Certificate
$ rpki-client -vvf rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FFiKS-nrikuZgtGyXesMYHOK77s.cer
File: FFiKS-nrikuZgtGyXesMYHOK77s.cer (raw, json)
Hash identifier: d38KmxsrH2iBB9yuyIpSxZZe7rFKO5i4UjuAjcMh2zw=
Subject key identifier: 14:58:8A:4B:E9:EB:8A:4B:99:82:D1:B2:5D:EB:0C:60:73:8A:EF:BB
Authority key identifier: 0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
Certificate issuer: /CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Certificate serial: 0207C5
Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
Manifest: rsync://rpki.apnic.net/member_repository/A91E9CE4/69CCB5BC089C11EDBFA2FB4BC4F9AE02/FFiKS-nrikuZgtGyXesMYHOK77s.mft
caRepository: rsync://rpki.apnic.net/member_repository/A91E9CE4/69CCB5BC089C11EDBFA2FB4BC4F9AE02/
Notify URL: https://rrdp.apnic.net/notification.xml
Certificate not before: Mon 19 Aug 2024 23:18:28 +0000
Certificate not after: Mon 01 Dec 2025 00:00:00 +0000
Subordinate resources: AS: 147008
IP: 103.172.191.0/24
IP: 2001:df0:f8c0::/48
Validation: OK
Signature path: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 28 Oct 2024 02:50:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 133061 (0x207c5)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Validity
Not Before: Aug 19 23:18:28 2024 GMT
Not After : Dec 1 00:00:00 2025 GMT
Subject: CN=A91E9CE4/serialNumber=14588A4BE9EB8A4B9982D1B25DEB0C60738AEFBB
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e0:a3:14:b3:fd:38:40:7f:98:5e:b3:38:e2:b5:
63:e0:87:8e:9e:0a:dd:b3:51:5c:99:44:cc:35:76:
ee:60:35:32:2b:05:96:d3:8d:5e:7e:90:c9:19:61:
b6:d6:b0:e4:5d:cc:43:5d:02:50:c0:93:6c:16:07:
49:c0:73:d6:a0:9e:bd:e3:fc:d4:cc:e0:79:68:c3:
e9:6c:da:12:0b:e3:53:30:2c:6e:ae:96:21:d8:50:
f7:cb:52:ba:26:6a:2e:23:09:9a:23:10:25:55:18:
d1:b2:c9:74:18:40:33:c1:fc:68:1b:2c:78:67:39:
81:09:95:dc:eb:83:88:0b:54:b4:58:30:64:be:c1:
ba:1f:75:9b:88:da:a1:69:f6:be:21:db:59:b0:72:
85:3c:0d:3f:6e:82:cf:ae:5a:a9:5c:4e:f7:20:87:
d6:7b:0e:d5:10:4c:af:d7:bb:31:79:f1:7c:bd:16:
71:51:d2:05:96:37:e3:3f:68:ce:35:ef:28:35:c3:
68:f0:48:f3:d4:e3:9c:8e:ee:14:3f:4a:b9:25:3c:
44:bb:4a:5a:3e:37:81:b2:56:25:b1:cb:79:82:40:
b0:63:85:1e:7a:b9:ed:57:60:8b:20:51:2d:24:e7:
ed:7a:5e:9d:6d:e6:48:85:bc:40:bb:97:ed:22:39:
b2:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
14:58:8A:4B:E9:EB:8A:4B:99:82:D1:B2:5D:EB:0C:60:73:8A:EF:BB
X509v3 Authority Key Identifier:
keyid:0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
CA Repository - URI:rsync://rpki.apnic.net/member_repository/A91E9CE4/69CCB5BC089C11EDBFA2FB4BC4F9AE02/
RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A91E9CE4/69CCB5BC089C11EDBFA2FB4BC4F9AE02/FFiKS-nrikuZgtGyXesMYHOK77s.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
147008
sbgp-ipAddrBlock: critical
IPv4:
103.172.191.0/24
IPv6:
2001:df0:f8c0::/48
Signature Algorithm: sha256WithRSAEncryption
c7:c6:22:de:9b:e8:da:7d:5e:1b:49:12:40:64:a3:61:85:53:
7c:16:b3:59:34:c7:63:bc:3a:37:8d:18:f5:88:5a:e8:44:0e:
cf:1f:c0:30:73:d1:78:fb:4c:e2:d4:ca:91:ab:7d:1a:97:18:
39:53:da:51:39:9f:e5:23:5e:be:66:39:de:64:75:f2:83:41:
bc:ca:7d:a2:64:99:16:90:a8:9b:4c:9b:de:c3:9a:16:cf:fe:
79:b3:0b:4d:95:95:9f:ee:32:a3:1e:8b:50:05:1c:5d:3d:04:
ff:d4:ed:21:72:0c:97:86:e7:cd:a3:7c:f5:a6:cb:43:06:6b:
eb:40:24:17:8b:f4:27:9e:2f:3a:6d:c3:b1:82:10:2f:29:91:
c4:c6:cf:b7:a3:1e:f0:d8:cd:57:0d:ee:38:48:51:aa:d0:08:
18:06:ff:a4:60:22:27:4e:8c:95:11:d1:ef:04:75:c2:ec:71:
aa:79:c0:a8:e9:d2:f6:58:c7:53:7e:5b:3c:ad:4b:b1:0d:8d:
7f:d6:8c:d3:0b:93:e2:a4:af:11:88:64:57:eb:6d:9b:4c:d1:
b4:aa:a3:b4:27:81:54:e9:e0:45:04:e7:5c:3f:93:ca:5f:76:
94:c3:31:f4:70:94:d9:7d:59:d2:87:20:ec:b2:ea:5c:1d:1f:
d6:eb:e4:6a
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Mon Oct 21 04:28:42 2024 by rpki-client on console.sobornost.net