Certificate

$ rpki-client -vvf rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6RNroVXdqYLO0enREJ2UGszagj0.cer
File:                     6RNroVXdqYLO0enREJ2UGszagj0.cer (raw, json)
Hash identifier:          25/BmOWFLiDFESAWi+lOfcp1DCyw45kJxRcmaXK+7OE=
Subject key identifier:   E9:13:6B:A1:55:DD:A9:82:CE:D1:E9:D1:10:9D:94:1A:CC:DA:82:3D
Authority key identifier: 0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
Certificate issuer:       /CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Certificate serial:       020B96
Authority info access:    rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
Manifest:                 rsync://rpki.apnic.net/member_repository/A915A4AF/4F73DD0469F611EFB2B8AF50C4F9AE02/6RNroVXdqYLO0enREJ2UGszagj0.mft
caRepository:             rsync://rpki.apnic.net/member_repository/A915A4AF/4F73DD0469F611EFB2B8AF50C4F9AE02/
Notify URL:               https://rrdp.apnic.net/notification.xml
Certificate not before:   Tue 03 Sep 2024 13:13:35 +0000
Certificate not after:    Tue 30 Dec 2025 00:00:00 +0000
Subordinate resources:    AS: 147302

Validation:               OK
Signature path:           rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 28 Oct 2024 02:50:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 134038 (0x20b96)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
        Validity
            Not Before: Sep  3 13:13:35 2024 GMT
            Not After : Dec 30 00:00:00 2025 GMT
        Subject: CN=A915A4AF/serialNumber=E9136BA155DDA982CED1E9D1109D941ACCDA823D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:df:52:cf:15:1f:b1:16:ea:9a:58:6a:1c:93:
                    c7:f7:63:ee:02:21:83:5f:1f:8f:a5:a8:9d:4a:f8:
                    d2:30:9a:1c:33:c9:b1:c1:eb:87:35:73:6d:99:ed:
                    72:cf:e8:5d:d7:94:f8:5c:52:00:85:0e:1e:69:b3:
                    5a:33:83:e4:c6:c1:6e:1c:43:54:94:9c:ad:84:ef:
                    c3:47:22:96:2f:ad:0d:65:3e:2f:df:6a:c6:b4:05:
                    69:3a:fa:ce:9a:8d:8c:90:41:4f:63:0d:8a:e4:aa:
                    bf:36:c1:dd:81:19:e3:3e:fb:1a:22:fd:75:ac:28:
                    7b:4e:8e:29:56:9d:fd:03:6d:fd:c6:3b:03:0e:1e:
                    31:cf:0b:89:04:bd:6d:77:4b:96:5e:3b:ba:b7:fd:
                    09:14:ae:a8:2b:b1:07:58:73:c9:1a:8a:c9:7e:56:
                    69:92:1a:a8:ec:f6:ac:1a:64:55:d4:13:ac:30:c2:
                    b5:79:71:56:52:79:bc:0d:db:dc:46:63:a6:84:58:
                    52:75:1f:bc:36:fa:0e:0e:f6:0d:e8:43:fa:a2:f1:
                    0a:93:73:d0:a6:6a:10:58:f5:db:63:41:16:1c:7c:
                    51:43:f4:81:2a:50:ee:1e:33:f3:a9:ef:e3:4a:98:
                    6b:90:c3:58:46:54:74:4e:93:1f:83:d7:f6:1e:2a:
                    2e:5b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E9:13:6B:A1:55:DD:A9:82:CE:D1:E9:D1:10:9D:94:1A:CC:DA:82:3D
            X509v3 Authority Key Identifier:
                keyid:0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                CA Repository - URI:rsync://rpki.apnic.net/member_repository/A915A4AF/4F73DD0469F611EFB2B8AF50C4F9AE02/
                RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A915A4AF/4F73DD0469F611EFB2B8AF50C4F9AE02/6RNroVXdqYLO0enREJ2UGszagj0.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  147302

    Signature Algorithm: sha256WithRSAEncryption
         43:ba:02:e4:e1:53:fe:49:e9:14:10:68:43:3d:b6:32:f3:f4:
         dc:48:2f:de:96:c9:ef:8c:79:ef:11:22:97:cb:a5:d8:3f:cb:
         af:a3:f5:f2:3f:0a:b8:a9:60:f0:fc:e6:31:54:91:09:dd:6a:
         26:7d:f6:cd:59:d7:27:91:60:10:32:30:84:30:15:5e:cd:ba:
         f6:a8:7c:a1:85:47:4a:04:03:6c:27:4f:fd:e7:d7:ab:f2:3a:
         7f:b1:da:a3:3f:33:37:a4:64:d2:1e:12:6e:c0:ca:15:e6:91:
         3d:af:61:e3:eb:0a:9c:96:34:e5:92:4b:c8:14:01:c6:fd:93:
         71:90:1e:2f:40:fc:f9:2f:d2:0e:86:37:0f:e5:c9:5e:67:58:
         39:39:9f:74:66:f4:33:6e:86:08:64:e4:bd:28:a4:45:05:93:
         ae:69:7e:c3:93:23:1d:2c:d2:93:a5:26:f2:ef:c3:a5:c5:9c:
         b1:95:46:bb:15:ed:eb:bc:f4:28:7a:fe:96:58:0b:be:db:b9:
         9a:de:2d:bd:a2:18:46:af:ed:f4:05:b5:1d:34:c2:17:a1:72:
         60:92:ac:c7:05:d0:a5:53:13:eb:d8:1d:1d:96:77:09:c7:03:
         fc:cd:c9:32:a2:9a:3f:91:17:a9:03:d4:b7:77:61:1e:77:57:
         f9:9f:81:25
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 21 04:28:37 2024 by rpki-client on console.sobornost.net