Certificate

$ rpki-client -vvf rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zMbKvl1V0VZOo9do6b5iQyQgoYM.cer
File:                     zMbKvl1V0VZOo9do6b5iQyQgoYM.cer (raw, json)
Hash identifier:          oS5ZqMc3Dh5Un18Q8e0e9NZNvho0rakMl36n/tMHcNQ=
Subject key identifier:   CC:C6:CA:BE:5D:55:D1:56:4E:A3:D7:68:E9:BE:62:43:24:20:A1:83
Authority key identifier: 0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
Certificate issuer:       /CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Certificate serial:       01004D
Authority info access:    rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
Manifest:                 rsync://rpki.apnic.net/member_repository/A91CB5FF/FA99EE2C294911EB9CC7342CC4F9AE02/zMbKvl1V0VZOo9do6b5iQyQgoYM.mft
caRepository:             rsync://rpki.apnic.net/member_repository/A91CB5FF/FA99EE2C294911EB9CC7342CC4F9AE02/
Notify URL:               https://rrdp.apnic.net/notification.xml
Certificate not before:   Mon 01 Feb 2021 13:08:01 +0000
Certificate not after:    Sun 01 May 2022 00:00:00 +0000
Subordinate resources:    IP: 103.224.163.0/24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 65613 (0x1004d)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
        Validity
            Not Before: Feb  1 13:08:01 2021 GMT
            Not After : May  1 00:00:00 2022 GMT
        Subject: CN=A91CB5FF/serialNumber=CCC6CABE5D55D1564EA3D768E9BE62432420A183
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:c0:cb:42:41:7f:88:e9:c3:3a:63:e3:d0:c4:
                    12:f4:ff:c0:cd:f9:44:07:6a:84:fd:7f:fc:b3:d1:
                    8d:ed:cc:fc:8b:db:ad:11:c0:28:cb:ae:7f:bf:a7:
                    85:22:5b:3e:2e:89:bf:41:4e:b3:5d:61:81:7d:f9:
                    4d:84:a3:86:e8:5e:4c:89:bc:d5:e1:e4:37:bf:09:
                    61:11:0e:58:3a:b5:25:d3:a4:b2:d8:b7:55:99:bf:
                    59:cf:93:19:ad:6d:8b:6d:73:18:a9:c1:f9:3c:f1:
                    88:37:84:38:bb:b8:10:2f:03:fb:f7:02:34:ee:75:
                    4f:36:25:4f:0c:bb:4d:46:26:d0:5d:31:f7:17:6e:
                    01:19:81:63:0a:0e:b5:b7:af:73:bf:dc:5c:42:cc:
                    27:74:db:37:77:7f:18:7e:3e:43:3d:82:ed:aa:1e:
                    01:87:d9:a3:72:7d:f9:e1:af:9b:5c:39:e7:d6:33:
                    1f:00:16:0c:cf:9c:b1:cd:07:dc:13:cb:19:cd:4b:
                    c8:91:90:0a:61:f1:c7:12:dc:60:21:33:10:23:6c:
                    43:0b:63:41:13:b8:d1:83:86:a0:93:7f:d4:56:0f:
                    07:a9:06:6b:08:ff:0d:4f:6a:f6:63:54:06:12:4d:
                    6f:f5:4d:e4:7d:9b:8e:a7:88:27:9a:05:2d:c2:a7:
                    9a:25
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CC:C6:CA:BE:5D:55:D1:56:4E:A3:D7:68:E9:BE:62:43:24:20:A1:83
            X509v3 Authority Key Identifier:
                keyid:0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                CA Repository - URI:rsync://rpki.apnic.net/member_repository/A91CB5FF/FA99EE2C294911EB9CC7342CC4F9AE02/
                RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A91CB5FF/FA99EE2C294911EB9CC7342CC4F9AE02/zMbKvl1V0VZOo9do6b5iQyQgoYM.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.224.163.0/24

    Signature Algorithm: sha256WithRSAEncryption
         52:25:a3:13:e0:81:24:55:17:e1:b9:57:73:b2:8e:67:1f:66:
         74:5e:86:c8:34:e9:f2:d5:5a:f0:a6:f1:b8:62:fc:c5:73:e6:
         ab:d5:19:21:cb:95:74:5d:48:c8:46:14:dd:3f:f2:dd:06:8f:
         21:92:d1:59:df:b0:19:ca:51:b2:3d:f8:68:f6:45:23:d6:ca:
         8f:b8:46:31:0e:05:78:56:41:02:55:40:bc:20:ea:00:9f:2e:
         36:9e:3b:e8:31:12:23:7f:02:1b:bc:67:9e:3b:d4:a0:c7:48:
         1a:a7:de:48:39:fb:ab:48:cb:27:12:4a:27:13:2e:f6:79:22:
         41:af:27:9c:ae:84:db:30:31:57:fd:5e:ef:55:c3:3d:f4:46:
         8e:2f:87:20:1f:d5:43:28:4e:cf:79:f4:41:d3:c6:89:cb:bd:
         5f:7f:7e:2a:76:1c:78:bf:5d:bc:59:aa:47:9a:e0:c3:ad:6d:
         7f:23:75:19:e9:3d:6e:dc:9c:00:4f:10:e6:be:dc:41:b2:9b:
         71:11:6e:33:f1:69:28:10:ea:2b:a7:84:47:e9:c4:87:b5:a8:
         97:93:f0:81:cd:e0:af:4c:60:dc:80:50:02:a9:ae:ac:6c:0d:
         ea:60:3e:c6:5f:7c:98:1f:d4:cb:a1:49:4c:f5:6a:2e:1f:c2:
         8e:64:ec:12
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----