Certificate

$ rpki-client -vvf rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/aWYanwY1V84rVDewGIk9fZ_dvtA.cer
File:                     aWYanwY1V84rVDewGIk9fZ_dvtA.cer (raw, json)
Hash identifier:          Z3EppK2+sIq8eitYJxq1PDMjP9SGwTqSG5FEURWSvF0=
Subject key identifier:   69:66:1A:9F:06:35:57:CE:2B:54:37:B0:18:89:3D:7D:9F:DD:BE:D0
Authority key identifier: 0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
Certificate issuer:       /CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Certificate serial:       01D4AF
Authority info access:    rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
Manifest:                 rsync://rpki.apnic.net/member_repository/A91431A6/44D890CA8EC511EB97B12074C4F9AE02/aWYanwY1V84rVDewGIk9fZ_dvtA.mft
caRepository:             rsync://rpki.apnic.net/member_repository/A91431A6/44D890CA8EC511EB97B12074C4F9AE02/
Notify URL:               https://rrdp.apnic.net/notification.xml
Certificate not before:   Thu 28 Dec 2023 14:46:45 +0000
Certificate not after:    Fri 31 Jan 2025 00:00:00 +0000
Subordinate resources:    AS: 138476
                          IP: 103.126.184.0/23
                          IP: 2001:df6:6780::/48

Validation:               OK
Signature path:           rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 02 May 2024 06:28:23 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 119983 (0x1d4af)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
        Validity
            Not Before: Dec 28 14:46:45 2023 GMT
            Not After : Jan 31 00:00:00 2025 GMT
        Subject: CN=A91431A6/serialNumber=69661A9F063557CE2B5437B018893D7D9FDDBED0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:3e:da:cf:99:3e:8b:8f:ee:97:ce:35:ae:a1:
                    42:d9:a0:52:7f:cd:e3:bc:cf:50:80:48:cd:27:cb:
                    77:a9:46:e3:43:f1:9c:78:1c:e9:35:bc:2e:67:80:
                    3e:e1:a2:8a:6e:0e:d4:be:72:8d:7e:d2:60:74:10:
                    22:53:5f:83:f9:f8:d7:4f:5a:eb:e4:73:42:a5:73:
                    bc:cb:a6:b4:a8:b8:22:12:14:8d:c2:a0:df:0e:e3:
                    03:5f:f5:8e:e4:42:79:66:fe:af:fc:23:c6:66:9d:
                    6b:03:2f:e0:bc:01:4a:f4:ef:5a:8b:7d:bf:1c:fe:
                    35:cf:79:d3:aa:e5:01:2a:01:b5:8f:35:c5:9f:31:
                    19:78:88:58:79:1e:09:3f:da:ce:73:b4:bd:e1:54:
                    86:b8:71:1a:78:04:f3:71:de:5f:9f:02:5a:f7:ad:
                    95:77:01:da:5b:9a:0f:13:f0:1d:dd:2e:32:1f:fa:
                    60:3f:18:36:59:00:2b:61:c0:09:60:a5:f1:e2:6f:
                    94:1f:30:8d:e6:db:2e:5e:b6:da:55:ef:11:82:7c:
                    ad:4f:be:1a:c7:21:83:f1:1d:25:f1:4c:09:57:1c:
                    fd:3a:34:6a:85:ff:f7:3c:ce:65:19:3e:c7:83:14:
                    8f:4d:b9:87:9d:ea:5f:fe:b2:c2:c9:bb:78:7b:ac:
                    53:b7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                69:66:1A:9F:06:35:57:CE:2B:54:37:B0:18:89:3D:7D:9F:DD:BE:D0
            X509v3 Authority Key Identifier:
                keyid:0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                CA Repository - URI:rsync://rpki.apnic.net/member_repository/A91431A6/44D890CA8EC511EB97B12074C4F9AE02/
                RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A91431A6/44D890CA8EC511EB97B12074C4F9AE02/aWYanwY1V84rVDewGIk9fZ_dvtA.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  138476

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.126.184.0/23
                IPv6:
                  2001:df6:6780::/48

    Signature Algorithm: sha256WithRSAEncryption
         1f:5c:5b:da:c1:e1:dc:38:27:1f:d9:84:b1:11:09:0a:a6:1e:
         78:ad:fa:a4:3a:18:34:34:02:09:d8:39:74:7e:d1:f1:05:ec:
         81:36:83:3c:43:15:55:ce:48:a9:3d:25:25:79:56:5e:3e:a6:
         3c:fd:7f:ba:d5:63:bb:b0:11:af:11:a6:d4:0a:e3:ce:51:05:
         da:05:09:16:85:d5:c2:43:b6:08:fa:dd:c0:68:7e:3e:fe:55:
         b6:e3:f9:38:ec:fb:9c:8f:df:8d:d9:b7:af:3b:bd:85:46:93:
         0f:eb:c1:8c:a1:6b:52:b9:bf:bf:e6:d7:0e:33:ca:d9:f9:2b:
         45:1d:25:bd:8d:90:97:b2:6b:75:1d:b7:ed:9d:76:56:98:8d:
         50:1b:f0:51:e7:c7:64:2f:47:b2:cf:fb:74:a4:50:99:5e:1b:
         4e:22:d6:fd:ea:cc:02:dd:65:ac:58:24:40:e5:2c:f5:b4:f8:
         db:fd:8d:f6:0d:c7:ed:bd:b6:88:69:80:d4:87:45:4b:65:83:
         73:9d:98:83:a6:25:17:34:62:7d:6d:37:be:f8:66:cd:06:49:
         96:c4:48:ae:fb:bc:bd:d1:9c:1b:39:9d:66:ff:ac:0a:e8:85:
         26:bc:1a:1f:52:8f:a7:89:84:88:40:6b:c6:1d:bc:96:07:74:
         9d:d3:82:ba
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Thu Apr 25 07:21:28 2024 by rpki-client on console-ams.rpki-client.org