Certificate

$ rpki-client -vvf rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/n47RxT7pDTyshKZHDEt1lMVXXYU.cer
File:                     n47RxT7pDTyshKZHDEt1lMVXXYU.cer (raw, json)
Hash identifier:          1mLTDPB+M5O6lGu04w+uQ8IwcfKjKNFl9wp3qgP5/JA=
Subject key identifier:   9F:8E:D1:C5:3E:E9:0D:3C:AC:84:A6:47:0C:4B:75:94:C5:57:5D:85
Authority key identifier: 0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
Certificate issuer:       /CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Certificate serial:       01D735
Authority info access:    rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
Manifest:                 rsync://rpki.apnic.net/member_repository/A912B983/E6A8ACECFEA211EDAEF29047C4F9AE02/n47RxT7pDTyshKZHDEt1lMVXXYU.mft
caRepository:             rsync://rpki.apnic.net/member_repository/A912B983/E6A8ACECFEA211EDAEF29047C4F9AE02/
Notify URL:               https://rrdp.apnic.net/notification.xml
Certificate not before:   Mon 08 Jan 2024 13:32:24 +0000
Certificate not after:    Sun 02 Mar 2025 00:00:00 +0000
Subordinate resources:    AS: 140869
                          IP: 103.42.6.0/23

Validation:               OK
Signature path:           rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 26 Apr 2024 23:35:43 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 120629 (0x1d735)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
        Validity
            Not Before: Jan  8 13:32:24 2024 GMT
            Not After : Mar  2 00:00:00 2025 GMT
        Subject: CN=A912B983/serialNumber=9F8ED1C53EE90D3CAC84A6470C4B7594C5575D85
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9b:79:34:58:92:cb:33:f8:9e:0a:b1:24:16:2f:
                    cf:74:db:92:21:d1:c9:5b:2e:9a:e5:d9:d0:8e:c1:
                    09:79:19:55:00:d3:1d:d0:c1:62:7f:be:65:fa:38:
                    c2:54:cf:45:c7:90:4b:86:ed:47:9e:81:89:ba:56:
                    03:32:ac:c4:b8:ce:bd:39:64:a4:22:99:aa:a2:3b:
                    7c:2a:c8:91:3e:a3:72:c4:72:fa:2c:d9:fa:07:14:
                    ce:6f:72:46:9e:6b:a2:89:09:db:b9:8c:46:e4:5e:
                    8d:e4:4a:b5:55:a6:ba:5a:46:b2:57:dd:b2:16:2e:
                    e1:6a:ae:6e:20:54:05:39:86:49:4c:60:a9:be:b3:
                    6a:78:41:52:7c:46:6e:27:7f:15:5d:af:c7:ba:a8:
                    b6:e3:a7:85:f2:4c:94:55:ff:9c:4a:82:0c:d2:90:
                    77:d7:be:11:10:a4:44:50:ad:3b:c6:d2:88:d3:70:
                    9a:be:71:cf:7f:e1:56:6c:6b:31:15:a3:28:33:bf:
                    df:cb:25:b1:2e:8b:2c:f3:93:fc:7e:0d:e0:73:aa:
                    de:a1:7a:98:e3:46:d9:27:76:d3:ad:f8:ab:4d:2d:
                    9f:78:9b:05:88:dd:dd:f3:3a:d0:12:a8:b0:26:55:
                    0f:85:26:dd:73:bf:82:a5:47:e9:ef:04:4f:ad:fc:
                    74:5b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9F:8E:D1:C5:3E:E9:0D:3C:AC:84:A6:47:0C:4B:75:94:C5:57:5D:85
            X509v3 Authority Key Identifier:
                keyid:0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                CA Repository - URI:rsync://rpki.apnic.net/member_repository/A912B983/E6A8ACECFEA211EDAEF29047C4F9AE02/
                RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A912B983/E6A8ACECFEA211EDAEF29047C4F9AE02/n47RxT7pDTyshKZHDEt1lMVXXYU.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  140869

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.42.6.0/23

    Signature Algorithm: sha256WithRSAEncryption
         8a:03:1e:83:59:f8:b1:84:92:28:42:5e:f7:dc:fd:d6:fa:81:
         d9:52:6e:8a:ae:1e:a0:1d:5c:95:9f:e8:e9:2e:a1:fd:81:53:
         7e:45:7d:0b:1f:46:25:95:12:86:a5:d5:d1:90:2f:49:6a:ab:
         0b:36:f2:a5:59:26:91:67:ff:6c:c5:5b:58:66:ee:5b:a0:24:
         08:f5:c6:01:34:5a:d7:cc:6f:d0:0a:2f:b3:86:72:44:24:46:
         86:e3:a0:3c:4c:02:07:f2:14:36:fe:09:5d:58:0b:eb:d4:3b:
         a6:1e:73:d9:c0:7e:71:64:87:93:81:3e:c5:ef:f1:91:73:73:
         bd:a7:5f:21:3d:e7:48:b6:b7:30:51:c2:c5:3f:55:f5:f2:b8:
         31:64:5a:23:08:e1:30:b9:f9:71:b6:31:69:09:a5:2f:a9:cf:
         78:2a:fc:2e:f6:8c:79:50:96:d2:a3:07:cd:1c:e8:8c:2b:8c:
         a5:4d:1d:15:73:1d:61:11:06:2d:8c:17:34:90:6d:87:1b:d0:
         dd:9c:39:16:10:1e:db:c8:f9:33:0b:04:22:66:85:92:e7:61:
         32:8a:3f:16:e4:53:c9:7a:fd:df:df:f8:42:3d:ae:4a:c0:ab:
         24:9d:22:5a:60:be:da:6a:46:aa:7d:c0:b0:9a:1e:43:0f:92:
         3e:3c:21:60
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 20 01:10:34 2024 by rpki-client on console-ams.rpki-client.org