Certificate

$ rpki-client -vvf rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/m8dlGsS6v4xEeFNPraYQrNp0a9Q.cer
File:                     m8dlGsS6v4xEeFNPraYQrNp0a9Q.cer (raw, json)
Hash identifier:          y8oYTaLcaTqfJlAI6z2r4sfLx8lgsTdds5Rqlo4MjeQ=
Subject key identifier:   9B:C7:65:1A:C4:BA:BF:8C:44:78:53:4F:AD:A6:10:AC:DA:74:6B:D4
Authority key identifier: 0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
Certificate issuer:       /CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Certificate serial:       01A9EE
Authority info access:    rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
Manifest:                 rsync://rpki.apnic.net/member_repository/A9143DB0/B895AF74051511E58D49AE42C4F9AE02/m8dlGsS6v4xEeFNPraYQrNp0a9Q.mft
caRepository:             rsync://rpki.apnic.net/member_repository/A9143DB0/B895AF74051511E58D49AE42C4F9AE02/
Notify URL:               https://rrdp.apnic.net/notification.xml
Certificate not before:   Wed 14 Jun 2023 01:09:33 +0000
Certificate not after:    Wed 29 May 2024 00:00:00 +0000
Subordinate resources:    AS: 63944
                          AS: 64005
                          AS: 133439
                          AS: 137812
                          IP: 103.228.200.0/22
                          IP: 150.107.48.0/22
                          IP: 2001:df4:3800::/48
                          IP: 2400:eb80::/32

Validation:               OK
Signature path:           rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 30 Apr 2024 21:54:59 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 109038 (0x1a9ee)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
        Validity
            Not Before: Jun 14 01:09:33 2023 GMT
            Not After : May 29 00:00:00 2024 GMT
        Subject: CN=A9143DB0/serialNumber=9BC7651AC4BABF8C4478534FADA610ACDA746BD4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:10:77:3f:d0:52:42:3d:d8:85:43:5d:07:81:
                    8c:96:5d:1d:3b:2f:ce:16:d5:c4:cf:1b:25:17:b1:
                    91:6d:9e:48:d1:5c:70:3a:04:f0:da:46:a7:1d:22:
                    79:db:49:b6:67:87:a6:5b:41:e8:b1:0b:db:d2:a8:
                    de:d4:f6:c3:13:66:04:2a:bb:39:b6:89:48:dd:15:
                    38:7b:d8:df:c1:c6:94:4f:22:f0:6f:47:54:27:29:
                    63:cb:4e:c9:5c:fe:86:7a:92:81:c7:e7:2c:54:31:
                    7e:76:c5:aa:3b:63:f6:10:4b:e0:62:53:c8:75:54:
                    2e:0f:43:05:06:71:b3:44:76:24:8b:0c:5f:14:2c:
                    a0:c2:b4:f1:9c:50:87:d7:d7:4c:0a:53:ad:53:ea:
                    25:99:be:15:1b:12:7c:d7:a1:62:7e:bc:85:56:a7:
                    8a:a1:55:04:51:d4:88:39:03:07:36:a6:50:73:13:
                    99:e4:59:ac:3f:b4:93:49:b4:b2:6b:6a:08:d0:75:
                    d1:17:6d:bd:a4:4b:27:c2:4c:be:55:25:e3:3f:af:
                    08:8f:b8:41:f8:fc:8f:2d:be:ab:e2:b5:f0:ee:7e:
                    80:b3:e6:9e:d4:a6:fe:4f:43:0b:13:aa:99:e4:4e:
                    bd:a2:44:50:31:35:a3:75:dd:bc:57:03:36:fd:8c:
                    a2:07
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9B:C7:65:1A:C4:BA:BF:8C:44:78:53:4F:AD:A6:10:AC:DA:74:6B:D4
            X509v3 Authority Key Identifier:
                keyid:0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                CA Repository - URI:rsync://rpki.apnic.net/member_repository/A9143DB0/B895AF74051511E58D49AE42C4F9AE02/
                RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A9143DB0/B895AF74051511E58D49AE42C4F9AE02/m8dlGsS6v4xEeFNPraYQrNp0a9Q.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  63944
                  64005
                  133439
                  137812

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.228.200.0/22
                  150.107.48.0/22
                IPv6:
                  2001:df4:3800::/48
                  2400:eb80::/32

    Signature Algorithm: sha256WithRSAEncryption
         0f:66:9e:e2:0b:06:1e:3e:34:df:cc:ea:69:0c:c3:bb:5e:f3:
         e5:87:4c:a8:0c:da:c8:d1:8a:89:bf:d2:55:90:7e:64:da:e3:
         55:97:f6:46:18:97:ab:d3:2b:75:93:16:9b:3d:68:f4:a6:26:
         06:85:fe:78:ea:0f:ab:87:51:a3:9b:99:c9:98:25:79:23:df:
         c2:86:ab:60:7b:9c:6d:04:c7:2e:73:44:48:cf:86:67:fe:cf:
         d0:ea:1c:52:3d:98:7b:19:08:96:67:e1:3c:89:18:b5:47:e6:
         ab:88:8f:8e:bb:55:14:96:35:f4:5e:ef:39:74:d8:33:b0:56:
         e5:fb:bc:18:b5:f9:14:12:a6:ba:de:5b:74:9b:86:8c:fd:ae:
         19:85:c1:e8:da:30:f9:76:a2:95:9e:6c:c8:82:03:07:7b:60:
         b5:bf:67:81:5d:dd:bc:42:7f:9e:7b:35:d8:17:59:bd:f4:5f:
         78:ce:72:3c:e0:6f:0a:89:f7:66:c9:c3:8c:10:8e:00:c0:cb:
         2d:2a:1b:8b:cf:ec:63:ff:87:59:e4:aa:b8:d4:1e:06:7d:e2:
         21:4c:cc:38:46:b5:26:28:0b:6f:2b:78:57:ca:cf:28:a5:da:
         99:eb:80:26:ce:8a:9c:75:15:5b:bc:43:60:7e:ef:30:0c:f9:
         97:d0:33:76
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 23 22:56:29 2024 by rpki-client on console-ams.rpki-client.org