Certificate

$ rpki-client -vvf rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jUv3mkGe7A-lM-X8pQ_zcqM8s5A.cer
File:                     jUv3mkGe7A-lM-X8pQ_zcqM8s5A.cer (raw, json)
Hash identifier:          NiOBFYbA6qSQ8qAyGQ2zqfwA9rtnhQw24b0JFkeFP6E=
Subject key identifier:   8D:4B:F7:9A:41:9E:EC:0F:A5:33:E5:FC:A5:0F:F3:72:A3:3C:B3:90
Authority key identifier: 0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
Certificate issuer:       /CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Certificate serial:       01D91B
Authority info access:    rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
Manifest:                 rsync://rpki.apnic.net/member_repository/A918497E/C320C226B5D811EE8DA66D85C4F9AE02/jUv3mkGe7A-lM-X8pQ_zcqM8s5A.mft
caRepository:             rsync://rpki.apnic.net/member_repository/A918497E/C320C226B5D811EE8DA66D85C4F9AE02/
Notify URL:               https://rrdp.apnic.net/notification.xml
Certificate not before:   Thu 18 Jan 2024 08:08:35 +0000
Certificate not after:    Mon 31 Mar 2025 00:00:00 +0000
Subordinate resources:    AS: 147006

Validation:               OK
Signature path:           rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 09 May 2024 08:07:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 121115 (0x1d91b)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
        Validity
            Not Before: Jan 18 08:08:35 2024 GMT
            Not After : Mar 31 00:00:00 2025 GMT
        Subject: CN=A918497E/serialNumber=8D4BF79A419EEC0FA533E5FCA50FF372A33CB390
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:04:aa:cc:bb:57:33:bf:b9:2b:82:b4:ca:83:
                    04:2f:7b:4f:e9:5e:a9:3d:81:72:76:43:b4:09:af:
                    4a:68:46:ae:c8:c0:00:f0:ae:b9:84:8a:31:91:c6:
                    a6:a0:e2:4a:0e:04:d7:db:0a:84:10:4e:10:a4:79:
                    ce:ba:dd:d6:9a:65:99:44:11:80:97:19:76:b1:b7:
                    b6:2a:51:bb:97:40:75:12:a4:ea:c3:08:3d:6c:1e:
                    a4:3a:84:58:4c:02:1a:c9:95:d7:c0:b8:82:fd:b0:
                    92:1b:8c:c8:33:7b:90:6a:d9:6e:d7:55:3d:c6:8e:
                    6e:1c:91:6e:90:e4:1e:c3:63:a7:8b:64:80:b3:4d:
                    03:52:50:3f:84:c5:6c:08:0e:7f:11:65:5a:31:fa:
                    9f:5d:af:11:cc:4d:c2:e7:51:cc:d8:bd:1b:97:ab:
                    22:d4:b5:8d:c6:8e:88:6f:51:02:07:47:f5:70:30:
                    8c:26:65:2d:19:df:c4:66:9c:eb:03:18:b7:12:d8:
                    91:23:d9:ba:b2:0f:b2:d4:17:4d:5b:1a:38:e4:5b:
                    66:e2:0e:1a:c1:09:78:36:3a:69:7e:a6:59:f1:7c:
                    e1:7b:1f:dc:69:3f:80:8e:62:dd:2f:59:81:77:9e:
                    7a:52:7b:7f:67:3a:1b:bd:86:dd:a3:f9:2d:c1:e1:
                    5c:51
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8D:4B:F7:9A:41:9E:EC:0F:A5:33:E5:FC:A5:0F:F3:72:A3:3C:B3:90
            X509v3 Authority Key Identifier:
                keyid:0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                CA Repository - URI:rsync://rpki.apnic.net/member_repository/A918497E/C320C226B5D811EE8DA66D85C4F9AE02/
                RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A918497E/C320C226B5D811EE8DA66D85C4F9AE02/jUv3mkGe7A-lM-X8pQ_zcqM8s5A.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  147006

    Signature Algorithm: sha256WithRSAEncryption
         91:6d:73:1d:2d:17:cd:be:c2:e5:a8:22:89:13:22:d8:ec:53:
         95:a5:b4:67:18:19:bd:dc:07:ef:f6:10:e6:6f:28:96:41:26:
         94:d0:fa:56:ea:45:12:0e:6b:95:1a:54:e6:18:53:90:18:1f:
         e7:5f:06:7b:a2:21:09:97:89:ea:79:16:4c:1d:2c:e2:4d:4a:
         9e:2f:e8:70:f0:dd:0d:f6:ec:73:8c:30:b3:46:e0:83:63:9e:
         29:e1:74:c7:83:27:dd:5d:2d:d5:1b:c3:fc:ea:ce:5a:cb:33:
         1c:2b:46:1d:88:19:09:a6:10:0c:1e:c7:c1:40:6c:13:ff:cc:
         dc:24:be:84:9f:87:1c:32:6e:83:8a:88:f4:13:18:1b:aa:f2:
         81:16:e1:69:ee:51:aa:99:a5:59:66:30:f2:4c:81:32:85:79:
         74:b9:c1:55:d5:6e:3a:8b:df:f5:76:c3:f3:0d:3e:22:3d:59:
         b2:d2:37:09:29:eb:cd:3f:00:68:18:4a:cb:8b:07:1e:1d:79:
         ea:17:e0:54:6a:bb:e8:8c:d9:29:ac:3f:23:e8:62:ba:cf:d0:
         1f:c9:8d:b6:e3:62:60:c2:dd:a4:f0:fe:3d:24:89:6c:d3:77:
         e3:1d:7a:15:07:72:8a:66:df:59:24:c8:2a:b7:ae:04:11:3c:
         c4:27:0c:b3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 2 08:52:52 2024 by rpki-client on console-fra.rpki-client.org