Certificate

$ rpki-client -vvf rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qPSk14UXEQ17GApeNxuYBcYlIws.cer
File:                     qPSk14UXEQ17GApeNxuYBcYlIws.cer (raw, json)
Hash identifier:          FjKGO7oM+Xxte44AwQSNy7yhswpeICSaFhy0Vpv1ZsY=
Subject key identifier:   A8:F4:A4:D7:85:17:11:0D:7B:18:0A:5E:37:1B:98:05:C6:25:23:0B
Authority key identifier: 0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
Certificate issuer:       /CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Certificate serial:       01B51D
Authority info access:    rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
Manifest:                 rsync://rpki.apnic.net/member_repository/A9186C05/7E16E59AEFD911EDBC545971C4F9AE02/qPSk14UXEQ17GApeNxuYBcYlIws.mft
caRepository:             rsync://rpki.apnic.net/member_repository/A9186C05/7E16E59AEFD911EDBC545971C4F9AE02/
Notify URL:               https://rrdp.apnic.net/notification.xml
Certificate not before:   Fri 04 Aug 2023 16:01:16 +0000
Certificate not after:    Thu 31 Oct 2024 00:00:00 +0000
Subordinate resources:    IP: 103.69.132.0/22
                          IP: 116.66.176.0/22
                          IP: 2405:ee80::/32

Validation:               OK
Signature path:           rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 27 Apr 2024 02:50:25 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 111901 (0x1b51d)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
        Validity
            Not Before: Aug  4 16:01:16 2023 GMT
            Not After : Oct 31 00:00:00 2024 GMT
        Subject: CN=A9186C05/serialNumber=A8F4A4D78517110D7B180A5E371B9805C625230B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:c8:c3:4b:16:15:1e:a6:c6:2b:ad:94:a8:df:
                    8f:ad:3b:b6:5c:a3:f3:e9:0d:3e:a3:46:89:22:52:
                    dc:b8:b4:68:25:64:3b:9f:b4:cf:5c:6c:5f:e3:c0:
                    61:0b:cb:e1:af:ba:f6:71:96:7d:9c:07:0b:bd:c1:
                    0c:34:29:2d:08:3a:77:27:38:b6:9a:bd:6a:0c:2d:
                    30:28:be:35:43:23:86:f4:63:51:c5:b8:94:36:36:
                    5c:0b:9d:ff:54:8e:1c:54:31:13:8c:90:51:4f:ca:
                    96:e4:38:7b:e3:3a:38:b5:a9:10:3a:43:22:ec:c8:
                    26:e8:d8:3f:5f:7a:52:0b:e9:52:1b:ac:d4:01:28:
                    0f:0d:1e:64:5d:52:0c:74:31:96:f0:1b:42:72:19:
                    b5:04:4b:d5:02:e2:12:4a:35:43:32:66:aa:2a:ca:
                    a5:1a:71:d9:62:70:65:21:e0:81:c4:71:42:12:4d:
                    84:8a:69:28:be:96:75:12:70:25:e2:36:56:a1:a6:
                    ed:fc:a1:7a:8f:8b:29:06:f2:9b:c8:19:4b:91:57:
                    70:b4:94:17:ec:76:58:a5:4a:31:d5:1a:14:af:7e:
                    7d:eb:4d:b6:9c:3c:06:a1:9f:a2:a5:07:f2:e1:90:
                    6c:4e:c8:22:62:a9:a8:19:b0:a7:85:61:7e:f4:9e:
                    7b:6f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A8:F4:A4:D7:85:17:11:0D:7B:18:0A:5E:37:1B:98:05:C6:25:23:0B
            X509v3 Authority Key Identifier:
                keyid:0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                CA Repository - URI:rsync://rpki.apnic.net/member_repository/A9186C05/7E16E59AEFD911EDBC545971C4F9AE02/
                RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A9186C05/7E16E59AEFD911EDBC545971C4F9AE02/qPSk14UXEQ17GApeNxuYBcYlIws.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.69.132.0/22
                  116.66.176.0/22
                IPv6:
                  2405:ee80::/32

    Signature Algorithm: sha256WithRSAEncryption
         94:dd:78:b1:ed:8a:f4:a1:56:14:99:11:ad:4a:c0:f3:8e:2e:
         9e:a4:6a:91:b0:42:39:ae:df:70:76:18:ea:fa:88:c1:1a:90:
         e8:ee:6b:37:94:d2:30:38:1a:a8:fd:2d:d1:e9:05:b3:78:2c:
         4e:2f:82:6a:85:60:df:14:1b:74:73:75:89:30:04:27:3f:3d:
         68:92:b5:6a:bc:df:53:c5:bc:ad:1e:92:6b:40:72:d9:b7:5b:
         ff:87:17:c5:32:0e:5a:ee:50:e1:c0:f9:f8:3b:8f:b1:46:f3:
         72:93:d9:33:7b:4c:0a:6f:08:4b:5f:ba:9b:46:53:a2:7c:d9:
         09:07:0f:ae:87:85:ac:d1:a1:a7:50:c5:1f:de:1e:a1:8f:63:
         5b:10:ce:10:fe:de:74:62:a3:57:f4:e0:8e:95:46:c9:36:cf:
         81:70:35:f2:56:5f:33:55:50:6e:a9:e7:84:6c:20:f4:26:6b:
         51:09:f7:8f:a8:6e:e8:b0:a5:38:f5:43:7e:fc:da:4a:8d:bb:
         d1:79:8a:7e:6d:cd:c4:9c:74:fe:b0:cb:04:42:e2:00:b0:55:
         db:b1:4c:12:21:01:e2:65:1e:e2:cf:e1:87:63:31:28:68:74:
         e6:7e:16:59:23:04:d8:94:b0:4d:9f:8c:b9:36:fd:ed:18:51:
         5e:0f:d5:1e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 20 05:37:22 2024 by rpki-client on console-ams.rpki-client.org