Certificate

$ rpki-client -vvf rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fvtg2-isjcfDKzQJTcvj-mYiH6E.cer
File:                     fvtg2-isjcfDKzQJTcvj-mYiH6E.cer (raw, json)
Hash identifier:          ENY1YXMVDgOwF8q1mCc7/eJnMszTH8cWGIepgiaECbY=
Subject key identifier:   7E:FB:60:DB:E8:AC:8D:C7:C3:2B:34:09:4D:CB:E3:FA:66:22:1F:A1
Authority key identifier: 0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
Certificate issuer:       /CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Certificate serial:       01F97C
Authority info access:    rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
Manifest:                 rsync://rpki.apnic.net/member_repository/A9166CD3/F69BCD4C9F8411EC93695531C4F9AE02/fvtg2-isjcfDKzQJTcvj-mYiH6E.mft
caRepository:             rsync://rpki.apnic.net/member_repository/A9166CD3/F69BCD4C9F8411EC93695531C4F9AE02/
Notify URL:               https://rrdp.apnic.net/notification.xml
Certificate not before:   Mon 17 Jun 2024 03:40:22 +0000
Certificate not after:    Tue 30 Sep 2025 00:00:00 +0000
Subordinate resources:    AS: 140709
                          IP: 103.152.14.0/23
                          IP: 2001:df3:ed80::/48

Validation:               OK
Signature path:           rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 28 Oct 2024 02:50:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 129404 (0x1f97c)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
        Validity
            Not Before: Jun 17 03:40:22 2024 GMT
            Not After : Sep 30 00:00:00 2025 GMT
        Subject: CN=A9166CD3/serialNumber=7EFB60DBE8AC8DC7C32B34094DCBE3FA66221FA1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:19:71:e1:b5:a8:38:0c:48:03:b0:df:a4:2e:
                    58:e4:04:1c:8f:fb:9d:5d:86:21:e3:5a:b4:28:31:
                    7f:57:92:72:86:10:e2:88:b2:eb:48:df:e2:6b:d9:
                    72:45:1a:15:64:bf:ca:6c:77:cc:9a:b2:b4:b2:6d:
                    d1:41:85:f5:06:fc:e7:91:a2:ba:72:70:b8:ec:4f:
                    0f:53:b6:20:f5:3a:3d:69:87:5f:b6:7a:ed:2a:16:
                    64:87:79:28:3f:46:32:98:54:19:42:04:ea:12:e3:
                    d1:94:a4:fd:41:5d:d9:dc:a9:12:11:92:00:f2:c2:
                    c8:99:58:93:af:0f:0c:01:bf:1e:9a:c0:9e:96:52:
                    94:09:29:50:69:d7:17:85:78:7d:64:36:dd:96:2d:
                    d2:ba:32:12:9b:79:98:fd:d9:b5:eb:b8:52:22:56:
                    4b:df:48:7b:a8:a4:e3:90:ba:9a:5f:da:1b:a2:13:
                    cf:76:96:76:a4:b0:bc:63:3d:66:8a:0d:06:c3:8c:
                    43:08:71:32:c8:d3:9c:97:61:32:6c:31:f0:c0:a6:
                    0e:1f:12:ef:69:8b:7f:07:49:c3:cd:80:cf:40:23:
                    58:f2:09:13:f0:60:32:d5:75:af:eb:7e:92:7e:9d:
                    5a:0a:55:41:73:46:2b:01:f3:47:94:ee:44:50:83:
                    90:f7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7E:FB:60:DB:E8:AC:8D:C7:C3:2B:34:09:4D:CB:E3:FA:66:22:1F:A1
            X509v3 Authority Key Identifier:
                keyid:0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                CA Repository - URI:rsync://rpki.apnic.net/member_repository/A9166CD3/F69BCD4C9F8411EC93695531C4F9AE02/
                RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A9166CD3/F69BCD4C9F8411EC93695531C4F9AE02/fvtg2-isjcfDKzQJTcvj-mYiH6E.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  140709

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.152.14.0/23
                IPv6:
                  2001:df3:ed80::/48

    Signature Algorithm: sha256WithRSAEncryption
         0f:84:1c:64:6c:5e:71:3d:c0:55:a1:d5:ed:f0:57:d7:d3:ec:
         d9:8e:cc:fc:43:ba:11:52:77:91:43:9a:e0:a0:31:52:55:fe:
         95:46:e3:04:13:60:47:e5:ad:33:2b:f2:b8:f6:ec:1e:9a:70:
         9c:fa:e4:c2:77:12:0a:06:7c:4a:a8:ff:52:e8:72:26:19:fa:
         a5:a5:25:7c:d6:43:54:5b:64:00:08:60:49:74:8b:31:1a:5e:
         9d:25:e6:ca:de:5c:f9:2f:86:42:5d:1a:59:b3:5b:a2:e2:a8:
         c5:6c:7d:d4:5e:e8:28:5e:11:c9:62:b5:51:07:35:f3:dc:61:
         ed:89:01:6a:f3:f7:8b:da:e1:8a:0a:89:ff:dd:f9:e5:cd:71:
         22:32:6e:cf:45:78:31:1c:80:61:ad:6d:62:68:91:8c:a9:b4:
         ee:36:9f:9e:4f:ea:9d:9e:1d:c1:e3:e9:5f:b5:8f:bc:8b:65:
         d3:20:bf:ce:0a:c1:ae:55:8e:23:45:92:fb:71:72:ab:d2:67:
         4f:1b:1d:e6:cc:2b:38:2c:ab:a7:75:08:2d:fc:0c:7f:b3:9b:
         53:89:c3:f9:24:c1:6e:7a:22:23:bf:87:7d:1f:c0:20:26:a7:
         68:b1:d6:bf:92:f8:21:2b:12:ed:e9:a1:da:8b:61:ec:62:23:
         c8:9c:13:6b
-----BEGIN CERTIFICATE-----
MIIGKzCCBROgAwIBAgIDAfl8MA0GCSqGSIb3DQEBCwUAMEYxETAPBgNVBAMTCEE5
MERDNUJFMTEwLwYDVQQFEygwRTY1QTRGNUZEMzZCNUJENjhFQjNDOTIzNDA4OTc4
QzkwN0FBNzlGMB4XDTI0MDYxNzAzNDAyMloXDTI1MDkzMDAwMDAwMFowRjERMA8G
A1UEAxMIQTkxNjZDRDMxMTAvBgNVBAUTKDdFRkI2MERCRThBQzhEQzdDMzJCMzQw
OTREQ0JFM0ZBNjYyMjFGQTEwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB
AQDKGXHhtag4DEgDsN+kLljkBByP+51dhiHjWrQoMX9XknKGEOKIsutI3+Jr2XJF
GhVkv8psd8yasrSybdFBhfUG/OeRorpycLjsTw9TtiD1Oj1ph1+2eu0qFmSHeSg/
RjKYVBlCBOoS49GUpP1BXdncqRIRkgDywsiZWJOvDwwBvx6awJ6WUpQJKVBp1xeF
eH1kNt2WLdK6MhKbeZj92bXruFIiVkvfSHuopOOQuppf2huiE892lnaksLxjPWaK
DQbDjEMIcTLI05yXYTJsMfDApg4fEu9pi38HScPNgM9AI1jyCRPwYDLVda/rfpJ+
nVoKVUFzRisB80eU7kRQg5D3AgMBAAGjggMgMIIDHDAdBgNVHQ4EFgQUfvtg2+is
jcfDKzQJTcvj+mYiH6EwHwYDVR0jBBgwFoAUDmWk9f02tb1o6zySNAiXjJB6p58w
DgYDVR0PAQH/BAQDAgEGMA8GA1UdEwEB/wQFMAMBAf8wcwYDVR0fBGwwajBooGag
ZIZicnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2
NjExRTJCQjQ2OEY3QzcyRkQxRkYyL0RtV2s5ZjAydGIxbzZ6eVNOQWlYakpCNnA1
OC5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L3JlcG9zaXRvcnkvOTgwNjUyRTBCNzdFMTFFN0E5NkEzOTUyMUE0
RjRGQjQvRG1XazlmMDJ0YjFvNnp5U05BaVhqSkI2cDU4LmNlcjBKBgNVHSABAf8E
QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj
Lm5ldC9SUEtJL0NQUy5wZGYwggEoBggrBgEFBQcBCwSCARowggEWMF8GCCsGAQUF
BzAFhlNyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5
MTY2Q0QzL0Y2OUJDRDRDOUY4NDExRUM5MzY5NTUzMUM0RjlBRTAyLzB+BggrBgEF
BQcwCoZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9B
OTE2NkNEMy9GNjlCQ0Q0QzlGODQxMUVDOTM2OTU1MzFDNEY5QUUwMi9mdnRnMi1p
c2pjZkRLelFKVGN2ai1tWWlINkUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3Jy
ZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwGgYIKwYBBQUHAQgBAf8ECzAJ
oAcwBQIDAiWlMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIAATAGAwQBZ5gOMA8EAgAC
MAkDBwAgAQ3z7YAwDQYJKoZIhvcNAQELBQADggEBAA+EHGRsXnE9wFWh1e3wV9fT
7NmOzPxDuhFSd5FDmuCgMVJV/pVG4wQTYEflrTMr8rj27B6acJz65MJ3EgoGfEqo
/1LociYZ+qWlJXzWQ1RbZAAIYEl0izEaXp0l5sreXPkvhkJdGlmzW6LiqMVsfdRe
6CheEclitVEHNfPcYe2JAWrz94va4YoKif/d+eXNcSIybs9FeDEcgGGtbWJokYyp
tO42n55P6p2eHcHj6V+1j7yLZdMgv84Kwa5VjiNFkvtxcqvSZ08bHebMKzgsq6d1
CC38DH+zm1OJw/kkwW56IiO/h30fwCAmp2ix1r+S+CErEu3podqLYexiI8icE2s=
-----END CERTIFICATE-----