Certificate

$ rpki-client -vvf rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nryww05Pd_InjbFcWeHtrH5VdW4.cer
File:                     nryww05Pd_InjbFcWeHtrH5VdW4.cer (raw, json)
Hash identifier:          mQa6T6RsgBZ9TQlodo4YwlbxPuMlpO6VVNH5muNOX0Y=
Subject key identifier:   9E:BC:B0:C3:4E:4F:77:F2:27:8D:B1:5C:59:E1:ED:AC:7E:55:75:6E
Authority key identifier: 0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
Certificate issuer:       /CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Certificate serial:       023D75
Authority info access:    rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
Manifest:                 rsync://rpki.apnic.net/member_repository/A9121821/AB22EAC4D54911EE9497D880C4F9AE02/nryww05Pd_InjbFcWeHtrH5VdW4.mft
caRepository:             rsync://rpki.apnic.net/member_repository/A9121821/AB22EAC4D54911EE9497D880C4F9AE02/
Notify URL:               https://rrdp.apnic.net/notification.xml
Certificate not before:   Mon 07 Apr 2025 12:53:44 +0000
Certificate not after:    Fri 01 May 2026 00:00:00 +0000
Subordinate resources:    AS: 150736
                          IP: 103.77.216.0/23
                          IP: 2001:df1:e2c0::/48
Validation:               OK
Signature path:           rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 11 May 2025 18:51:26 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 146805 (0x23d75)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A90DC5BE, serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
        Validity
            Not Before: Apr  7 12:53:44 2025 GMT
            Not After : May  1 00:00:00 2026 GMT
        Subject: CN=A9121821, serialNumber=9EBCB0C34E4F77F2278DB15C59E1EDAC7E55756E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:85:5e:00:29:0e:9f:40:43:87:60:6c:93:31:
                    b0:1a:c2:2e:e0:9f:46:ad:18:6a:15:66:41:fd:f6:
                    d6:5c:50:84:0a:8b:cb:b2:1f:09:5c:79:ea:fa:7b:
                    90:86:69:f0:6b:f8:6b:1f:59:d8:02:82:f1:94:7d:
                    bd:8e:68:aa:72:e6:ae:ff:8a:e6:13:92:b1:19:1d:
                    40:0e:20:a3:31:33:e1:86:62:2e:76:52:32:55:4a:
                    2d:ca:b0:8f:2c:de:52:a0:83:38:92:fa:2a:91:88:
                    43:4d:a9:7c:bf:f7:43:40:75:72:3c:d6:fe:70:9c:
                    57:04:eb:bf:14:aa:2a:9c:0d:54:89:58:01:5d:3c:
                    fd:1b:ad:b5:58:85:84:89:9c:e8:e0:61:be:aa:5d:
                    7d:4e:e0:8a:17:cf:92:fd:70:bb:79:c6:36:cd:77:
                    af:3d:d5:b2:7c:26:2e:df:75:a2:f5:22:13:f6:b6:
                    60:93:1e:fe:cb:e1:26:ed:c6:2e:c3:3f:b5:63:f4:
                    3a:38:f5:38:e3:94:29:db:7f:f9:0e:d9:03:b7:66:
                    4b:80:1f:c7:71:21:ff:91:58:4f:3b:ea:88:ed:e2:
                    bd:0d:9b:a9:bc:df:6b:64:c8:0e:2c:a7:65:11:ee:
                    84:5c:a2:5a:b8:ec:d1:8c:00:d6:2d:91:56:be:ca:
                    46:bd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9E:BC:B0:C3:4E:4F:77:F2:27:8D:B1:5C:59:E1:ED:AC:7E:55:75:6E
            X509v3 Authority Key Identifier:
                keyid:0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                CA Repository - URI:rsync://rpki.apnic.net/member_repository/A9121821/AB22EAC4D54911EE9497D880C4F9AE02/
                RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A9121821/AB22EAC4D54911EE9497D880C4F9AE02/nryww05Pd_InjbFcWeHtrH5VdW4.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  150736

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.77.216.0/23
                IPv6:
                  2001:df1:e2c0::/48

    Signature Algorithm: sha256WithRSAEncryption
         67:46:36:05:d2:64:1b:87:77:b3:7d:55:71:00:15:3f:9a:6b:
         65:4f:e6:d3:b6:26:f0:dc:ed:a5:1b:f6:ed:e1:16:53:02:c0:
         e4:19:03:cb:41:01:1f:6b:63:1f:c0:2f:f9:76:b3:28:c5:6f:
         4e:ea:f7:c9:32:d0:35:fa:e9:0d:9d:95:27:f8:3c:90:e0:a7:
         a4:ff:b3:84:52:ae:91:14:1a:c6:f0:5c:0b:0b:c5:1f:4f:30:
         fe:d9:09:15:65:ce:f0:36:5f:e7:fe:ab:60:0f:0f:02:99:ab:
         1a:40:a9:d2:89:bc:c5:a0:e3:a9:58:68:ab:6b:60:b5:08:9c:
         70:a5:ef:d4:9c:b2:1c:c7:38:48:1c:1a:58:e1:1f:21:54:1c:
         94:7e:af:cc:0b:b5:c7:fe:b6:f3:c7:be:c6:03:76:21:01:84:
         d4:1a:21:ed:b9:ed:11:6c:eb:24:c4:02:19:d6:ee:32:25:f1:
         fa:91:d0:de:20:54:79:88:f9:40:2d:bc:21:1d:ce:15:3a:a2:
         7c:15:67:01:21:fe:19:fe:9a:8b:97:53:5c:d5:65:b6:53:2c:
         05:57:a0:d7:67:e8:47:4e:56:9b:c8:64:09:3e:2b:ff:6a:5f:
         e3:ff:62:f1:58:0d:ac:c5:9d:7b:94:ea:27:7b:0f:cc:22:68:
         e4:86:0a:df
-----BEGIN CERTIFICATE-----
MIIGKzCCBROgAwIBAgIDAj11MA0GCSqGSIb3DQEBCwUAMEYxETAPBgNVBAMTCEE5
MERDNUJFMTEwLwYDVQQFEygwRTY1QTRGNUZEMzZCNUJENjhFQjNDOTIzNDA4OTc4
QzkwN0FBNzlGMB4XDTI1MDQwNzEyNTM0NFoXDTI2MDUwMTAwMDAwMFowRjERMA8G
A1UEAxMIQTkxMjE4MjExMTAvBgNVBAUTKDlFQkNCMEMzNEU0Rjc3RjIyNzhEQjE1
QzU5RTFFREFDN0U1NTc1NkUwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB
AQCvhV4AKQ6fQEOHYGyTMbAawi7gn0atGGoVZkH99tZcUIQKi8uyHwlceer6e5CG
afBr+GsfWdgCgvGUfb2OaKpy5q7/iuYTkrEZHUAOIKMxM+GGYi52UjJVSi3KsI8s
3lKggziS+iqRiENNqXy/90NAdXI81v5wnFcE678UqiqcDVSJWAFdPP0brbVYhYSJ
nOjgYb6qXX1O4IoXz5L9cLt5xjbNd6891bJ8Ji7fdaL1IhP2tmCTHv7L4Sbtxi7D
P7Vj9Do49TjjlCnbf/kO2QO3ZkuAH8dxIf+RWE876ojt4r0Nm6m832tkyA4sp2UR
7oRcolq47NGMANYtkVa+yka9AgMBAAGjggMgMIIDHDAdBgNVHQ4EFgQUnryww05P
d/InjbFcWeHtrH5VdW4wHwYDVR0jBBgwFoAUDmWk9f02tb1o6zySNAiXjJB6p58w
DgYDVR0PAQH/BAQDAgEGMA8GA1UdEwEB/wQFMAMBAf8wcwYDVR0fBGwwajBooGag
ZIZicnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2
NjExRTJCQjQ2OEY3QzcyRkQxRkYyL0RtV2s5ZjAydGIxbzZ6eVNOQWlYakpCNnA1
OC5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L3JlcG9zaXRvcnkvOTgwNjUyRTBCNzdFMTFFN0E5NkEzOTUyMUE0
RjRGQjQvRG1XazlmMDJ0YjFvNnp5U05BaVhqSkI2cDU4LmNlcjBKBgNVHSABAf8E
QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj
Lm5ldC9SUEtJL0NQUy5wZGYwggEoBggrBgEFBQcBCwSCARowggEWMF8GCCsGAQUF
BzAFhlNyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5
MTIxODIxL0FCMjJFQUM0RDU0OTExRUU5NDk3RDg4MEM0RjlBRTAyLzB+BggrBgEF
BQcwCoZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9B
OTEyMTgyMS9BQjIyRUFDNEQ1NDkxMUVFOTQ5N0Q4ODBDNEY5QUUwMi9ucnl3dzA1
UGRfSW5qYkZjV2VIdHJINVZkVzQubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3Jy
ZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwGgYIKwYBBQUHAQgBAf8ECzAJ
oAcwBQIDAkzQMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIAATAGAwQBZ03YMA8EAgAC
MAkDBwAgAQ3x4sAwDQYJKoZIhvcNAQELBQADggEBAGdGNgXSZBuHd7N9VXEAFT+a
a2VP5tO2JvDc7aUb9u3hFlMCwOQZA8tBAR9rYx/AL/l2syjFb07q98ky0DX66Q2d
lSf4PJDgp6T/s4RSrpEUGsbwXAsLxR9PMP7ZCRVlzvA2X+f+q2APDwKZqxpAqdKJ
vMWg46lYaKtrYLUInHCl79ScshzHOEgcGljhHyFUHJR+r8wLtcf+tvPHvsYDdiEB
hNQaIe257RFs6yTEAhnW7jIl8fqR0N4gVHmI+UAtvCEdzhU6onwVZwEh/hn+mouX
U1zVZbZTLAVXoNdn6EdOVpvIZAk+K/9qX+P/YvFYDazFnXuU6id7D8wiaOSGCt8=
-----END CERTIFICATE-----
Generated at Sun May 4 21:27:45 2025 by rpki-client