Certificate

$ rpki-client -vvf rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TmFCvWGz61iXzgHo1FcR2lDc9WU.cer
File:                     TmFCvWGz61iXzgHo1FcR2lDc9WU.cer (raw, json)
Hash identifier:          kW+OXio4iOkPwUNOxmlGQaqyO6eBcqQppEigxs1qmhI=
Subject key identifier:   4E:61:42:BD:61:B3:EB:58:97:CE:01:E8:D4:57:11:DA:50:DC:F5:65
Authority key identifier: 0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
Certificate issuer:       /CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Certificate serial:       022634
Authority info access:    rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
Manifest:                 rsync://rpki.apnic.net/member_repository/A9167F0C/0A58A19A70AB11E98317A57BC4F9AE02/TmFCvWGz61iXzgHo1FcR2lDc9WU.mft
caRepository:             rsync://rpki.apnic.net/member_repository/A9167F0C/0A58A19A70AB11E98317A57BC4F9AE02/
Notify URL:               https://rrdp.apnic.net/notification.xml
Certificate not before:   Tue 31 Dec 2024 17:13:52 +0000
Certificate not after:    Thu 01 May 2025 00:00:00 +0000
Subordinate resources:    AS: 134995
                          IP: 2402:6640::/32
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 140852 (0x22634)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
        Validity
            Not Before: Dec 31 17:13:52 2024 GMT
            Not After : May  1 00:00:00 2025 GMT
        Subject: CN=A9167F0C/serialNumber=4E6142BD61B3EB5897CE01E8D45711DA50DCF565
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:e2:8d:c8:eb:ea:a8:a6:7d:2a:f7:02:5c:37:
                    ed:0d:1a:95:fa:47:67:cd:c3:59:cb:84:96:14:2e:
                    30:bb:69:29:6d:ad:b4:48:46:dd:05:09:8a:d9:61:
                    39:ca:74:3c:bc:dc:4a:36:14:55:3e:3b:bf:55:b6:
                    df:04:3c:d1:fb:51:34:d1:de:c7:8e:dd:ae:ac:fd:
                    b9:4b:b3:21:bf:de:67:a4:59:61:95:6c:86:7e:34:
                    82:19:9e:2b:8b:7e:a6:e4:7c:10:f5:69:87:e6:62:
                    33:8d:d0:22:d6:95:75:f1:0b:3f:82:ae:a3:f2:ad:
                    51:10:da:8b:c4:1a:8b:f6:08:fa:e1:f3:c3:c3:07:
                    65:21:2a:0d:f1:49:f8:61:37:14:f1:88:83:ff:83:
                    1e:10:f6:55:e5:82:a5:00:37:63:6a:09:3c:17:64:
                    89:55:d4:cd:70:7e:5a:8e:8a:f6:df:d5:8b:2a:0d:
                    2f:4c:91:0d:7d:93:2d:6b:41:33:96:77:5e:77:d3:
                    e6:0a:f5:f5:66:a7:62:b7:ec:1b:02:18:6c:e4:01:
                    7d:2a:27:c7:f6:51:1f:7a:25:37:be:08:31:e8:23:
                    fd:9b:b6:e1:57:40:44:08:84:fa:c9:e8:9a:b1:9e:
                    c1:6e:40:45:9c:64:2a:8c:74:cb:58:79:cd:0b:f6:
                    1b:5d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4E:61:42:BD:61:B3:EB:58:97:CE:01:E8:D4:57:11:DA:50:DC:F5:65
            X509v3 Authority Key Identifier:
                keyid:0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                CA Repository - URI:rsync://rpki.apnic.net/member_repository/A9167F0C/0A58A19A70AB11E98317A57BC4F9AE02/
                RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A9167F0C/0A58A19A70AB11E98317A57BC4F9AE02/TmFCvWGz61iXzgHo1FcR2lDc9WU.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  134995

            sbgp-ipAddrBlock: critical
                IPv6:
                  2402:6640::/32

    Signature Algorithm: sha256WithRSAEncryption
         67:46:43:40:e6:0f:cf:6a:77:65:a2:16:64:c5:23:87:11:02:
         6d:28:89:fe:93:9c:15:99:77:7c:6b:7e:e3:8a:db:cd:e1:d3:
         05:10:e4:1c:cc:90:12:ba:f7:10:f2:52:39:f6:38:07:e6:7b:
         bd:a8:fa:be:41:91:bb:86:34:06:8e:9e:15:e1:c3:ec:81:fa:
         27:eb:18:26:23:dd:c6:c6:72:dc:7e:be:e8:93:d4:30:b5:34:
         73:3d:41:72:18:13:c0:9a:a5:2a:17:19:5f:4d:e5:85:33:11:
         72:5c:3e:e4:39:20:51:51:3b:27:e7:e7:05:e5:b5:62:eb:d8:
         95:f5:b8:d9:d1:79:9b:1b:37:7e:0f:7c:03:26:c1:ce:45:d7:
         f7:9c:4c:be:84:d0:36:d9:78:71:e2:f9:5d:5c:2e:01:33:f5:
         29:6f:73:10:86:e3:86:69:8a:f8:0a:fc:49:44:54:ac:54:81:
         48:fa:27:9f:0f:e1:8b:4d:c3:67:42:9e:0f:5a:16:6e:ad:49:
         8b:e1:b8:e5:c6:46:19:1c:81:2b:00:46:94:84:0f:cc:38:0b:
         d6:fb:c1:60:cb:be:2a:b8:66:c5:ed:f7:1c:22:71:71:aa:72:
         c1:ee:07:27:fe:d1:f0:0e:f8:85:05:6c:25:9e:7b:6b:51:a3:
         f2:88:92:65
-----BEGIN CERTIFICATE-----
MIIGGzCCBQOgAwIBAgIDAiY0MA0GCSqGSIb3DQEBCwUAMEYxETAPBgNVBAMTCEE5
MERDNUJFMTEwLwYDVQQFEygwRTY1QTRGNUZEMzZCNUJENjhFQjNDOTIzNDA4OTc4
QzkwN0FBNzlGMB4XDTI0MTIzMTE3MTM1MloXDTI1MDUwMTAwMDAwMFowRjERMA8G
A1UEAxMIQTkxNjdGMEMxMTAvBgNVBAUTKDRFNjE0MkJENjFCM0VCNTg5N0NFMDFF
OEQ0NTcxMURBNTBEQ0Y1NjUwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB
AQCs4o3I6+qopn0q9wJcN+0NGpX6R2fNw1nLhJYULjC7aSltrbRIRt0FCYrZYTnK
dDy83Eo2FFU+O79Vtt8EPNH7UTTR3seO3a6s/blLsyG/3mekWWGVbIZ+NIIZniuL
fqbkfBD1aYfmYjON0CLWlXXxCz+CrqPyrVEQ2ovEGov2CPrh88PDB2UhKg3xSfhh
NxTxiIP/gx4Q9lXlgqUAN2NqCTwXZIlV1M1wflqOivbf1YsqDS9MkQ19ky1rQTOW
d1530+YK9fVmp2K37BsCGGzkAX0qJ8f2UR96JTe+CDHoI/2btuFXQEQIhPrJ6Jqx
nsFuQEWcZCqMdMtYec0L9htdAgMBAAGjggMQMIIDDDAdBgNVHQ4EFgQUTmFCvWGz
61iXzgHo1FcR2lDc9WUwHwYDVR0jBBgwFoAUDmWk9f02tb1o6zySNAiXjJB6p58w
DgYDVR0PAQH/BAQDAgEGMA8GA1UdEwEB/wQFMAMBAf8wcwYDVR0fBGwwajBooGag
ZIZicnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2
NjExRTJCQjQ2OEY3QzcyRkQxRkYyL0RtV2s5ZjAydGIxbzZ6eVNOQWlYakpCNnA1
OC5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L3JlcG9zaXRvcnkvOTgwNjUyRTBCNzdFMTFFN0E5NkEzOTUyMUE0
RjRGQjQvRG1XazlmMDJ0YjFvNnp5U05BaVhqSkI2cDU4LmNlcjBKBgNVHSABAf8E
QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj
Lm5ldC9SUEtJL0NQUy5wZGYwggEoBggrBgEFBQcBCwSCARowggEWMF8GCCsGAQUF
BzAFhlNyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5
MTY3RjBDLzBBNThBMTlBNzBBQjExRTk4MzE3QTU3QkM0RjlBRTAyLzB+BggrBgEF
BQcwCoZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9B
OTE2N0YwQy8wQTU4QTE5QTcwQUIxMUU5ODMxN0E1N0JDNEY5QUUwMi9UbUZDdldH
ejYxaVh6Z0hvMUZjUjJsRGM5V1UubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3Jy
ZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwGgYIKwYBBQUHAQgBAf8ECzAJ
oAcwBQIDAg9TMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAAjAHAwUAJAJmQDANBgkq
hkiG9w0BAQsFAAOCAQEAZ0ZDQOYPz2p3ZaIWZMUjhxECbSiJ/pOcFZl3fGt+44rb
zeHTBRDkHMyQErr3EPJSOfY4B+Z7vaj6vkGRu4Y0Bo6eFeHD7IH6J+sYJiPdxsZy
3H6+6JPUMLU0cz1BchgTwJqlKhcZX03lhTMRclw+5DkgUVE7J+fnBeW1YuvYlfW4
2dF5mxs3fg98AybBzkXX95xMvoTQNtl4ceL5XVwuATP1KW9zEIbjhmmK+Ar8SURU
rFSBSPonnw/hi03DZ0KeD1oWbq1Ji+G45cZGGRyBKwBGlIQPzDgL1vvBYMu+Krhm
xe33HCJxcapywe4HJ/7R8A74hQVsJZ57a1Gj8oiSZQ==
-----END CERTIFICATE-----