Certificate

$ rpki-client -vvf rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XUKGguien-2WK-nEQys0xF4uCck.cer
File:                     XUKGguien-2WK-nEQys0xF4uCck.cer (raw, json)
Hash identifier:          58QZvmi9bEy3Pm6Ve20/X0d4/+dIgprinevg81r3I2M=
Subject key identifier:   5D:42:86:82:E8:9E:9F:ED:96:2B:E9:C4:43:2B:34:C4:5E:2E:09:C9
Authority key identifier: 0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
Certificate issuer:       /CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Certificate serial:       01B573
Authority info access:    rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
Manifest:                 rsync://rpki.apnic.net/member_repository/A913F6DE/87AAE74A1B3A11EAB4CDC659C4F9AE02/XUKGguien-2WK-nEQys0xF4uCck.mft
caRepository:             rsync://rpki.apnic.net/member_repository/A913F6DE/87AAE74A1B3A11EAB4CDC659C4F9AE02/
Notify URL:               https://rrdp.apnic.net/notification.xml
Certificate not before:   Mon 07 Aug 2023 14:14:48 +0000
Certificate not after:    Mon 30 Sep 2024 00:00:00 +0000
Subordinate resources:    AS: 131464
                          IP: 103.69.148.0/22
                          IP: 180.149.232.0/22
                          IP: 2405:f280::/32

Validation:               OK
Signature path:           rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 27 Apr 2024 02:50:25 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 111987 (0x1b573)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
        Validity
            Not Before: Aug  7 14:14:48 2023 GMT
            Not After : Sep 30 00:00:00 2024 GMT
        Subject: CN=A913F6DE/serialNumber=5D428682E89E9FED962BE9C4432B34C45E2E09C9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d3:77:92:93:b0:dd:21:90:40:8a:1c:3b:80:12:
                    02:2e:9b:c9:2e:37:ac:11:93:f3:54:05:2a:81:a8:
                    26:b1:a0:c2:64:b8:f2:15:55:5e:f8:51:36:23:0f:
                    6b:ca:1b:49:c2:49:43:30:9a:31:c0:6b:c9:3f:53:
                    0a:0e:2e:cb:63:39:71:f4:2b:36:8b:4c:82:af:08:
                    48:06:da:57:0f:da:75:a1:af:a9:71:6e:5f:22:37:
                    6b:4b:17:b7:b6:97:0d:1c:34:70:7b:60:ed:13:ff:
                    f5:8e:4f:63:6b:c7:fd:cd:21:a2:87:32:a0:c3:5f:
                    cf:96:97:9f:bb:f9:3e:06:2a:8d:58:0b:1b:d8:0f:
                    c3:b4:0d:6b:1c:d4:55:b8:a1:87:a3:f3:1a:50:19:
                    08:62:22:14:72:11:4e:05:f7:9e:93:37:b3:6b:96:
                    83:84:9a:12:a6:36:19:e4:23:8f:df:23:53:ff:54:
                    49:b4:c3:bc:96:07:37:18:90:07:f8:d7:a6:bb:ce:
                    72:3d:21:b7:35:c4:e3:99:1e:fe:61:10:81:90:5a:
                    3c:3c:50:1d:64:b8:60:9d:80:0a:2a:95:2c:2e:16:
                    d7:5a:1f:c1:a6:e8:cd:d8:50:59:76:78:b8:83:8d:
                    2a:63:df:19:42:6e:48:70:0e:6e:12:88:14:4d:c0:
                    8a:cb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5D:42:86:82:E8:9E:9F:ED:96:2B:E9:C4:43:2B:34:C4:5E:2E:09:C9
            X509v3 Authority Key Identifier:
                keyid:0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                CA Repository - URI:rsync://rpki.apnic.net/member_repository/A913F6DE/87AAE74A1B3A11EAB4CDC659C4F9AE02/
                RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A913F6DE/87AAE74A1B3A11EAB4CDC659C4F9AE02/XUKGguien-2WK-nEQys0xF4uCck.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  131464

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.69.148.0/22
                  180.149.232.0/22
                IPv6:
                  2405:f280::/32

    Signature Algorithm: sha256WithRSAEncryption
         48:b6:25:35:d6:c8:9a:22:c0:3c:df:78:3a:c2:89:f1:2e:c9:
         40:21:2e:e7:7d:97:a1:67:98:31:9c:ac:76:9d:81:e8:30:a3:
         ca:d7:9b:f5:c0:a3:de:36:81:b9:88:c2:d9:f0:e2:46:5b:7d:
         45:95:9d:e0:7b:54:c5:d0:52:05:83:ed:ef:14:02:5d:43:36:
         1e:79:d7:a2:78:26:8f:1f:b1:c4:e3:96:c6:b9:05:b8:39:de:
         96:a8:62:63:8c:24:c3:ad:4b:9c:30:80:6c:3f:cb:35:4e:16:
         af:0f:75:eb:47:79:63:c2:60:d4:5a:08:bf:66:ed:fc:74:ba:
         15:54:ef:df:80:39:d7:17:1d:37:01:7c:83:a9:75:63:3a:14:
         50:33:0c:98:03:75:17:b9:ba:4b:9d:aa:b5:97:e7:8f:ad:1e:
         77:17:5f:e0:2e:8a:ba:da:7c:3e:3f:cf:3b:3b:51:35:4c:31:
         c1:d8:92:e7:76:33:26:26:50:54:39:ea:e4:f4:f1:d8:4b:7f:
         54:26:cf:d3:2f:7b:73:8a:2a:b7:36:bf:d9:12:df:a4:1c:8b:
         26:df:b6:ad:44:7c:47:f2:62:07:a7:cf:23:d5:80:3d:4a:b1:
         11:57:e3:36:61:2a:a3:0a:f3:f2:6b:b9:e2:e4:ef:c5:ca:ac:
         12:04:b3:4b
-----BEGIN CERTIFICATE-----
MIIGLzCCBRegAwIBAgIDAbVzMA0GCSqGSIb3DQEBCwUAMEYxETAPBgNVBAMTCEE5
MERDNUJFMTEwLwYDVQQFEygwRTY1QTRGNUZEMzZCNUJENjhFQjNDOTIzNDA4OTc4
QzkwN0FBNzlGMB4XDTIzMDgwNzE0MTQ0OFoXDTI0MDkzMDAwMDAwMFowRjERMA8G
A1UEAxMIQTkxM0Y2REUxMTAvBgNVBAUTKDVENDI4NjgyRTg5RTlGRUQ5NjJCRTlD
NDQzMkIzNEM0NUUyRTA5QzkwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB
AQDTd5KTsN0hkECKHDuAEgIum8kuN6wRk/NUBSqBqCaxoMJkuPIVVV74UTYjD2vK
G0nCSUMwmjHAa8k/UwoOLstjOXH0KzaLTIKvCEgG2lcP2nWhr6lxbl8iN2tLF7e2
lw0cNHB7YO0T//WOT2Nrx/3NIaKHMqDDX8+Wl5+7+T4GKo1YCxvYD8O0DWsc1FW4
oYej8xpQGQhiIhRyEU4F956TN7NrloOEmhKmNhnkI4/fI1P/VEm0w7yWBzcYkAf4
16a7znI9Ibc1xOOZHv5hEIGQWjw8UB1kuGCdgAoqlSwuFtdaH8Gm6M3YUFl2eLiD
jSpj3xlCbkhwDm4SiBRNwIrLAgMBAAGjggMkMIIDIDAdBgNVHQ4EFgQUXUKGguie
n+2WK+nEQys0xF4uCckwHwYDVR0jBBgwFoAUDmWk9f02tb1o6zySNAiXjJB6p58w
DgYDVR0PAQH/BAQDAgEGMA8GA1UdEwEB/wQFMAMBAf8wcwYDVR0fBGwwajBooGag
ZIZicnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2
NjExRTJCQjQ2OEY3QzcyRkQxRkYyL0RtV2s5ZjAydGIxbzZ6eVNOQWlYakpCNnA1
OC5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L3JlcG9zaXRvcnkvOTgwNjUyRTBCNzdFMTFFN0E5NkEzOTUyMUE0
RjRGQjQvRG1XazlmMDJ0YjFvNnp5U05BaVhqSkI2cDU4LmNlcjBKBgNVHSABAf8E
QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj
Lm5ldC9SUEtJL0NQUy5wZGYwggEoBggrBgEFBQcBCwSCARowggEWMF8GCCsGAQUF
BzAFhlNyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5
MTNGNkRFLzg3QUFFNzRBMUIzQTExRUFCNENEQzY1OUM0RjlBRTAyLzB+BggrBgEF
BQcwCoZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9B
OTEzRjZERS84N0FBRTc0QTFCM0ExMUVBQjRDREM2NTlDNEY5QUUwMi9YVUtHZ3Vp
ZW4tMldLLW5FUXlzMHhGNHVDY2subWZ0MDMGCCsGAQUFBzANhidodHRwczovL3Jy
ZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwGgYIKwYBBQUHAQgBAf8ECzAJ
oAcwBQIDAgGIMDQGCCsGAQUFBwEHAQH/BCUwIzASBAIAATAMAwQCZ0WUAwQCtJXo
MA0EAgACMAcDBQAkBfKAMA0GCSqGSIb3DQEBCwUAA4IBAQBItiU11siaIsA833g6
wonxLslAIS7nfZehZ5gxnKx2nYHoMKPK15v1wKPeNoG5iMLZ8OJGW31FlZ3ge1TF
0FIFg+3vFAJdQzYeedeieCaPH7HE45bGuQW4Od6WqGJjjCTDrUucMIBsP8s1Thav
D3XrR3ljwmDUWgi/Zu38dLoVVO/fgDnXFx03AXyDqXVjOhRQMwyYA3UXubpLnaq1
l+ePrR53F1/gLoq62nw+P887O1E1TDHB2JLndjMmJlBUOerk9PHYS39UJs/TL3tz
iiq3Nr/ZEt+kHIsm37atRHxH8mIHp88j1YA9SrERV+M2YSqjCvPya7ni5O/FyqwS
BLNL
-----END CERTIFICATE-----
Generated at Sat Apr 20 05:37:06 2024 by rpki-client on console-ams.rpki-client.org