Certificate

$ rpki-client -vvf rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NNe9YUOWrkRRcOBY4K7c661JQF8.cer
File:                     NNe9YUOWrkRRcOBY4K7c661JQF8.cer (raw, json)
Hash identifier:          xgyew/5NPs4wyFn0/9zo4J12lgDuCDSy7YwHh88XUBE=
Subject key identifier:   34:D7:BD:61:43:96:AE:44:51:70:E0:58:E0:AE:DC:EB:AD:49:40:5F
Authority key identifier: 0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
Certificate issuer:       /CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Certificate serial:       02436A
Authority info access:    rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
Manifest:                 rsync://rpki.apnic.net/member_repository/A9133F6B/9852933E74A611EFAB4B053CC4F9AE02/NNe9YUOWrkRRcOBY4K7c661JQF8.mft
caRepository:             rsync://rpki.apnic.net/member_repository/A9133F6B/9852933E74A611EFAB4B053CC4F9AE02/
Notify URL:               https://rrdp.apnic.net/notification.xml
Certificate not before:   Fri 02 May 2025 13:04:55 +0000
Certificate not after:    Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources:    AS: 135279
                          IP: 103.212.36.0/22
                          IP: 139.5.144.0/22
Validation:               OK
Signature path:           rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 11 May 2025 18:51:26 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 148330 (0x2436a)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A90DC5BE, serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
        Validity
            Not Before: May  2 13:04:55 2025 GMT
            Not After : Jul  1 00:00:00 2026 GMT
        Subject: CN=A9133F6B, serialNumber=34D7BD614396AE445170E058E0AEDCEBAD49405F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:da:94:1c:29:fd:01:94:0a:32:a5:16:c0:fa:ac:
                    72:87:bf:54:59:88:30:2d:75:09:08:3e:c4:25:84:
                    01:74:53:89:c6:92:77:98:06:9d:e7:a8:78:c2:bb:
                    06:7e:2b:d6:49:b4:31:3a:be:b9:d4:b6:25:ec:bf:
                    68:f9:1b:82:18:8c:8d:3f:fc:0e:2b:4e:36:e4:bf:
                    5b:83:0b:d6:25:e8:65:2b:d7:58:fa:7e:64:b9:54:
                    62:9a:97:06:d1:ac:98:59:c4:a2:9b:51:a1:aa:22:
                    1e:90:57:58:d8:1c:83:12:28:b4:d0:b4:b4:d5:e9:
                    ee:d7:1f:cc:4b:86:c9:8a:e4:60:98:42:ff:0c:a4:
                    c8:5e:fe:ab:e1:c0:ad:bb:f8:c5:9e:4d:9e:cc:e1:
                    10:3e:35:87:5e:48:df:0b:92:e2:19:28:57:64:b3:
                    68:21:ec:8d:4a:74:0b:08:36:6e:22:72:3d:ba:9d:
                    34:95:8c:b1:92:8b:b5:d6:6d:c0:cb:8b:42:28:f8:
                    11:99:af:11:c6:9a:2e:a2:d7:a2:3e:c9:62:67:74:
                    c6:ec:93:47:56:26:df:c4:54:27:c1:11:06:72:4e:
                    ad:0b:43:7e:62:c5:24:da:69:8b:7b:56:4e:c4:fd:
                    53:15:b4:84:99:a3:7f:98:4b:bb:dd:fb:36:2a:e6:
                    bd:07
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                34:D7:BD:61:43:96:AE:44:51:70:E0:58:E0:AE:DC:EB:AD:49:40:5F
            X509v3 Authority Key Identifier:
                keyid:0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                CA Repository - URI:rsync://rpki.apnic.net/member_repository/A9133F6B/9852933E74A611EFAB4B053CC4F9AE02/
                RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A9133F6B/9852933E74A611EFAB4B053CC4F9AE02/NNe9YUOWrkRRcOBY4K7c661JQF8.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  135279

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.212.36.0/22
                  139.5.144.0/22

    Signature Algorithm: sha256WithRSAEncryption
         41:50:e1:0f:0d:d8:47:ed:6f:d3:9b:e7:3e:1f:f1:18:4c:a5:
         2c:27:73:7a:03:69:eb:d6:a2:6d:7d:32:b1:92:df:40:a9:84:
         d3:b3:19:b9:89:aa:79:fd:aa:ae:db:4b:c4:9d:92:64:21:ff:
         f2:18:07:cd:55:7c:f9:19:da:2d:92:44:c5:6b:a5:28:fd:00:
         f0:82:16:86:cb:ee:12:1b:cb:36:41:97:3a:2f:2c:b7:4b:69:
         e7:a1:09:da:d7:21:d1:f2:2d:2f:13:d2:87:34:2d:9d:4d:20:
         83:a1:36:e2:09:43:0d:6a:80:ca:de:5d:7b:1a:2d:2c:d2:6b:
         d0:43:78:62:ed:bf:4a:7e:ff:af:d6:3b:6b:1c:9c:c3:97:e8:
         3d:b9:39:bd:e9:98:84:01:ed:57:8d:aa:a6:1f:95:e6:c0:83:
         cf:49:26:67:b6:1d:15:aa:ce:4d:4a:15:8a:8f:c4:38:5c:02:
         8b:15:8a:be:a5:08:77:33:46:d4:f7:3b:23:9c:d8:5d:f4:f9:
         8f:45:dd:f3:4e:7c:8b:2e:16:4b:90:c0:47:b4:90:f0:b7:91:
         1e:ed:84:4b:fb:ed:18:69:37:67:57:e9:bc:36:95:4b:89:56:
         b5:1d:e1:26:8b:38:b5:be:58:d2:33:c9:b7:17:bc:8b:82:36:
         8b:ca:fc:de
-----BEGIN CERTIFICATE-----
MIIGIDCCBQigAwIBAgIDAkNqMA0GCSqGSIb3DQEBCwUAMEYxETAPBgNVBAMTCEE5
MERDNUJFMTEwLwYDVQQFEygwRTY1QTRGNUZEMzZCNUJENjhFQjNDOTIzNDA4OTc4
QzkwN0FBNzlGMB4XDTI1MDUwMjEzMDQ1NVoXDTI2MDcwMTAwMDAwMFowRjERMA8G
A1UEAxMIQTkxMzNGNkIxMTAvBgNVBAUTKDM0RDdCRDYxNDM5NkFFNDQ1MTcwRTA1
OEUwQUVEQ0VCQUQ0OTQwNUYwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB
AQDalBwp/QGUCjKlFsD6rHKHv1RZiDAtdQkIPsQlhAF0U4nGkneYBp3nqHjCuwZ+
K9ZJtDE6vrnUtiXsv2j5G4IYjI0//A4rTjbkv1uDC9Yl6GUr11j6fmS5VGKalwbR
rJhZxKKbUaGqIh6QV1jYHIMSKLTQtLTV6e7XH8xLhsmK5GCYQv8MpMhe/qvhwK27
+MWeTZ7M4RA+NYdeSN8LkuIZKFdks2gh7I1KdAsINm4icj26nTSVjLGSi7XWbcDL
i0Io+BGZrxHGmi6i16I+yWJndMbsk0dWJt/EVCfBEQZyTq0LQ35ixSTaaYt7Vk7E
/VMVtISZo3+YS7vd+zYq5r0HAgMBAAGjggMVMIIDETAdBgNVHQ4EFgQUNNe9YUOW
rkRRcOBY4K7c661JQF8wHwYDVR0jBBgwFoAUDmWk9f02tb1o6zySNAiXjJB6p58w
DgYDVR0PAQH/BAQDAgEGMA8GA1UdEwEB/wQFMAMBAf8wcwYDVR0fBGwwajBooGag
ZIZicnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2
NjExRTJCQjQ2OEY3QzcyRkQxRkYyL0RtV2s5ZjAydGIxbzZ6eVNOQWlYakpCNnA1
OC5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L3JlcG9zaXRvcnkvOTgwNjUyRTBCNzdFMTFFN0E5NkEzOTUyMUE0
RjRGQjQvRG1XazlmMDJ0YjFvNnp5U05BaVhqSkI2cDU4LmNlcjBKBgNVHSABAf8E
QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj
Lm5ldC9SUEtJL0NQUy5wZGYwggEoBggrBgEFBQcBCwSCARowggEWMF8GCCsGAQUF
BzAFhlNyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5
MTMzRjZCLzk4NTI5MzNFNzRBNjExRUZBQjRCMDUzQ0M0RjlBRTAyLzB+BggrBgEF
BQcwCoZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9B
OTEzM0Y2Qi85ODUyOTMzRTc0QTYxMUVGQUI0QjA1M0NDNEY5QUUwMi9OTmU5WVVP
V3JrUlJjT0JZNEs3YzY2MUpRRjgubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3Jy
ZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwGgYIKwYBBQUHAQgBAf8ECzAJ
oAcwBQIDAhBvMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQCZ9QkAwQCiwWQ
MA0GCSqGSIb3DQEBCwUAA4IBAQBBUOEPDdhH7W/Tm+c+H/EYTKUsJ3N6A2nr1qJt
fTKxkt9AqYTTsxm5iap5/aqu20vEnZJkIf/yGAfNVXz5GdotkkTFa6Uo/QDwghaG
y+4SG8s2QZc6Lyy3S2nnoQna1yHR8i0vE9KHNC2dTSCDoTbiCUMNaoDK3l17Gi0s
0mvQQ3hi7b9Kfv+v1jtrHJzDl+g9uTm96ZiEAe1XjaqmH5XmwIPPSSZnth0Vqs5N
ShWKj8Q4XAKLFYq+pQh3M0bU9zsjnNhd9PmPRd3zTnyLLhZLkMBHtJDwt5Ee7YRL
++0YaTdnV+m8NpVLiVa1HeEmizi1vljSM8m3F7yLgjaLyvze
-----END CERTIFICATE-----
Generated at Sun May 4 21:57:11 2025 by rpki-client