Certificate

$ rpki-client -vvf rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/eekj1QaVf9MN0m1ieTubQPj-iVY.cer
File:                     eekj1QaVf9MN0m1ieTubQPj-iVY.cer (raw, json)
Hash identifier:          bGu3wdeL0YmdmS68ne59/q7m5jdWa1/5KXlhdTqK088=
Subject key identifier:   79:E9:23:D5:06:95:7F:D3:0D:D2:6D:62:79:3B:9B:40:F8:FE:89:56
Authority key identifier: 0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
Certificate issuer:       /CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Certificate serial:       021B42
Authority info access:    rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
Manifest:                 rsync://rpki.apnic.net/member_repository/A916C4A5/C73A3894A23411EF978C8D6DC4F9AE02/eekj1QaVf9MN0m1ieTubQPj-iVY.mft
caRepository:             rsync://rpki.apnic.net/member_repository/A916C4A5/C73A3894A23411EF978C8D6DC4F9AE02/
Notify URL:               https://rrdp.apnic.net/notification.xml
Certificate not before:   Thu 14 Nov 2024 03:01:48 +0000
Certificate not after:    Sat 31 Jan 2026 00:00:00 +0000
Subordinate resources:    AS: 153355
                          IP: 2401:c9a0::/32

Validation:               OK
Signature path:           rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 29 Nov 2024 20:43:15 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 138050 (0x21b42)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
        Validity
            Not Before: Nov 14 03:01:48 2024 GMT
            Not After : Jan 31 00:00:00 2026 GMT
        Subject: CN=A916C4A5/serialNumber=79E923D506957FD30DD26D62793B9B40F8FE8956
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:fb:39:08:6a:7c:be:46:b7:32:7a:60:ae:b1:
                    a9:1d:1c:23:5b:bb:76:14:b6:ee:c6:e4:5d:17:ca:
                    c1:da:6a:05:53:d4:c6:59:7f:d4:e8:3f:77:d6:d0:
                    e6:1a:de:1d:6b:e4:c2:bf:01:91:ba:29:05:e7:e4:
                    b2:fa:fe:5a:34:7d:ff:42:bd:85:56:41:b5:97:26:
                    8e:7e:5d:91:66:c7:2a:de:d0:4d:0d:76:d8:d7:7e:
                    7b:3b:01:64:76:6a:12:92:5b:8d:7a:42:1c:fd:90:
                    d4:10:42:90:38:04:0f:6e:a6:de:6b:46:9b:1e:83:
                    fb:f1:49:c9:7a:a6:62:38:44:c9:27:28:19:cb:de:
                    8d:9a:92:46:88:49:96:cf:6c:68:37:7e:ea:bf:f7:
                    ea:96:d9:89:32:0f:a2:85:29:91:ff:4f:48:36:93:
                    fb:6a:bf:6d:e2:cc:18:3a:d4:ee:e0:71:ae:3b:99:
                    e9:42:fc:5c:15:be:e7:90:f9:ad:4e:f0:e3:22:37:
                    9a:6c:71:08:73:dc:58:10:97:f9:32:7e:3a:72:3b:
                    cb:ea:12:0b:ee:ef:09:14:16:67:a0:47:a2:66:07:
                    41:8c:51:a7:c1:d5:18:7a:6d:79:41:52:07:97:c6:
                    ab:43:2f:a5:1d:c6:c5:25:5b:a8:4f:aa:c4:65:38:
                    eb:73
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                79:E9:23:D5:06:95:7F:D3:0D:D2:6D:62:79:3B:9B:40:F8:FE:89:56
            X509v3 Authority Key Identifier:
                keyid:0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                CA Repository - URI:rsync://rpki.apnic.net/member_repository/A916C4A5/C73A3894A23411EF978C8D6DC4F9AE02/
                RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A916C4A5/C73A3894A23411EF978C8D6DC4F9AE02/eekj1QaVf9MN0m1ieTubQPj-iVY.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  153355

            sbgp-ipAddrBlock: critical
                IPv6:
                  2401:c9a0::/32

    Signature Algorithm: sha256WithRSAEncryption
         28:92:5c:cc:51:f0:dd:f7:b7:fd:35:37:f7:0d:9c:b0:22:66:
         b8:60:61:16:68:56:8c:b0:15:b0:44:4b:da:79:f8:57:38:6d:
         b7:b1:51:75:cc:6d:ff:3b:e6:b7:70:33:10:05:3b:23:5f:cd:
         8d:77:a1:a2:aa:e6:2b:8a:90:3d:6d:0b:8c:f8:3a:0f:a4:f9:
         21:8b:b2:43:d8:ce:9b:32:42:a5:62:a1:da:c8:82:25:bc:21:
         55:7e:2d:0d:ef:d4:19:9e:aa:cf:da:88:57:8b:c5:ae:a3:b7:
         66:15:63:f3:8c:49:48:b6:57:ad:56:68:c7:9d:c7:27:2c:1c:
         a7:ea:4d:1e:8a:31:95:1e:89:fa:d1:46:6d:d4:c4:d3:fc:91:
         ad:3a:2c:e4:0b:86:43:28:e8:cd:7c:db:fc:35:a2:71:de:59:
         87:f4:fd:7c:9d:1b:8f:ab:69:58:c5:ad:a7:20:96:69:01:1f:
         2f:5b:1e:97:9b:96:14:a6:97:3b:70:10:51:39:f6:d5:e8:6c:
         20:af:62:b3:05:02:8e:60:8e:21:04:f6:ca:22:65:1d:d4:df:
         65:21:9c:62:aa:b2:1e:6a:3c:eb:ba:8c:fe:a3:e3:f1:54:42:
         a7:79:58:2d:39:88:a6:a0:fc:c4:24:90:ea:d5:11:8a:90:5b:
         6f:e7:72:84
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----