Certificate

$ rpki-client -vvf rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YWkLGa19fAqkjE_eD2PqgH1Yzlo.cer
File:                     YWkLGa19fAqkjE_eD2PqgH1Yzlo.cer (raw, json)
Hash identifier:          TsgMiJTV+T8kD825/4YE4uWg7C97GFSZblFz+IKL1EQ=
Subject key identifier:   61:69:0B:19:AD:7D:7C:0A:A4:8C:4F:DE:0F:63:EA:80:7D:58:CE:5A
Authority key identifier: 0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
Certificate issuer:       /CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Certificate serial:       01238D
Authority info access:    rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
Manifest:                 rsync://rpki.apnic.net/member_repository/A9179834/89C4A9769C2611EB9DCEB576C4F9AE02/YWkLGa19fAqkjE_eD2PqgH1Yzlo.mft
caRepository:             rsync://rpki.apnic.net/member_repository/A9179834/89C4A9769C2611EB9DCEB576C4F9AE02/
Notify URL:               https://rrdp.apnic.net/notification.xml
Certificate not before:   Wed 11 Aug 2021 14:00:56 +0000
Certificate not after:    Fri 30 Sep 2022 00:00:00 +0000
Subordinate resources:    AS: 133037
                          IP: 103.133.180.0/24
                          IP: 103.135.130.0/23
                          IP: 103.251.43.0/24
                          IP: 2001:df7:9100::/48

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 74637 (0x1238d)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
        Validity
            Not Before: Aug 11 14:00:56 2021 GMT
            Not After : Sep 30 00:00:00 2022 GMT
        Subject: CN=A9179834/serialNumber=61690B19AD7D7C0AA48C4FDE0F63EA807D58CE5A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:ee:5d:e0:69:0e:a7:05:5a:17:07:64:3c:8f:
                    3e:e9:91:6a:a6:27:0d:c5:74:74:18:b1:41:c1:62:
                    23:37:cb:a4:b5:02:16:2f:57:81:4a:ca:6d:b6:04:
                    c0:d8:ea:fb:9b:22:1e:b2:9e:0e:a1:b9:c4:de:b5:
                    95:6a:b6:f3:72:a8:f6:4d:3a:33:f3:d5:c4:3a:bb:
                    c9:f8:ae:5c:12:60:0b:8b:e8:a6:3c:6d:d3:bf:b6:
                    51:2e:0f:bb:72:3a:2b:81:77:cf:10:55:d9:ec:be:
                    cf:30:19:7d:78:7c:a5:d8:dd:9c:b2:11:8c:91:0d:
                    67:18:60:45:c8:a6:05:23:55:3f:ae:20:7d:05:d8:
                    db:da:98:ca:aa:28:64:32:83:48:d0:b7:15:79:7d:
                    24:43:4e:a1:4b:01:96:74:2d:1b:9b:6c:18:56:ec:
                    57:10:d6:f0:d2:33:26:97:20:fd:2f:f0:25:6d:f7:
                    95:fd:5f:41:bf:50:3c:04:1d:8d:6a:56:86:24:66:
                    1a:2c:f3:e8:82:42:e2:fc:f1:41:a7:ff:6a:63:5b:
                    58:82:8e:a0:78:f0:a7:17:27:e6:51:c3:34:a9:b4:
                    b1:d6:45:65:c6:4a:de:46:77:b9:b6:ad:17:55:ae:
                    33:b1:eb:6e:ab:72:00:6d:99:a8:2c:45:f9:18:db:
                    79:bd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                61:69:0B:19:AD:7D:7C:0A:A4:8C:4F:DE:0F:63:EA:80:7D:58:CE:5A
            X509v3 Authority Key Identifier:
                keyid:0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                CA Repository - URI:rsync://rpki.apnic.net/member_repository/A9179834/89C4A9769C2611EB9DCEB576C4F9AE02/
                RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A9179834/89C4A9769C2611EB9DCEB576C4F9AE02/YWkLGa19fAqkjE_eD2PqgH1Yzlo.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  133037

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.133.180.0/24
                  103.135.130.0/23
                  103.251.43.0/24
                IPv6:
                  2001:df7:9100::/48

    Signature Algorithm: sha256WithRSAEncryption
         37:00:ee:e1:6d:4b:2f:63:37:69:75:44:05:b9:f7:dc:31:01:
         df:b2:2e:c1:f5:80:d7:7f:47:e3:13:95:c2:d4:ee:f9:ac:13:
         a9:19:3b:d1:24:64:d0:d6:da:7d:69:32:b2:fc:6f:94:c7:79:
         7e:12:a7:5a:3d:f1:39:02:64:80:be:b0:06:00:27:e1:0f:6f:
         e2:90:e1:95:27:46:66:aa:d7:5d:ae:57:c7:23:fe:22:39:05:
         c0:cf:2d:fe:00:c7:64:0a:0a:73:0e:07:08:cd:1e:87:51:be:
         f6:6c:da:77:c0:fe:c2:d6:7e:97:7e:4f:bf:65:fe:81:7d:42:
         69:c1:2a:0b:d3:5e:8c:da:85:bd:5e:9d:c3:66:96:d7:ca:6c:
         b6:96:be:8c:c6:5c:0d:17:da:6e:20:9f:94:80:8c:e2:3b:a1:
         cf:22:76:1a:53:ae:1b:ad:ac:28:65:d8:37:0e:dd:2c:a4:4b:
         15:8c:d3:ef:43:03:36:44:5e:6f:52:b5:b6:f8:e2:39:aa:fb:
         27:7a:6b:4a:13:b2:11:7b:27:8b:9a:22:51:81:63:12:5b:53:
         b0:f8:6f:9b:07:67:f5:32:9e:84:27:0b:15:0e:8e:f5:6b:0c:
         86:ce:a1:89:6f:15:26:e5:dd:f3:6c:9c:fd:87:79:f0:64:e8:
         ea:61:c6:2a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----