Certificate

$ rpki-client -vvf rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ar_vyDQZEW7zSvOlp_9I3gO-gzI.cer
File:                     ar_vyDQZEW7zSvOlp_9I3gO-gzI.cer (raw, json)
Hash identifier:          ojaKOIMPJMfAgXczPuPoO4QlWOjlQaG08MrSJeZvVH0=
Subject key identifier:   6A:BF:EF:C8:34:19:11:6E:F3:4A:F3:A5:A7:FF:48:DE:03:BE:83:32
Authority key identifier: 0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
Certificate issuer:       /CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Certificate serial:       01C147
Authority info access:    rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
Manifest:                 rsync://rpki.apnic.net/member_repository/A91D4E45/F8F1C1947FDE11EBA188CF14C4F9AE02/ar_vyDQZEW7zSvOlp_9I3gO-gzI.mft
caRepository:             rsync://rpki.apnic.net/member_repository/A91D4E45/F8F1C1947FDE11EBA188CF14C4F9AE02/
Notify URL:               https://rrdp.apnic.net/notification.xml
Certificate not before:   Sun 01 Oct 2023 22:52:22 +0000
Certificate not after:    Mon 30 Dec 2024 00:00:00 +0000
Subordinate resources:    IP: 45.112.60.0/22
                          IP: 103.74.208.0/22

Validation:               OK
Signature path:           rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 02 May 2024 06:28:23 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 115015 (0x1c147)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
        Validity
            Not Before: Oct  1 22:52:22 2023 GMT
            Not After : Dec 30 00:00:00 2024 GMT
        Subject: CN=A91D4E45/serialNumber=6ABFEFC83419116EF34AF3A5A7FF48DE03BE8332
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:b5:3b:52:56:d8:8d:c6:50:31:4f:30:14:6f:
                    93:73:7d:a5:ff:64:99:d4:ff:b9:bf:d9:74:f1:9f:
                    21:c2:de:c2:9f:d4:6b:43:7a:db:95:11:ea:bb:34:
                    e3:7e:05:cb:83:06:a9:31:45:d0:38:75:68:ca:e4:
                    39:e6:f7:a3:4c:f1:90:3f:65:8d:03:62:2b:b2:f1:
                    7b:d2:1d:16:97:0b:85:c4:31:de:8e:83:94:7d:92:
                    4b:be:a2:e0:39:d4:31:cb:29:1a:00:46:ae:07:e1:
                    85:52:71:6e:f2:61:3b:fe:77:e6:ae:34:94:7f:02:
                    06:a9:54:79:9d:26:8d:45:ee:82:2e:2c:d5:9e:f6:
                    58:48:79:4d:44:54:6a:e4:e1:49:10:ae:0d:6d:5c:
                    6e:2e:1d:fa:ae:89:99:db:80:1b:2e:66:0e:59:94:
                    8d:9c:cc:93:1e:cd:62:89:95:ca:af:c4:bb:2a:3b:
                    e1:de:f5:de:31:26:25:9e:33:e3:cd:c3:3b:a6:da:
                    cb:48:c6:f0:d0:5a:b4:38:77:30:f6:cc:b0:d7:7e:
                    c8:99:63:b7:df:2e:9d:c2:2b:75:69:ce:7f:01:96:
                    e9:ed:91:01:23:b4:4b:f9:c7:79:a2:1e:4b:25:b8:
                    06:dd:99:57:07:93:79:a4:5c:f0:2b:09:98:06:24:
                    19:29
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6A:BF:EF:C8:34:19:11:6E:F3:4A:F3:A5:A7:FF:48:DE:03:BE:83:32
            X509v3 Authority Key Identifier:
                keyid:0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                CA Repository - URI:rsync://rpki.apnic.net/member_repository/A91D4E45/F8F1C1947FDE11EBA188CF14C4F9AE02/
                RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A91D4E45/F8F1C1947FDE11EBA188CF14C4F9AE02/ar_vyDQZEW7zSvOlp_9I3gO-gzI.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.112.60.0/22
                  103.74.208.0/22

    Signature Algorithm: sha256WithRSAEncryption
         bb:8b:79:0d:34:f2:36:41:d7:2b:e8:18:c4:85:11:a3:7f:0a:
         be:40:82:56:99:ea:32:2e:ad:6b:ed:4e:0a:91:09:39:b9:34:
         1f:0b:7c:75:c8:66:fc:d5:b4:c5:09:d9:31:03:c1:d0:b0:56:
         52:e4:de:9d:a0:a2:16:4b:52:fc:3a:be:04:18:29:a8:65:bb:
         3b:c9:50:69:82:30:6d:a8:0c:ef:f4:96:9e:54:7e:28:5b:ab:
         1a:20:46:6b:c6:b1:e0:50:ff:9f:23:bb:f4:f6:bc:55:d7:b3:
         55:dc:ad:33:e9:3b:f5:1c:b4:ea:5b:f9:bb:d9:e2:f5:dc:b6:
         9c:73:3c:b6:71:28:d4:84:63:5e:0c:82:e9:0a:97:e8:06:28:
         46:a7:57:41:36:61:7e:66:17:d4:ca:87:27:93:c6:e8:eb:42:
         97:91:97:d2:fb:08:a6:20:43:64:8d:f8:90:74:3d:87:80:c9:
         fd:af:24:73:20:cc:39:51:92:5e:1c:c8:41:21:49:4a:d2:61:
         e0:8a:5e:69:da:1f:fd:2f:24:2b:bc:45:1f:d8:1a:dc:cf:94:
         de:ef:d5:12:af:73:00:b5:b9:90:91:c4:48:f0:b4:24:48:26:
         44:10:1f:24:d7:58:3e:91:95:3b:59:57:5c:c2:97:b7:73:df:
         63:0a:db:9c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 25 07:21:29 2024 by rpki-client on console-ams.rpki-client.org