Certificate

$ rpki-client -vvf rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YiiraKJGC9xWaItuVYkXkN2ASxA.cer
File:                     YiiraKJGC9xWaItuVYkXkN2ASxA.cer (raw, json)
Hash identifier:          tW7Svq+z7G6mKrfBY+1M+7Hvvgy692KI1lOnoNIiUys=
Subject key identifier:   62:28:AB:68:A2:46:0B:DC:56:68:8B:6E:55:89:17:90:DD:80:4B:10
Authority key identifier: 0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
Certificate issuer:       /CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Certificate serial:       01B3DA
Authority info access:    rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
Manifest:                 rsync://rpki.apnic.net/member_repository/A916A285/E8192038B97A11EDA285A554C4F9AE02/YiiraKJGC9xWaItuVYkXkN2ASxA.mft
caRepository:             rsync://rpki.apnic.net/member_repository/A916A285/E8192038B97A11EDA285A554C4F9AE02/
Notify URL:               https://rrdp.apnic.net/notification.xml
Certificate not before:   Tue 01 Aug 2023 05:14:37 +0000
Certificate not after:    Thu 31 Oct 2024 00:00:00 +0000
Subordinate resources:    IP: 43.246.176.0/22
                          IP: 103.12.152.0/22

Validation:               OK
Signature path:           rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 03 May 2024 02:50:26 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 111578 (0x1b3da)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
        Validity
            Not Before: Aug  1 05:14:37 2023 GMT
            Not After : Oct 31 00:00:00 2024 GMT
        Subject: CN=A916A285/serialNumber=6228AB68A2460BDC56688B6E55891790DD804B10
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:da:74:a7:54:fc:ba:43:57:92:a8:6d:b9:1e:2b:
                    8a:01:f4:ed:cc:dc:ff:e4:98:3d:79:4d:f5:54:f1:
                    9d:b2:02:fb:bc:8e:7f:3b:57:28:a5:7e:2d:11:83:
                    b3:91:09:86:d3:af:3f:b7:ce:d0:c0:c0:91:00:9a:
                    82:a7:24:01:f9:0f:70:54:c0:ad:31:ce:35:9d:02:
                    44:2e:78:af:c0:90:fc:69:a5:8e:58:4b:2a:cb:35:
                    45:c3:1b:fb:20:41:d9:0e:e5:4f:53:35:53:38:47:
                    dc:33:26:1d:99:95:12:1d:d9:b4:45:15:1f:d7:a6:
                    2e:15:81:d6:d6:1a:dc:cf:fa:8b:1c:4b:a0:af:94:
                    7b:a3:e9:d9:49:27:98:91:d5:78:a9:76:c8:e9:0e:
                    55:6e:ef:d1:66:36:52:73:3a:ca:3e:8b:20:ce:1d:
                    48:e1:30:f8:54:1c:9a:c2:ee:21:54:ae:66:36:d6:
                    a3:f1:7c:63:31:17:cd:e0:2d:d0:0b:6d:6a:15:ed:
                    a6:e5:4a:2a:fb:36:50:d7:59:4a:ca:59:0f:42:71:
                    6b:a4:8f:ad:a1:50:20:92:31:bc:04:87:33:ca:2e:
                    21:f2:fb:6d:3c:e1:77:f3:b4:ea:a4:7c:10:32:c2:
                    fc:89:4d:90:55:1d:86:98:24:4c:00:03:a8:6e:00:
                    0c:9b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                62:28:AB:68:A2:46:0B:DC:56:68:8B:6E:55:89:17:90:DD:80:4B:10
            X509v3 Authority Key Identifier:
                keyid:0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                CA Repository - URI:rsync://rpki.apnic.net/member_repository/A916A285/E8192038B97A11EDA285A554C4F9AE02/
                RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A916A285/E8192038B97A11EDA285A554C4F9AE02/YiiraKJGC9xWaItuVYkXkN2ASxA.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  43.246.176.0/22
                  103.12.152.0/22

    Signature Algorithm: sha256WithRSAEncryption
         58:b6:5a:29:1c:8a:ef:a2:22:d9:0b:b1:e4:b1:15:a0:51:b3:
         c3:33:4f:7c:2b:f6:28:51:43:59:e9:44:9d:ab:a9:08:8c:3a:
         74:d1:e6:83:70:dd:95:4e:08:f3:45:93:e0:da:78:8f:99:f6:
         a6:a3:83:8a:b8:9a:d5:85:f9:44:16:ec:28:3d:35:07:8e:4b:
         9b:c5:31:58:fb:b0:94:b4:c8:9f:b3:76:3c:c2:97:66:33:6f:
         a9:34:58:0f:85:63:f1:ce:e1:58:c9:dd:06:4c:17:d0:0c:ff:
         48:39:ec:53:9c:90:99:76:d2:97:e1:ad:76:4d:6d:5a:ca:76:
         4b:c9:a4:4e:c4:b9:0f:da:9a:a5:30:dd:13:77:02:09:5c:d4:
         0e:7b:39:c1:41:ae:f4:ac:2b:c8:49:c0:57:1e:c8:0e:b2:ad:
         8d:6f:b1:e5:62:f1:83:8f:a1:11:1f:ec:90:e6:db:bb:ef:f9:
         62:54:35:3d:36:7b:9a:b5:89:ec:88:3d:15:6a:38:4a:e3:df:
         45:df:c1:da:50:bb:d6:ce:17:40:3a:ee:04:ec:91:3a:2f:77:
         f4:38:3e:92:32:d4:0e:7b:4b:bf:da:06:df:f0:bf:be:6d:b7:
         58:4e:70:6f:76:64:f2:f1:52:30:4c:c1:57:32:63:68:c3:37:
         8a:ee:be:c4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 26 03:51:36 2024 by rpki-client on console-ams.rpki-client.org