Certificate

$ rpki-client -vvf rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nsEhbSVkFkA8tcU-c0VTD4MnLN0.cer
File:                     nsEhbSVkFkA8tcU-c0VTD4MnLN0.cer (raw, json)
Hash identifier:          ORxdzKpRy3/dDeRasuougBFSfnHn1ZhjI2qI752oFhE=
Subject key identifier:   9E:C1:21:6D:25:64:16:40:3C:B5:C5:3E:73:45:53:0F:83:27:2C:DD
Authority key identifier: 0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
Certificate issuer:       /CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Certificate serial:       01E337
Authority info access:    rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
Manifest:                 rsync://rpki.apnic.net/member_repository/A9185D34/DBA87858E6A011EAA8544B43C4F9AE02/nsEhbSVkFkA8tcU-c0VTD4MnLN0.mft
caRepository:             rsync://rpki.apnic.net/member_repository/A9185D34/DBA87858E6A011EAA8544B43C4F9AE02/
Notify URL:               https://rrdp.apnic.net/notification.xml
Certificate not before:   Wed 06 Mar 2024 18:11:36 +0000
Certificate not after:    Thu 01 May 2025 00:00:00 +0000
Subordinate resources:    AS: 138574
                          IP: 103.133.134.0/23
                          IP: 2001:df7:e480::/48

Validation:               OK
Signature path:           rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 04 Apr 2024 23:00:27 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 123703 (0x1e337)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
        Validity
            Not Before: Mar  6 18:11:36 2024 GMT
            Not After : May  1 00:00:00 2025 GMT
        Subject: CN=A9185D34/serialNumber=9EC1216D256416403CB5C53E7345530F83272CDD
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9b:fb:ca:b3:aa:6d:33:07:02:15:75:6e:73:80:
                    be:c0:db:14:09:48:67:fe:c6:39:c8:40:05:86:f1:
                    82:34:23:75:71:bb:4f:32:19:81:3f:50:82:e7:a4:
                    45:9c:78:f6:67:d1:1d:b3:77:14:5d:4d:cc:71:7e:
                    ed:1f:90:c5:b1:39:a1:74:4e:5d:33:ab:2f:99:32:
                    c7:ad:87:5a:f5:8c:0d:5b:33:95:2e:79:67:51:26:
                    66:90:6c:e3:ca:59:34:6b:04:8b:f5:25:c5:13:b5:
                    c7:c5:08:a9:80:6a:27:f6:71:1f:4d:33:a6:29:b8:
                    a4:03:bd:07:ef:ca:01:3a:3e:c8:02:69:81:9e:8c:
                    2a:9d:33:35:ec:de:68:9b:86:05:3e:47:d7:dd:01:
                    d4:f0:ec:b1:5d:8a:ae:8b:e6:43:51:7d:54:b2:d8:
                    0d:34:72:87:e4:d9:41:24:be:0a:45:56:9e:63:ea:
                    cb:09:74:4b:05:12:5c:5b:c1:99:3f:41:d1:b2:ac:
                    8c:cf:01:40:e9:b5:bb:9f:f0:9a:ba:62:55:09:9a:
                    ec:c7:b0:14:69:32:56:db:de:e0:71:64:1c:9e:50:
                    84:18:f4:1a:88:a3:f6:55:a8:57:4e:54:94:68:9a:
                    95:67:4c:b2:9a:50:72:ab:b9:4e:c9:ee:f9:85:0b:
                    9f:43
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9E:C1:21:6D:25:64:16:40:3C:B5:C5:3E:73:45:53:0F:83:27:2C:DD
            X509v3 Authority Key Identifier:
                keyid:0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                CA Repository - URI:rsync://rpki.apnic.net/member_repository/A9185D34/DBA87858E6A011EAA8544B43C4F9AE02/
                RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A9185D34/DBA87858E6A011EAA8544B43C4F9AE02/nsEhbSVkFkA8tcU-c0VTD4MnLN0.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  138574

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.133.134.0/23
                IPv6:
                  2001:df7:e480::/48

    Signature Algorithm: sha256WithRSAEncryption
         57:de:04:54:a0:e6:15:96:35:93:59:3b:c7:d9:76:94:8e:b8:
         cb:40:e1:ba:6c:4c:c1:9b:f2:67:51:f1:d2:7f:fe:42:d6:93:
         a7:c5:d7:fb:59:05:dc:b4:23:21:42:07:c1:5d:fc:c8:62:ed:
         26:a7:83:ab:1d:ef:43:78:03:a8:89:f9:9a:fe:f3:04:8b:34:
         3e:eb:f8:78:17:39:95:a3:97:92:c7:c3:e6:96:c4:5e:bf:37:
         a8:b1:38:a5:7b:3d:cc:bb:2e:54:84:39:b9:59:a1:9d:e1:89:
         7f:b4:53:9f:8d:c3:43:13:3b:db:06:48:c5:d0:e0:f0:00:66:
         ca:8e:d6:95:ff:cd:eb:1c:85:c5:62:29:c3:62:9e:25:99:d0:
         a7:ae:cf:df:2c:eb:af:95:da:0c:da:b0:88:90:99:ec:48:67:
         93:6c:2d:54:3b:25:cb:74:90:4d:52:98:29:ab:63:e4:15:69:
         f9:9d:76:a8:c6:e9:4a:e9:be:e8:a2:54:99:a4:2f:38:5e:13:
         c8:06:c5:7d:58:d3:e9:69:3b:f0:44:9b:62:78:73:21:ac:ec:
         6d:62:79:17:0f:32:39:ca:c3:cf:9a:b6:ec:de:f1:67:35:73:
         54:93:e2:b4:6d:8d:53:5e:51:6f:92:75:71:99:d4:5a:c5:5b:
         f0:8e:97:0a
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Fri Mar 29 00:00:58 2024 by rpki-client on console-fra.rpki-client.org