Certificate

$ rpki-client -vvf rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mdb3fuCkNuVIfpjO5VK2S17GWxM.cer
File:                     mdb3fuCkNuVIfpjO5VK2S17GWxM.cer (raw, json)
Hash identifier:          2ssdgXqqAvCXYnuH+8x+TY8NtLRPSyFKa0yUVFXajWM=
Subject key identifier:   99:D6:F7:7E:E0:A4:36:E5:48:7E:98:CE:E5:52:B6:4B:5E:C6:5B:13
Authority key identifier: 0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
Certificate issuer:       /CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Certificate serial:       01C108
Authority info access:    rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
Manifest:                 rsync://rpki.apnic.net/member_repository/A912A799/0DA9F02E1DA611E2B82B239D08B02CD2/mdb3fuCkNuVIfpjO5VK2S17GWxM.mft
caRepository:             rsync://rpki.apnic.net/member_repository/A912A799/0DA9F02E1DA611E2B82B239D08B02CD2/
Notify URL:               https://rrdp.apnic.net/notification.xml
Certificate not before:   Sun 01 Oct 2023 13:10:38 +0000
Certificate not after:    Mon 30 Dec 2024 00:00:00 +0000
Subordinate resources:    AS: 55748
                          IP: 103.7.198.0/23
                          IP: 103.8.88.0/22
                          IP: 202.52.38.0/24
                          IP: 202.52.154.0/24
                          IP: 202.59.234.0/23

Validation:               OK
Signature path:           rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 05 Apr 2024 04:49:26 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 114952 (0x1c108)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
        Validity
            Not Before: Oct  1 13:10:38 2023 GMT
            Not After : Dec 30 00:00:00 2024 GMT
        Subject: CN=A912A799/serialNumber=99D6F77EE0A436E5487E98CEE552B64B5EC65B13
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:64:7b:c5:60:93:f9:da:08:49:8e:cf:cf:26:
                    60:e5:b8:9c:e2:fb:7b:99:83:bd:8d:1f:ef:24:84:
                    ca:e8:21:9e:0c:5a:de:b1:89:7c:4d:29:9e:62:2c:
                    81:08:f0:f3:5a:bd:39:81:a8:07:e9:55:ee:41:9e:
                    0c:50:c5:22:0f:00:dd:e5:9b:36:1d:a5:73:bf:c1:
                    64:a3:de:46:74:1f:2a:67:6e:f5:0b:c1:44:3c:93:
                    63:22:cf:1c:1e:61:96:3d:42:42:3e:eb:32:3e:a7:
                    d0:54:c8:6b:8f:15:e3:6e:a6:ba:f6:3b:ee:45:ae:
                    97:d5:e8:b5:89:f7:8a:fc:09:94:c9:ab:24:e9:53:
                    1c:d0:97:06:25:3e:0f:4e:3f:d8:e4:dc:69:94:d5:
                    68:d3:a9:59:61:5c:09:86:7b:6c:c7:71:85:ea:d4:
                    d2:f0:a4:d2:3b:04:ea:70:61:9c:a7:56:ed:c6:ad:
                    94:18:35:c2:70:39:b0:72:10:da:c5:a0:1d:20:d6:
                    46:a4:c2:dc:0a:b6:fe:20:dc:5f:8c:94:9c:34:70:
                    b1:fa:21:c4:0c:c8:76:f8:bc:f7:2b:59:05:80:4a:
                    b1:0f:15:33:f5:cb:c8:b7:d0:1c:7f:9b:96:01:77:
                    c4:c4:61:0d:eb:48:17:d7:0c:50:c3:71:90:72:e0:
                    62:f3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                99:D6:F7:7E:E0:A4:36:E5:48:7E:98:CE:E5:52:B6:4B:5E:C6:5B:13
            X509v3 Authority Key Identifier:
                keyid:0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                CA Repository - URI:rsync://rpki.apnic.net/member_repository/A912A799/0DA9F02E1DA611E2B82B239D08B02CD2/
                RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A912A799/0DA9F02E1DA611E2B82B239D08B02CD2/mdb3fuCkNuVIfpjO5VK2S17GWxM.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  55748

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.7.198.0/23
                  103.8.88.0/22
                  202.52.38.0/24
                  202.52.154.0/24
                  202.59.234.0/23

    Signature Algorithm: sha256WithRSAEncryption
         59:24:a7:55:f8:c9:fc:1a:e1:7d:bf:da:2d:f2:5b:ac:42:74:
         e9:64:ae:37:89:c5:9b:ed:77:e1:df:bb:32:f3:ed:6b:43:00:
         95:27:a0:14:43:aa:44:f4:b6:44:5a:11:ba:7b:c9:dc:4e:2e:
         f6:e5:02:f5:d6:0e:8e:44:2a:4a:39:9c:c1:64:d8:79:de:45:
         79:89:a1:6d:1b:55:e8:f9:a1:62:6d:4c:e2:7e:0b:3e:9d:4b:
         3f:09:b1:6a:58:86:3e:47:9d:9e:79:b5:e8:6e:bf:e2:63:6c:
         69:aa:0e:28:b1:39:a4:0f:07:84:a9:7c:83:ca:aa:b2:42:6a:
         9f:96:0e:14:8f:1a:2f:04:7a:12:60:10:0c:0d:d7:a0:07:dd:
         a0:40:db:f1:07:0c:e5:e6:a4:50:26:f4:79:c7:00:4e:2a:54:
         4e:db:45:c6:fa:ee:1e:13:9a:b4:d0:f2:1d:27:15:11:aa:f1:
         49:86:d0:c2:df:d8:78:5c:d0:f2:82:c4:43:aa:12:f7:73:98:
         25:bc:87:20:fa:db:ce:f9:75:63:d2:0c:8d:1c:6a:fb:46:64:
         1e:5f:c0:09:51:ca:ec:28:5c:aa:db:54:c8:e0:67:42:46:f5:
         71:7f:2b:2b:99:79:ba:2d:ed:ab:5e:a0:76:e3:d0:7e:d8:d8:
         e4:70:31:74
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 29 06:02:37 2024 by rpki-client on console-fra.rpki-client.org