Certificate

$ rpki-client -vvf rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gjCxIXfqQ26Y1x8d_4m5riu-hYc.cer
File:                     gjCxIXfqQ26Y1x8d_4m5riu-hYc.cer (raw, json)
Hash identifier:          kCM10SY4ZSMgVMbrqk3diCNcK8L415cZzf2q0iuDgHo=
Subject key identifier:   82:30:B1:21:77:EA:43:6E:98:D7:1F:1D:FF:89:B9:AE:2B:BE:85:87
Authority key identifier: 0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
Certificate issuer:       /CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Certificate serial:       01CDBB
Authority info access:    rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
Manifest:                 rsync://rpki.apnic.net/member_repository/A91DB331/8B12542E673911EDB583B67CC4F9AE02/gjCxIXfqQ26Y1x8d_4m5riu-hYc.mft
caRepository:             rsync://rpki.apnic.net/member_repository/A91DB331/8B12542E673911EDB583B67CC4F9AE02/
Notify URL:               https://rrdp.apnic.net/notification.xml
Certificate not before:   Wed 29 Nov 2023 20:15:12 +0000
Certificate not after:    Fri 31 Jan 2025 00:00:00 +0000
Subordinate resources:    AS: 135073

Validation:               OK
Signature path:           rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 01 May 2024 21:46:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 118203 (0x1cdbb)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
        Validity
            Not Before: Nov 29 20:15:12 2023 GMT
            Not After : Jan 31 00:00:00 2025 GMT
        Subject: CN=A91DB331/serialNumber=8230B12177EA436E98D71F1DFF89B9AE2BBE8587
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:97:9f:cb:d8:83:0f:64:5b:84:65:dc:ad:82:92:
                    d8:8d:df:91:7e:97:e2:7d:91:7b:fa:8b:49:fc:9e:
                    9e:f3:9e:e7:d0:e4:08:76:c3:da:75:c1:e2:30:5d:
                    78:c4:f1:73:53:ba:fa:a5:2c:bf:77:d4:b9:69:1a:
                    d7:35:86:b4:77:aa:c0:b4:e9:e6:2a:b0:5b:b5:1a:
                    9d:50:6d:fd:e2:ba:e7:e7:25:ca:df:c0:09:25:73:
                    fa:26:9e:61:68:d4:41:f7:01:3f:46:01:85:01:a0:
                    41:eb:4a:32:f4:53:b2:41:3e:48:10:9c:8d:6f:ea:
                    d4:da:a7:e0:0c:33:81:18:f2:95:da:b9:35:ef:2b:
                    8d:b3:ee:ff:e3:b2:ba:40:36:63:0e:55:64:88:fb:
                    6b:78:ab:40:40:2a:23:35:57:f9:40:91:e5:33:63:
                    b4:d1:78:d7:2a:42:d2:b0:7d:80:47:94:0e:10:09:
                    57:92:eb:79:67:b1:1f:74:8c:18:24:a7:2d:4d:9b:
                    f0:14:c2:df:b3:14:3b:87:8b:08:a8:f3:36:eb:0b:
                    d9:3b:8c:a2:92:f1:22:45:53:f7:9e:a7:20:4d:15:
                    71:5c:de:34:9b:14:c5:55:bc:7e:ee:39:78:80:1c:
                    25:99:41:81:c9:98:0c:88:f0:df:95:67:c9:3a:80:
                    79:df
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                82:30:B1:21:77:EA:43:6E:98:D7:1F:1D:FF:89:B9:AE:2B:BE:85:87
            X509v3 Authority Key Identifier:
                keyid:0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                CA Repository - URI:rsync://rpki.apnic.net/member_repository/A91DB331/8B12542E673911EDB583B67CC4F9AE02/
                RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A91DB331/8B12542E673911EDB583B67CC4F9AE02/gjCxIXfqQ26Y1x8d_4m5riu-hYc.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  135073

    Signature Algorithm: sha256WithRSAEncryption
         1c:58:f3:e2:16:a2:5f:e5:df:d7:e7:b2:18:d8:fe:43:f6:1e:
         e7:9d:91:ee:ed:1a:c5:27:84:6b:90:6d:4f:13:36:88:e7:ca:
         c4:1b:56:3c:d6:fa:a4:b4:5c:29:a4:80:ba:d8:45:23:8a:e9:
         70:a0:28:cd:f0:e5:8e:f4:9c:e6:ca:63:7e:a0:15:07:24:34:
         9f:0b:f0:63:b9:73:7d:69:f7:83:7e:5e:5d:9f:6e:d1:48:e7:
         b5:b6:dc:ae:e4:bb:8b:b6:3d:a8:31:4a:3d:a9:88:9b:f7:b8:
         c1:fb:1b:ec:3f:61:9c:d6:a1:bd:ce:1c:1a:a7:0d:ed:4f:99:
         fe:5d:23:04:29:54:d8:4c:01:35:64:84:29:d2:27:09:32:7c:
         0a:af:6c:5b:d4:fd:6c:b7:43:d8:79:ac:1b:78:14:d1:90:49:
         86:4a:14:ee:34:db:be:5e:c5:a6:cd:60:89:e2:43:f3:d5:2c:
         20:11:c4:79:a4:6d:d7:80:57:71:c4:ee:47:07:5d:80:bf:03:
         2a:fe:1b:03:81:02:ca:74:aa:08:ac:58:bd:a1:a0:b8:9c:28:
         dc:fd:d2:f2:d4:44:d4:33:35:90:97:d3:c8:fd:0d:24:14:83:
         b0:7f:3b:e1:3b:25:a3:2f:39:3c:74:be:1f:4b:3f:6c:e8:74:
         f5:58:f1:cd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 24 22:30:31 2024 by rpki-client on console-fra.rpki-client.org