Certificate

$ rpki-client -vvf rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bYHOsREQEFaJtudNfxMNfMTnMBA.cer
File:                     bYHOsREQEFaJtudNfxMNfMTnMBA.cer (raw, json)
Hash identifier:          VRdoh4/I5EsEQMwb0qc7C+gUrYcrQ+mriRrbFA/+sP8=
Subject key identifier:   6D:81:CE:B1:11:10:10:56:89:B6:E7:4D:7F:13:0D:7C:C4:E7:30:10
Authority key identifier: 0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
Certificate issuer:       /CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Certificate serial:       013A8E
Authority info access:    rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
Manifest:                 rsync://rpki.apnic.net/member_repository/A91A5B03/6AE3BA681FEB11EB81D33017C4F9AE02/bYHOsREQEFaJtudNfxMNfMTnMBA.mft
caRepository:             rsync://rpki.apnic.net/member_repository/A91A5B03/6AE3BA681FEB11EB81D33017C4F9AE02/
Notify URL:               https://rrdp.apnic.net/notification.xml
Certificate not before:   Tue 14 Dec 2021 12:26:57 +0000
Certificate not after:    Thu 02 Mar 2023 00:00:00 +0000
Subordinate resources:    AS: 141388

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 80526 (0x13a8e)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
        Validity
            Not Before: Dec 14 12:26:57 2021 GMT
            Not After : Mar  2 00:00:00 2023 GMT
        Subject: CN=A91A5B03/serialNumber=6D81CEB11110105689B6E74D7F130D7CC4E73010
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:c0:29:cd:de:83:94:27:f2:af:56:50:39:36:
                    33:ed:e9:2e:40:64:16:73:97:41:ca:6e:f4:77:8e:
                    29:01:60:91:f6:2d:de:82:da:2c:1e:fb:e7:67:2b:
                    55:94:27:5b:33:ae:5a:c6:8f:c7:d1:d8:16:63:0d:
                    db:9e:98:46:bb:31:ed:12:32:a8:8d:91:e8:ad:4c:
                    00:73:fa:b9:5e:0c:a4:8b:2e:78:52:81:09:bd:13:
                    43:b4:ec:ed:8f:aa:ab:e2:62:39:45:c5:b9:69:9f:
                    4b:5a:38:99:b1:ae:81:50:b0:27:a9:e1:8f:9c:08:
                    5b:d9:bd:6c:c9:05:f7:2f:4f:50:bf:1d:0f:b3:03:
                    77:7f:0b:52:4e:72:be:55:78:91:84:31:a3:d7:a9:
                    96:24:34:32:7a:12:61:79:d4:af:b7:ca:f1:b2:57:
                    bb:99:20:b2:27:62:1f:1e:94:29:07:67:27:8e:bf:
                    c9:63:bc:0a:a2:36:dd:15:68:b3:1d:ab:a1:94:15:
                    bf:88:ba:92:ac:34:1c:04:34:2d:20:17:cb:94:bd:
                    c2:de:61:a2:dd:5e:08:37:d1:30:68:37:7c:9a:be:
                    99:dd:21:00:b1:5e:64:de:ce:e8:f1:32:32:d2:d5:
                    f2:c0:71:52:3b:f2:ff:0e:da:57:e6:fc:98:ed:32:
                    20:27
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6D:81:CE:B1:11:10:10:56:89:B6:E7:4D:7F:13:0D:7C:C4:E7:30:10
            X509v3 Authority Key Identifier:
                keyid:0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                CA Repository - URI:rsync://rpki.apnic.net/member_repository/A91A5B03/6AE3BA681FEB11EB81D33017C4F9AE02/
                RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A91A5B03/6AE3BA681FEB11EB81D33017C4F9AE02/bYHOsREQEFaJtudNfxMNfMTnMBA.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  141388

    Signature Algorithm: sha256WithRSAEncryption
         57:66:4b:eb:46:28:7b:b0:6d:15:34:b5:8f:86:e7:d0:71:d6:
         ed:b8:ad:22:f4:13:c2:a2:19:30:80:56:b9:a7:a0:5c:ae:ad:
         2b:c5:0f:67:4c:df:a3:c4:7f:27:bc:d9:1c:cc:c8:9f:f3:56:
         57:16:50:6d:96:2a:c5:da:1a:9f:aa:b4:73:fb:94:95:8b:55:
         75:0d:09:c2:44:e8:d0:56:72:e4:d6:bb:12:34:ec:75:b8:9c:
         b7:da:56:aa:93:0b:3c:14:84:83:75:d2:b5:8f:a8:65:83:ec:
         9e:2b:70:cb:94:56:a6:de:58:98:65:5f:c1:fb:24:76:70:2b:
         6f:d6:eb:2d:99:7a:26:13:cb:4c:34:e1:7c:2e:d3:33:76:ef:
         20:98:da:84:6e:c2:24:d4:4b:6d:02:a8:6b:7f:0f:6a:03:45:
         b8:14:b5:28:ce:98:d4:96:ea:de:fb:75:19:65:f1:03:e2:6c:
         0a:74:f1:dc:22:09:2e:c6:72:cc:5f:45:6e:11:ee:53:b4:7c:
         ff:44:fb:28:5c:04:15:a1:59:a1:c9:56:cf:f7:7f:d5:8c:96:
         f3:a0:2d:cf:fd:dd:05:c2:6d:89:20:6a:96:b8:1e:81:72:3b:
         59:00:9d:da:16:b6:18:5b:e0:02:eb:d2:70:cc:c0:64:02:ea:
         d4:2e:08:7d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----