Certificate

$ rpki-client -vvf rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/W6jQXcmakxBGLGPF0CafXoheSJ0.cer
File:                     W6jQXcmakxBGLGPF0CafXoheSJ0.cer (raw, json)
Hash identifier:          qVx9z1g8ImfWVELYE8y3efg0ROcLceAQjOPnkA+ezdY=
Subject key identifier:   5B:A8:D0:5D:C9:9A:93:10:46:2C:63:C5:D0:26:9F:5E:88:5E:48:9D
Authority key identifier: 0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
Certificate issuer:       /CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Certificate serial:       01C18E
Authority info access:    rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
Manifest:                 rsync://rpki.apnic.net/member_repository/A91789F9/FD806BA2CC1311EC827A2687C4F9AE02/W6jQXcmakxBGLGPF0CafXoheSJ0.mft
caRepository:             rsync://rpki.apnic.net/member_repository/A91789F9/FD806BA2CC1311EC827A2687C4F9AE02/
Notify URL:               https://rrdp.apnic.net/notification.xml
Certificate not before:   Tue 03 Oct 2023 02:38:53 +0000
Certificate not after:    Sun 01 Dec 2024 00:00:00 +0000
Subordinate resources:    IP: 103.196.68.0/22
                          IP: 2405:7940::/32

Validation:               OK
Signature path:           rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 05 Apr 2024 04:49:26 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 115086 (0x1c18e)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
        Validity
            Not Before: Oct  3 02:38:53 2023 GMT
            Not After : Dec  1 00:00:00 2024 GMT
        Subject: CN=A91789F9/serialNumber=5BA8D05DC99A9310462C63C5D0269F5E885E489D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e0:0a:ed:9d:d0:b8:0b:58:03:19:6e:5d:de:bf:
                    4a:b4:8a:e1:e1:9c:71:dd:a5:a9:05:8e:43:ca:4c:
                    96:fe:51:fc:f4:e4:56:4b:a2:7f:23:33:d7:10:e2:
                    7a:5a:f6:a6:32:43:a1:7a:11:2a:47:7e:ea:3b:70:
                    21:31:a8:3c:e4:bf:8c:0f:db:bb:32:30:55:b7:d8:
                    13:f9:b2:d1:78:5a:34:1b:8a:83:76:38:5f:c5:e0:
                    68:39:12:b5:90:9e:92:40:50:40:ac:dd:72:9b:8e:
                    64:84:3c:79:86:8c:da:c6:96:db:74:a9:c2:67:80:
                    c2:0b:3f:7f:b3:7c:4d:38:26:7e:1b:28:db:8c:cf:
                    aa:0d:04:7f:06:95:1c:9c:8d:3d:56:59:df:11:92:
                    05:d3:d5:a7:24:eb:2f:dd:1a:60:d2:ae:5b:28:ae:
                    ec:bf:95:b8:4f:98:ec:8f:ed:cd:a1:b2:42:eb:44:
                    b6:fa:16:12:bb:a6:85:e8:86:64:0c:4e:b0:3d:e4:
                    46:49:e5:29:45:2b:f2:3b:33:04:e3:d7:8b:d2:75:
                    7b:c8:c9:e8:f1:96:91:e5:f7:f3:57:c3:4d:be:ce:
                    9a:db:b4:0f:60:60:d3:8b:ec:c1:d7:2e:2a:80:a5:
                    b4:79:6a:84:b6:e4:ea:52:4f:71:37:46:2d:ac:a3:
                    ad:71
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5B:A8:D0:5D:C9:9A:93:10:46:2C:63:C5:D0:26:9F:5E:88:5E:48:9D
            X509v3 Authority Key Identifier:
                keyid:0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                CA Repository - URI:rsync://rpki.apnic.net/member_repository/A91789F9/FD806BA2CC1311EC827A2687C4F9AE02/
                RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A91789F9/FD806BA2CC1311EC827A2687C4F9AE02/W6jQXcmakxBGLGPF0CafXoheSJ0.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.196.68.0/22
                IPv6:
                  2405:7940::/32

    Signature Algorithm: sha256WithRSAEncryption
         82:1f:27:7e:99:32:86:b9:ec:bf:11:1b:b9:e8:5e:0a:84:16:
         35:4b:7f:d9:27:44:73:3b:eb:de:ac:34:fb:5f:2e:a8:e8:e3:
         cc:ab:cb:7c:96:2a:19:ab:98:58:27:8c:03:1c:d1:8d:32:c7:
         dc:6b:ba:6a:ed:53:05:11:d2:ee:51:d9:01:69:f8:b5:e1:0c:
         9c:40:e1:fe:da:8c:66:89:20:c3:d5:de:00:05:85:a4:48:2b:
         49:e1:91:6d:5a:ef:7d:83:e9:f5:b1:6f:99:78:a0:af:d5:5b:
         0a:a4:64:c8:3b:64:4a:c8:e5:a8:92:b1:ea:4f:4e:ab:f9:1b:
         df:b0:23:79:01:ca:be:96:3a:2a:0d:65:b3:b9:7b:3e:6f:eb:
         e2:7f:88:cd:d8:f3:04:22:f2:43:26:b7:be:eb:d2:fc:9c:b7:
         1b:b3:da:e5:49:9f:9a:6a:89:de:8d:ed:be:c7:27:82:f0:58:
         1a:22:cd:0c:15:fc:83:b4:4d:6d:33:d9:ed:1d:fe:29:35:e6:
         e6:7c:d1:1b:80:ca:d9:51:e2:33:66:da:e3:98:a0:10:36:19:
         8e:3b:96:f6:e0:6d:6a:47:28:20:73:1d:f5:7f:dd:f9:6b:8b:
         fe:35:0b:df:56:40:bc:45:50:90:f4:d5:dc:7a:1d:63:a6:da:
         14:eb:b8:1d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 29 06:02:23 2024 by rpki-client on console-fra.rpki-client.org