Certificate

$ rpki-client -vvf rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/anm3A54zvprmacUWEDfghAEXYgo.cer
File:                     anm3A54zvprmacUWEDfghAEXYgo.cer (raw, json)
Hash identifier:          6Impet1EYhELXXXSJbHbR6rOhOYdEhpA/+jvAZi6T88=
Subject key identifier:   6A:79:B7:03:9E:33:BE:9A:E6:69:C5:16:10:37:E0:84:01:17:62:0A
Authority key identifier: 0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
Certificate issuer:       /CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Certificate serial:       01CFCC
Authority info access:    rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
Manifest:                 rsync://rpki.apnic.net/member_repository/A913D1F2/99F7A34AD2CD11ED80607722C4F9AE02/anm3A54zvprmacUWEDfghAEXYgo.mft
caRepository:             rsync://rpki.apnic.net/member_repository/A913D1F2/99F7A34AD2CD11ED80607722C4F9AE02/
Notify URL:               https://rrdp.apnic.net/notification.xml
Certificate not before:   Tue 05 Dec 2023 05:21:45 +0000
Certificate not after:    Wed 28 May 2025 00:00:00 +0000
Subordinate resources:    AS: 150783
                          IP: 103.94.234.0/23
                          IP: 2001:df2:ac0::/48

Validation:               OK
Signature path:           rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 03 May 2024 07:49:47 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 118732 (0x1cfcc)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
        Validity
            Not Before: Dec  5 05:21:45 2023 GMT
            Not After : May 28 00:00:00 2025 GMT
        Subject: CN=A913D1F2/serialNumber=6A79B7039E33BE9AE669C5161037E0840117620A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d1:44:6f:0a:ff:8a:a9:bb:43:37:6b:af:52:0a:
                    55:17:1a:19:08:e3:78:04:ed:31:9a:36:0b:3c:6f:
                    58:1e:e1:82:d3:1d:bf:13:3b:b6:ee:40:d3:95:a7:
                    f0:a7:45:ee:73:ec:f8:c3:08:42:a3:0c:4c:33:af:
                    92:0d:9e:67:da:4e:ad:9f:34:ef:d6:6a:97:5d:36:
                    16:d6:05:68:12:ab:7f:d6:56:35:fe:a0:70:bd:fc:
                    66:95:dc:1f:d7:43:6a:b1:4a:f9:9c:bb:4c:cc:40:
                    50:63:28:69:55:00:71:18:f6:46:7f:a2:cc:41:7b:
                    11:4a:dd:5d:99:68:2e:1b:be:3b:b6:b5:70:02:36:
                    ad:a2:32:45:e9:d2:50:95:d1:da:d6:71:51:63:3f:
                    af:b7:05:0f:ca:51:99:33:f1:c5:95:32:76:ba:ed:
                    79:fa:e0:d1:63:fa:4e:69:62:43:c7:3a:6e:6b:bc:
                    9a:0f:40:f7:3b:03:c8:92:44:ed:80:85:3b:72:ef:
                    02:72:c3:ed:5a:b8:0d:bb:64:d4:04:59:fe:b2:8e:
                    9d:75:16:55:75:37:2e:da:98:aa:2d:3e:23:5b:ca:
                    70:e9:49:72:22:2f:24:53:24:68:22:ef:1a:e5:60:
                    18:2b:a5:25:bc:3b:b4:f5:59:36:23:55:b7:1e:9e:
                    82:c1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6A:79:B7:03:9E:33:BE:9A:E6:69:C5:16:10:37:E0:84:01:17:62:0A
            X509v3 Authority Key Identifier:
                keyid:0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                CA Repository - URI:rsync://rpki.apnic.net/member_repository/A913D1F2/99F7A34AD2CD11ED80607722C4F9AE02/
                RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A913D1F2/99F7A34AD2CD11ED80607722C4F9AE02/anm3A54zvprmacUWEDfghAEXYgo.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  150783

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.94.234.0/23
                IPv6:
                  2001:df2:ac0::/48

    Signature Algorithm: sha256WithRSAEncryption
         78:be:86:db:36:64:01:4f:13:9f:da:89:c0:72:42:70:03:93:
         23:97:30:ad:81:85:43:83:be:38:df:a4:74:c6:98:f0:07:75:
         cb:de:e0:45:a3:2f:92:11:00:f8:e5:ba:83:ed:f0:31:fd:d7:
         82:fa:71:29:a9:e5:1d:b4:4f:9d:1b:c2:cc:26:b2:97:cb:73:
         a3:6e:a0:42:97:69:58:36:ec:21:61:e7:68:e3:73:05:34:a3:
         b5:8e:51:b1:1e:ec:53:c7:1a:91:89:dd:86:27:f7:4e:26:fc:
         9d:f4:73:ce:38:17:4e:34:da:d9:ae:5e:78:a9:be:67:38:8d:
         b5:03:ea:5e:41:e7:c3:79:f1:51:0b:a1:58:6c:16:35:a1:2f:
         b9:7a:54:66:b3:bb:f2:bb:6c:cd:94:dd:67:ab:a1:b9:58:31:
         e9:4a:ad:d2:27:23:e0:3d:f9:46:75:ae:6a:d5:c2:ec:9f:6d:
         14:5e:e9:27:c7:82:bd:b8:b9:d4:12:5d:c0:3b:32:d0:e9:5b:
         98:e9:6b:6c:1f:af:9a:5e:75:b3:b3:ba:d0:6c:26:d0:83:f5:
         7f:68:8d:97:6e:74:51:b1:d9:b7:8b:b7:ff:c0:06:00:9f:fa:
         0b:1e:bf:8e:cd:d2:7b:6f:21:ed:26:cd:4c:52:6b:35:e3:c5:
         a2:0c:90:2e
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Fri Apr 26 11:03:02 2024 by rpki-client on console-ams.rpki-client.org