Certificate

$ rpki-client -vvf rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/r5ACm-EBySLPz0vRRdevHcZA5eA.cer
File:                     r5ACm-EBySLPz0vRRdevHcZA5eA.cer (raw, json)
Hash identifier:          vE8f4Vwidio+3cuTk28FdFiP2S+7HVZm8Zi9P/tlfew=
Subject key identifier:   AF:90:02:9B:E1:01:C9:22:CF:CF:4B:D1:45:D7:AF:1D:C6:40:E5:E0
Authority key identifier: 0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
Certificate issuer:       /CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Certificate serial:       020E75
Authority info access:    rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
Manifest:                 rsync://rpki.apnic.net/member_repository/A91D2646/D2037D127BEC11EAA9A6C725C4F9AE02/r5ACm-EBySLPz0vRRdevHcZA5eA.mft
caRepository:             rsync://rpki.apnic.net/member_repository/A91D2646/D2037D127BEC11EAA9A6C725C4F9AE02/
Notify URL:               https://rrdp.apnic.net/notification.xml
Certificate not before:   Thu 19 Sep 2024 18:06:47 +0000
Certificate not after:    Fri 31 Oct 2025 00:00:00 +0000
Subordinate resources:    AS: 137964
                          IP: 103.118.152.0/23
                          IP: 2001:df5:cf00::/48

Validation:               OK
Signature path:           rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 04 Dec 2024 01:13:26 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 134773 (0x20e75)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
        Validity
            Not Before: Sep 19 18:06:47 2024 GMT
            Not After : Oct 31 00:00:00 2025 GMT
        Subject: CN=A91D2646/serialNumber=AF90029BE101C922CFCF4BD145D7AF1DC640E5E0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:63:4d:b6:62:17:36:c6:a7:c7:75:d9:f4:84:
                    07:f4:cb:ca:7c:76:bc:3d:72:c6:c9:17:c6:52:22:
                    bb:f1:f0:56:d9:b6:ca:04:ee:b0:18:cc:6e:3a:ad:
                    c2:f3:54:a9:d7:80:c5:18:46:0b:72:28:d1:15:39:
                    74:4a:79:86:ed:45:eb:3e:6b:ef:92:31:66:df:6e:
                    ee:2c:6e:14:a2:c5:d5:b0:aa:0f:cb:d2:5a:36:9c:
                    a9:19:77:49:20:7c:c9:44:58:47:6b:28:9a:1a:7e:
                    c8:be:99:d9:bd:8e:d8:9e:ec:f4:5d:7f:a7:8c:99:
                    a4:08:74:fe:2f:00:e8:ec:b0:28:f4:79:a1:10:ec:
                    c1:80:64:44:17:06:56:6e:ab:b7:a5:94:4b:5a:cc:
                    14:c5:aa:b4:04:e5:bd:a2:d7:13:cf:b8:d1:64:18:
                    2e:fe:81:f3:e0:ca:79:cd:02:69:71:67:61:a5:bf:
                    48:70:ed:d7:05:da:5f:bb:f7:26:1e:aa:d1:a2:a5:
                    51:6e:13:38:30:30:cb:df:24:ad:7e:ba:a8:3c:7a:
                    5a:72:eb:fc:03:9b:8a:72:ab:84:d0:d6:3f:70:b7:
                    4d:c3:bb:72:87:80:16:53:73:91:9b:29:a0:13:37:
                    47:83:53:f8:ca:2b:cf:16:a8:26:4f:cc:05:85:00:
                    d8:ef
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AF:90:02:9B:E1:01:C9:22:CF:CF:4B:D1:45:D7:AF:1D:C6:40:E5:E0
            X509v3 Authority Key Identifier:
                keyid:0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                CA Repository - URI:rsync://rpki.apnic.net/member_repository/A91D2646/D2037D127BEC11EAA9A6C725C4F9AE02/
                RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A91D2646/D2037D127BEC11EAA9A6C725C4F9AE02/r5ACm-EBySLPz0vRRdevHcZA5eA.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  137964

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.118.152.0/23
                IPv6:
                  2001:df5:cf00::/48

    Signature Algorithm: sha256WithRSAEncryption
         60:8f:57:27:34:a1:d3:e6:c8:6b:43:00:5f:1a:93:99:5c:96:
         06:ac:48:b6:03:5e:32:04:2e:44:6f:a5:27:95:7a:23:2d:55:
         57:97:be:f2:c4:57:3c:c3:bb:3d:c8:68:95:7e:3f:19:a5:80:
         7a:f5:5a:8f:fa:c2:39:ec:e8:2e:15:09:0d:98:d5:b7:8e:44:
         4f:f1:78:fc:aa:4d:4f:e6:bc:01:d7:bd:07:4c:35:51:2d:7e:
         ca:32:ae:c0:15:f0:f3:22:0a:32:97:d1:ac:09:25:01:dd:55:
         2f:42:0f:80:71:cc:88:98:7c:c7:c6:5d:53:8f:e2:57:64:54:
         48:53:b7:52:0b:12:a0:da:90:76:34:5b:4a:d1:a4:99:e4:e2:
         3d:84:cb:5d:5e:c0:d8:5e:f5:b0:81:33:f9:24:0b:14:02:c6:
         e6:d1:a9:f0:0b:6e:91:8a:f5:8e:ef:ce:35:da:0e:85:fe:d7:
         83:a7:da:86:74:cf:47:26:c0:a1:4e:43:53:77:b5:54:3b:45:
         5e:af:dd:37:fe:72:1d:d4:ae:fa:b9:54:bb:c0:fe:3b:f6:31:
         8d:a6:cf:e2:bc:30:ed:17:ad:a3:e6:d3:7a:90:f8:b4:a6:88:
         96:64:aa:22:7a:c0:8a:17:1d:0a:fd:b6:07:e7:04:f1:04:30:
         8d:c7:cb:ee
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----