Certificate

$ rpki-client -vvf rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mc3A6r4YBBJhGaHVGpjMhxkT86k.cer
File:                     mc3A6r4YBBJhGaHVGpjMhxkT86k.cer (raw, json)
Hash identifier:          noHppNtdYUiwPWfZmpzbGL6ORYGe81GSfCfRSTK8+40=
Subject key identifier:   99:CD:C0:EA:BE:18:04:12:61:19:A1:D5:1A:98:CC:87:19:13:F3:A9
Authority key identifier: 0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
Certificate issuer:       /CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Certificate serial:       01CB6F
Authority info access:    rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
Manifest:                 rsync://rpki.apnic.net/member_repository/A9183F7F/E37E5B32150E11EB8CEB9543C4F9AE02/mc3A6r4YBBJhGaHVGpjMhxkT86k.mft
caRepository:             rsync://rpki.apnic.net/member_repository/A9183F7F/E37E5B32150E11EB8CEB9543C4F9AE02/
Notify URL:               https://rrdp.apnic.net/notification.xml
Certificate not before:   Thu 16 Nov 2023 16:52:03 +0000
Certificate not after:    Fri 31 Jan 2025 00:00:00 +0000
Subordinate resources:    AS: 141371
                          IP: 103.157.198.0/23
                          IP: 2001:df5:2a80::/47

Validation:               OK
Signature path:           rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 04 Apr 2024 23:00:27 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 117615 (0x1cb6f)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
        Validity
            Not Before: Nov 16 16:52:03 2023 GMT
            Not After : Jan 31 00:00:00 2025 GMT
        Subject: CN=A9183F7F/serialNumber=99CDC0EABE1804126119A1D51A98CC871913F3A9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:04:12:e4:37:1c:af:af:96:c0:5a:63:e3:31:
                    2f:4f:e1:72:76:a1:b3:a4:60:98:83:1a:a9:2f:44:
                    f9:9a:34:d9:29:b8:20:ef:ca:eb:b3:19:d2:f7:35:
                    05:23:e5:dd:3b:c8:33:1a:e0:d9:5c:14:1a:c1:cc:
                    49:1f:16:83:6d:0a:8d:52:7c:ef:bd:35:47:51:84:
                    ee:cd:37:f1:d8:9b:ad:c3:e9:e6:69:ac:32:03:ea:
                    2f:ff:9f:6f:1f:12:6b:10:3c:e2:90:1a:a5:21:aa:
                    69:0a:8e:d7:48:29:79:c4:e3:6e:73:8b:5c:ac:f8:
                    ff:47:37:91:bd:ad:b0:5a:7d:e3:6d:4a:8e:9f:54:
                    5e:d1:37:eb:a9:04:e9:67:80:d9:23:c4:cd:2d:d2:
                    8a:36:c2:4c:e3:a1:35:56:93:89:50:a4:2e:ee:a5:
                    55:a4:26:10:64:b5:1a:77:32:1e:d9:85:39:84:c0:
                    3b:a7:45:c8:c6:3e:0f:17:3b:87:8e:8b:0f:f3:a6:
                    a5:3f:b6:26:0d:e0:d8:21:11:1f:f8:5b:cc:26:3f:
                    72:d4:ac:da:89:74:51:df:a8:68:bd:6f:f1:cc:6f:
                    66:be:87:2e:c4:01:47:eb:a1:21:b8:b5:e2:52:5b:
                    9d:fe:69:a9:91:3d:25:e4:7f:9e:41:59:24:d6:8d:
                    51:c5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                99:CD:C0:EA:BE:18:04:12:61:19:A1:D5:1A:98:CC:87:19:13:F3:A9
            X509v3 Authority Key Identifier:
                keyid:0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                CA Repository - URI:rsync://rpki.apnic.net/member_repository/A9183F7F/E37E5B32150E11EB8CEB9543C4F9AE02/
                RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A9183F7F/E37E5B32150E11EB8CEB9543C4F9AE02/mc3A6r4YBBJhGaHVGpjMhxkT86k.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  141371

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.157.198.0/23
                IPv6:
                  2001:df5:2a80::/47

    Signature Algorithm: sha256WithRSAEncryption
         a2:cb:48:d2:58:dd:3f:d5:0e:99:4d:c1:c9:87:58:bb:5e:8a:
         b1:82:99:53:79:26:13:23:fc:ea:2f:d6:5d:ed:00:2a:6c:c6:
         d9:b5:34:21:49:f8:9e:cf:a0:11:01:b2:9e:09:90:82:49:74:
         5c:8a:a4:43:ee:7f:1a:47:10:b0:8a:69:40:33:3a:fc:98:1e:
         0b:aa:40:a4:75:dd:8b:bc:fc:4f:a4:02:4b:72:9a:46:17:c1:
         83:02:92:07:7d:c3:e9:7e:33:57:7e:5b:b9:1c:72:0c:a7:b8:
         6f:e9:18:11:d8:9e:3f:d6:da:82:80:eb:63:1a:4c:24:ce:f4:
         53:89:83:d2:81:7f:f9:79:29:85:55:6e:e6:44:2e:1f:d9:dd:
         7d:2f:15:3e:c1:c9:8e:75:d1:af:1c:a8:e7:b2:f6:0b:61:19:
         fd:83:f9:f8:ac:4f:c0:07:05:f4:bc:49:2e:54:70:2f:da:8a:
         c1:91:a5:76:e4:0c:57:2a:57:86:e6:93:fc:f3:87:7c:d2:f9:
         2f:55:28:73:20:f0:79:9c:03:44:14:42:40:6f:04:55:1e:a5:
         13:08:c7:0a:1c:6c:fc:bd:57:b7:da:0d:a9:e2:35:a4:b8:4e:
         84:d8:30:38:18:35:79:12:e0:15:d7:03:53:fb:ae:27:1c:b4:
         cc:02:c0:a2
-----BEGIN CERTIFICATE-----
MIIGKzCCBROgAwIBAgIDActvMA0GCSqGSIb3DQEBCwUAMEYxETAPBgNVBAMTCEE5
MERDNUJFMTEwLwYDVQQFEygwRTY1QTRGNUZEMzZCNUJENjhFQjNDOTIzNDA4OTc4
QzkwN0FBNzlGMB4XDTIzMTExNjE2NTIwM1oXDTI1MDEzMTAwMDAwMFowRjERMA8G
A1UEAxMIQTkxODNGN0YxMTAvBgNVBAUTKDk5Q0RDMEVBQkUxODA0MTI2MTE5QTFE
NTFBOThDQzg3MTkxM0YzQTkwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB
AQDCBBLkNxyvr5bAWmPjMS9P4XJ2obOkYJiDGqkvRPmaNNkpuCDvyuuzGdL3NQUj
5d07yDMa4NlcFBrBzEkfFoNtCo1SfO+9NUdRhO7NN/HYm63D6eZprDID6i//n28f
EmsQPOKQGqUhqmkKjtdIKXnE425zi1ys+P9HN5G9rbBafeNtSo6fVF7RN+upBOln
gNkjxM0t0oo2wkzjoTVWk4lQpC7upVWkJhBktRp3Mh7ZhTmEwDunRcjGPg8XO4eO
iw/zpqU/tiYN4NghER/4W8wmP3LUrNqJdFHfqGi9b/HMb2a+hy7EAUfroSG4teJS
W53+aamRPSXkf55BWSTWjVHFAgMBAAGjggMgMIIDHDAdBgNVHQ4EFgQUmc3A6r4Y
BBJhGaHVGpjMhxkT86kwHwYDVR0jBBgwFoAUDmWk9f02tb1o6zySNAiXjJB6p58w
DgYDVR0PAQH/BAQDAgEGMA8GA1UdEwEB/wQFMAMBAf8wcwYDVR0fBGwwajBooGag
ZIZicnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2
NjExRTJCQjQ2OEY3QzcyRkQxRkYyL0RtV2s5ZjAydGIxbzZ6eVNOQWlYakpCNnA1
OC5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L3JlcG9zaXRvcnkvOTgwNjUyRTBCNzdFMTFFN0E5NkEzOTUyMUE0
RjRGQjQvRG1XazlmMDJ0YjFvNnp5U05BaVhqSkI2cDU4LmNlcjBKBgNVHSABAf8E
QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj
Lm5ldC9SUEtJL0NQUy5wZGYwggEoBggrBgEFBQcBCwSCARowggEWMF8GCCsGAQUF
BzAFhlNyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5
MTgzRjdGL0UzN0U1QjMyMTUwRTExRUI4Q0VCOTU0M0M0RjlBRTAyLzB+BggrBgEF
BQcwCoZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9B
OTE4M0Y3Ri9FMzdFNUIzMjE1MEUxMUVCOENFQjk1NDNDNEY5QUUwMi9tYzNBNnI0
WUJCSmhHYUhWR3BqTWh4a1Q4NmsubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3Jy
ZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwGgYIKwYBBQUHAQgBAf8ECzAJ
oAcwBQIDAig7MDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIAATAGAwQBZ53GMA8EAgAC
MAkDBwEgAQ31KoAwDQYJKoZIhvcNAQELBQADggEBAKLLSNJY3T/VDplNwcmHWLte
irGCmVN5JhMj/Oov1l3tACpsxtm1NCFJ+J7PoBEBsp4JkIJJdFyKpEPufxpHELCK
aUAzOvyYHguqQKR13Yu8/E+kAktymkYXwYMCkgd9w+l+M1d+W7kccgynuG/pGBHY
nj/W2oKA62MaTCTO9FOJg9KBf/l5KYVVbuZELh/Z3X0vFT7ByY510a8cqOey9gth
Gf2D+fisT8AHBfS8SS5UcC/aisGRpXbkDFcqV4bmk/zzh3zS+S9VKHMg8HmcA0QU
QkBvBFUepRMIxwocbPy9V7faDaniNaS4ToTYMDgYNXkS4BXXA1P7ricctMwCwKI=
-----END CERTIFICATE-----
Generated at Fri Mar 29 00:00:57 2024 by rpki-client on console-fra.rpki-client.org