Certificate

$ rpki-client -vvf rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/VtUkGdVqrN99AFuhXZ3bjxQuOtA.cer
File:                     VtUkGdVqrN99AFuhXZ3bjxQuOtA.cer (raw, json)
Hash identifier:          cllKHGu8IIN3WYoE1Z+PJtl5U4+Y51TSmDJjpmMrMdI=
Subject key identifier:   56:D5:24:19:D5:6A:AC:DF:7D:00:5B:A1:5D:9D:DB:8F:14:2E:3A:D0
Authority key identifier: 0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
Certificate issuer:       /CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Certificate serial:       01CB16
Authority info access:    rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
Manifest:                 rsync://rpki.apnic.net/member_repository/A912F592/FA5912DE4A4511ED953B4186C4F9AE02/VtUkGdVqrN99AFuhXZ3bjxQuOtA.mft
caRepository:             rsync://rpki.apnic.net/member_repository/A912F592/FA5912DE4A4511ED953B4186C4F9AE02/
Notify URL:               https://rrdp.apnic.net/notification.xml
Certificate not before:   Wed 15 Nov 2023 04:26:43 +0000
Certificate not after:    Fri 31 Jan 2025 00:00:00 +0000
Subordinate resources:    IP: 103.11.104.0/23

Validation:               OK
Signature path:           rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 26 Apr 2024 06:50:50 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 117526 (0x1cb16)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
        Validity
            Not Before: Nov 15 04:26:43 2023 GMT
            Not After : Jan 31 00:00:00 2025 GMT
        Subject: CN=A912F592/serialNumber=56D52419D56AACDF7D005BA15D9DDB8F142E3AD0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:47:6b:e2:9d:b3:18:f8:e3:2c:58:ae:98:f1:
                    f8:cb:6b:c1:62:87:0c:82:26:2b:4d:0d:bb:c9:4c:
                    26:33:29:88:2c:37:57:b4:c9:86:bf:0a:19:93:54:
                    2b:b6:2a:05:b9:78:10:6c:6f:f2:4b:ec:7b:78:b5:
                    12:cf:17:d3:05:55:07:1c:12:4c:f1:04:a3:e3:b9:
                    9b:82:97:c7:72:53:84:a5:92:92:67:40:4a:02:cf:
                    50:66:30:94:0f:b1:a7:61:14:ae:48:fe:f7:e0:30:
                    2e:ee:29:f7:0a:0b:4b:77:a4:48:58:45:10:37:b6:
                    07:93:36:27:00:7a:f3:96:e6:e2:bd:79:fc:07:65:
                    0f:1e:9d:bf:b3:83:0c:46:5d:62:94:fa:2e:80:4a:
                    a6:9f:f2:39:df:91:5f:b3:03:22:8c:7e:7e:ee:03:
                    12:55:69:37:87:6d:e9:99:c4:65:04:a9:d8:d3:23:
                    eb:97:a3:6e:ec:dd:92:c9:52:7c:19:c6:b9:14:c8:
                    fa:4b:c7:be:3c:8b:4e:32:7e:9a:b9:b4:1a:48:b0:
                    73:30:06:9f:80:39:d7:59:35:27:c8:40:84:1c:6e:
                    bc:51:3c:d9:65:40:01:87:53:cc:58:23:ab:3d:b0:
                    eb:9a:f2:1e:ce:99:cc:58:79:1c:99:6a:ce:ad:e4:
                    73:05
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                56:D5:24:19:D5:6A:AC:DF:7D:00:5B:A1:5D:9D:DB:8F:14:2E:3A:D0
            X509v3 Authority Key Identifier:
                keyid:0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                CA Repository - URI:rsync://rpki.apnic.net/member_repository/A912F592/FA5912DE4A4511ED953B4186C4F9AE02/
                RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A912F592/FA5912DE4A4511ED953B4186C4F9AE02/VtUkGdVqrN99AFuhXZ3bjxQuOtA.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.11.104.0/23

    Signature Algorithm: sha256WithRSAEncryption
         35:5b:44:51:1a:3e:c6:9f:b6:05:88:f0:26:aa:52:e8:ab:a1:
         09:94:c1:df:fa:7f:db:18:04:12:4c:24:eb:84:ec:2b:a1:c7:
         54:c5:63:8f:bd:7c:dc:8b:fa:a6:d5:0c:b1:45:25:23:b0:d7:
         97:52:57:31:fc:97:b4:99:74:89:95:5e:11:19:79:ac:f9:91:
         fe:7d:f7:55:c9:c3:9e:59:0f:08:3e:49:ff:3d:7d:83:d7:23:
         26:6d:10:63:4f:97:b3:9d:7d:5a:64:9c:a5:6a:79:84:42:b6:
         43:92:7c:05:7b:24:90:0c:6d:b6:24:a6:3a:57:5c:2f:cf:d5:
         af:d3:cc:31:26:4d:fb:f7:96:af:ba:1a:16:b1:a8:da:a4:10:
         3c:64:a8:08:23:93:55:ba:5a:69:be:4b:e4:f1:48:0e:d1:9b:
         54:2b:e6:71:df:db:83:30:67:da:0c:72:37:45:2c:67:84:97:
         aa:af:ad:fc:1e:00:8e:49:87:7d:af:6c:82:a5:18:4b:de:4e:
         2c:8d:bc:13:1f:6f:de:8f:3c:e2:2b:06:25:01:33:d4:82:c2:
         85:d8:d5:5d:ea:8d:1c:a4:db:aa:db:49:6c:ab:64:b5:e5:4c:
         f8:25:af:9c:89:ea:e1:5f:1e:44:67:da:1a:26:ce:d1:ea:93:
         2f:e5:ce:f7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 19 07:41:23 2024 by rpki-client on console-ams.rpki-client.org