Certificate

$ rpki-client -vvf rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uftCI-sDug7mzge0ZgIXr69xbV0.cer
File:                     uftCI-sDug7mzge0ZgIXr69xbV0.cer (raw, json)
Hash identifier:          if0JdtUj5ZTvB+hj4vWfH+yuiVpOI9XQrDoX8m2hIrg=
Subject key identifier:   B9:FB:42:23:EB:03:BA:0E:E6:CE:07:B4:66:02:17:AF:AF:71:6D:5D
Authority key identifier: 0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
Certificate issuer:       /CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Certificate serial:       01C372
Authority info access:    rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
Manifest:                 rsync://rpki.apnic.net/member_repository/A916D5A2/C21A538680B811EBBEB19E83C4F9AE02/uftCI-sDug7mzge0ZgIXr69xbV0.mft
caRepository:             rsync://rpki.apnic.net/member_repository/A916D5A2/C21A538680B811EBBEB19E83C4F9AE02/
Notify URL:               https://rrdp.apnic.net/notification.xml
Certificate not before:   Wed 11 Oct 2023 15:43:42 +0000
Certificate not after:    Sun 01 Dec 2024 00:00:00 +0000
Subordinate resources:    AS: 141034
                          IP: 103.155.36.0/23

Validation:               OK
Signature path:           rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 25 Apr 2024 13:17:59 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 115570 (0x1c372)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
        Validity
            Not Before: Oct 11 15:43:42 2023 GMT
            Not After : Dec  1 00:00:00 2024 GMT
        Subject: CN=A916D5A2/serialNumber=B9FB4223EB03BA0EE6CE07B4660217AFAF716D5D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:96:4f:aa:3a:de:00:bd:a7:c1:49:52:b4:92:55:
                    bf:9e:b9:ee:39:9f:99:03:43:b3:18:e5:05:86:6d:
                    68:eb:af:6f:ef:a2:13:31:79:bc:1a:66:c2:a3:47:
                    9b:ed:93:2d:62:20:ba:26:5a:2f:32:e2:aa:a8:d1:
                    55:f8:8f:f5:23:cc:e6:61:69:48:84:48:a3:05:93:
                    f3:3a:9d:97:37:b5:2c:6c:df:93:70:02:e7:df:c3:
                    b8:bf:d2:d2:5f:d5:ab:10:28:f2:8d:98:be:80:c9:
                    61:02:7d:c6:db:36:2e:0e:4f:83:2b:9a:b3:dd:5b:
                    4c:be:f9:71:45:52:9c:76:43:f5:4d:9e:aa:3c:42:
                    be:cb:8a:7d:77:0d:73:51:4d:65:58:a3:db:5d:d7:
                    d6:20:b5:de:90:fd:59:1a:e8:5e:14:05:6d:47:21:
                    d6:f7:dd:f9:3a:68:c5:72:ec:a2:c7:9e:a6:94:a5:
                    58:05:b0:53:b7:be:58:98:3a:11:e1:f5:ef:02:4b:
                    15:f8:26:8e:53:b7:66:3c:d7:8a:d9:d0:39:a3:12:
                    9e:fa:aa:3d:f7:8b:d5:c4:04:ef:84:e1:69:e0:c7:
                    47:5a:a9:2e:28:de:58:fb:e9:7a:84:20:31:ab:3d:
                    31:29:fb:6e:78:57:de:95:3b:dc:05:83:20:6f:e1:
                    83:6f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B9:FB:42:23:EB:03:BA:0E:E6:CE:07:B4:66:02:17:AF:AF:71:6D:5D
            X509v3 Authority Key Identifier:
                keyid:0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                CA Repository - URI:rsync://rpki.apnic.net/member_repository/A916D5A2/C21A538680B811EBBEB19E83C4F9AE02/
                RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A916D5A2/C21A538680B811EBBEB19E83C4F9AE02/uftCI-sDug7mzge0ZgIXr69xbV0.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  141034

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.155.36.0/23

    Signature Algorithm: sha256WithRSAEncryption
         92:06:0b:04:4e:6d:4a:bb:30:15:38:30:8d:a3:2f:62:16:6b:
         0f:d4:2f:87:99:66:c3:ec:ee:3a:e9:e2:8b:bd:53:91:2b:80:
         90:f8:72:5c:10:9d:c0:b4:1a:b2:4b:e2:1c:1d:40:b4:7f:f2:
         71:27:9d:91:01:51:70:d7:8d:68:8f:a8:2d:e3:48:2b:2a:92:
         1b:8f:97:f2:0a:5b:db:7a:2a:3b:ca:72:8f:b4:7f:73:e4:35:
         71:4a:78:2d:6b:63:9a:bc:87:b7:5c:af:44:21:ac:d1:a4:42:
         2e:88:96:00:36:f2:42:7c:31:37:84:70:96:55:15:f0:e0:ad:
         bf:90:89:ba:60:ef:d0:c7:06:0e:7d:2c:8a:43:ec:01:ec:ff:
         e2:4b:78:aa:ad:05:7b:52:c7:7d:dc:15:b5:c4:33:4d:de:09:
         89:fa:27:0e:84:1d:a2:17:d3:db:65:aa:20:ac:4c:b1:a3:35:
         a7:00:0b:40:b1:8b:0a:aa:b8:a1:5c:ed:0b:1a:1a:22:20:94:
         b8:15:1c:14:f3:3e:9b:29:1d:34:4e:df:75:4b:5a:f6:96:76:
         83:94:c9:6f:64:52:15:13:38:23:74:b2:83:21:36:33:55:8b:
         fa:43:33:fd:ef:6f:e4:88:86:ec:91:c4:99:c0:26:b8:dd:e9:
         39:15:93:aa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 18 14:08:34 2024 by rpki-client on console-fra.rpki-client.org