:58:56:70:72:9c:56:3c:16:ca:b8:b6:9e:
         7b:d7:10:a7:02:3b:22:eb:0a:8f:0d:08:43:4e:be:11:e2:43:
         21:d8:13:aa:41:d0:b7:e6:9c:f5:e9:46:ba:dc:6e:ea:cc:7c:
         a0:1b:9c:48:7e:7b:13:72:24:6d:16:ca:07:de:2f:6b:05:60:
         79:11:47:1f:34:a6:46:97:4a:5f:cf:e7:cb:16:4d:32:29:dc:
         d7:00:ce:55:0d:93:1e:63:42:cc:8c:05:85:e6:09:e4:d9:7a:
         20:66:3d:74:d8:94:5d:ff:d1:68:3f:45:e5:5f:18:59:b5:24:
         91:83:36:6a:9d:58:b3:25:e9:3d:7d:0e:e0:53:a5:35:20:63:
         b1:5c:23:94:c3:5d:90:e4:41:00:7e:37:b0:fb:d8:6b:9a:a4:
         1a:45:b3:69:11:a3:3a:b4:7f:c2:3d:7f:a0:65:35:d3:b0:c9:
         21:04:fb:2a:fc:30:d4:64:89:ec:f3:3d:9d:90:4d:5f:4e:5d:
         ad:f8:97:9a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 29 06:02:22 2024 by rpki-client on console-fra.rpki-client.org