Certificate

$ rpki-client -vvf rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/myW9LONVkDK160RX4FyBCui4qqw.cer
File:                     myW9LONVkDK160RX4FyBCui4qqw.cer (raw, json)
Hash identifier:          1VkmiGMQQF2heqH1irmjIFmudmAQhjF9Ytk2mWu119M=
Subject key identifier:   9B:25:BD:2C:E3:55:90:32:B5:EB:44:57:E0:5C:81:0A:E8:B8:AA:AC
Authority key identifier: 0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
Certificate issuer:       /CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Certificate serial:       01C6F9
Authority info access:    rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
Manifest:                 rsync://rpki.apnic.net/member_repository/A91A6104/E7E9336428B911EA9B7EAB31C4F9AE02/myW9LONVkDK160RX4FyBCui4qqw.mft
caRepository:             rsync://rpki.apnic.net/member_repository/A91A6104/E7E9336428B911EA9B7EAB31C4F9AE02/
Notify URL:               https://rrdp.apnic.net/notification.xml
Certificate not before:   Mon 30 Oct 2023 17:43:53 +0000
Certificate not after:    Mon 30 Dec 2024 00:00:00 +0000
Subordinate resources:    AS: 139632
                          IP: 103.142.184.0/23
                          IP: 2001:df1:4e80::/48

Validation:               OK
Signature path:           rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 02 May 2024 00:57:28 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 116473 (0x1c6f9)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
        Validity
            Not Before: Oct 30 17:43:53 2023 GMT
            Not After : Dec 30 00:00:00 2024 GMT
        Subject: CN=A91A6104/serialNumber=9B25BD2CE3559032B5EB4457E05C810AE8B8AAAC
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d3:50:91:e7:e2:3d:bf:75:28:09:b1:1b:d8:62:
                    75:d6:c2:d2:90:08:06:64:d1:35:d7:8a:36:89:b8:
                    64:f0:63:fa:eb:47:b7:24:e8:fb:87:a5:25:c8:e7:
                    c6:87:7b:8b:f4:a8:1f:fd:19:06:53:52:b8:15:f4:
                    1e:06:8c:b0:77:9a:0f:12:bc:65:e5:08:7f:85:df:
                    3d:67:70:2d:4b:b5:98:85:df:d1:de:18:7b:ed:77:
                    5c:49:6c:70:19:a5:33:f4:70:50:d3:8d:0c:3b:06:
                    b0:19:2b:95:4d:b4:b0:5e:c8:8a:1f:9f:01:eb:16:
                    c2:55:51:a3:4d:c6:a9:41:7c:56:8b:22:23:97:b5:
                    8f:ad:d3:ca:ff:07:df:c2:91:97:35:40:50:24:e3:
                    3a:d3:d7:6e:da:51:10:30:3e:fe:48:79:dc:77:4f:
                    fb:da:8e:6a:17:8e:e1:70:85:1c:70:51:0f:f6:09:
                    67:62:49:d7:38:c6:32:fd:e0:f8:ee:9d:6d:55:2e:
                    2c:a8:86:87:e4:81:b0:b7:65:ed:19:3d:2e:61:ef:
                    cb:26:bf:c4:74:6a:28:c3:f6:f4:c7:c2:f4:24:98:
                    db:50:b8:ec:69:13:39:35:c9:78:f2:1c:75:9b:6d:
                    eb:48:b1:0a:23:2b:cb:ae:d9:ec:0e:91:e2:7d:3e:
                    7a:0f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9B:25:BD:2C:E3:55:90:32:B5:EB:44:57:E0:5C:81:0A:E8:B8:AA:AC
            X509v3 Authority Key Identifier:
                keyid:0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                CA Repository - URI:rsync://rpki.apnic.net/member_repository/A91A6104/E7E9336428B911EA9B7EAB31C4F9AE02/
                RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A91A6104/E7E9336428B911EA9B7EAB31C4F9AE02/myW9LONVkDK160RX4FyBCui4qqw.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  139632

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.142.184.0/23
                IPv6:
                  2001:df1:4e80::/48

    Signature Algorithm: sha256WithRSAEncryption
         d6:b2:f7:fc:01:8f:84:79:e6:6c:8b:ce:a9:ef:16:6a:49:d1:
         4b:e1:8e:12:ce:16:57:d9:eb:5d:f0:c5:6a:17:f4:f2:f7:89:
         79:58:c9:78:fd:7b:2b:c0:9e:f9:9b:16:0d:1a:10:0e:aa:60:
         c5:bc:6f:f1:1a:13:7e:9f:aa:49:3a:af:c6:c1:08:a0:e1:68:
         50:f3:f8:53:14:7d:01:ce:68:bf:5a:01:77:a0:3f:27:73:c4:
         36:68:d7:fd:d0:91:42:0a:07:b7:24:9f:18:54:3b:40:95:e9:
         db:13:d6:d3:ca:27:41:42:08:f9:b6:f6:0a:11:57:35:6d:7b:
         82:f8:39:d7:02:24:52:fb:dc:98:d6:3a:df:96:04:3a:78:cb:
         fa:e0:a6:6b:93:f0:43:1a:9c:ce:63:ac:eb:38:17:de:42:a9:
         9c:3d:98:70:f8:80:d1:53:17:ab:53:6e:31:a5:d8:89:e0:93:
         25:34:60:39:4f:d8:45:10:02:10:3e:9b:de:e1:db:01:9e:10:
         64:ab:f1:69:51:07:09:a8:e5:44:36:94:bb:3a:e9:96:d9:20:
         58:7f:f4:61:85:d6:38:dd:9a:03:9f:11:3b:70:3f:f6:a5:7a:
         67:42:71:0f:ef:8e:47:10:09:c8:a0:a7:9b:ad:4d:b6:e3:0c:
         1d:83:ae:44
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----