Certificate

$ rpki-client -vvf rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qJaxcL8NiHI_NsesIIeFSqKEvXE.cer
File:                     qJaxcL8NiHI_NsesIIeFSqKEvXE.cer (raw, json)
Hash identifier:          KVpCazV3SGLNHgbiYdq2G1SW66+P0VKHjAQx9zt5ZFI=
Subject key identifier:   A8:96:B1:70:BF:0D:88:72:3F:36:C7:AC:20:87:85:4A:A2:84:BD:71
Authority key identifier: 0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
Certificate issuer:       /CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Certificate serial:       01B626
Authority info access:    rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
Manifest:                 rsync://rpki.apnic.net/member_repository/A913DF3B/CDBA812EF03A11EB8D30E058C4F9AE02/qJaxcL8NiHI_NsesIIeFSqKEvXE.mft
caRepository:             rsync://rpki.apnic.net/member_repository/A913DF3B/CDBA812EF03A11EB8D30E058C4F9AE02/
Notify URL:               https://rrdp.apnic.net/notification.xml
Certificate not before:   Thu 10 Aug 2023 13:28:23 +0000
Certificate not after:    Thu 31 Oct 2024 00:00:00 +0000
Subordinate resources:    AS: 139781
                          IP: 103.170.136.0/23
                          IP: 2001:df7:1b80::/48

Validation:               OK
Signature path:           rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 26 Apr 2024 02:50:25 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 112166 (0x1b626)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
        Validity
            Not Before: Aug 10 13:28:23 2023 GMT
            Not After : Oct 31 00:00:00 2024 GMT
        Subject: CN=A913DF3B/serialNumber=A896B170BF0D88723F36C7AC2087854AA284BD71
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9a:6f:ae:27:12:d3:5e:61:3a:39:a4:0e:f5:fe:
                    34:8f:09:54:99:7d:d3:cd:46:ae:a0:bd:64:05:c2:
                    de:94:92:01:df:20:d8:8c:72:d8:1c:b0:58:cc:20:
                    98:04:8e:cd:43:e2:be:3f:a5:64:a2:b4:62:32:b3:
                    64:f0:5a:0d:1a:44:6a:4d:d6:89:76:0d:67:91:2d:
                    e2:b0:f3:2f:8d:fc:bc:d2:a4:0a:63:c1:8d:81:cb:
                    dd:ed:d8:47:78:49:00:4c:96:39:69:05:e3:69:fb:
                    26:15:6f:33:c8:8f:0f:de:21:e3:7a:4c:ab:31:66:
                    74:b1:9a:24:f9:71:26:be:0c:95:0a:a3:4a:e6:29:
                    fa:d0:9c:65:e0:70:10:e9:4c:f9:63:e1:cc:2d:41:
                    ed:aa:e9:c3:cc:0e:64:6a:0e:b4:a9:b9:0c:fc:67:
                    88:d1:da:6e:3e:b7:17:4f:15:43:6d:40:ad:84:90:
                    24:1c:37:8d:88:23:4e:96:f7:98:5a:8a:d3:42:19:
                    39:f3:ff:8d:0c:11:d7:37:9b:e0:aa:29:28:10:68:
                    5e:a1:62:6e:9d:e3:d4:5e:7e:5e:ce:3e:7a:d2:05:
                    a3:93:a0:96:37:41:dd:4a:b0:f5:c5:7e:21:6f:e9:
                    c7:a9:2d:84:5f:fb:73:5f:5b:7a:cc:d5:cf:e5:e1:
                    38:4b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A8:96:B1:70:BF:0D:88:72:3F:36:C7:AC:20:87:85:4A:A2:84:BD:71
            X509v3 Authority Key Identifier:
                keyid:0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                CA Repository - URI:rsync://rpki.apnic.net/member_repository/A913DF3B/CDBA812EF03A11EB8D30E058C4F9AE02/
                RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A913DF3B/CDBA812EF03A11EB8D30E058C4F9AE02/qJaxcL8NiHI_NsesIIeFSqKEvXE.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  139781

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.170.136.0/23
                IPv6:
                  2001:df7:1b80::/48

    Signature Algorithm: sha256WithRSAEncryption
         67:67:1b:39:01:bd:55:63:15:6b:98:b0:bd:fc:7a:0c:7d:c1:
         9d:7b:46:0c:36:7b:a1:e5:c1:00:1b:c8:61:a0:60:34:cb:77:
         7a:c7:89:65:76:ef:4b:62:d3:2a:b2:bc:8a:22:47:b6:7c:97:
         ae:bf:88:f4:bf:3f:62:b1:26:4e:04:48:b5:91:12:83:fe:83:
         fc:78:aa:ff:37:ec:77:86:fe:0f:8d:9b:20:27:df:31:d0:9f:
         2a:9b:e5:83:8b:af:02:b3:5e:d5:a6:3c:e1:cd:69:cc:30:fe:
         7e:79:e7:dc:69:d9:af:fd:eb:07:73:63:03:56:bf:8e:63:2b:
         73:02:5a:bc:ad:68:bf:5f:e2:5c:75:28:ce:c4:d4:af:50:0f:
         3a:51:8c:20:11:0b:2f:bc:ba:a8:09:24:55:77:32:62:89:84:
         ce:43:6d:88:73:c2:c3:e0:7c:a2:a5:9c:f4:88:67:7d:97:6f:
         5b:8c:f8:9b:3a:da:c2:96:35:5b:79:e6:a1:be:78:84:23:e5:
         58:3a:e6:ab:ce:5f:e8:1a:a4:a1:ac:81:d9:30:a1:2e:49:39:
         6c:e6:5a:35:7a:a3:78:5c:26:13:88:b0:c2:f2:39:97:1e:e1:
         88:c0:1d:64:a3:6a:41:b5:50:77:d0:1b:32:00:c1:cf:29:14:
         f8:f2:e8:a8
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----