Certificate

$ rpki-client -vvf rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/sEu6HxjA5wgx81T3RV7hXTIpQbM.cer
File:                     sEu6HxjA5wgx81T3RV7hXTIpQbM.cer (raw, json)
Hash identifier:          8kYAp9jDG8p7omWIHN9330PxAwBwi8AS9Yjvk4V2c3A=
Subject key identifier:   B0:4B:BA:1F:18:C0:E7:08:31:F3:54:F7:45:5E:E1:5D:32:29:41:B3
Authority key identifier: 0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
Certificate issuer:       /CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Certificate serial:       012A97
Authority info access:    rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
Manifest:                 rsync://rpki.apnic.net/member_repository/A91D73FD/DCB25B967B4311EB83533666C4F9AE02/sEu6HxjA5wgx81T3RV7hXTIpQbM.mft
caRepository:             rsync://rpki.apnic.net/member_repository/A91D73FD/DCB25B967B4311EB83533666C4F9AE02/
Notify URL:               https://rrdp.apnic.net/notification.xml
Certificate not before:   Wed 22 Sep 2021 04:56:12 +0000
Certificate not after:    Sun 01 Dec 2024 00:00:00 +0000
Subordinate resources:    AS: 141772
                          IP: 103.120.176.0/22
                          IP: 2403:5ac0::/32

Validation:               OK
Signature path:           rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 25 Apr 2024 16:48:22 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 76439 (0x12a97)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
        Validity
            Not Before: Sep 22 04:56:12 2021 GMT
            Not After : Dec  1 00:00:00 2024 GMT
        Subject: CN=A91D73FD/serialNumber=B04BBA1F18C0E70831F354F7455EE15D322941B3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:17:ee:1a:3a:14:26:77:7b:fb:d9:1f:06:61:
                    a2:18:e5:fa:51:bd:c6:2a:e2:25:3e:39:8c:94:38:
                    00:11:73:2e:03:38:f9:1b:41:e3:70:4a:5c:22:43:
                    cd:6f:43:64:83:ed:10:44:99:d0:97:0b:a1:7b:28:
                    65:0d:63:80:ee:7b:06:a5:f0:38:41:e1:f6:3d:74:
                    4d:62:80:93:07:48:85:0e:30:d3:5d:49:a3:58:4a:
                    aa:76:d0:cf:9a:8f:ae:38:d8:ec:3d:1f:f6:db:4a:
                    7e:bd:ac:b2:8d:09:cb:5d:79:61:8d:f8:fe:26:09:
                    4f:77:f8:18:df:ec:00:e0:1a:ac:ba:31:4e:1b:7f:
                    f6:34:5f:66:3b:af:0d:29:f5:87:d8:5a:2b:2f:3f:
                    e8:ec:4d:c3:bf:6d:d2:d2:d1:fe:83:9e:ef:8b:3c:
                    1e:33:f2:d1:16:03:87:89:44:a3:c9:f7:94:51:66:
                    81:d0:a1:6a:64:f8:cf:52:99:41:b2:31:c8:98:ce:
                    8d:14:fd:d7:c7:2a:fb:84:6c:8d:90:62:b1:21:a9:
                    52:53:51:fa:cd:69:68:fc:cf:95:74:c1:3e:93:30:
                    d4:a8:ac:75:b2:f0:9d:36:b8:9b:75:49:7f:6e:2c:
                    86:b7:d2:f8:c7:f9:6e:60:c4:ad:0c:df:97:8c:d4:
                    ac:db
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B0:4B:BA:1F:18:C0:E7:08:31:F3:54:F7:45:5E:E1:5D:32:29:41:B3
            X509v3 Authority Key Identifier:
                keyid:0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                CA Repository - URI:rsync://rpki.apnic.net/member_repository/A91D73FD/DCB25B967B4311EB83533666C4F9AE02/
                RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A91D73FD/DCB25B967B4311EB83533666C4F9AE02/sEu6HxjA5wgx81T3RV7hXTIpQbM.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  141772

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.120.176.0/22
                IPv6:
                  2403:5ac0::/32

    Signature Algorithm: sha256WithRSAEncryption
         b1:ed:af:8c:c4:6d:9f:8d:cd:55:99:48:63:f9:b2:93:eb:32:
         75:a6:b8:68:75:b1:81:6b:44:35:e0:f0:c3:ea:8d:cb:8a:26:
         94:8f:e5:78:4b:ff:ef:8c:be:cd:fb:f1:1d:7a:7c:c5:50:f1:
         9d:5e:7e:ea:c7:16:e5:be:2b:a6:60:1f:27:40:3f:68:c3:c7:
         d9:2f:cf:a5:14:89:9b:f6:24:f4:49:59:06:13:c1:30:bb:5f:
         90:40:d9:13:2c:35:5d:d9:9e:22:f0:ab:8c:44:cb:7b:a9:c1:
         20:22:80:5a:67:d7:52:4e:71:58:3d:b1:3f:fa:10:3d:68:2e:
         ec:69:1d:b8:28:35:79:e3:1c:af:4e:0b:af:1c:3f:39:88:4a:
         90:d3:fd:4a:d0:be:d6:cf:78:fe:a4:af:cd:66:0c:79:8b:88:
         90:30:07:43:a9:28:bf:f0:8d:85:47:19:bb:94:11:aa:85:40:
         30:4d:24:91:3a:f6:b0:01:b9:d4:3a:7e:41:6c:4a:4a:55:e7:
         45:ea:dc:e0:4c:2f:9a:8e:e3:4d:c6:5f:02:36:c1:f6:0b:94:
         cf:2f:97:b1:be:77:62:74:88:c2:33:4e:7b:19:2b:55:8b:df:
         0b:24:12:74:2e:b9:48:18:dd:1f:7a:ca:af:4f:c4:4e:fc:4c:
         6c:1e:8a:e0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 18 17:45:11 2024 by rpki-client on console-ams.rpki-client.org