Take a look at the AP BSS Table and AP Association and the Flags assigned to the BSSID and Client. Just a note a WPA3 SSID will be in transition mode (WPA3/WPA2) by default unless it is explicitly disabled.
#show ap bss-table
Flags: K = 802.11K Enabled; W = 802.11W Enabled; 3 = WPA3 BSS; O = OWE Transition mode OWE BSS; o = OWE Transition mode Open BSS; M = WPA3-SAE mixed mode BSS
#show ap association
Flags: A: Active, B: Band Steerable, H: Hotspot(802.11u) client, K: 802.11K client, M: Mu beam formee, R: 802.11R client, W: WMM client, w: 802.11w client, V: 802.11v BSS trans capable, P: Punctured preamble, U: HE UL Mu-mimo, O: OWE client, S: SAE client, E: Enterprise client