Certificate

$ rpki-client -vvf rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xMZ-u2st3Gkku7llXn4PghhTDGU.cer
File:                     xMZ-u2st3Gkku7llXn4PghhTDGU.cer (raw, json)
Hash identifier:          WBKUD9IyBrhvfFHBQNmqxZKEV44HektCnKtAqt2tNC4=
Subject key identifier:   C4:C6:7E:BB:6B:2D:DC:69:24:BB:B9:65:5E:7E:0F:82:18:53:0C:65
Authority key identifier: 0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
Certificate issuer:       /CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Certificate serial:       01FE67
Authority info access:    rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
Manifest:                 rsync://rpki.apnic.net/member_repository/A9122D51/EAE5FCAAF23611EE8C8B9758C4F9AE02/xMZ-u2st3Gkku7llXn4PghhTDGU.mft
caRepository:             rsync://rpki.apnic.net/member_repository/A9122D51/EAE5FCAAF23611EE8C8B9758C4F9AE02/
Notify URL:               https://rrdp.apnic.net/notification.xml
Certificate not before:   Fri 05 Jul 2024 07:26:10 +0000
Certificate not after:    Tue 30 Sep 2025 00:00:00 +0000
Subordinate resources:    AS: 133425
                          IP: 103.190.18.0/23
                          IP: 2400:8ba0::/32

Validation:               OK
Signature path:           rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 04 Dec 2024 01:13:26 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 130663 (0x1fe67)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
        Validity
            Not Before: Jul  5 07:26:10 2024 GMT
            Not After : Sep 30 00:00:00 2025 GMT
        Subject: CN=A9122D51/serialNumber=C4C67EBB6B2DDC6924BBB9655E7E0F8218530C65
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:95:3c:f2:67:38:30:1b:1a:1f:ff:7c:79:27:
                    d2:47:18:83:b5:eb:dd:ce:e1:28:4e:a3:64:f8:3c:
                    0a:2f:9d:20:22:0b:8f:e1:f4:50:25:9b:a9:07:eb:
                    7a:ed:39:5c:f0:2e:e1:78:6b:da:f1:2e:7b:d4:98:
                    c5:0a:43:87:d1:c0:19:2f:64:9d:80:30:c3:3e:66:
                    cc:8f:e1:f4:0a:5d:bb:d5:84:d8:2d:1c:ff:3c:2a:
                    de:ba:55:ff:b2:6d:cf:00:86:d6:f3:54:ba:23:2b:
                    8c:eb:5a:47:8f:08:a0:ea:ca:14:80:a3:f6:e1:b3:
                    e5:85:dd:64:7c:e1:38:41:56:ae:f2:c4:95:14:71:
                    2e:ac:0f:33:18:f7:04:29:1d:9a:cb:54:f7:47:24:
                    53:c3:f5:83:d5:e6:ae:a4:e4:5d:3d:6e:07:f8:a7:
                    69:f4:39:63:05:01:66:34:51:05:4d:c5:ec:09:74:
                    16:d7:7f:59:2a:3d:30:c5:4e:77:6f:09:a5:d3:6f:
                    a5:cc:aa:e7:9b:f4:40:e0:da:89:28:22:64:f7:04:
                    bf:0a:96:d4:a9:2d:7c:6b:85:3e:e8:c2:7b:13:3c:
                    eb:5a:52:1d:58:74:b3:37:e2:a1:49:2a:0d:e6:e0:
                    3f:95:74:44:5f:01:18:4d:40:58:eb:02:54:4c:52:
                    bd:d9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C4:C6:7E:BB:6B:2D:DC:69:24:BB:B9:65:5E:7E:0F:82:18:53:0C:65
            X509v3 Authority Key Identifier:
                keyid:0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                CA Repository - URI:rsync://rpki.apnic.net/member_repository/A9122D51/EAE5FCAAF23611EE8C8B9758C4F9AE02/
                RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A9122D51/EAE5FCAAF23611EE8C8B9758C4F9AE02/xMZ-u2st3Gkku7llXn4PghhTDGU.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  133425

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.190.18.0/23
                IPv6:
                  2400:8ba0::/32

    Signature Algorithm: sha256WithRSAEncryption
         72:ff:39:14:3e:c1:7f:10:23:f6:69:a9:e1:d9:75:59:a2:88:
         69:80:2c:f2:3e:00:bd:4c:ac:9e:48:63:21:fc:25:3b:7e:97:
         96:08:0b:97:98:29:cd:99:cc:99:f0:a4:28:5a:7c:92:f2:e6:
         f2:f2:a2:c3:fc:a0:55:94:fb:8d:e0:47:2e:c1:6a:bc:dc:c9:
         4f:33:9b:29:17:ff:7d:32:19:f2:18:f1:e8:08:63:65:bd:69:
         5e:fb:a1:77:3c:d5:62:b7:a1:83:1a:b9:39:f6:29:b1:89:be:
         90:db:c7:2b:b6:e3:de:a0:05:0d:c0:e8:ad:29:51:ec:04:43:
         e3:44:ac:a1:f0:86:dd:f2:69:bb:c6:48:08:48:19:ef:fb:86:
         1f:fe:97:b0:23:26:6e:5c:75:29:ce:a0:68:38:7b:01:ca:46:
         ac:aa:2c:4b:7f:7b:67:0f:c9:31:51:f1:47:2f:9c:bc:51:9f:
         9d:8d:93:82:3d:cc:6f:ef:bb:43:b3:16:b0:4e:c9:a0:4c:43:
         05:28:e6:d2:8a:30:31:16:28:68:36:e9:fb:69:18:a1:1c:05:
         f0:a4:ec:04:d9:a6:6d:33:34:a0:c8:65:cc:84:de:4e:bb:ca:
         98:71:29:8d:a5:d1:d8:a0:2c:aa:8c:9c:17:8b:e2:7f:c7:9d:
         16:32:f2:46
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----