Certificate

$ rpki-client -vvf rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XgV0RsSWHk0mw3_-qKw_eq3YOzI.cer
File:                     XgV0RsSWHk0mw3_-qKw_eq3YOzI.cer (download)
Hash identifier:          rtTpDwakK5L5s8ghKMQZyV4Pyioxa/LPrnd4TN4BJ0U=
Subject key identifier:   5E:05:74:46:C4:96:1E:4D:26:C3:7F:FE:A8:AC:3F:7A:AD:D8:3B:32
Authority key identifier: 0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
Certificate issuer:       /CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Certificate serial:       0178C5
Authority info access:    rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
Manifest:                 rsync://rpki.apnic.net/member_repository/A91D83B3/A3D3D8228A0D11EAA5059714C4F9AE02/XgV0RsSWHk0mw3_-qKw_eq3YOzI.mft
caRepository:             rsync://rpki.apnic.net/member_repository/A91D83B3/A3D3D8228A0D11EAA5059714C4F9AE02/
Notify URL:               https://rrdp.apnic.net/notification.xml
Certificate valid until:  Sat 30 Dec 2023 00:00:00 +0000
Subordinate resources:
    1: IP: 103.129.140.0/22
    2: IP: 2403:7ec0::/32

Validation: OK

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 96453 (0x178c5)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
        Validity
            Not Before: Nov  8 20:46:52 2022 GMT
            Not After : Dec 30 00:00:00 2023 GMT
        Subject: CN=A91D83B3/serialNumber=5E057446C4961E4D26C37FFEA8AC3F7AADD83B32
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e9:83:fb:2c:95:cf:ae:2e:d7:ca:dd:bc:d9:58:
                    eb:7c:e9:70:0f:2b:c0:b0:10:24:25:5d:12:ca:31:
                    31:0b:90:ed:c3:ee:7c:73:6a:cf:17:93:92:0a:c2:
                    64:63:f3:c9:b5:1c:19:24:82:14:46:1c:26:54:5c:
                    68:38:5e:9e:da:7b:6d:10:9b:b9:e1:46:e0:8e:cb:
                    75:38:df:6a:92:37:68:2a:32:9b:61:d4:ea:10:5c:
                    d3:96:55:aa:a0:bf:8f:7c:f6:b1:78:69:e6:71:9f:
                    fc:3c:fc:34:d0:58:64:fc:26:96:d7:d3:09:e2:03:
                    ba:6b:7a:31:67:e3:ab:07:b1:bf:2c:e6:82:1f:46:
                    48:d4:65:f9:c2:55:b2:3e:14:f3:47:0b:b2:eb:91:
                    b2:6d:26:07:61:ea:8e:aa:2a:a3:eb:62:82:36:83:
                    14:05:0f:ef:20:d3:e4:72:25:a5:af:6e:c2:6b:f3:
                    9c:89:49:fb:ea:53:36:ea:51:b8:59:db:e8:52:3e:
                    87:0c:c6:6f:82:2f:61:95:77:bd:2f:14:07:84:a0:
                    31:87:df:49:16:dc:5c:c5:59:56:36:af:22:fa:83:
                    bc:5d:6d:19:fa:49:4b:f4:6d:d8:00:b9:31:f8:3a:
                    f2:b3:51:a0:48:ed:62:30:95:57:e7:a7:f6:d3:d3:
                    54:d7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier: 
                5E:05:74:46:C4:96:1E:4D:26:C3:7F:FE:A8:AC:3F:7A:AD:D8:3B:32
            X509v3 Authority Key Identifier: 
                keyid:0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points: 

                Full Name:
                  URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl

            Authority Information Access: 
                CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access: 
                CA Repository - URI:rsync://rpki.apnic.net/member_repository/A91D83B3/A3D3D8228A0D11EAA5059714C4F9AE02/
                RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A91D83B3/A3D3D8228A0D11EAA5059714C4F9AE02/XgV0RsSWHk0mw3_-qKw_eq3YOzI.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.129.140.0/22
                IPv6:
                  2403:7ec0::/32

    Signature Algorithm: sha256WithRSAEncryption
         ad:b8:d6:bd:95:cc:cc:f8:7c:15:ae:0a:80:bb:aa:45:7b:e3:
         37:6e:d7:66:87:9f:ed:86:fb:70:1f:43:43:50:69:65:05:bc:
         87:ba:4f:aa:7c:8f:b0:b8:d8:cf:12:21:79:b7:17:a4:2a:9e:
         17:32:34:ea:c2:5b:e3:ef:22:68:ed:9e:64:29:fa:e4:da:e7:
         7b:bb:db:c7:fa:5d:db:4e:0f:5e:02:3c:0c:3f:5f:a4:43:3c:
         2c:bc:1f:53:1f:17:05:a5:88:02:81:e4:ec:ba:94:2b:fe:08:
         cd:ac:02:2d:f3:4b:f7:8b:54:a3:a7:d8:62:af:c8:ae:90:29:
         68:84:5c:63:e9:72:58:55:bb:b0:d7:12:75:af:5d:e9:c6:96:
         dc:52:3d:10:64:2a:1b:52:04:43:de:ef:23:53:33:f6:93:c5:
         d5:39:f9:87:aa:93:6e:ea:39:0e:19:26:30:d7:72:55:c1:0b:
         05:50:22:53:38:9b:0e:cc:0e:c6:34:74:6e:07:7f:44:e0:28:
         66:8b:2a:d4:7b:7a:11:08:92:c4:ab:6d:7a:57:69:d3:73:84:
         04:71:36:b9:31:a8:00:92:a8:f2:a1:a6:e2:00:96:16:6f:bb:
         48:fe:cf:5b:73:b8:99:c4:fe:3e:8a:7a:ea:27:71:c2:8f:14:
         af:f1:e3:e0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 5 13:58:45 2023 by rpki-client.