Certificate

$ rpki-client -vvf rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ygBwrFIB1vandapSXVPY4zDjIJY.cer
File:                     ygBwrFIB1vandapSXVPY4zDjIJY.cer (raw, json)
Hash identifier:          Eo/54Ax+cV4/VhcYxLIgxTyWSLwsUDG1dh01xfLm1F8=
Subject key identifier:   CA:00:70:AC:52:01:D6:F6:A7:75:AA:52:5D:53:D8:E3:30:E3:20:96
Authority key identifier: 0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
Certificate issuer:       /CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Certificate serial:       021D8F
Authority info access:    rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
Manifest:                 rsync://rpki.apnic.net/member_repository/A9116907/B56A7CB07AB711ED9B953569C4F9AE02/ygBwrFIB1vandapSXVPY4zDjIJY.mft
caRepository:             rsync://rpki.apnic.net/member_repository/A9116907/B56A7CB07AB711ED9B953569C4F9AE02/
Notify URL:               https://rrdp.apnic.net/notification.xml
Certificate not before:   Tue 26 Nov 2024 12:27:35 +0000
Certificate not after:    Sat 31 Jan 2026 00:00:00 +0000
Subordinate resources:    AS: 150681
                          IP: 103.53.160.0/23
                          IP: 2400:cae0::/32

Validation:               OK
Signature path:           rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 04 Dec 2024 02:50:13 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 138639 (0x21d8f)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
        Validity
            Not Before: Nov 26 12:27:35 2024 GMT
            Not After : Jan 31 00:00:00 2026 GMT
        Subject: CN=A9116907/serialNumber=CA0070AC5201D6F6A775AA525D53D8E330E32096
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:a4:a3:e9:6f:ba:a7:65:26:bb:e8:ea:3a:a4:
                    69:f2:dc:45:9d:7b:f9:e6:e7:e2:f5:97:67:c2:ec:
                    2f:85:f2:c8:30:de:8c:b0:38:01:de:7c:6a:7c:2d:
                    49:3e:2f:77:81:1e:44:9f:8f:9c:5b:a6:71:c1:fb:
                    8d:c9:86:83:e7:a2:04:af:1e:61:2c:b7:ac:98:99:
                    00:6c:97:4c:8e:4f:d3:a1:a9:c9:1b:df:22:a4:0b:
                    58:a0:a2:83:57:4d:75:c8:3c:82:12:69:9a:3d:5a:
                    e2:d8:ab:f3:40:1b:6b:e7:7e:2a:d6:ea:01:aa:c6:
                    e4:a2:77:d1:ca:43:d6:d6:8e:d3:71:91:74:d3:0b:
                    8f:54:cc:06:5a:ba:2b:58:35:3c:aa:37:1b:15:6f:
                    cc:48:ed:1c:bd:1d:77:27:56:df:90:6b:9b:5e:8e:
                    09:b1:30:36:fa:da:8e:f7:04:82:d4:01:c0:05:c0:
                    7f:a9:3e:9c:8a:64:cc:85:29:e3:85:1e:d4:5c:42:
                    b2:91:3a:12:24:c6:c2:49:81:73:dd:c9:9e:b7:2e:
                    02:19:05:02:1c:d8:63:3a:c9:af:c1:a4:83:fb:a1:
                    fa:d3:db:38:09:1e:7d:b5:03:56:bc:03:08:9c:4e:
                    e7:e6:ae:8e:ac:8a:69:e2:8c:80:80:de:c3:eb:5d:
                    35:53
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CA:00:70:AC:52:01:D6:F6:A7:75:AA:52:5D:53:D8:E3:30:E3:20:96
            X509v3 Authority Key Identifier:
                keyid:0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                CA Repository - URI:rsync://rpki.apnic.net/member_repository/A9116907/B56A7CB07AB711ED9B953569C4F9AE02/
                RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A9116907/B56A7CB07AB711ED9B953569C4F9AE02/ygBwrFIB1vandapSXVPY4zDjIJY.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  150681

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.53.160.0/23
                IPv6:
                  2400:cae0::/32

    Signature Algorithm: sha256WithRSAEncryption
         28:fe:d9:cb:7f:b1:64:2c:30:aa:7b:76:a8:c5:e2:de:f7:12:
         31:6a:f5:8f:b5:72:94:be:09:d9:d9:c3:7a:c4:dc:d9:3b:48:
         e8:0f:b4:4a:bc:18:73:6c:70:ad:7c:00:c4:01:6e:29:70:6c:
         db:fd:73:60:e5:6c:81:09:84:5b:ff:a5:9e:4e:78:0c:70:85:
         0d:f7:af:5b:bb:88:b2:7a:1c:7c:4e:8c:0d:a5:ae:56:be:24:
         13:74:c6:5e:94:93:84:de:61:e1:eb:dc:3d:5e:81:77:b6:21:
         ae:f6:15:12:c4:c0:47:45:5c:d3:a8:05:20:49:6a:b6:5e:e0:
         72:e0:e9:30:f0:4b:0e:5c:05:48:9a:39:86:e7:41:18:d7:6d:
         f7:ea:6f:55:c6:41:96:7c:58:cc:93:24:35:34:2b:3b:c9:68:
         5d:b2:47:7a:63:42:d1:6c:47:cd:3e:b1:d9:93:9b:c3:4f:30:
         3c:19:e1:f1:7a:78:17:b2:f9:a2:6e:b3:7d:2c:4b:15:e1:a0:
         8e:69:fd:bd:9c:64:25:a2:1c:a3:92:51:df:94:6b:1a:e0:8a:
         2e:70:d0:d3:90:0a:f2:29:d5:92:d9:b9:74:45:04:13:dc:fb:
         7a:b1:db:64:5c:82:8e:d0:d3:8e:a4:f7:5f:b2:e6:10:31:44:
         2d:03:cb:83
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----