Certificate

$ rpki-client -vvf rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qPwlmhAeq4Ju6MvqKgvaXN7P2vI.cer
File:                     qPwlmhAeq4Ju6MvqKgvaXN7P2vI.cer (raw, json)
Hash identifier:          1QndBb01twBfuYONkXiD5rw7XAOQCTFWkxx9c80vkY8=
Subject key identifier:   A8:FC:25:9A:10:1E:AB:82:6E:E8:CB:EA:2A:0B:DA:5C:DE:CF:DA:F2
Authority key identifier: 0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
Certificate issuer:       /CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Certificate serial:       01C33C
Authority info access:    rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
Manifest:                 rsync://rpki.apnic.net/member_repository/A9186B80/B869805E123B11EC8A135F42C4F9AE02/qPwlmhAeq4Ju6MvqKgvaXN7P2vI.mft
caRepository:             rsync://rpki.apnic.net/member_repository/A9186B80/B869805E123B11EC8A135F42C4F9AE02/
Notify URL:               https://rrdp.apnic.net/notification.xml
Certificate not before:   Wed 11 Oct 2023 00:59:31 +0000
Certificate not after:    Sun 01 Dec 2024 00:00:00 +0000
Subordinate resources:    AS: 45414
                          IP: 45.127.116.0/22
                          IP: 103.81.128.0/22
                          IP: 124.109.4.0/22
                          IP: 2407:1d80::/32

Validation:               OK
Signature path:           rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 03 May 2024 07:49:47 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 115516 (0x1c33c)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
        Validity
            Not Before: Oct 11 00:59:31 2023 GMT
            Not After : Dec  1 00:00:00 2024 GMT
        Subject: CN=A9186B80/serialNumber=A8FC259A101EAB826EE8CBEA2A0BDA5CDECFDAF2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d9:f5:9e:e5:0a:9a:7c:d9:66:5d:0f:4e:4a:ce:
                    50:81:a3:67:95:26:c6:0c:cf:49:05:cb:1d:0c:40:
                    b7:0b:09:a9:07:8d:af:5a:da:c7:2a:5f:48:89:1b:
                    76:53:82:6d:02:87:a8:d3:17:7f:b4:10:50:cc:2f:
                    c3:5a:a7:43:79:f1:01:4a:67:d0:06:ae:75:a7:d2:
                    87:75:9a:f2:9e:85:0d:cd:b5:98:de:bf:7e:0c:75:
                    6d:d0:84:36:07:be:dc:a1:7a:80:ff:59:3a:06:eb:
                    c6:33:aa:32:dd:bf:0d:02:6d:b3:3e:e1:41:16:6c:
                    3d:9e:b9:26:47:f9:91:0e:0b:3e:49:45:2c:ba:6c:
                    91:98:02:ab:f1:3c:ac:3b:01:a0:38:b0:2b:ae:ae:
                    d5:33:70:f6:66:6f:48:c4:e1:e4:ef:39:bc:6b:ae:
                    3b:d9:2f:cc:70:c2:b8:26:32:09:e2:44:54:aa:7b:
                    4f:b4:68:4e:3f:50:5f:90:21:ab:c1:ba:5b:1a:a6:
                    39:68:19:2f:8e:1b:36:4a:c8:f6:11:08:0a:8c:25:
                    03:f3:6e:eb:d2:d8:85:1f:99:66:9a:96:49:cb:f0:
                    1d:34:c3:fe:0b:f2:81:47:c0:b5:05:5f:ff:34:c4:
                    09:2f:e6:02:d9:b3:55:93:37:b8:9f:8f:07:ac:17:
                    ab:db
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A8:FC:25:9A:10:1E:AB:82:6E:E8:CB:EA:2A:0B:DA:5C:DE:CF:DA:F2
            X509v3 Authority Key Identifier:
                keyid:0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                CA Repository - URI:rsync://rpki.apnic.net/member_repository/A9186B80/B869805E123B11EC8A135F42C4F9AE02/
                RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A9186B80/B869805E123B11EC8A135F42C4F9AE02/qPwlmhAeq4Ju6MvqKgvaXN7P2vI.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  45414

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.127.116.0/22
                  103.81.128.0/22
                  124.109.4.0/22
                IPv6:
                  2407:1d80::/32

    Signature Algorithm: sha256WithRSAEncryption
         32:03:73:4b:aa:8b:f1:27:45:93:2c:02:d8:17:1a:a5:66:ec:
         57:1e:60:3d:94:fc:90:22:a8:7d:99:86:b4:76:ed:d5:5c:a5:
         65:5c:f5:e4:d3:fe:c2:17:eb:d8:41:9d:11:27:ff:71:98:0c:
         9f:bd:7b:d1:6c:0d:d5:cc:c0:c8:b6:3b:c3:92:9f:37:7a:21:
         5b:38:6c:8f:d4:c2:3b:05:9b:b0:79:b0:65:d9:70:29:da:6d:
         45:3c:25:71:27:56:32:b4:1d:5c:00:7a:6d:04:9a:03:0d:1c:
         cf:24:d6:b9:5f:23:80:28:b1:c3:37:f4:fb:63:b5:ee:6b:e0:
         de:bc:a0:18:99:97:34:06:76:d3:f8:f2:75:62:b2:4f:d8:26:
         76:72:9d:78:49:80:ea:21:c5:38:ab:7f:cd:34:d9:e1:f5:aa:
         0d:65:cb:95:6c:18:31:62:08:4b:c9:d2:53:c6:f7:af:fc:fa:
         3a:da:49:2a:8e:08:68:76:47:46:34:7d:26:98:d2:51:54:11:
         c1:e1:ec:78:dd:46:4a:12:8d:49:b7:75:f5:50:39:8e:1c:aa:
         b2:60:20:cb:0a:30:86:cd:3e:f2:a0:71:02:9f:c8:7a:d8:f6:
         d3:38:ef:20:b7:1e:f6:41:8a:f5:91:f0:1f:e8:ef:32:6b:eb:
         14:5f:7f:a4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 26 11:03:11 2024 by rpki-client on console-ams.rpki-client.org