Certificate

$ rpki-client -vvf rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/z4nWqxHn1Hqhe0MJxypytxy6R64.cer
File:                     z4nWqxHn1Hqhe0MJxypytxy6R64.cer (raw, json)
Hash identifier:          rTJpIGeqKkwtsxFl/Fc8cbdbTGrs+lvvI+Gok7Whgs0=
Subject key identifier:   CF:89:D6:AB:11:E7:D4:7A:A1:7B:43:09:C7:2A:72:B7:1C:BA:47:AE
Authority key identifier: 0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
Certificate issuer:       /CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Certificate serial:       02091D
Authority info access:    rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
Manifest:                 rsync://rpki.apnic.net/member_repository/A91E4D9B/F5BAA3D8C80011EA87D44A78C4F9AE02/z4nWqxHn1Hqhe0MJxypytxy6R64.mft
caRepository:             rsync://rpki.apnic.net/member_repository/A91E4D9B/F5BAA3D8C80011EA87D44A78C4F9AE02/
Notify URL:               https://rrdp.apnic.net/notification.xml
Certificate not before:   Mon 26 Aug 2024 21:25:33 +0000
Certificate not after:    Fri 31 Oct 2025 00:00:00 +0000
Subordinate resources:    AS: 140916
                          IP: 103.153.106.0/23
                          IP: 2001:df4:3f80::/48

Validation:               OK
Signature path:           rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 04 Dec 2024 02:50:13 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 133405 (0x2091d)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
        Validity
            Not Before: Aug 26 21:25:33 2024 GMT
            Not After : Oct 31 00:00:00 2025 GMT
        Subject: CN=A91E4D9B/serialNumber=CF89D6AB11E7D47AA17B4309C72A72B71CBA47AE
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:60:aa:f5:92:97:5b:fe:c9:9b:86:ad:86:3d:
                    8e:7a:15:67:03:9b:2f:37:8b:7f:52:4a:8c:a9:73:
                    b1:df:af:50:cc:03:72:49:04:bc:3e:92:4b:cf:4a:
                    5d:dd:d4:5b:1f:3d:67:ea:83:cf:dc:02:3b:ec:9c:
                    a6:a9:8a:86:3e:70:b3:a1:24:63:a0:dd:8c:8a:e4:
                    1c:fb:2a:d0:d2:26:9e:97:02:18:7f:f8:0d:e3:8e:
                    9e:f2:f7:17:08:17:06:fb:1b:45:44:43:50:0b:24:
                    96:d6:e2:7a:74:3f:64:08:50:36:b3:40:7f:3b:95:
                    d5:31:36:e5:5a:c4:c1:aa:fe:1a:de:fd:e6:91:66:
                    e9:0c:2a:bd:32:b0:7d:0e:db:9d:79:d7:72:2c:d1:
                    4c:1d:71:37:82:8b:97:2b:59:51:7e:c9:f7:90:22:
                    46:b6:8c:67:9c:00:e6:74:04:c7:5b:bf:7f:91:45:
                    fd:e7:e0:29:1f:8f:56:88:e4:a9:1d:ec:6e:2d:22:
                    0f:d1:2d:fa:9c:20:a5:6d:34:26:28:89:a0:08:df:
                    31:ab:af:77:0d:51:e5:5c:28:73:db:fe:33:59:ff:
                    6f:6e:0f:22:2b:35:23:35:66:e3:15:47:43:87:2c:
                    c7:9c:b7:ca:b7:72:d5:a9:4a:09:8e:70:d0:2c:ae:
                    ce:bd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CF:89:D6:AB:11:E7:D4:7A:A1:7B:43:09:C7:2A:72:B7:1C:BA:47:AE
            X509v3 Authority Key Identifier:
                keyid:0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                CA Repository - URI:rsync://rpki.apnic.net/member_repository/A91E4D9B/F5BAA3D8C80011EA87D44A78C4F9AE02/
                RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A91E4D9B/F5BAA3D8C80011EA87D44A78C4F9AE02/z4nWqxHn1Hqhe0MJxypytxy6R64.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  140916

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.153.106.0/23
                IPv6:
                  2001:df4:3f80::/48

    Signature Algorithm: sha256WithRSAEncryption
         c0:7a:d6:10:6a:53:59:93:ae:5a:05:ae:47:74:f5:23:3e:57:
         0e:c1:5f:f5:3b:05:9a:c5:d4:51:04:46:26:11:b5:e1:23:22:
         a9:84:f1:c9:70:9a:10:fe:bc:5f:6b:51:31:90:31:28:6f:36:
         63:0f:e4:96:a2:66:b7:8d:73:8e:c3:16:ac:de:e5:62:30:cd:
         55:77:35:1b:fb:33:99:bb:5a:43:03:8f:8d:4d:bf:a1:a4:92:
         67:39:53:ab:f0:75:4e:cf:0d:02:7f:46:70:b0:fc:4c:f7:82:
         bf:4c:0b:81:00:84:e7:4d:99:04:11:e8:84:55:dc:45:da:a4:
         53:b8:99:83:8f:50:25:45:f7:df:26:71:42:59:fc:d8:85:4c:
         26:00:39:dd:be:49:49:3a:aa:02:0a:f3:af:04:16:67:ff:f1:
         c1:2c:64:9f:52:67:78:f6:44:e8:ba:4d:5b:63:7e:74:17:a3:
         94:b3:57:17:1d:76:46:13:01:ec:e7:3d:cb:6b:96:a5:ea:6f:
         59:aa:ce:63:43:9b:53:4f:f5:f8:6c:f4:ec:77:c3:61:f4:d8:
         4e:38:ee:7a:4e:c0:77:56:8a:5f:2e:d7:10:a2:69:ed:2c:1d:
         65:4c:59:26:1c:c5:dc:2a:a6:f8:47:73:aa:cf:59:3c:92:01:
         f9:4a:8c:31
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----