Certificate

$ rpki-client -vvf rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/r9CVWn3X-bDsKkShHZNyB8J1SmM.cer
File:                     r9CVWn3X-bDsKkShHZNyB8J1SmM.cer (raw, json)
Hash identifier:          k/54WAeSopZ+UTLjXnWw0r76P7qZs2SzQDQbD9sYQ6w=
Subject key identifier:   AF:D0:95:5A:7D:D7:F9:B0:EC:2A:44:A1:1D:93:72:07:C2:75:4A:63
Authority key identifier: 0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
Certificate issuer:       /CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Certificate serial:       01EC49
Authority info access:    rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
Manifest:                 rsync://rpki.apnic.net/member_repository/A91B1018/8836FA608D4C11EC988AE85DC4F9AE02/r9CVWn3X-bDsKkShHZNyB8J1SmM.mft
caRepository:             rsync://rpki.apnic.net/member_repository/A91B1018/8836FA608D4C11EC988AE85DC4F9AE02/
Notify URL:               https://rrdp.apnic.net/notification.xml
Certificate not before:   Thu 18 Apr 2024 20:02:19 +0000
Certificate not after:    Wed 28 May 2025 00:00:00 +0000
Subordinate resources:    AS: 151951
                          IP: 103.181.164.0/23
                          IP: 2400:5a60::/32

Validation:               OK
Signature path:           rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 30 Nov 2024 02:50:13 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 126025 (0x1ec49)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
        Validity
            Not Before: Apr 18 20:02:19 2024 GMT
            Not After : May 28 00:00:00 2025 GMT
        Subject: CN=A91B1018/serialNumber=AFD0955A7DD7F9B0EC2A44A11D937207C2754A63
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:75:39:66:f2:8a:86:1b:a1:84:9a:60:ec:2c:
                    0e:5c:28:4f:18:c2:55:93:30:f9:d7:51:ae:65:11:
                    40:89:a9:a4:ba:bb:30:df:27:69:11:3f:a1:45:29:
                    fb:53:98:88:cd:37:4f:92:b9:6b:6b:ca:6e:20:ca:
                    9f:fd:16:b5:0f:99:b2:e7:d6:19:5d:00:f3:59:53:
                    d1:2c:92:f4:fa:2d:ca:6c:bb:64:84:13:0f:a5:c3:
                    72:cb:a8:75:0d:de:d9:30:32:74:db:cd:76:2c:c9:
                    59:28:e2:44:e3:5a:1b:bc:3f:dd:f5:94:7a:4a:e3:
                    51:e4:75:70:c5:5a:cf:89:d8:70:4a:c2:a8:2d:7a:
                    7a:c0:52:80:d2:9f:8e:e0:e4:44:e8:22:18:94:33:
                    16:4f:1a:af:0a:72:40:b1:b2:84:68:65:9e:e1:5e:
                    15:77:85:be:93:e1:34:59:6b:b3:8a:c4:40:43:17:
                    c4:b2:d5:3b:f1:4d:46:d7:2b:43:e3:ac:f3:af:46:
                    06:d2:c8:b5:21:2c:f6:9a:98:c5:9d:96:42:68:39:
                    39:b4:78:37:6c:67:a5:2d:7a:6d:06:d5:c3:69:3d:
                    33:fc:48:5a:de:09:38:05:60:94:96:6a:4d:c1:5e:
                    5e:a8:94:4e:8f:f2:3b:25:13:33:9a:51:b0:c0:ac:
                    36:d5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AF:D0:95:5A:7D:D7:F9:B0:EC:2A:44:A1:1D:93:72:07:C2:75:4A:63
            X509v3 Authority Key Identifier:
                keyid:0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                CA Repository - URI:rsync://rpki.apnic.net/member_repository/A91B1018/8836FA608D4C11EC988AE85DC4F9AE02/
                RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A91B1018/8836FA608D4C11EC988AE85DC4F9AE02/r9CVWn3X-bDsKkShHZNyB8J1SmM.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  151951

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.181.164.0/23
                IPv6:
                  2400:5a60::/32

    Signature Algorithm: sha256WithRSAEncryption
         c8:5a:f8:7d:5a:4e:e3:14:c0:c0:ec:91:af:20:6f:9d:3e:8a:
         ba:08:d4:03:1b:83:0b:00:34:d4:f6:d8:71:ea:44:c2:f7:2f:
         51:65:ca:fe:52:d4:2f:fd:37:16:05:ba:d5:c4:3c:6a:bc:eb:
         a4:a7:67:61:53:23:40:56:bd:c6:e8:44:1e:b5:30:5c:5b:8d:
         4d:b1:82:3c:1f:30:a3:0a:2c:97:c0:7f:c8:8c:9b:93:22:f5:
         59:02:b3:3f:bd:1c:ef:d6:ab:83:55:d1:a3:ad:6d:f1:00:74:
         50:74:2a:0c:ed:2a:07:3f:c8:df:f4:39:80:f6:4e:1b:eb:8c:
         32:72:f1:06:5b:2a:bf:b8:57:71:56:37:36:46:04:6e:0e:c2:
         d3:32:38:fd:ab:01:82:1f:6c:2a:44:98:63:ee:80:f8:f2:b5:
         16:6c:5b:8b:86:c1:ac:bd:e7:c6:8b:0f:02:91:9f:3d:50:b1:
         6a:ff:fe:31:0c:26:60:5e:73:89:25:4a:81:43:62:d0:fb:f4:
         e7:96:64:ef:82:da:73:7b:8a:8b:b6:43:7d:d7:96:59:68:df:
         ef:97:73:f5:a9:ff:8f:38:e6:9f:60:19:c8:47:18:fc:d9:59:
         56:04:a4:c8:66:a3:2e:ca:a7:5d:ce:a9:58:f9:ff:1a:ae:e8:
         68:60:c0:6f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----