Certificate

$ rpki-client -vvf rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Wnw4Syls_H8kJg8FEI1n1gxurc4.cer
File:                     Wnw4Syls_H8kJg8FEI1n1gxurc4.cer (raw, json)
Hash identifier:          ZBEc3h6JpYnUieuEHaSoc9mS8s/delSBlOLcrnVmn+A=
Subject key identifier:   5A:7C:38:4B:29:6C:FC:7F:24:26:0F:05:10:8D:67:D6:0C:6E:AD:CE
Authority key identifier: 0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
Certificate issuer:       /CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Certificate serial:       01D0D2
Authority info access:    rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
Manifest:                 rsync://rpki.apnic.net/member_repository/A917E42D/66315CC0963311EEA3AAC418C4F9AE02/Wnw4Syls_H8kJg8FEI1n1gxurc4.mft
caRepository:             rsync://rpki.apnic.net/member_repository/A917E42D/66315CC0963311EEA3AAC418C4F9AE02/
Notify URL:               https://rrdp.apnic.net/notification.xml
Certificate not before:   Sat 09 Dec 2023 01:36:46 +0000
Certificate not after:    Mon 30 Dec 2024 00:00:00 +0000
Subordinate resources:    AS: 23929
                          AS: 38080
                          AS: 38715
                          AS: 45846
                          IP: 121.50.48.0/21
                          IP: 203.173.80.0/21
                          IP: 2400:ac00::/32

Validation:               OK
Signature path:           rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 09 May 2024 00:15:27 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 118994 (0x1d0d2)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
        Validity
            Not Before: Dec  9 01:36:46 2023 GMT
            Not After : Dec 30 00:00:00 2024 GMT
        Subject: CN=A917E42D/serialNumber=5A7C384B296CFC7F24260F05108D67D60C6EADCE
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:c4:83:f8:8e:5c:4c:71:2e:23:50:81:cc:46:
                    61:07:5b:27:83:0a:1a:52:95:2e:10:27:48:14:ec:
                    7a:be:86:c1:4f:da:7b:f6:e5:78:ac:6f:e7:90:96:
                    34:34:3c:1c:36:2f:ee:c3:63:6f:d4:f5:3a:d9:dd:
                    67:f1:70:04:66:dc:22:c7:3d:ce:1a:5b:43:58:cc:
                    94:73:01:b6:48:11:a5:04:7f:e4:aa:db:d2:5a:d4:
                    26:db:53:ff:6a:ce:34:f8:04:cf:83:e6:31:76:e4:
                    1b:d7:23:09:17:fe:56:77:a3:f5:e2:3c:db:9a:a3:
                    7d:e9:d1:6c:ab:14:02:e9:5f:12:65:cc:39:15:f2:
                    c1:1e:26:e0:4d:7a:f3:8b:61:2c:65:79:f6:59:cd:
                    44:55:58:11:6d:48:27:3f:95:72:62:64:6c:d8:06:
                    2a:70:4b:60:1f:73:11:33:c0:bc:98:9b:d0:7f:f9:
                    08:3b:fb:eb:5e:45:ed:68:e4:e4:bc:a1:79:1e:bc:
                    27:a2:8d:3c:fd:81:ce:bb:f1:33:cd:db:89:12:23:
                    38:65:45:a4:97:0a:8d:cb:75:ed:ce:93:0f:51:c8:
                    ed:63:cc:81:a0:03:35:d5:3c:62:40:6c:84:50:47:
                    7f:84:33:0d:6d:b3:74:dd:5e:0c:61:c0:70:39:6f:
                    b7:df
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5A:7C:38:4B:29:6C:FC:7F:24:26:0F:05:10:8D:67:D6:0C:6E:AD:CE
            X509v3 Authority Key Identifier:
                keyid:0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                CA Repository - URI:rsync://rpki.apnic.net/member_repository/A917E42D/66315CC0963311EEA3AAC418C4F9AE02/
                RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A917E42D/66315CC0963311EEA3AAC418C4F9AE02/Wnw4Syls_H8kJg8FEI1n1gxurc4.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  23929
                  38080
                  38715
                  45846

            sbgp-ipAddrBlock: critical
                IPv4:
                  121.50.48.0/21
                  203.173.80.0/21
                IPv6:
                  2400:ac00::/32

    Signature Algorithm: sha256WithRSAEncryption
         4c:48:27:41:68:7f:e6:52:3f:d1:42:ab:16:68:a0:7f:0b:82:
         87:1f:4c:e8:a8:4d:4c:e3:ab:25:7a:3c:1b:01:50:92:3d:ae:
         af:70:49:72:c5:1f:39:26:a7:20:ee:56:e5:64:8a:c6:c8:f8:
         a2:15:01:67:8a:ea:0a:a4:37:d0:a0:97:15:ef:e0:90:c7:ff:
         77:82:cd:07:ad:f6:7d:2c:c8:8f:92:46:41:02:08:2a:60:fe:
         96:4a:54:3c:b8:9a:39:c8:c8:4e:c4:72:88:c3:a7:77:e2:75:
         80:1c:30:58:b0:54:1b:a4:99:4c:ec:c0:8b:90:48:1a:2d:04:
         83:3f:62:46:24:28:5b:01:0a:a3:35:17:66:90:c3:08:01:ae:
         9e:a5:dd:76:80:73:21:7b:3e:f0:51:51:52:b5:df:96:39:8d:
         92:fd:d1:53:ff:96:2d:ac:85:be:0e:a1:78:6d:b9:a3:46:82:
         0d:80:f5:4b:14:c9:1f:b2:b1:22:8b:ed:20:f2:03:28:51:f4:
         ff:3b:92:f2:94:ea:b1:36:e3:8d:20:a8:57:87:bd:2b:5e:64:
         31:7b:dd:95:5a:62:8b:e2:a9:d6:19:50:fd:2d:a8:92:11:da:
         77:56:7f:b6:01:39:fc:c6:73:41:2d:60:0d:de:bb:ee:bf:05:
         af:4a:48:63
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 2 01:07:10 2024 by rpki-client on console-fra.rpki-client.org