Certificate

$ rpki-client -vvf rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/V1jTgx6S-ugkdfazMhJ5Sh_wfl8.cer
File:                     V1jTgx6S-ugkdfazMhJ5Sh_wfl8.cer (raw, json)
Hash identifier:          1RBvpUW/SobRotsvmJCGiEV3W0hX6iwMDt6anOp0y6A=
Subject key identifier:   57:58:D3:83:1E:92:FA:E8:24:75:F6:B3:32:12:79:4A:1F:F0:7E:5F
Authority key identifier: 0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
Certificate issuer:       /CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Certificate serial:       01F6EF
Authority info access:    rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
Manifest:                 rsync://rpki.apnic.net/member_repository/A919536D/C1851FBE6E2311E8817DCB75C4F9AE02/V1jTgx6S-ugkdfazMhJ5Sh_wfl8.mft
caRepository:             rsync://rpki.apnic.net/member_repository/A919536D/C1851FBE6E2311E8817DCB75C4F9AE02/
Notify URL:               https://rrdp.apnic.net/notification.xml
Certificate not before:   Mon 03 Jun 2024 18:45:52 +0000
Certificate not after:    Sun 31 Aug 2025 00:00:00 +0000
Subordinate resources:    AS: 137824
                          IP: 103.115.14.0/23

Validation:               OK
Signature path:           rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 28 Oct 2024 02:50:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 128751 (0x1f6ef)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
        Validity
            Not Before: Jun  3 18:45:52 2024 GMT
            Not After : Aug 31 00:00:00 2025 GMT
        Subject: CN=A919536D/serialNumber=5758D3831E92FAE82475F6B33212794A1FF07E5F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d1:b3:79:3a:42:e6:33:47:92:09:3e:2a:f8:1d:
                    0d:72:b2:2c:18:91:a7:9b:0c:6d:f9:33:f5:ee:36:
                    a4:0a:24:4b:ab:a5:76:9f:9c:83:de:7b:fd:8b:46:
                    44:9b:ba:f1:a8:9d:49:44:90:14:e4:24:50:e1:0f:
                    3c:0e:dd:46:aa:a7:48:e9:5e:b8:f1:39:b4:f4:5c:
                    f5:9d:d8:10:6d:8c:bf:81:43:c1:11:54:81:5b:fd:
                    58:84:c2:bf:d0:44:07:6b:7d:88:28:36:f8:f3:8b:
                    aa:e6:f7:60:04:2e:08:30:af:3d:59:7b:07:20:f7:
                    50:20:95:3b:57:d5:f2:93:03:bc:56:ac:e2:88:b8:
                    73:2c:24:e0:34:86:fa:0e:94:c7:d6:91:91:07:58:
                    44:89:61:a1:b9:aa:f2:70:28:64:c0:f4:c3:32:c8:
                    36:14:24:8e:9e:64:ff:29:5e:42:be:0f:5e:c2:50:
                    d5:f5:dd:63:47:d8:8a:0c:f5:f1:87:36:d9:04:4f:
                    88:d5:3a:bd:30:93:19:9a:c4:d9:7e:ce:1b:89:d0:
                    63:d1:be:c1:61:1f:58:b7:aa:a3:1c:2d:e8:ad:05:
                    3d:9d:77:f1:04:0b:96:0d:53:ed:6c:b5:a1:51:32:
                    a1:63:21:37:de:e6:d3:1f:d8:ba:52:a4:95:e0:92:
                    c9:1d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                57:58:D3:83:1E:92:FA:E8:24:75:F6:B3:32:12:79:4A:1F:F0:7E:5F
            X509v3 Authority Key Identifier:
                keyid:0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                CA Repository - URI:rsync://rpki.apnic.net/member_repository/A919536D/C1851FBE6E2311E8817DCB75C4F9AE02/
                RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A919536D/C1851FBE6E2311E8817DCB75C4F9AE02/V1jTgx6S-ugkdfazMhJ5Sh_wfl8.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  137824

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.115.14.0/23

    Signature Algorithm: sha256WithRSAEncryption
         4c:48:af:ee:45:2d:5e:28:eb:06:e6:a2:c1:ea:0c:08:f6:4e:
         b4:8e:a2:90:a5:e3:f2:a6:ac:8e:56:70:3e:82:5a:05:84:65:
         5f:a7:31:d6:4b:a2:35:22:0e:d1:d8:65:85:94:c2:f4:27:7f:
         5b:f5:d9:de:78:41:dd:4c:7e:03:6f:57:cc:6c:5b:20:b9:cf:
         b5:8f:45:49:1f:5e:ac:6f:3b:0d:ab:e8:d8:71:72:1d:9a:a2:
         fa:8d:50:42:90:06:fa:ca:e1:c9:93:e5:56:25:dd:ee:e2:97:
         c1:82:db:87:9a:7b:78:b5:97:a9:e5:3a:12:09:b2:96:52:e1:
         37:91:37:60:37:6e:41:0a:4f:e6:4c:13:a3:23:22:91:8b:5b:
         c1:66:4c:b1:51:22:55:bc:c1:23:29:82:69:d3:a2:f6:3b:81:
         96:ed:3d:57:c9:7f:09:a4:79:61:39:2f:36:03:0f:24:d9:76:
         ec:76:4c:0b:e2:45:92:5f:ae:11:21:d9:52:1e:8d:49:29:cf:
         3e:7b:06:22:ca:13:d9:99:2e:ca:31:79:38:63:37:a5:40:a2:
         86:d3:8e:01:57:cb:1a:22:ad:04:78:8d:ed:05:d9:58:e4:49:
         73:20:d6:f4:b6:12:ec:3f:92:9d:60:10:43:ad:e2:3a:e7:85:
         a2:b2:e9:66
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 21 04:28:52 2024 by rpki-client on console.sobornost.net