Certificate

$ rpki-client -vvf rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/u0-uhVQKWtn5PLSCxFyVdvUqO_Q.cer
File:                     u0-uhVQKWtn5PLSCxFyVdvUqO_Q.cer (raw, json)
Hash identifier:          mC7oPkiaFhB+tMu4GzD30PG73V/OicerSAqpeQb1w9E=
Subject key identifier:   BB:4F:AE:85:54:0A:5A:D9:F9:3C:B4:82:C4:5C:95:76:F5:2A:3B:F4
Authority key identifier: 0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
Certificate issuer:       /CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Certificate serial:       01E6A2
Authority info access:    rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
Manifest:                 rsync://rpki.apnic.net/member_repository/A9189122/0FD4EF4EAEEF11EDA2E9BC68C4F9AE02/u0-uhVQKWtn5PLSCxFyVdvUqO_Q.mft
caRepository:             rsync://rpki.apnic.net/member_repository/A9189122/0FD4EF4EAEEF11EDA2E9BC68C4F9AE02/
Notify URL:               https://rrdp.apnic.net/notification.xml
Certificate not before:   Tue 26 Mar 2024 17:14:30 +0000
Certificate not after:    Thu 01 May 2025 00:00:00 +0000
Subordinate resources:    AS: 150747
                          IP: 103.82.202.0/23
                          IP: 2001:df1:ec40::/48

Validation:               OK
Signature path:           rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 04 Dec 2024 01:13:26 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 124578 (0x1e6a2)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
        Validity
            Not Before: Mar 26 17:14:30 2024 GMT
            Not After : May  1 00:00:00 2025 GMT
        Subject: CN=A9189122/serialNumber=BB4FAE85540A5AD9F93CB482C45C9576F52A3BF4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:f6:23:b8:8e:77:a6:53:4c:fc:7f:98:c7:5f:
                    e4:ae:ff:bb:0e:ac:1d:f7:b0:6a:2d:e7:1c:38:e6:
                    47:60:ab:83:5c:89:d2:a8:c1:af:36:54:fe:c9:12:
                    e8:fd:70:c6:6c:7b:39:59:28:b2:4e:26:d4:32:45:
                    a1:89:08:bc:6d:fa:f7:ff:0f:73:0b:ae:8f:20:05:
                    85:75:e5:f0:8e:3e:5b:19:e9:3d:85:8c:f1:95:17:
                    3e:1a:c6:36:69:a9:76:d2:91:ee:86:10:aa:5b:3b:
                    4b:fc:d1:7b:1b:33:d5:90:05:bc:e0:96:a9:a7:b6:
                    5a:72:1d:bc:0b:f2:f8:6c:58:ea:32:cf:91:b3:7d:
                    e1:a9:f7:9c:22:39:94:dd:50:0d:dc:d5:81:28:95:
                    0f:5d:00:73:3f:0f:03:62:c1:ce:8e:66:05:1f:49:
                    a8:89:95:9b:73:a6:d5:49:24:f5:1d:46:58:04:ab:
                    b8:3f:9e:c3:b2:0d:fa:42:71:1a:74:23:78:5d:fa:
                    c0:58:cd:fb:57:8e:bf:da:82:f8:4d:be:bc:b3:c9:
                    b2:fd:c9:92:ce:b5:26:41:cf:f1:fb:ac:d6:fe:1e:
                    7b:bb:2d:90:de:f1:2e:29:aa:ba:d9:14:67:5d:47:
                    cf:bd:ed:6c:10:5b:07:38:fd:5e:f3:13:9d:0a:ac:
                    5e:7d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BB:4F:AE:85:54:0A:5A:D9:F9:3C:B4:82:C4:5C:95:76:F5:2A:3B:F4
            X509v3 Authority Key Identifier:
                keyid:0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                CA Repository - URI:rsync://rpki.apnic.net/member_repository/A9189122/0FD4EF4EAEEF11EDA2E9BC68C4F9AE02/
                RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A9189122/0FD4EF4EAEEF11EDA2E9BC68C4F9AE02/u0-uhVQKWtn5PLSCxFyVdvUqO_Q.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  150747

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.82.202.0/23
                IPv6:
                  2001:df1:ec40::/48

    Signature Algorithm: sha256WithRSAEncryption
         4c:d7:73:07:d2:9b:94:5b:d3:39:92:2f:14:5c:ba:ec:73:b4:
         57:82:84:96:3a:06:8e:b7:da:5d:0e:c6:e5:db:46:96:e1:d2:
         40:67:ef:23:84:02:94:e8:e5:62:cd:0b:dd:20:f0:9d:93:8c:
         49:14:12:29:44:4f:dc:2c:c8:49:5e:a2:71:7d:b9:ba:0a:04:
         96:e1:2f:93:6f:f1:be:ff:33:0c:c5:0a:b3:02:15:36:83:fe:
         6d:41:5e:97:2d:c5:c8:32:b6:cc:ca:66:a0:cd:dc:cb:cd:4d:
         08:83:df:eb:16:6d:ad:96:b3:73:71:eb:3d:6f:d9:26:f5:c2:
         b6:fa:c1:57:7a:a2:ca:e0:f2:0d:1c:8a:99:84:d0:3f:ac:a4:
         5b:2c:51:6c:40:c5:da:e0:18:4d:f4:c9:02:01:6d:bd:89:f0:
         84:c3:0a:cd:d9:cd:c0:eb:64:67:f0:27:50:14:57:fc:e5:86:
         0f:1d:e0:b6:ea:a0:14:36:ce:60:1e:3b:81:06:b0:d9:be:75:
         03:11:29:fa:0b:8f:f4:b2:43:f8:be:8e:0c:6e:8e:7c:f6:94:
         ef:c9:a4:e3:97:b2:78:da:d8:62:51:5d:75:c3:a3:5a:82:f5:
         3f:33:11:52:a5:c7:04:d9:48:06:09:5e:f2:33:c8:50:5e:fc:
         c0:75:d0:0f
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----