Certificate

$ rpki-client -vvf rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_i41K0L3TxDVdoNTA6LpeOHEN7Y.cer
File:                     _i41K0L3TxDVdoNTA6LpeOHEN7Y.cer (raw, json)
Hash identifier:          xEVVjqWnozOgLSscQvEU3Q+qrrrK7oLsZ7XkkANIt+g=
Subject key identifier:   FE:2E:35:2B:42:F7:4F:10:D5:76:83:53:03:A2:E9:78:E1:C4:37:B6
Authority key identifier: 0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
Certificate issuer:       /CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Certificate serial:       020655
Authority info access:    rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
Manifest:                 rsync://rpki.apnic.net/member_repository/A91B5CC0/CFA79F1A503F11ED81D0756BC4F9AE02/_i41K0L3TxDVdoNTA6LpeOHEN7Y.mft
caRepository:             rsync://rpki.apnic.net/member_repository/A91B5CC0/CFA79F1A503F11ED81D0756BC4F9AE02/
Notify URL:               https://rrdp.apnic.net/notification.xml
Certificate not before:   Mon 12 Aug 2024 18:56:07 +0000
Certificate not after:    Fri 31 Oct 2025 00:00:00 +0000
Subordinate resources:    AS: 150118
                          IP: 103.191.19.0/24
                          IP: 2001:df0:f4c0::/48

Validation:               OK
Signature path:           rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 30 Nov 2024 02:50:13 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 132693 (0x20655)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
        Validity
            Not Before: Aug 12 18:56:07 2024 GMT
            Not After : Oct 31 00:00:00 2025 GMT
        Subject: CN=A91B5CC0/serialNumber=FE2E352B42F74F10D576835303A2E978E1C437B6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:44:ab:8b:7b:0d:13:e3:3b:1c:a8:a7:7c:fa:
                    28:0a:98:98:64:71:50:7d:73:1f:17:d9:0d:93:38:
                    8a:ca:eb:c0:c8:0d:d9:60:51:0d:af:78:7e:46:b7:
                    f6:4d:90:34:05:00:2a:02:31:c0:5e:4e:5f:4f:0c:
                    e5:38:aa:02:fa:22:6b:6c:f5:af:00:75:ae:b6:88:
                    1f:31:f6:9b:0d:50:cd:7f:70:23:67:d8:37:70:bc:
                    e1:2f:2b:5a:0f:b9:9a:4a:03:a7:af:30:73:43:06:
                    51:41:3c:9d:17:cd:90:fe:d5:13:52:91:89:95:4c:
                    f7:fe:e6:97:91:65:17:b2:f8:03:50:41:8b:8a:bf:
                    03:b3:21:61:20:2f:28:30:c9:4c:2e:97:05:66:17:
                    dc:91:8a:9b:d2:af:f5:74:f9:b4:70:16:1f:34:08:
                    8a:5e:08:e6:1f:f6:27:c4:02:3f:e5:28:7c:85:14:
                    7b:56:7b:ab:cd:95:4d:7d:5a:0f:d4:38:81:a8:01:
                    e7:44:4f:1e:c3:49:1a:d9:32:f3:8d:66:2c:18:40:
                    42:34:da:e7:38:2d:47:de:e9:1e:80:55:37:ac:6c:
                    f2:22:db:17:bc:8d:40:99:9e:d6:b2:7e:16:d9:d1:
                    07:c2:9d:5a:99:e8:8f:b9:f1:40:da:68:2e:dd:f0:
                    d3:ad
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FE:2E:35:2B:42:F7:4F:10:D5:76:83:53:03:A2:E9:78:E1:C4:37:B6
            X509v3 Authority Key Identifier:
                keyid:0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                CA Repository - URI:rsync://rpki.apnic.net/member_repository/A91B5CC0/CFA79F1A503F11ED81D0756BC4F9AE02/
                RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A91B5CC0/CFA79F1A503F11ED81D0756BC4F9AE02/_i41K0L3TxDVdoNTA6LpeOHEN7Y.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  150118

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.191.19.0/24
                IPv6:
                  2001:df0:f4c0::/48

    Signature Algorithm: sha256WithRSAEncryption
         33:2e:62:ae:6e:0f:94:2f:34:81:dc:87:7b:ac:73:da:0d:d3:
         f8:64:c9:e7:fb:92:f9:eb:a2:71:e5:94:d2:ba:cc:52:a7:69:
         e8:46:13:b4:c1:3a:cc:56:98:dc:7f:bc:59:7f:62:4c:de:a3:
         3b:cd:7d:25:cc:70:b7:72:6b:05:1b:7f:e5:bb:96:12:3a:88:
         fa:28:a9:04:fe:73:fa:13:e3:b3:10:17:38:20:88:a8:17:ca:
         b5:3a:41:cb:3b:9a:5e:e7:2e:e8:8c:6d:96:10:be:f0:d1:9e:
         0b:81:0a:f3:4b:45:47:ff:8f:20:f0:71:bd:69:44:d7:28:4c:
         cd:61:8f:48:34:6d:ae:d0:76:33:0a:29:ca:76:9b:d1:7f:8c:
         5a:76:53:c4:f4:c7:a6:bd:07:82:b2:6e:8d:a4:ab:90:70:f1:
         f0:76:c8:80:24:5d:8a:19:81:29:bc:02:55:c4:c0:4b:8e:34:
         af:4c:67:3c:45:24:86:1f:70:01:69:39:7b:01:f8:94:f4:14:
         57:e9:e3:c7:c1:75:56:f0:e2:b0:a9:8a:b7:f0:24:7e:99:40:
         bf:91:a7:92:48:c9:c7:f2:71:76:7c:58:fd:80:eb:0a:ad:33:
         2d:5b:d7:f5:59:89:e1:8a:8e:af:df:1b:0e:65:0a:85:7e:5d:
         2b:e5:f4:c0
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----