Certificate

$ rpki-client -vvf rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_Vx4mxrWjgh0PYbOoMmfx4dr25M.cer
File:                     _Vx4mxrWjgh0PYbOoMmfx4dr25M.cer (raw, json)
Hash identifier:          ZQZDo+mzxivLzhfrqWKBXlcG+TQHxAkV9geZrALd0lg=
Subject key identifier:   FD:5C:78:9B:1A:D6:8E:08:74:3D:86:CE:A0:C9:9F:C7:87:6B:DB:93
Authority key identifier: 0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
Certificate issuer:       /CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Certificate serial:       01F1E3
Authority info access:    rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
Manifest:                 rsync://rpki.apnic.net/member_repository/A9190B27/9E2429107CB811EBA20E011CC4F9AE02/_Vx4mxrWjgh0PYbOoMmfx4dr25M.mft
caRepository:             rsync://rpki.apnic.net/member_repository/A9190B27/9E2429107CB811EBA20E011CC4F9AE02/
Notify URL:               https://rrdp.apnic.net/notification.xml
Certificate not before:   Tue 14 May 2024 20:19:47 +0000
Certificate not after:    Tue 01 Jul 2025 00:00:00 +0000
Subordinate resources:    AS: 141774
                          IP: 103.163.222.0/23
                          IP: 2407:2fc0::/32

Validation:               OK
Signature path:           rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 04 Dec 2024 01:13:26 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 127459 (0x1f1e3)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
        Validity
            Not Before: May 14 20:19:47 2024 GMT
            Not After : Jul  1 00:00:00 2025 GMT
        Subject: CN=A9190B27/serialNumber=FD5C789B1AD68E08743D86CEA0C99FC7876BDB93
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dc:fc:8d:4b:ad:57:97:2f:41:d1:28:83:33:56:
                    56:64:c5:8f:35:5d:6f:d3:5b:95:b9:d9:c8:61:b9:
                    cd:5b:0f:5f:36:52:46:54:7e:4f:bb:19:24:2c:fb:
                    17:98:7f:03:24:8d:7b:41:8d:64:e1:6f:5a:f4:3a:
                    c0:72:ab:17:51:ac:04:e9:d1:77:3c:f8:0c:95:09:
                    ef:65:97:62:e0:7d:ac:30:95:33:ba:fa:23:eb:70:
                    e9:b4:0a:8c:e7:87:21:9e:1d:a0:2b:7a:bb:41:5f:
                    ff:80:20:be:d0:97:4e:dc:99:14:17:45:eb:11:98:
                    72:8a:ba:a9:52:e9:96:19:bd:35:c2:d1:30:c8:2d:
                    44:58:14:2d:eb:47:8f:1c:f3:a6:47:1f:b0:a9:58:
                    25:0f:4e:c3:8e:79:9a:a1:47:5d:a0:d6:ca:6b:cd:
                    d4:08:04:d1:e3:cb:04:9f:3b:fd:42:cf:d4:e8:56:
                    30:c0:e3:e5:93:76:4e:9a:25:ac:cf:b7:bd:01:91:
                    76:c9:b9:5d:ee:fb:d3:e3:86:95:f1:12:05:6a:c3:
                    48:f8:00:9d:32:b8:64:c6:74:3d:5e:26:fd:dd:7e:
                    2e:77:d1:51:93:ea:a7:44:05:42:4d:51:41:a6:4c:
                    ff:fa:cf:52:40:63:8c:3c:9d:37:4f:92:93:23:4b:
                    bf:ef
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FD:5C:78:9B:1A:D6:8E:08:74:3D:86:CE:A0:C9:9F:C7:87:6B:DB:93
            X509v3 Authority Key Identifier:
                keyid:0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                CA Repository - URI:rsync://rpki.apnic.net/member_repository/A9190B27/9E2429107CB811EBA20E011CC4F9AE02/
                RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A9190B27/9E2429107CB811EBA20E011CC4F9AE02/_Vx4mxrWjgh0PYbOoMmfx4dr25M.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  141774

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.163.222.0/23
                IPv6:
                  2407:2fc0::/32

    Signature Algorithm: sha256WithRSAEncryption
         51:98:00:2d:0c:80:8f:b9:a8:c6:ee:69:46:5d:9a:de:cf:37:
         72:71:1e:08:02:c2:76:1e:89:a0:14:e6:be:6d:5f:8a:95:1d:
         ed:ef:7d:cc:68:f9:24:33:48:d5:04:e1:6e:29:19:06:87:aa:
         2f:b7:7b:02:ff:dc:a5:99:c6:19:f1:6e:7c:51:25:f7:52:07:
         92:80:5a:38:49:a7:ce:8a:42:b8:0b:62:23:a9:df:3b:37:e7:
         5f:9b:71:b3:7a:fc:69:cd:c3:98:8a:f6:fa:61:f4:ad:ad:3f:
         84:fc:d6:08:c5:49:3f:8d:ca:6e:65:7a:02:b6:70:2f:bd:5a:
         45:3c:5e:e6:80:fa:0b:5d:de:04:1a:d5:f9:13:1d:35:f6:d3:
         f4:d3:65:0a:63:7e:d7:12:37:73:25:ea:0f:b7:fd:dc:50:69:
         b3:bb:bb:43:69:fe:26:59:a2:3b:0c:9b:28:91:95:c1:bc:a7:
         a2:71:2b:4d:99:9b:4e:cf:66:54:8b:6a:25:ed:a9:03:da:a3:
         2d:ab:2f:c1:75:1a:56:47:4e:19:e6:d2:24:55:80:f4:87:b7:
         db:a5:bc:06:f7:36:1e:ed:47:3b:39:e0:52:93:e5:08:da:96:
         a8:f1:dc:48:30:39:f3:fd:91:68:25:e0:e3:85:6f:d9:df:dc:
         0a:8d:37:69
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----