Certificate

$ rpki-client -vvf rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/aUugcLYm4WhY1mDyEg50tvw_cuw.cer
File:                     aUugcLYm4WhY1mDyEg50tvw_cuw.cer (raw, json)
Hash identifier:          g+aplz0iTXj3v6u32AN50T3n3res7n3JOmf7n8inm1k=
Subject key identifier:   69:4B:A0:70:B6:26:E1:68:58:D6:60:F2:12:0E:74:B6:FC:3F:72:EC
Authority key identifier: 0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
Certificate issuer:       /CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Certificate serial:       01D1D1
Authority info access:    rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
Manifest:                 rsync://rpki.apnic.net/member_repository/A91C7426/2128796C1DA211E28F51D29408B02CD2/aUugcLYm4WhY1mDyEg50tvw_cuw.mft
caRepository:             rsync://rpki.apnic.net/member_repository/A91C7426/2128796C1DA211E28F51D29408B02CD2/
Notify URL:               https://rrdp.apnic.net/notification.xml
Certificate not before:   Wed 13 Dec 2023 19:20:43 +0000
Certificate not after:    Fri 31 Jan 2025 00:00:00 +0000
Subordinate resources:    AS: 38870
                          AS: 45919

Validation:               OK
Signature path:           rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 02 May 2024 21:10:22 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 119249 (0x1d1d1)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
        Validity
            Not Before: Dec 13 19:20:43 2023 GMT
            Not After : Jan 31 00:00:00 2025 GMT
        Subject: CN=A91C7426/serialNumber=694BA070B626E16858D660F2120E74B6FC3F72EC
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:b2:69:8a:ab:39:4f:fb:e7:1a:2b:ea:13:65:
                    6b:d1:79:c4:29:d8:34:e1:9e:bd:8e:51:06:5e:de:
                    ba:1e:6c:96:76:09:1d:23:94:79:45:37:8b:45:a7:
                    8d:86:3f:25:77:7a:15:9c:6e:e5:4e:9c:28:2b:e3:
                    63:82:78:3f:27:52:1f:6c:d3:ca:20:73:1b:28:15:
                    e1:0d:c5:b0:79:5c:6c:c3:c4:76:39:c5:0d:ef:3f:
                    e2:6b:0f:58:5f:b5:1c:f6:3d:ea:18:9e:19:cd:e7:
                    ab:04:2f:f4:ff:3f:d6:da:3c:d2:85:ed:34:a2:3f:
                    b5:62:dd:a1:9c:9d:7c:e7:f6:0a:40:aa:31:49:6f:
                    b4:6c:76:95:99:aa:4a:31:be:53:96:de:1d:e5:53:
                    83:1d:73:47:ba:84:b8:ff:df:92:24:b1:c7:1c:63:
                    ff:d0:05:0f:e0:09:d7:2f:4c:f0:46:06:02:39:c6:
                    8e:da:80:5b:a4:55:91:ec:2f:29:11:2d:9c:d7:c9:
                    49:ad:e7:9e:8d:2d:81:5b:41:68:40:fc:1c:df:c9:
                    f6:a7:0e:49:80:e3:ed:0e:16:98:d2:91:ca:59:c8:
                    d1:21:15:9b:2b:1d:3a:56:c9:47:8e:4e:ec:bc:35:
                    c7:db:03:10:dc:ce:29:6d:57:e8:10:a7:33:44:74:
                    d1:db
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                69:4B:A0:70:B6:26:E1:68:58:D6:60:F2:12:0E:74:B6:FC:3F:72:EC
            X509v3 Authority Key Identifier:
                keyid:0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                CA Repository - URI:rsync://rpki.apnic.net/member_repository/A91C7426/2128796C1DA211E28F51D29408B02CD2/
                RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A91C7426/2128796C1DA211E28F51D29408B02CD2/aUugcLYm4WhY1mDyEg50tvw_cuw.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  38870
                  45919

    Signature Algorithm: sha256WithRSAEncryption
         bb:b8:c6:5b:1b:cd:3c:c2:e0:3b:50:af:a3:86:0d:2e:32:68:
         0a:68:2a:8c:69:a7:9b:13:14:52:58:5d:49:6a:24:e3:02:90:
         2f:73:81:17:71:9b:08:f3:18:f2:1d:08:51:86:7e:16:58:98:
         e3:7f:be:56:9b:6c:94:a1:fc:a4:c1:a5:5f:69:0a:59:e4:16:
         67:8b:b5:87:99:78:5e:72:fa:ed:52:d4:ca:c3:95:d6:e3:a8:
         84:4f:de:85:f5:ff:9d:be:cd:63:3d:d5:bc:b1:fd:f8:8b:9e:
         16:a8:4d:c5:9e:80:22:eb:fe:d2:68:bb:17:c6:22:d0:c0:6d:
         ab:69:78:df:3a:f1:7f:56:dc:bb:59:41:c2:86:d2:26:fa:b5:
         19:3b:57:68:5d:42:d1:cd:00:b2:e7:a6:9a:69:fd:a6:67:49:
         f1:06:6d:1d:95:0f:c1:f5:18:15:06:1e:a2:61:dc:07:b4:6c:
         00:f9:b7:17:3d:74:c4:77:0e:7c:d9:0f:fb:af:e9:27:d6:ad:
         d9:ca:67:85:3b:55:bf:b6:01:bd:da:77:88:9c:4d:35:b3:e1:
         9d:4b:21:99:19:a2:53:93:9d:ac:07:b8:82:04:44:11:65:73:
         a1:d0:5e:51:a1:0e:e5:07:98:15:fa:48:9e:14:7a:24:e4:79:
         4a:ce:c0:4c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 25 22:34:28 2024 by rpki-client on console-fra.rpki-client.org