Certificate

$ rpki-client -vvf rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/s1X9BSf5q-WxYIFHmdK7IhJakPw.cer
File:                     s1X9BSf5q-WxYIFHmdK7IhJakPw.cer (raw, json)
Hash identifier:          UpEeUonhX19Tx9sra8LStBV/eCGlkKqoD0ajdPGCs+k=
Subject key identifier:   B3:55:FD:05:27:F9:AB:E5:B1:60:81:47:99:D2:BB:22:12:5A:90:FC
Authority key identifier: 0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
Certificate issuer:       /CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Certificate serial:       013517
Authority info access:    rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
Manifest:                 rsync://rpki.apnic.net/member_repository/A913017D/E8AB78F8E8CA11EA9DB13E81C4F9AE02/s1X9BSf5q-WxYIFHmdK7IhJakPw.mft
caRepository:             rsync://rpki.apnic.net/member_repository/A913017D/E8AB78F8E8CA11EA9DB13E81C4F9AE02/
Notify URL:               https://rrdp.apnic.net/notification.xml
Certificate not before:   Tue 16 Nov 2021 04:25:26 +0000
Certificate not after:    Fri 30 Sep 2022 00:00:00 +0000
Subordinate resources:    AS: 55874

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 79127 (0x13517)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
        Validity
            Not Before: Nov 16 04:25:26 2021 GMT
            Not After : Sep 30 00:00:00 2022 GMT
        Subject: CN=A913017D/serialNumber=B355FD0527F9ABE5B160814799D2BB22125A90FC
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:af:08:ec:ea:f0:b3:3e:4d:29:b5:21:c8:44:
                    12:9e:e1:f2:38:87:a3:f3:e6:50:9b:14:d0:c5:c9:
                    96:77:20:ff:3c:11:7a:6d:9b:8b:df:8c:19:56:cd:
                    c4:f9:33:71:5c:da:4d:1f:c3:ee:96:97:fe:07:ea:
                    ce:1b:4c:ed:f1:2f:2c:8f:55:f0:17:0c:41:cb:85:
                    10:1a:f9:94:b3:7d:c6:40:8c:22:a4:0c:ee:23:a7:
                    49:ac:1c:62:09:73:34:c7:4b:ce:4d:19:c2:85:f7:
                    4b:1d:7f:41:71:b9:c8:c6:46:e4:b1:4c:2e:6d:94:
                    15:12:c3:4b:fd:ab:60:c3:b8:4a:05:b7:b6:24:a8:
                    5b:9e:44:c1:14:60:ed:52:bc:93:03:c3:e2:63:88:
                    ea:4f:f4:f5:36:64:10:8e:06:6d:d1:7b:05:43:67:
                    45:71:d6:23:b3:5b:4e:ca:06:24:e3:ff:e3:ce:50:
                    16:f5:cc:a5:d5:4d:69:01:13:2e:6b:45:69:8f:32:
                    57:02:30:54:ac:7a:e6:ce:0d:47:10:0f:c2:43:7f:
                    ac:ee:a7:ed:a8:5a:a2:32:43:41:1b:9d:6e:92:54:
                    d3:a7:00:2b:bf:e1:cf:e9:3f:d1:5d:ea:dd:43:6a:
                    ca:af:e3:bd:86:f5:54:4e:2e:e8:3c:84:99:53:d7:
                    d5:05
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B3:55:FD:05:27:F9:AB:E5:B1:60:81:47:99:D2:BB:22:12:5A:90:FC
            X509v3 Authority Key Identifier:
                keyid:0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                CA Repository - URI:rsync://rpki.apnic.net/member_repository/A913017D/E8AB78F8E8CA11EA9DB13E81C4F9AE02/
                RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A913017D/E8AB78F8E8CA11EA9DB13E81C4F9AE02/s1X9BSf5q-WxYIFHmdK7IhJakPw.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  55874

    Signature Algorithm: sha256WithRSAEncryption
         d3:1b:9e:4e:7c:03:15:cf:cc:0a:69:a1:ed:bb:19:44:2a:a8:
         96:c3:be:df:e0:41:cd:c8:c5:8a:04:7c:d8:28:f2:d6:ce:da:
         6f:44:66:86:fa:75:6e:a4:18:c3:d6:7c:66:df:ef:db:5c:da:
         f1:db:de:33:65:51:4c:4c:2a:70:70:b1:38:df:f8:7e:04:0b:
         e1:52:70:75:3b:a1:a4:a2:63:5e:b2:ac:86:42:ba:0c:cc:74:
         76:ce:fb:17:66:3d:38:52:2b:c9:15:48:00:a7:eb:dd:4a:f8:
         91:c4:c9:8b:06:98:86:cb:1b:ec:4e:4f:38:d8:b2:e7:6d:67:
         b8:07:b1:8f:91:2c:6f:23:1d:7e:2e:9e:fc:9c:79:e9:61:0f:
         17:83:cf:9b:52:b7:44:d2:58:58:37:3f:3e:36:05:1a:90:d3:
         43:69:6e:01:13:13:e1:6b:51:87:30:96:c2:f5:fb:ad:ed:61:
         f9:a6:20:d9:01:7d:3f:7f:d0:5a:d6:f7:c3:77:00:e4:a8:e7:
         ba:27:f0:7d:d4:d6:86:83:3d:f6:a8:30:5a:2a:c9:f9:84:fd:
         91:f6:b2:9a:38:97:89:c3:3d:bc:87:b9:55:31:e9:fa:cb:d8:
         8f:d0:ab:da:ae:ca:3a:d2:66:d1:89:07:4b:07:cf:6c:99:25:
         86:bc:a3:c2
-----BEGIN CERTIFICATE-----
MIIF+TCCBOGgAwIBAgIDATUXMA0GCSqGSIb3DQEBCwUAMEYxETAPBgNVBAMTCEE5
MERDNUJFMTEwLwYDVQQFEygwRTY1QTRGNUZEMzZCNUJENjhFQjNDOTIzNDA4OTc4
QzkwN0FBNzlGMB4XDTIxMTExNjA0MjUyNloXDTIyMDkzMDAwMDAwMFowRjERMA8G
A1UEAxMIQTkxMzAxN0QxMTAvBgNVBAUTKEIzNTVGRDA1MjdGOUFCRTVCMTYwODE0
Nzk5RDJCQjIyMTI1QTkwRkMwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB
AQC1rwjs6vCzPk0ptSHIRBKe4fI4h6Pz5lCbFNDFyZZ3IP88EXptm4vfjBlWzcT5
M3Fc2k0fw+6Wl/4H6s4bTO3xLyyPVfAXDEHLhRAa+ZSzfcZAjCKkDO4jp0msHGIJ
czTHS85NGcKF90sdf0FxucjGRuSxTC5tlBUSw0v9q2DDuEoFt7YkqFueRMEUYO1S
vJMDw+JjiOpP9PU2ZBCOBm3RewVDZ0Vx1iOzW07KBiTj/+POUBb1zKXVTWkBEy5r
RWmPMlcCMFSseubODUcQD8JDf6zup+2oWqIyQ0EbnW6SVNOnACu/4c/pP9Fd6t1D
asqv472G9VROLug8hJlT19UFAgMBAAGjggLuMIIC6jAdBgNVHQ4EFgQUs1X9BSf5
q+WxYIFHmdK7IhJakPwwHwYDVR0jBBgwFoAUDmWk9f02tb1o6zySNAiXjJB6p58w
DgYDVR0PAQH/BAQDAgEGMA8GA1UdEwEB/wQFMAMBAf8wcwYDVR0fBGwwajBooGag
ZIZicnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2
NjExRTJCQjQ2OEY3QzcyRkQxRkYyL0RtV2s5ZjAydGIxbzZ6eVNOQWlYakpCNnA1
OC5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L3JlcG9zaXRvcnkvOTgwNjUyRTBCNzdFMTFFN0E5NkEzOTUyMUE0
RjRGQjQvRG1XazlmMDJ0YjFvNnp5U05BaVhqSkI2cDU4LmNlcjBKBgNVHSABAf8E
QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj
Lm5ldC9SUEtJL0NQUy5wZGYwggEoBggrBgEFBQcBCwSCARowggEWMF8GCCsGAQUF
BzAFhlNyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5
MTMwMTdEL0U4QUI3OEY4RThDQTExRUE5REIxM0U4MUM0RjlBRTAyLzB+BggrBgEF
BQcwCoZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9B
OTEzMDE3RC9FOEFCNzhGOEU4Q0ExMUVBOURCMTNFODFDNEY5QUUwMi9zMVg5QlNm
NXEtV3hZSUZIbWRLN0loSmFrUHcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3Jy
ZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwGgYIKwYBBQUHAQgBAf8ECzAJ
oAcwBQIDANpCMA0GCSqGSIb3DQEBCwUAA4IBAQDTG55OfAMVz8wKaaHtuxlEKqiW
w77f4EHNyMWKBHzYKPLWztpvRGaG+nVupBjD1nxm3+/bXNrx294zZVFMTCpwcLE4
3/h+BAvhUnB1O6GkomNesqyGQroMzHR2zvsXZj04UivJFUgAp+vdSviRxMmLBpiG
yxvsTk842LLnbWe4B7GPkSxvIx1+Lp78nHnpYQ8Xg8+bUrdE0lhYNz8+NgUakNND
aW4BExPha1GHMJbC9fut7WH5piDZAX0/f9Ba1vfDdwDkqOe6J/B91NaGgz32qDBa
Ksn5hP2R9rKaOJeJwz28h7lVMen6y9iP0Kvarso60mbRiQdLB89smSWGvKPC
-----END CERTIFICATE-----