Certificate

$ rpki-client -vvf rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mj_lQSKlCW0-3YgGDtTZGDy-GGc.cer
File:                     mj_lQSKlCW0-3YgGDtTZGDy-GGc.cer (raw, json)
Hash identifier:          CVp6WDFcD+iA9hT40jMHytvB5SIEkd0U6qVdkKtl038=
Subject key identifier:   9A:3F:E5:41:22:A5:09:6D:3E:DD:88:06:0E:D4:D9:18:3C:BE:18:67
Authority key identifier: 0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
Certificate issuer:       /CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Certificate serial:       01E6A9
Authority info access:    rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
Manifest:                 rsync://rpki.apnic.net/member_repository/A91BB493/5FCAB67268F311EA832DDB37C4F9AE02/mj_lQSKlCW0-3YgGDtTZGDy-GGc.mft
caRepository:             rsync://rpki.apnic.net/member_repository/A91BB493/5FCAB67268F311EA832DDB37C4F9AE02/
Notify URL:               https://rrdp.apnic.net/notification.xml
Certificate not before:   Tue 26 Mar 2024 19:32:00 +0000
Certificate not after:    Wed 28 May 2025 00:00:00 +0000
Subordinate resources:    AS: 140306
                          IP: 27.110.64.0/21
                          IP: 203.78.192.0/20
                          IP: 203.131.240.0/20
                          IP: 2001:218::/32

Validation:               OK
Signature path:           rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 29 Nov 2024 06:14:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 124585 (0x1e6a9)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
        Validity
            Not Before: Mar 26 19:32:00 2024 GMT
            Not After : May 28 00:00:00 2025 GMT
        Subject: CN=A91BB493/serialNumber=9A3FE54122A5096D3EDD88060ED4D9183CBE1867
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cf:ab:81:9e:5c:9f:e6:41:5e:7c:71:59:64:53:
                    bd:ae:e0:c5:f5:52:f9:6d:78:9b:8a:9a:c5:05:34:
                    df:73:03:c7:34:72:87:cf:3c:12:a6:80:b4:31:e3:
                    cd:d7:3c:3e:ae:5d:08:0a:20:1b:9d:f4:c8:52:c1:
                    d5:0e:db:19:d6:5f:ff:04:e6:ff:2f:e3:a0:93:31:
                    c5:cb:fe:91:af:60:fb:f3:d7:cf:8f:c1:7f:58:9f:
                    67:2c:37:c0:70:59:0d:3c:a4:17:70:09:9a:5e:20:
                    5d:11:58:dd:e8:e6:ed:a2:52:f3:89:fa:ce:6e:19:
                    4e:6a:0c:f1:fc:0a:f4:a2:fa:dd:cc:8d:3a:ed:6f:
                    4a:ec:e8:e5:f6:55:76:8c:18:d3:2c:84:66:4d:3e:
                    eb:56:30:46:fe:3b:b7:45:34:43:15:49:7b:8b:c4:
                    e9:4d:c6:4f:9e:62:92:93:24:40:f5:66:31:87:45:
                    6a:ea:c8:c6:f6:19:7c:84:a2:e4:64:4a:e0:1b:ce:
                    e3:e1:6b:47:0a:5d:ee:39:6f:6c:d1:a7:33:4c:fa:
                    b1:9b:51:36:cb:23:c8:49:ef:c9:33:63:3a:a5:7d:
                    9a:c5:18:14:41:59:b2:3b:dd:bb:6e:7e:0f:b5:aa:
                    db:8f:00:8c:7a:ec:79:c3:49:a8:a1:d7:58:ef:2d:
                    bd:13
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9A:3F:E5:41:22:A5:09:6D:3E:DD:88:06:0E:D4:D9:18:3C:BE:18:67
            X509v3 Authority Key Identifier:
                keyid:0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                CA Repository - URI:rsync://rpki.apnic.net/member_repository/A91BB493/5FCAB67268F311EA832DDB37C4F9AE02/
                RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A91BB493/5FCAB67268F311EA832DDB37C4F9AE02/mj_lQSKlCW0-3YgGDtTZGDy-GGc.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  140306

            sbgp-ipAddrBlock: critical
                IPv4:
                  27.110.64.0/21
                  203.78.192.0/20
                  203.131.240.0/20
                IPv6:
                  2001:218::/32

    Signature Algorithm: sha256WithRSAEncryption
         3f:ce:2c:a4:f1:ea:52:be:68:fa:7d:eb:e8:62:16:03:ca:26:
         35:79:b0:04:31:6c:9b:fc:bc:a7:b1:7c:11:18:df:71:3e:68:
         1a:48:d4:17:c7:99:b1:09:72:77:fb:8b:99:74:e0:c9:74:ac:
         8e:56:23:85:24:dc:cd:00:36:b2:f4:2f:23:c3:15:d1:6c:dd:
         4f:d1:ee:46:46:cf:30:67:22:54:e2:a2:33:a8:a6:4b:a3:f9:
         1b:b3:76:b5:dc:b1:5d:fe:06:13:5b:22:7d:bd:6a:16:b2:81:
         a6:d2:4b:dc:ab:3a:c3:7e:59:7c:87:22:03:66:52:ec:1d:b6:
         30:3a:92:0f:0a:66:fb:91:09:b1:31:a9:49:e8:80:8f:98:4a:
         aa:e0:eb:dc:72:05:20:8e:63:d2:6b:5e:e2:24:9c:1a:63:0c:
         14:65:b2:6d:3a:20:0b:7a:b4:eb:e6:76:9f:27:ec:bf:61:24:
         53:13:93:b4:eb:d8:62:50:55:f8:cc:7b:58:a0:99:8f:bd:af:
         c3:46:41:e7:16:c2:23:ff:54:19:8b:fb:92:9f:11:94:01:76:
         70:42:1d:8f:34:4e:4a:4c:a9:88:0d:da:99:8c:09:3b:9d:a7:
         6b:d9:ae:f7:ca:6f:c9:d6:b5:d1:4d:14:37:25:0b:35:a7:a1:
         2c:74:e3:89
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 06:59:05 2024 by rpki-client on console-fra.rpki-client.org