Certificate

$ rpki-client -vvf rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/r9CVWn3X-bDsKkShHZNyB8J1SmM.cer
File:                     r9CVWn3X-bDsKkShHZNyB8J1SmM.cer (raw, json)
Hash identifier:          ks+JdJ6DMem3pHA3xNXAyecAUoK/TVEh8+aPjxpW3n4=
Subject key identifier:   AF:D0:95:5A:7D:D7:F9:B0:EC:2A:44:A1:1D:93:72:07:C2:75:4A:63
Authority key identifier: 0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
Certificate issuer:       /CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Certificate serial:       023EFB
Authority info access:    rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
Manifest:                 rsync://rpki.apnic.net/member_repository/A91B1018/8836FA608D4C11EC988AE85DC4F9AE02/r9CVWn3X-bDsKkShHZNyB8J1SmM.mft
caRepository:             rsync://rpki.apnic.net/member_repository/A91B1018/8836FA608D4C11EC988AE85DC4F9AE02/
Notify URL:               https://rrdp.apnic.net/notification.xml
Certificate not before:   Mon 14 Apr 2025 18:24:13 +0000
Certificate not after:    Thu 28 May 2026 00:00:00 +0000
Subordinate resources:    AS: 151951
                          IP: 103.181.164.0/23
                          IP: 2400:5a60::/32

Validation:               OK
Signature path:           rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 05 May 2025 20:45:16 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 147195 (0x23efb)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A90DC5BE, serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
        Validity
            Not Before: Apr 14 18:24:13 2025 GMT
            Not After : May 28 00:00:00 2026 GMT
        Subject: CN=A91B1018, serialNumber=AFD0955A7DD7F9B0EC2A44A11D937207C2754A63
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:75:39:66:f2:8a:86:1b:a1:84:9a:60:ec:2c:
                    0e:5c:28:4f:18:c2:55:93:30:f9:d7:51:ae:65:11:
                    40:89:a9:a4:ba:bb:30:df:27:69:11:3f:a1:45:29:
                    fb:53:98:88:cd:37:4f:92:b9:6b:6b:ca:6e:20:ca:
                    9f:fd:16:b5:0f:99:b2:e7:d6:19:5d:00:f3:59:53:
                    d1:2c:92:f4:fa:2d:ca:6c:bb:64:84:13:0f:a5:c3:
                    72:cb:a8:75:0d:de:d9:30:32:74:db:cd:76:2c:c9:
                    59:28:e2:44:e3:5a:1b:bc:3f:dd:f5:94:7a:4a:e3:
                    51:e4:75:70:c5:5a:cf:89:d8:70:4a:c2:a8:2d:7a:
                    7a:c0:52:80:d2:9f:8e:e0:e4:44:e8:22:18:94:33:
                    16:4f:1a:af:0a:72:40:b1:b2:84:68:65:9e:e1:5e:
                    15:77:85:be:93:e1:34:59:6b:b3:8a:c4:40:43:17:
                    c4:b2:d5:3b:f1:4d:46:d7:2b:43:e3:ac:f3:af:46:
                    06:d2:c8:b5:21:2c:f6:9a:98:c5:9d:96:42:68:39:
                    39:b4:78:37:6c:67:a5:2d:7a:6d:06:d5:c3:69:3d:
                    33:fc:48:5a:de:09:38:05:60:94:96:6a:4d:c1:5e:
                    5e:a8:94:4e:8f:f2:3b:25:13:33:9a:51:b0:c0:ac:
                    36:d5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AF:D0:95:5A:7D:D7:F9:B0:EC:2A:44:A1:1D:93:72:07:C2:75:4A:63
            X509v3 Authority Key Identifier:
                keyid:0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                CA Repository - URI:rsync://rpki.apnic.net/member_repository/A91B1018/8836FA608D4C11EC988AE85DC4F9AE02/
                RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A91B1018/8836FA608D4C11EC988AE85DC4F9AE02/r9CVWn3X-bDsKkShHZNyB8J1SmM.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  151951

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.181.164.0/23
                IPv6:
                  2400:5a60::/32

    Signature Algorithm: sha256WithRSAEncryption
         34:5d:47:93:1a:66:59:f7:9e:e3:c7:00:f9:ff:09:d4:f7:b9:
         ea:c4:02:09:8b:02:54:71:99:f6:ee:4c:4f:f8:43:b0:7d:99:
         70:07:97:9f:0d:72:92:19:c9:0b:83:ab:48:60:2e:0d:46:07:
         60:ed:43:96:92:55:87:33:5b:b7:8f:76:b5:f8:7b:d4:ee:ad:
         ec:eb:b9:7b:ca:cc:b2:dd:2a:53:cd:3c:fe:5b:30:de:9c:43:
         8a:d0:02:2e:74:69:7e:ee:91:36:1d:9e:87:5e:0a:60:b2:fb:
         9b:7c:71:8d:ee:cc:42:2c:83:f7:5f:1a:ba:b5:76:81:d5:e2:
         46:68:7d:66:b8:fb:22:e6:43:c5:a6:f1:a7:8e:d6:2d:59:6f:
         62:40:ed:36:e7:7d:3f:e2:bf:0b:33:ea:38:2c:07:f3:5d:4f:
         dd:44:d6:a7:ad:b5:52:fe:25:14:50:b3:d5:67:54:c7:01:1b:
         0e:cc:14:41:79:e8:de:bf:38:cd:73:9f:95:7a:43:57:2c:a3:
         04:50:dd:13:75:a3:75:2e:ca:a4:4e:70:a2:8b:81:59:a8:84:
         68:26:71:9f:b1:75:5b:5e:71:ec:42:58:87:f9:90:3a:96:f1:
         cc:9e:84:50:04:5f:77:56:82:7e:b7:20:5f:a7:31:41:b6:07:
         36:71:d6:3f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----