Certificate

$ rpki-client -vvf rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JMzoDfDUim0MORo68N1kTdv7das.cer
File:                     JMzoDfDUim0MORo68N1kTdv7das.cer (raw, json)
Hash identifier:          8+wV2ytY9+918IzDPQa9l1UuVI+0/rak9PXuMLsDpNM=
Subject key identifier:   24:CC:E8:0D:F0:D4:8A:6D:0C:39:1A:3A:F0:DD:64:4D:DB:FB:75:AB
Authority key identifier: 0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
Certificate issuer:       /CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Certificate serial:       01F466
Authority info access:    rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
Manifest:                 rsync://rpki.apnic.net/member_repository/A918769B/B0935D54CC6311EC9B8E962BC4F9AE02/JMzoDfDUim0MORo68N1kTdv7das.mft
caRepository:             rsync://rpki.apnic.net/member_repository/A918769B/B0935D54CC6311EC9B8E962BC4F9AE02/
Notify URL:               https://rrdp.apnic.net/notification.xml
Certificate not before:   Wed 29 May 2024 04:15:02 +0000
Certificate not after:    Wed 30 Jul 2025 00:00:00 +0000
Subordinate resources:    AS: 149811
                          IP: 103.186.242.0/23
                          IP: 2400:7660::/32

Validation:               OK
Signature path:           rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 28 Oct 2024 02:50:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 128102 (0x1f466)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
        Validity
            Not Before: May 29 04:15:02 2024 GMT
            Not After : Jul 30 00:00:00 2025 GMT
        Subject: CN=A918769B/serialNumber=24CCE80DF0D48A6D0C391A3AF0DD644DDBFB75AB
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:34:8f:b4:46:90:2f:91:4d:b7:22:87:f1:7f:
                    dd:ac:bd:e0:7a:75:50:84:b7:c7:e4:8b:54:21:c2:
                    32:e1:e3:9e:63:d2:fd:6d:ca:5d:3e:d2:73:9e:98:
                    02:38:f9:28:20:2a:d1:51:18:57:7d:75:be:dd:77:
                    6f:d6:49:d6:7b:62:8f:4a:05:a6:a0:fc:cc:e7:dd:
                    91:0a:a5:f9:53:66:dc:4d:cd:da:74:14:5a:f6:66:
                    e7:99:f0:a7:c0:05:16:fc:db:8c:fe:8e:40:7f:99:
                    6d:6f:5e:64:a2:e8:8f:81:c6:63:98:37:a6:f7:c3:
                    c0:97:75:2f:33:ba:60:6a:21:4e:e1:ce:71:f3:3a:
                    eb:f8:8a:4e:03:a4:ec:4a:04:91:ee:b4:36:97:e5:
                    61:76:7b:0b:d6:45:b0:b1:75:a1:1c:8a:07:ff:69:
                    2b:c7:ab:fc:38:e2:6a:de:16:21:57:bc:b9:de:d0:
                    36:e5:31:c1:ce:fc:79:16:89:40:64:96:a5:32:d5:
                    6c:5f:c1:99:2e:ea:94:54:1b:a8:26:2c:94:d8:ea:
                    3d:ea:57:dd:32:59:97:bd:8c:18:d6:7a:79:5c:fb:
                    e4:b3:26:4d:0b:ba:9f:c8:28:55:27:6f:da:cc:a3:
                    e3:67:46:5a:20:45:e8:2f:92:a4:f2:92:14:f6:62:
                    77:97
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                24:CC:E8:0D:F0:D4:8A:6D:0C:39:1A:3A:F0:DD:64:4D:DB:FB:75:AB
            X509v3 Authority Key Identifier:
                keyid:0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                CA Repository - URI:rsync://rpki.apnic.net/member_repository/A918769B/B0935D54CC6311EC9B8E962BC4F9AE02/
                RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A918769B/B0935D54CC6311EC9B8E962BC4F9AE02/JMzoDfDUim0MORo68N1kTdv7das.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  149811

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.186.242.0/23
                IPv6:
                  2400:7660::/32

    Signature Algorithm: sha256WithRSAEncryption
         5c:40:d1:e7:a4:56:77:89:bf:17:bb:1d:80:1f:17:6c:72:17:
         aa:36:ea:12:5d:07:83:82:c6:d6:ae:a5:9f:b3:94:4c:50:89:
         0d:5b:cc:1b:b0:0a:b4:f6:4d:77:53:66:50:8e:ef:5f:3b:da:
         96:44:32:82:25:2c:94:32:f0:f8:11:78:f6:4a:17:5a:d7:4c:
         55:b5:64:20:da:2d:79:98:36:86:c3:b9:99:6e:ab:38:c0:ac:
         81:80:01:aa:73:6f:04:4a:61:97:3f:56:e5:e8:1a:bb:88:7b:
         b4:d8:9c:b8:f5:2f:69:97:14:78:2a:12:92:3d:55:80:c6:2f:
         25:4b:12:a6:2a:df:4d:0c:70:88:c0:65:32:63:91:28:16:0c:
         af:22:22:99:31:62:fc:97:58:05:f0:f6:cf:d4:e0:62:27:ae:
         2e:34:ee:af:89:68:64:ce:56:cf:7c:db:00:29:66:6a:19:4b:
         9b:1f:bf:6d:58:36:95:3f:44:58:72:e6:c9:2d:32:fe:da:0f:
         e1:46:bb:5b:a4:e1:7e:92:71:66:b3:e2:62:01:53:21:13:57:
         19:a5:4f:b6:47:27:4d:d8:de:2a:c9:bf:fd:11:a4:52:ef:fe:
         df:de:ef:3e:4f:b1:04:b8:22:f3:5c:69:19:fa:31:81:13:6a:
         9c:19:f7:55
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----