Certificate

$ rpki-client -vvf rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yRX9O9Rbghi5X1c3SdOqSYAWqqk.cer
File:                     yRX9O9Rbghi5X1c3SdOqSYAWqqk.cer (raw, json)
Hash identifier:          b+MLnH9YFb0g9co3xo1ZdWXS8yh4I8du20QujDoic5o=
Subject key identifier:   C9:15:FD:3B:D4:5B:82:18:B9:5F:57:37:49:D3:AA:49:80:16:AA:A9
Authority key identifier: 0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
Certificate issuer:       /CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Certificate serial:       01DD02
Authority info access:    rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
Manifest:                 rsync://rpki.apnic.net/member_repository/A91CCDF3/42DE4836FF7611EDB8981558C4F9AE02/yRX9O9Rbghi5X1c3SdOqSYAWqqk.mft
caRepository:             rsync://rpki.apnic.net/member_repository/A91CCDF3/42DE4836FF7611EDB8981558C4F9AE02/
Notify URL:               https://rrdp.apnic.net/notification.xml
Certificate not before:   Fri 02 Feb 2024 05:50:57 +0000
Certificate not after:    Mon 31 Mar 2025 00:00:00 +0000
Subordinate resources:    AS: 58604
                          IP: 103.247.38.0/23

Validation:               OK
Signature path:           rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 26 Apr 2024 23:35:43 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 122114 (0x1dd02)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
        Validity
            Not Before: Feb  2 05:50:57 2024 GMT
            Not After : Mar 31 00:00:00 2025 GMT
        Subject: CN=A91CCDF3/serialNumber=C915FD3BD45B8218B95F573749D3AA498016AAA9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:9b:14:e8:47:67:fe:c4:5e:26:cc:af:e5:e1:
                    9f:7c:84:71:75:dc:56:39:26:4e:81:da:7c:13:c3:
                    56:cd:41:ca:7f:a6:45:0e:8d:30:ad:cd:9a:b6:29:
                    f8:68:ad:4c:06:94:5b:c4:a4:97:fd:44:e4:3d:29:
                    18:6a:e4:89:9c:93:dd:aa:df:bd:42:51:32:2c:18:
                    3d:b7:b0:34:65:7c:26:22:a5:35:6c:03:11:40:90:
                    43:15:c8:52:41:bd:68:06:d9:04:87:b1:2e:27:20:
                    12:3f:ea:fa:4f:7c:b7:4d:5f:49:00:b2:4a:eb:4c:
                    fa:0a:58:b5:30:5e:4a:4d:df:6b:71:c5:20:39:a1:
                    71:ef:0e:22:f8:d2:57:a8:43:dd:5a:68:1e:c6:af:
                    24:80:0f:b7:29:04:6c:54:3c:1e:04:2c:f8:e0:94:
                    c0:00:db:4f:c5:98:fc:1d:db:2b:f5:95:00:6d:29:
                    95:d0:4e:57:bf:7b:b7:c1:cf:09:9c:dc:46:46:8a:
                    b0:6b:f9:34:8e:e2:c4:50:5c:3f:08:0c:8f:32:9e:
                    b6:e3:41:95:d2:52:34:9c:83:85:b4:a5:4c:52:73:
                    f9:1a:4c:70:96:d4:61:f8:c5:83:4b:b2:36:ef:2e:
                    81:b2:80:17:ea:f7:12:90:46:36:37:f2:1a:07:bd:
                    35:fb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C9:15:FD:3B:D4:5B:82:18:B9:5F:57:37:49:D3:AA:49:80:16:AA:A9
            X509v3 Authority Key Identifier:
                keyid:0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                CA Repository - URI:rsync://rpki.apnic.net/member_repository/A91CCDF3/42DE4836FF7611EDB8981558C4F9AE02/
                RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A91CCDF3/42DE4836FF7611EDB8981558C4F9AE02/yRX9O9Rbghi5X1c3SdOqSYAWqqk.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  58604

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.247.38.0/23

    Signature Algorithm: sha256WithRSAEncryption
         9a:a2:af:b6:91:08:9d:37:49:a0:11:c6:2b:35:37:f3:0d:e0:
         cf:83:c8:35:4d:a8:a8:03:85:6a:48:84:45:4a:13:74:42:7c:
         ff:b4:be:2d:25:33:93:0a:f6:23:2a:49:21:f1:f8:03:c7:5d:
         ea:d1:54:99:c3:42:5a:c3:e8:3a:79:72:47:ef:f4:08:98:82:
         ea:ea:66:a3:86:a4:56:28:10:d0:dc:65:e0:17:6e:b0:73:de:
         21:6d:50:e8:b1:2a:98:2e:34:f4:c2:7d:67:43:df:d9:96:31:
         ba:26:2f:f8:af:c0:fb:be:04:00:6a:23:83:86:5c:1e:14:cb:
         eb:67:71:82:e9:9c:55:17:14:30:a3:f6:79:b8:2f:bd:83:bd:
         1c:b9:b7:fb:fc:af:c0:2c:2b:70:22:bd:7e:b5:d6:80:56:36:
         cc:94:62:2b:56:cf:9e:d0:d2:95:72:3e:7b:2e:de:7b:dd:31:
         8c:67:4a:ef:b0:b6:a0:30:f7:f7:12:ab:a6:c8:56:89:81:81:
         bb:b0:a9:ee:67:aa:ef:74:25:63:7e:4e:39:03:dd:7e:01:84:
         1c:1d:1f:06:e3:99:13:09:63:e5:ff:38:3f:92:92:fb:57:29:
         c6:0f:b4:05:73:95:79:d0:ad:43:e0:1e:4a:fe:61:fa:ad:cf:
         23:fc:26:3b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 20 01:03:16 2024 by rpki-client on console-fra.rpki-client.org