Certificate

$ rpki-client -vvf rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Wu0FpkJ2QQga_OhPaXJeyFagpOs.cer
File:                     Wu0FpkJ2QQga_OhPaXJeyFagpOs.cer (raw, json)
Hash identifier:          Boop8icmDu0y8V4gVdlwLpIoC3YxB4qYmFT9s87tmBs=
Subject key identifier:   5A:ED:05:A6:42:76:41:08:1A:FC:E8:4F:69:72:5E:C8:56:A0:A4:EB
Authority key identifier: 0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
Certificate issuer:       /CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Certificate serial:       021D8D
Authority info access:    rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
Manifest:                 rsync://rpki.apnic.net/member_repository/A918DAC5/CB9AD5F6ABDA11EFA1C14E76C4F9AE02/Wu0FpkJ2QQga_OhPaXJeyFagpOs.mft
caRepository:             rsync://rpki.apnic.net/member_repository/A918DAC5/CB9AD5F6ABDA11EFA1C14E76C4F9AE02/
Notify URL:               https://rrdp.apnic.net/notification.xml
Certificate not before:   Tue 26 Nov 2024 09:42:52 +0000
Certificate not after:    Sat 31 Jan 2026 00:00:00 +0000
Subordinate resources:    AS: 153384

Validation:               OK
Signature path:           rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 02 Jan 2025 09:29:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 138637 (0x21d8d)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
        Validity
            Not Before: Nov 26 09:42:52 2024 GMT
            Not After : Jan 31 00:00:00 2026 GMT
        Subject: CN=A918DAC5/serialNumber=5AED05A6427641081AFCE84F69725EC856A0A4EB
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:52:f4:48:c0:10:00:e1:ec:26:1a:fb:93:1c:
                    22:68:25:a8:03:c4:b4:68:f0:45:c7:e5:58:75:aa:
                    17:59:d5:e9:0e:19:d9:ae:83:a3:3a:4b:83:52:aa:
                    0e:48:b0:28:d0:51:ca:86:88:9f:8f:0a:7d:5c:fb:
                    19:25:e6:85:42:ea:b4:62:45:32:b9:b0:d2:55:e8:
                    46:33:7f:69:9e:b4:72:c9:19:8b:3a:f3:47:45:c0:
                    21:53:38:e8:bb:09:57:2d:2f:54:6e:67:98:af:77:
                    6f:31:a7:6f:37:79:04:36:88:87:61:e9:37:98:7a:
                    fd:60:f5:99:ff:e3:d2:51:d2:e3:5f:cf:e3:40:5f:
                    47:c3:a4:80:7a:a0:5c:8f:08:11:95:e7:36:96:75:
                    c6:42:3c:65:eb:dd:7c:49:d8:2e:ef:f1:32:53:e0:
                    85:30:97:44:cf:58:26:65:bf:e7:79:91:fa:14:f7:
                    54:ca:5e:7e:a2:9c:7b:5e:00:4f:16:ea:ba:0b:df:
                    05:82:b7:da:8a:70:77:87:c8:38:02:bb:d6:e4:b8:
                    69:42:5b:b8:42:77:d2:3b:4d:8a:ba:ac:c7:42:d4:
                    da:78:db:e1:23:16:74:cd:1e:b3:c7:f6:f4:92:63:
                    d3:3e:2f:f7:9c:14:ee:32:7c:b3:41:68:8c:10:52:
                    73:05
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5A:ED:05:A6:42:76:41:08:1A:FC:E8:4F:69:72:5E:C8:56:A0:A4:EB
            X509v3 Authority Key Identifier:
                keyid:0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                CA Repository - URI:rsync://rpki.apnic.net/member_repository/A918DAC5/CB9AD5F6ABDA11EFA1C14E76C4F9AE02/
                RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A918DAC5/CB9AD5F6ABDA11EFA1C14E76C4F9AE02/Wu0FpkJ2QQga_OhPaXJeyFagpOs.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  153384

    Signature Algorithm: sha256WithRSAEncryption
         76:0e:80:f3:2d:03:7f:44:6c:e9:20:c8:53:87:4b:86:a2:86:
         61:32:15:09:c7:cd:fa:8f:03:ae:84:cb:f3:a8:a6:85:dc:00:
         7c:05:8a:f9:0f:71:2b:bb:42:a8:9c:1d:8c:10:d6:e7:f5:ac:
         72:d1:d5:e0:ac:22:26:6f:fa:9f:29:60:13:2e:0e:57:4d:0f:
         f1:20:07:69:6b:87:3d:95:45:cb:26:02:bc:47:5e:b4:7f:18:
         6b:05:f9:6b:f5:4a:eb:43:91:c7:01:f4:9f:80:60:52:38:b0:
         08:39:2a:40:60:f7:c4:aa:a2:10:e7:10:46:f2:5a:af:c4:0b:
         65:9a:be:f5:6a:c5:77:f1:cc:45:9b:f0:47:1c:67:8a:1a:ac:
         88:31:d9:45:a2:8c:28:7b:57:51:f3:f5:7d:37:95:08:e6:cf:
         89:c1:0f:30:9e:cc:b3:1f:d1:e9:50:96:b5:de:ed:f4:c6:c2:
         f3:b6:e6:67:09:34:d7:6f:1a:07:3a:7f:33:c7:8c:99:25:d1:
         37:e4:9c:cf:58:b6:3c:05:12:47:fe:1a:38:cb:66:cb:02:70:
         af:45:39:8e:ce:f7:a3:6a:18:0a:d3:58:c9:db:57:c4:55:ca:
         60:b4:21:83:ef:b6:21:c4:c5:c1:08:b6:30:61:36:92:08:d6:
         c0:18:f7:3c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Dec 26 10:23:04 2024 by rpki-client on console-fra.rpki-client.org