Certificate

$ rpki-client -vvf rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/madm1M-kWp-eN3glBJixJ2jEHho.cer
File:                     madm1M-kWp-eN3glBJixJ2jEHho.cer (raw, json)
Hash identifier:          tBy76r4ynqOs5OIIqH9Qywr86+WnYWlbdLLPxWQ13Ek=
Subject key identifier:   99:A7:66:D4:CF:A4:5A:9F:9E:37:78:25:04:98:B1:27:68:C4:1E:1A
Authority key identifier: 0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
Certificate issuer:       /CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Certificate serial:       021AAB
Authority info access:    rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
Manifest:                 rsync://rpki.apnic.net/member_repository/A9155501/2688E30268DF11EF83089E0BC4F9AE02/madm1M-kWp-eN3glBJixJ2jEHho.mft
caRepository:             rsync://rpki.apnic.net/member_repository/A9155501/2688E30268DF11EF83089E0BC4F9AE02/
Notify URL:               https://rrdp.apnic.net/notification.xml
Certificate not before:   Mon 11 Nov 2024 05:42:37 +0000
Certificate not after:    Sat 31 Jan 2026 00:00:00 +0000
Subordinate resources:    AS: 147313
                          IP: 103.174.204.0/23

Validation:               OK
Signature path:           rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 30 Nov 2024 02:50:13 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 137899 (0x21aab)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
        Validity
            Not Before: Nov 11 05:42:37 2024 GMT
            Not After : Jan 31 00:00:00 2026 GMT
        Subject: CN=A9155501/serialNumber=99A766D4CFA45A9F9E3778250498B12768C41E1A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:0c:17:19:58:b3:a0:80:13:9c:2f:92:e1:d8:
                    de:d1:8a:78:5c:8a:15:8f:5a:ee:c0:1f:de:dc:9d:
                    be:b2:79:68:54:31:0e:b5:9c:4e:98:83:de:b7:86:
                    8c:14:f6:a5:92:48:60:5f:75:93:9e:b5:c9:4e:ef:
                    50:e1:a9:b9:f6:ef:3f:04:2b:8f:c4:3f:1b:fd:60:
                    aa:19:a6:07:ca:76:44:19:da:67:2e:fe:6f:25:af:
                    39:a7:e7:cc:0c:f0:f2:fe:6d:81:fc:be:ba:d8:bc:
                    bf:f0:ea:b6:ef:58:5e:6c:2e:51:13:b0:c7:c1:e7:
                    b4:96:b9:e4:d5:6d:0e:70:21:07:69:fd:33:59:3e:
                    11:8f:aa:88:b2:9c:47:e7:67:37:fb:d6:c3:7f:60:
                    dd:22:33:0d:c4:ba:63:f5:d2:20:8f:21:00:3f:3f:
                    94:d3:25:82:dc:28:91:4e:a8:c0:13:d8:93:cf:2e:
                    28:c9:3b:e1:2d:8e:c7:e9:f8:46:50:1d:68:2f:81:
                    c4:8f:32:ca:1e:d9:7d:10:f4:c1:1b:cb:ae:b0:cf:
                    7a:8d:a0:0d:05:78:01:cc:01:7d:0a:8a:e0:70:71:
                    f8:e9:80:73:94:84:67:15:50:9c:01:79:4a:45:fa:
                    92:8a:c0:b7:eb:bf:39:3a:0c:4c:5e:48:17:76:d8:
                    b8:1f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                99:A7:66:D4:CF:A4:5A:9F:9E:37:78:25:04:98:B1:27:68:C4:1E:1A
            X509v3 Authority Key Identifier:
                keyid:0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                CA Repository - URI:rsync://rpki.apnic.net/member_repository/A9155501/2688E30268DF11EF83089E0BC4F9AE02/
                RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A9155501/2688E30268DF11EF83089E0BC4F9AE02/madm1M-kWp-eN3glBJixJ2jEHho.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  147313

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.174.204.0/23

    Signature Algorithm: sha256WithRSAEncryption
         18:e0:96:f5:29:e1:64:3e:4b:b0:9e:80:4b:77:8d:d0:b2:38:
         45:63:c0:ec:6c:54:20:df:c3:77:55:3b:fa:57:ee:bd:0f:6c:
         84:13:db:72:01:2f:b7:49:81:d9:74:9a:63:80:08:64:72:ac:
         09:c3:a8:8d:3f:cd:63:76:72:cb:e5:b5:04:5e:53:e2:b5:3e:
         ce:f2:d4:e2:e7:8e:08:c3:97:a0:38:6b:02:eb:1a:9a:10:7b:
         23:f4:f7:47:d8:2d:55:c6:88:60:b5:57:4a:30:75:08:68:19:
         ff:2b:67:17:45:7e:f7:72:40:d9:0c:25:da:dd:ee:39:80:ea:
         b1:85:4a:61:1f:92:08:8d:70:95:e4:7a:8f:ab:f7:37:66:d1:
         31:71:14:52:ec:39:6a:76:fd:e5:58:10:0c:1d:42:de:ca:96:
         86:7c:ec:48:5a:4d:1f:84:66:5b:ba:f1:54:24:cf:cc:35:bd:
         63:af:b7:5b:96:19:c4:83:af:1a:a4:b8:89:a4:cf:52:a8:7e:
         e5:e6:bc:f2:eb:da:17:f3:ab:df:e5:44:9a:8b:8b:79:dc:69:
         ba:d7:2c:53:2e:15:28:e2:63:71:70:65:78:44:57:71:33:23:
         de:07:d3:86:09:19:c9:bd:f4:42:63:59:20:d0:0e:61:27:8a:
         c8:8e:3f:00
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 04:00:01 2024 by rpki-client on console-ams.rpki-client.org