Certificate

$ rpki-client -vvf rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/u5MlbmB9QutuNCDcxxN_ILhNDIo.cer
File:                     u5MlbmB9QutuNCDcxxN_ILhNDIo.cer (raw, json)
Hash identifier:          9C1p0UM5a0h60Q9ZvzQQP7OgemB3Gg5JbSLFiJhR8bo=
Subject key identifier:   BB:93:25:6E:60:7D:42:EB:6E:34:20:DC:C7:13:7F:20:B8:4D:0C:8A
Authority key identifier: 0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
Certificate issuer:       /CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Certificate serial:       01B29C
Authority info access:    rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
Manifest:                 rsync://rpki.apnic.net/member_repository/A91DF3CA/EF4F937CC3A411E797BBF15EC4F9AE02/u5MlbmB9QutuNCDcxxN_ILhNDIo.mft
caRepository:             rsync://rpki.apnic.net/member_repository/A91DF3CA/EF4F937CC3A411E797BBF15EC4F9AE02/
Notify URL:               https://rrdp.apnic.net/notification.xml
Certificate not before:   Thu 27 Jul 2023 21:56:21 +0000
Certificate not after:    Mon 30 Sep 2024 00:00:00 +0000
Subordinate resources:    AS: 132018
                          AS: 136726
                          IP: 103.21.192.0/24
                          IP: 103.94.184.0/24
                          IP: 2001:df1:7f00::/47

Validation:               OK
Signature path:           rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 02 May 2024 03:16:56 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 111260 (0x1b29c)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
        Validity
            Not Before: Jul 27 21:56:21 2023 GMT
            Not After : Sep 30 00:00:00 2024 GMT
        Subject: CN=A91DF3CA/serialNumber=BB93256E607D42EB6E3420DCC7137F20B84D0C8A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dd:68:3b:37:ed:02:49:1c:4b:90:d4:f8:eb:2f:
                    c1:36:f2:b6:8f:43:23:12:c7:dc:7e:56:10:7e:55:
                    ef:28:82:f4:ae:7a:89:03:e6:61:fa:24:80:6b:7d:
                    cb:34:56:a8:18:7c:36:75:8e:e4:4a:45:71:11:6d:
                    1f:07:40:f8:3b:d3:3d:84:a2:8c:e6:bc:45:cd:0a:
                    ad:4e:88:2f:8c:bd:fb:db:87:69:99:19:fe:2e:46:
                    74:f8:39:68:b5:8b:fa:27:57:5f:54:05:47:52:9d:
                    19:c5:21:ef:c4:8f:9b:e6:be:14:97:46:94:c9:1e:
                    2d:6a:96:25:cb:0f:50:9e:4a:ca:1a:c9:0e:70:84:
                    c1:34:10:96:48:c2:5d:c4:e4:13:72:58:88:46:84:
                    de:d1:e7:5e:6d:cc:c1:9b:0b:d4:c3:f5:87:e5:40:
                    f3:db:80:58:7c:ec:fd:02:65:78:0c:a4:2b:b9:05:
                    50:8f:20:46:41:9c:30:d9:9e:46:36:e5:6b:f3:ac:
                    89:c5:49:1e:ec:9a:f3:aa:66:c9:e7:68:82:c9:96:
                    68:aa:00:85:22:d6:89:c5:5a:fc:8f:10:67:ad:4d:
                    6c:6d:64:2f:df:48:4f:b7:bf:a1:1a:30:ef:0b:82:
                    21:b8:e3:1d:29:6d:9b:17:22:2d:de:04:d4:c8:fb:
                    22:5b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BB:93:25:6E:60:7D:42:EB:6E:34:20:DC:C7:13:7F:20:B8:4D:0C:8A
            X509v3 Authority Key Identifier:
                keyid:0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                CA Repository - URI:rsync://rpki.apnic.net/member_repository/A91DF3CA/EF4F937CC3A411E797BBF15EC4F9AE02/
                RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A91DF3CA/EF4F937CC3A411E797BBF15EC4F9AE02/u5MlbmB9QutuNCDcxxN_ILhNDIo.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  132018
                  136726

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.21.192.0/24
                  103.94.184.0/24
                IPv6:
                  2001:df1:7f00::/47

    Signature Algorithm: sha256WithRSAEncryption
         2e:e9:f0:02:41:eb:02:eb:0b:ee:ad:1e:b6:e4:9b:30:0a:8c:
         55:d9:21:6f:58:71:a4:b8:79:ac:8b:96:9a:02:65:b9:5b:cf:
         35:1b:bf:57:ba:d4:ea:86:0b:0f:9e:d5:82:fa:bc:7f:22:5a:
         d6:b2:97:b0:9a:a5:db:52:72:26:07:6c:85:38:e0:bc:1b:4d:
         43:c7:df:7d:db:be:2d:62:91:e6:f0:62:78:e5:4d:c8:5c:66:
         a0:a0:da:9a:01:98:4e:ff:a5:cf:79:fd:b8:55:64:21:fb:fa:
         16:8c:cf:c5:d7:f2:b1:de:fe:d2:34:a8:ce:bd:db:c8:0f:bf:
         c1:57:8c:11:97:30:79:2e:5d:7d:94:87:0c:10:aa:9c:27:55:
         e7:3b:5a:15:55:01:cf:7b:40:f5:f1:e6:b4:b9:eb:50:a6:9b:
         5f:ab:55:22:04:4c:9d:1d:da:88:58:3d:13:fe:5a:fb:1c:62:
         56:f6:f0:47:19:a7:e0:6f:d4:9e:50:91:15:bf:06:d1:16:7f:
         a8:c5:9f:78:c6:48:e3:f6:4d:b2:2e:63:f8:05:31:3e:c6:a5:
         30:b6:b5:03:42:b2:a6:a2:af:02:b0:28:7b:b0:af:39:02:a9:
         d2:60:6c:95:7f:bb:85:e9:8f:7a:88:3c:e4:42:36:3c:ee:9f:
         76:f2:8d:d7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 25 03:53:52 2024 by rpki-client on console-fra.rpki-client.org