Certificate

$ rpki-client -vvf rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XbV-04YDnqZk0e_3Vwc21vnwTEQ.cer
File:                     XbV-04YDnqZk0e_3Vwc21vnwTEQ.cer (raw, json)
Hash identifier:          YTKk9bTzbIxPPc+8Kyus3JygAF9Ibu4h5qpxEC5tFuA=
Subject key identifier:   5D:B5:7E:D3:86:03:9E:A6:64:D1:EF:F7:57:07:36:D6:F9:F0:4C:44
Authority key identifier: 0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
Certificate issuer:       /CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Certificate serial:       021C94
Authority info access:    rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
Manifest:                 rsync://rpki.apnic.net/member_repository/A9175F54/51B6ECE49F2811EEA995D328C4F9AE02/XbV-04YDnqZk0e_3Vwc21vnwTEQ.mft
caRepository:             rsync://rpki.apnic.net/member_repository/A9175F54/51B6ECE49F2811EEA995D328C4F9AE02/
Notify URL:               https://rrdp.apnic.net/notification.xml
Certificate not before:   Wed 20 Nov 2024 15:11:18 +0000
Certificate not after:    Sat 31 Jan 2026 00:00:00 +0000
Subordinate resources:    AS: 139672
                          IP: 36.50.8.0/23
                          IP: 2401:52a0::/32

Validation:               OK
Signature path:           rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 04 Dec 2024 01:13:26 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 138388 (0x21c94)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
        Validity
            Not Before: Nov 20 15:11:18 2024 GMT
            Not After : Jan 31 00:00:00 2026 GMT
        Subject: CN=A9175F54/serialNumber=5DB57ED386039EA664D1EFF7570736D6F9F04C44
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d2:33:35:47:7e:cf:18:12:a3:cf:de:26:90:60:
                    69:e8:5f:63:c1:c1:11:41:22:80:ab:6c:d6:57:2f:
                    1e:6a:6c:3c:86:ba:e7:81:41:28:a1:11:9e:82:79:
                    9c:38:4b:01:11:87:2c:60:3b:a9:43:f1:14:a6:ca:
                    1b:cb:5e:40:07:ac:8c:4b:1b:71:12:be:6e:52:b8:
                    6f:8e:0e:a4:9b:b2:bb:7a:93:23:de:d1:31:19:69:
                    bc:b3:12:e9:65:a2:b2:87:b4:85:b9:b6:ff:40:df:
                    a6:29:ab:5f:c1:e1:1d:3b:95:b8:3a:59:d5:6a:6f:
                    7b:8a:c0:0d:65:d6:d1:7b:cd:80:cf:79:44:cb:15:
                    0d:7d:da:11:58:0e:38:be:7c:1d:31:89:4b:ef:9f:
                    18:12:69:48:59:3f:4c:b6:be:76:46:30:99:ca:09:
                    3b:21:55:8a:da:5c:4e:cd:f1:d3:fe:b8:34:2a:d1:
                    e9:1b:d1:64:60:82:02:24:8c:9c:a5:97:f9:50:f1:
                    9b:78:e5:d4:2c:64:a4:0d:f0:f2:df:10:fc:6b:16:
                    23:a7:85:30:9b:72:30:fa:9f:e6:7e:19:c4:1e:32:
                    df:b6:cf:ba:ce:31:ae:da:08:33:7d:bf:4d:54:bf:
                    e3:43:c7:fd:78:71:b3:4b:b7:30:b7:9b:95:c2:ad:
                    9f:a9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5D:B5:7E:D3:86:03:9E:A6:64:D1:EF:F7:57:07:36:D6:F9:F0:4C:44
            X509v3 Authority Key Identifier:
                keyid:0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                CA Repository - URI:rsync://rpki.apnic.net/member_repository/A9175F54/51B6ECE49F2811EEA995D328C4F9AE02/
                RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A9175F54/51B6ECE49F2811EEA995D328C4F9AE02/XbV-04YDnqZk0e_3Vwc21vnwTEQ.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  139672

            sbgp-ipAddrBlock: critical
                IPv4:
                  36.50.8.0/23
                IPv6:
                  2401:52a0::/32

    Signature Algorithm: sha256WithRSAEncryption
         af:ee:38:1e:da:8b:73:05:da:30:8f:79:b1:6b:28:e0:69:1c:
         87:de:f5:cf:f1:34:53:ed:00:53:b9:00:7a:95:40:86:52:34:
         45:de:62:5a:d4:58:1e:3e:df:16:3d:6b:1a:aa:76:ba:e3:3b:
         0f:64:8a:3a:96:e9:64:6a:f4:e1:d9:02:a8:77:5c:0b:a7:c9:
         67:d5:7f:43:3e:f9:52:9d:0b:2e:dc:57:7e:86:ed:f3:9d:22:
         4c:a1:d5:9d:35:44:06:fd:77:11:ab:9f:44:07:7a:a1:01:dd:
         26:0e:8f:b9:56:06:14:7f:b6:3c:d3:16:56:26:0d:d7:a4:1d:
         70:0b:3d:7e:6a:b0:07:dd:ed:15:62:b4:b8:34:b4:38:57:3a:
         a7:4c:42:91:19:60:5b:c1:f5:ca:b6:09:28:ba:d6:12:c5:08:
         a5:f7:ea:90:83:66:c7:7b:6a:79:3d:bd:a6:41:3d:e9:3b:57:
         b8:75:ab:7a:02:ba:de:a6:f3:cb:a1:1a:b5:a5:56:99:67:6a:
         05:bf:66:89:8a:f6:5d:d8:f6:b0:10:bb:e5:34:25:5c:b1:fa:
         fc:af:c6:38:9f:8a:72:32:47:2b:41:03:07:8d:07:0d:a1:13:
         bf:b2:b6:2e:cb:a1:0c:53:b3:d2:89:d8:e9:03:05:7f:39:f3:
         5a:c4:69:87
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----