Certificate

$ rpki-client -vvf rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/if0nxQZ7TPQSKW_rps5tgxGFgAs.cer
File:                     if0nxQZ7TPQSKW_rps5tgxGFgAs.cer (raw, json)
Hash identifier:          d3aErTIZs8BgVvonmg0nJqnHAgJeC7Ln9R6iGwfzRY8=
Subject key identifier:   89:FD:27:C5:06:7B:4C:F4:12:29:6F:EB:A6:CE:6D:83:11:85:80:0B
Authority key identifier: 0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
Certificate issuer:       /CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Certificate serial:       01C742
Authority info access:    rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
Manifest:                 rsync://rpki.apnic.net/member_repository/A9185344/515CABE01DA111E2B2CD6D9308B02CD2/if0nxQZ7TPQSKW_rps5tgxGFgAs.mft
caRepository:             rsync://rpki.apnic.net/member_repository/A9185344/515CABE01DA111E2B2CD6D9308B02CD2/
Notify URL:               https://rrdp.apnic.net/notification.xml
Certificate not before:   Tue 31 Oct 2023 15:15:01 +0000
Certificate not after:    Mon 30 Dec 2024 00:00:00 +0000
Subordinate resources:    AS: 131284
                          IP: 103.13.64.0/22
                          IP: 137.59.120.0/22
                          IP: 180.222.136.0/21
                          IP: 203.171.96.0/19
                          IP: 2404:9b00::/32

Validation:               OK
Signature path:           rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 03 May 2024 07:49:47 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 116546 (0x1c742)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
        Validity
            Not Before: Oct 31 15:15:01 2023 GMT
            Not After : Dec 30 00:00:00 2024 GMT
        Subject: CN=A9185344/serialNumber=89FD27C5067B4CF412296FEBA6CE6D831185800B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9c:82:0e:ac:d4:b3:a7:4e:0d:b0:a9:22:1a:23:
                    3f:ba:9b:23:58:2d:96:6e:44:9f:e9:82:cd:a8:2c:
                    5d:c8:13:3c:cc:7a:de:c3:df:1f:c0:12:1e:76:b1:
                    30:ff:7d:a9:0d:e8:16:ea:2d:0c:54:f2:32:eb:da:
                    bf:ac:f6:01:0c:fe:50:a5:1e:cf:66:e7:a5:60:89:
                    79:92:5d:76:c6:07:01:16:90:a0:18:8b:bc:a1:bb:
                    c0:31:ec:f0:d6:fc:e4:34:f9:91:af:72:17:2c:a2:
                    c5:11:b5:fb:d2:07:c4:bc:88:a6:8c:84:da:c3:91:
                    5f:86:b6:5a:ce:3d:c3:84:ab:a9:ef:ca:e1:0e:50:
                    8f:69:a3:d0:b7:b3:1c:55:24:da:6b:ce:b8:3e:12:
                    e8:fd:ee:db:b9:a4:ee:d8:44:1e:41:5f:29:79:23:
                    99:66:bb:37:6d:70:d4:72:09:9e:f2:d4:77:fb:01:
                    97:3e:70:c2:7b:85:8e:95:00:f5:6a:26:a7:88:4c:
                    92:06:f9:87:8a:74:98:1d:fc:fa:d9:15:65:8e:77:
                    84:05:d4:96:1a:c2:6e:c4:d6:2e:cd:dc:bc:66:b1:
                    de:b0:2f:07:30:36:d6:a6:16:6f:08:0c:a3:92:5d:
                    46:47:17:07:8b:e9:d6:67:dc:f2:ec:a2:27:f1:ae:
                    66:cf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                89:FD:27:C5:06:7B:4C:F4:12:29:6F:EB:A6:CE:6D:83:11:85:80:0B
            X509v3 Authority Key Identifier:
                keyid:0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                CA Repository - URI:rsync://rpki.apnic.net/member_repository/A9185344/515CABE01DA111E2B2CD6D9308B02CD2/
                RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A9185344/515CABE01DA111E2B2CD6D9308B02CD2/if0nxQZ7TPQSKW_rps5tgxGFgAs.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  131284

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.13.64.0/22
                  137.59.120.0/22
                  180.222.136.0/21
                  203.171.96.0/19
                IPv6:
                  2404:9b00::/32

    Signature Algorithm: sha256WithRSAEncryption
         73:a0:18:1d:85:f2:92:25:8e:75:8d:4f:72:99:e2:c0:53:a4:
         32:94:2f:a6:31:c2:23:92:e5:84:e8:86:af:d3:91:8b:e5:18:
         f8:9c:40:53:33:88:09:0e:02:0a:b3:1d:6a:11:6c:e2:ff:2c:
         70:e5:7e:c3:05:a9:80:ad:d6:0b:44:64:0c:af:39:03:d8:48:
         5e:db:d5:68:b9:64:7b:e3:47:db:71:f4:ac:73:00:b1:db:79:
         20:b0:8d:d2:27:5b:a0:64:4a:a8:6c:8b:4c:2b:8c:bf:78:2f:
         67:fd:c3:49:d6:4f:18:8f:bd:8b:20:ba:a5:50:98:0a:68:28:
         94:7e:ee:e3:1f:0b:6f:95:e1:93:01:50:0d:e3:d6:ae:c1:34:
         39:3f:fe:3f:c0:b4:57:c4:3b:e3:ac:3c:7d:bb:4f:53:35:ba:
         7e:36:33:dd:3d:16:fe:50:e7:6b:70:2c:f4:fe:c6:2e:87:90:
         9d:5b:eb:df:be:f6:7c:47:a3:e2:91:26:3e:76:3a:4b:63:4d:
         a4:27:5f:d4:30:ee:30:9b:1a:2e:af:af:60:97:c9:a8:43:b0:
         0a:c6:06:1a:5a:98:8a:59:05:78:cb:83:24:a5:fb:af:b8:d3:
         13:d7:63:d3:b2:d0:44:79:17:a1:0e:7e:c4:29:76:a8:8d:f2:
         0e:4a:b9:c1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 26 11:03:06 2024 by rpki-client on console-ams.rpki-client.org