Certificate

$ rpki-client -vvf rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xPuRgT57oJnZHpxIFyCUuZBcDxE.cer
File:                     xPuRgT57oJnZHpxIFyCUuZBcDxE.cer (raw, json)
Hash identifier:          pU/KAWPCLL4j0KPUoatXpOA22InL4QlAKUFNqDop/pA=
Subject key identifier:   C4:FB:91:81:3E:7B:A0:99:D9:1E:9C:48:17:20:94:B9:90:5C:0F:11
Authority key identifier: 0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
Certificate issuer:       /CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Certificate serial:       01C2F3
Authority info access:    rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
Manifest:                 rsync://rpki.apnic.net/member_repository/A919B3BC/381244FE8F9B11E6BEC5CB25C4F9AE02/xPuRgT57oJnZHpxIFyCUuZBcDxE.mft
caRepository:             rsync://rpki.apnic.net/member_repository/A919B3BC/381244FE8F9B11E6BEC5CB25C4F9AE02/
Notify URL:               https://rrdp.apnic.net/notification.xml
Certificate not before:   Mon 09 Oct 2023 16:59:32 +0000
Certificate not after:    Mon 30 Dec 2024 00:00:00 +0000
Subordinate resources:    AS: 58424
                          IP: 43.255.112.0/22
                          IP: 103.5.124.0/22
                          IP: 103.206.200.0/22
                          IP: 103.227.172.0/22
                          IP: 116.214.24.0/21
                          IP: 2407:8180::/32

Validation:               OK
Signature path:           rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 01 May 2024 21:46:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 115443 (0x1c2f3)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
        Validity
            Not Before: Oct  9 16:59:32 2023 GMT
            Not After : Dec 30 00:00:00 2024 GMT
        Subject: CN=A919B3BC/serialNumber=C4FB91813E7BA099D91E9C48172094B9905C0F11
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:0a:c7:67:a8:2e:22:4e:f9:98:8a:fb:2e:fa:
                    cf:a7:06:8d:03:51:a1:a0:42:4e:55:2a:2c:4e:8f:
                    a4:44:80:c4:0e:fc:43:18:3b:56:e7:ef:5b:ec:79:
                    f0:0c:8a:dd:d4:83:ec:c7:cb:00:3e:c1:f7:a8:9e:
                    15:46:09:ad:54:b2:15:d6:08:62:0b:d2:b5:f6:74:
                    b3:b2:1d:e0:80:be:8f:ad:28:0c:ec:de:0c:67:99:
                    8a:dd:65:e0:c2:20:be:92:c7:82:c8:7f:2f:75:3c:
                    bb:a7:73:6c:c6:83:f9:49:a7:b5:ee:47:d8:ce:7d:
                    40:5b:cb:a6:97:2c:dc:d8:97:1a:6b:be:69:11:87:
                    32:e5:b4:ac:05:3f:92:98:7c:98:06:57:e6:c0:c6:
                    3f:11:55:27:7e:88:d8:73:7e:da:f2:11:ec:4c:db:
                    5c:fe:45:e1:e3:f6:5c:37:95:3f:08:30:23:8a:e6:
                    b8:fb:ae:6b:bb:34:4a:90:ad:ee:79:e7:83:c5:7a:
                    61:31:dc:f0:9e:35:73:7a:43:82:1a:1e:4e:15:34:
                    e7:26:2d:9e:72:a8:d1:34:4e:b5:eb:18:bd:66:20:
                    e0:3c:8e:3c:a4:87:df:5a:08:70:25:a5:0b:0a:84:
                    e6:7d:16:2d:e1:37:f7:7a:8f:65:49:38:63:88:a8:
                    05:83
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C4:FB:91:81:3E:7B:A0:99:D9:1E:9C:48:17:20:94:B9:90:5C:0F:11
            X509v3 Authority Key Identifier:
                keyid:0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                CA Repository - URI:rsync://rpki.apnic.net/member_repository/A919B3BC/381244FE8F9B11E6BEC5CB25C4F9AE02/
                RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A919B3BC/381244FE8F9B11E6BEC5CB25C4F9AE02/xPuRgT57oJnZHpxIFyCUuZBcDxE.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  58424

            sbgp-ipAddrBlock: critical
                IPv4:
                  43.255.112.0/22
                  103.5.124.0/22
                  103.206.200.0/22
                  103.227.172.0/22
                  116.214.24.0/21
                IPv6:
                  2407:8180::/32

    Signature Algorithm: sha256WithRSAEncryption
         32:15:ac:c4:bc:c2:b0:90:9b:9d:dd:2c:4b:12:2e:03:91:37:
         5b:58:5e:c4:2c:3a:53:ab:1d:f6:36:e8:2c:45:6a:1f:41:76:
         4f:13:6c:fa:d9:09:50:1c:ba:c7:ed:5b:cd:11:29:a2:6f:4e:
         c6:83:45:24:80:c8:10:d5:32:75:91:44:60:c3:3b:9c:1c:73:
         e4:26:f6:42:18:1a:da:77:89:33:e0:18:57:06:e4:2a:92:ea:
         1f:df:bf:4b:3f:13:fd:e8:53:17:8c:d8:eb:53:d1:ce:a0:06:
         2f:02:dd:2a:e3:3b:69:01:e8:69:a2:19:22:80:35:a0:09:4d:
         84:74:50:df:2f:70:92:27:35:b3:e0:7a:a0:44:03:ef:03:f5:
         eb:b7:5a:40:b6:4d:6f:f4:e6:7f:4e:5c:a4:fb:e0:e2:c4:99:
         c9:5d:7e:8f:df:e5:7d:f9:fd:d6:62:63:0c:24:34:bb:f1:eb:
         91:d9:8e:18:e4:fa:8d:b2:91:48:36:48:4c:6f:07:19:36:a7:
         d1:4a:f5:5d:f2:74:9d:7e:f6:2b:7b:b0:9b:66:59:ee:ba:51:
         a1:bc:c1:16:9d:4c:47:32:57:84:05:e4:86:a6:7d:84:02:99:
         29:e7:ef:9b:49:a7:44:86:b5:a9:41:24:93:a2:62:e0:90:f4:
         73:d5:96:57
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 24 23:35:30 2024 by rpki-client on console-ams.rpki-client.org