Certificate

$ rpki-client -vvf rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jX4wWDULuN_v_Od3C7yMhrdioeQ.cer
File:                     jX4wWDULuN_v_Od3C7yMhrdioeQ.cer (raw, json)
Hash identifier:          B7oqd+wYu0WKUgEYjXiHt8XYIEvP6Y3j+zDZcDks2As=
Subject key identifier:   8D:7E:30:58:35:0B:B8:DF:EF:FC:E7:77:0B:BC:8C:86:B7:62:A1:E4
Authority key identifier: 0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
Certificate issuer:       /CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Certificate serial:       01F877
Authority info access:    rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
Manifest:                 rsync://rpki.apnic.net/member_repository/A9110C51/476A7BE07BBC11EA963F3686C4F9AE02/jX4wWDULuN_v_Od3C7yMhrdioeQ.mft
caRepository:             rsync://rpki.apnic.net/member_repository/A9110C51/476A7BE07BBC11EA963F3686C4F9AE02/
Notify URL:               https://rrdp.apnic.net/notification.xml
Certificate not before:   Tue 11 Jun 2024 12:22:00 +0000
Certificate not after:    Wed 30 Jul 2025 00:00:00 +0000
Subordinate resources:    AS: 137580
                          IP: 103.114.24.0/22
                          IP: 2407:44c0::/32

Validation:               OK
Signature path:           rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 30 Nov 2024 02:50:13 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 129143 (0x1f877)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
        Validity
            Not Before: Jun 11 12:22:00 2024 GMT
            Not After : Jul 30 00:00:00 2025 GMT
        Subject: CN=A9110C51/serialNumber=8D7E3058350BB8DFEFFCE7770BBC8C86B762A1E4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:dc:c7:3b:5a:da:a8:b1:73:af:cc:9e:bd:7f:
                    9c:48:3a:f6:32:75:51:1d:8c:84:f3:72:c5:88:3b:
                    70:8b:4f:e0:64:7d:43:b9:f4:67:be:aa:28:89:63:
                    d4:73:f2:8b:a3:45:81:4e:ee:93:84:39:04:f1:65:
                    d1:03:76:99:5f:dc:94:f9:c5:e4:ab:e8:bd:ef:52:
                    09:c8:cb:8f:86:66:14:ea:09:45:17:b8:d5:d4:de:
                    75:00:75:b2:06:6c:49:fb:c8:e5:36:3d:10:d3:8f:
                    3c:67:18:a9:50:a0:c4:d7:f3:29:56:21:cb:ba:c6:
                    a9:4c:6d:54:24:b2:77:94:c5:fd:f9:87:e3:f6:50:
                    c0:0c:02:e0:89:b8:0d:b9:c1:49:00:a1:56:63:94:
                    35:bf:43:59:24:93:c0:f2:4b:79:f0:6e:64:7d:e8:
                    12:19:7f:c9:7a:45:b1:8d:8f:a2:0d:97:7a:d1:fd:
                    3e:b8:20:45:61:92:0b:7b:e9:48:27:4a:ef:63:c3:
                    ec:39:08:d7:1d:ee:ec:ac:c3:b3:34:c2:78:15:2a:
                    17:60:56:53:32:25:04:0f:14:b7:72:ad:62:c1:c6:
                    8c:38:d8:98:64:15:de:b4:a8:97:9f:e4:55:3e:d2:
                    e5:09:31:bb:26:de:74:08:9f:0a:f5:57:d0:2a:8e:
                    ac:e7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8D:7E:30:58:35:0B:B8:DF:EF:FC:E7:77:0B:BC:8C:86:B7:62:A1:E4
            X509v3 Authority Key Identifier:
                keyid:0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                CA Repository - URI:rsync://rpki.apnic.net/member_repository/A9110C51/476A7BE07BBC11EA963F3686C4F9AE02/
                RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A9110C51/476A7BE07BBC11EA963F3686C4F9AE02/jX4wWDULuN_v_Od3C7yMhrdioeQ.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  137580

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.114.24.0/22
                IPv6:
                  2407:44c0::/32

    Signature Algorithm: sha256WithRSAEncryption
         9a:72:b0:49:87:06:32:e6:dc:c7:a8:09:79:d0:14:bd:b0:25:
         6b:1c:d5:c2:3c:19:31:aa:7b:90:7b:9f:70:07:12:fb:2b:84:
         e4:79:df:74:2f:6b:25:ad:d5:b6:5f:51:8e:cb:c0:fb:56:e9:
         44:52:ee:f8:a6:62:6f:08:c6:5f:64:7b:4b:52:b7:40:f2:1b:
         54:e2:10:41:1d:b2:d6:44:86:19:17:ad:aa:54:8e:d3:a2:11:
         d4:23:d7:d0:11:d6:f1:3f:2f:3e:bd:fe:e2:cd:35:bf:24:5f:
         b1:b2:5e:cc:b7:8a:c5:ca:8b:77:b9:cd:8e:43:5d:ed:a7:93:
         5e:9b:25:b8:66:f8:84:80:15:96:47:1d:36:39:ca:1b:88:62:
         0a:a7:ba:c1:75:97:94:91:a1:b7:04:16:fe:6a:34:00:0d:df:
         56:6a:c8:bb:3c:56:38:23:19:b0:09:84:21:be:2a:f8:12:85:
         4f:02:f9:a9:20:cf:6f:c3:80:14:ae:96:f8:71:3e:c8:f6:fe:
         06:5f:1b:76:14:6a:f7:84:dd:a0:1d:47:6d:95:3d:da:93:90:
         e2:07:1a:62:9e:9c:a0:39:d3:c1:70:84:ed:60:c2:83:1b:26:
         4c:62:30:1c:89:14:28:e8:3c:33:e3:1c:b1:fd:23:e6:81:2a:
         79:10:e5:2f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----