Certificate

$ rpki-client -vvf rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/g1KnNOghRPMixQtyik92WjPXIlY.cer
File:                     g1KnNOghRPMixQtyik92WjPXIlY.cer (raw, json)
Hash identifier:          j9eUh3kNIdzCzzdh2kU9F1CjZ8K8zLlgGr3ybJzZxXQ=
Subject key identifier:   83:52:A7:34:E8:21:44:F3:22:C5:0B:72:8A:4F:76:5A:33:D7:22:56
Authority key identifier: 0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
Certificate issuer:       /CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Certificate serial:       01E0C7
Authority info access:    rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
Manifest:                 rsync://rpki.apnic.net/member_repository/A917357E/602D76D85D7311ECA3248853C4F9AE02/g1KnNOghRPMixQtyik92WjPXIlY.mft
caRepository:             rsync://rpki.apnic.net/member_repository/A917357E/602D76D85D7311ECA3248853C4F9AE02/
Notify URL:               https://rrdp.apnic.net/notification.xml
Certificate not before:   Tue 27 Feb 2024 04:06:35 +0000
Certificate not after:    Sat 31 Aug 2024 00:00:00 +0000
Subordinate resources:    AS: 152591
                          IP: 103.151.46.0/23
                          IP: 2400:3fa0::/32

Validation:               OK
Signature path:           rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 02 May 2024 13:35:35 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 123079 (0x1e0c7)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
        Validity
            Not Before: Feb 27 04:06:35 2024 GMT
            Not After : Aug 31 00:00:00 2024 GMT
        Subject: CN=A917357E/serialNumber=8352A734E82144F322C50B728A4F765A33D72256
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:c0:56:17:cd:3b:1c:52:4d:8f:02:bc:df:53:
                    8b:64:41:1c:57:b5:7a:ca:1c:9e:55:ff:6c:09:78:
                    1c:f9:0d:ce:d8:28:c6:56:d4:78:49:ac:9f:b3:79:
                    e6:0d:dc:20:e7:2b:fb:8d:0b:a4:7a:8b:af:6e:1c:
                    bb:ee:7d:e5:0e:60:56:b0:87:36:0b:26:12:c3:9b:
                    6c:93:8e:cb:2b:cf:7a:9c:6f:df:f9:e3:f6:2f:b2:
                    53:58:86:36:81:dc:f5:d1:e1:ae:67:91:02:15:ac:
                    1c:15:a6:84:df:13:9a:d3:9e:c7:95:11:c1:82:1b:
                    f3:d3:e3:a9:bb:93:a7:7f:4c:2f:97:07:9e:fb:8b:
                    b9:97:b8:c0:4e:4e:92:7a:5b:ec:0c:85:ff:eb:f3:
                    2f:10:fe:3c:17:cf:cb:56:5b:84:48:e8:fb:46:d7:
                    e9:2f:94:7e:82:8a:01:0a:81:1a:da:63:9b:fa:8e:
                    40:45:4e:67:5b:da:cf:d2:0f:a4:b0:35:25:cd:c6:
                    8b:ea:dc:f7:da:b8:18:29:22:4f:e0:27:94:bf:f8:
                    0e:44:0f:5f:33:80:ec:b5:a1:52:84:9f:2b:44:a7:
                    d3:37:ce:8d:5b:7f:0a:93:88:fe:ed:88:43:03:c0:
                    d5:b9:5f:98:5b:93:7f:1b:fb:5d:1e:dd:a7:ac:26:
                    c5:1f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                83:52:A7:34:E8:21:44:F3:22:C5:0B:72:8A:4F:76:5A:33:D7:22:56
            X509v3 Authority Key Identifier:
                keyid:0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                CA Repository - URI:rsync://rpki.apnic.net/member_repository/A917357E/602D76D85D7311ECA3248853C4F9AE02/
                RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A917357E/602D76D85D7311ECA3248853C4F9AE02/g1KnNOghRPMixQtyik92WjPXIlY.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  152591

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.151.46.0/23
                IPv6:
                  2400:3fa0::/32

    Signature Algorithm: sha256WithRSAEncryption
         cb:89:6d:63:ee:d5:1c:7a:b0:7a:15:53:1f:70:d5:15:9a:97:
         de:8d:e1:1f:47:0d:3a:af:ac:b4:5f:ad:01:2f:c9:ec:54:8f:
         6d:8b:74:ca:d6:fc:7a:16:e8:58:d0:d6:78:da:25:fb:4e:93:
         8e:82:1c:39:b2:48:5d:5a:62:f1:c6:b4:cc:56:f9:63:c6:f4:
         df:dc:08:25:36:a0:2d:08:66:c7:09:41:1a:03:ed:e5:4c:97:
         dd:67:73:f2:9a:36:68:12:80:a9:2b:31:30:a2:dc:70:df:ef:
         7f:58:b1:e0:18:a9:48:2a:e3:d3:e1:84:78:4f:4a:6e:09:fb:
         36:d3:95:ec:15:75:cf:09:90:7e:26:9b:31:73:43:06:50:4c:
         45:e2:bf:f6:e5:10:6b:35:89:7d:4e:85:51:fb:03:d9:97:69:
         78:95:5c:58:22:ff:43:c5:20:4b:46:cb:3b:cb:81:dc:ae:77:
         0f:d2:d6:0f:de:ce:0a:12:06:32:3f:f3:92:56:b5:1f:b2:dc:
         82:8d:02:85:3f:f7:12:a5:a4:a0:41:70:a7:cb:a5:96:6b:5c:
         ac:a9:8c:ee:df:99:18:e6:1e:54:ed:d8:3c:13:12:5a:c7:05:
         da:bd:39:c7:b1:af:30:ca:fe:57:38:a3:52:d1:41:40:13:7f:
         88:42:cd:33
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 25 14:22:58 2024 by rpki-client on console-fra.rpki-client.org