Certificate

$ rpki-client -vvf rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FPn_SiOnILc7r-YDNT8R65c5Jxk.cer
File:                     FPn_SiOnILc7r-YDNT8R65c5Jxk.cer (raw, json)
Hash identifier:          NEz8IED1n7XUcSv1B9G8TKich5eMohYCkLn6iGwUbtc=
Subject key identifier:   14:F9:FF:4A:23:A7:20:B7:3B:AF:E6:03:35:3F:11:EB:97:39:27:19
Authority key identifier: 0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
Certificate issuer:       /CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Certificate serial:       0236C4
Authority info access:    rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
Manifest:                 rsync://rpki.apnic.net/member_repository/A91BF8F4/707765A838A111ED9F3C0C82C4F9AE02/FPn_SiOnILc7r-YDNT8R65c5Jxk.mft
caRepository:             rsync://rpki.apnic.net/member_repository/A91BF8F4/707765A838A111ED9F3C0C82C4F9AE02/
Notify URL:               https://rrdp.apnic.net/notification.xml
Certificate not before:   Mon 10 Mar 2025 19:53:57 +0000
Certificate not after:    Thu 28 May 2026 00:00:00 +0000
Subordinate resources:    AS: 149630
                          IP: 103.183.38.0/23
                          IP: 2001:df0:83c0::/48
Validation:               OK
Signature path:           rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 05 Apr 2025 05:08:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 145092 (0x236c4)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A90DC5BE
        Validity
            Not Before: Mar 10 19:53:57 2025 GMT
            Not After : May 28 00:00:00 2026 GMT
        Subject: CN=A91BF8F4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:56:a0:bf:69:34:a6:17:68:23:da:0b:17:39:
                    73:cd:fb:5d:f6:4f:e9:c8:5c:59:06:ad:8d:08:b6:
                    b7:df:d6:d2:80:2a:7f:f3:83:86:1c:39:f4:50:55:
                    2d:57:51:f7:5d:3e:6a:45:28:b4:79:e2:dd:29:54:
                    8a:88:82:dc:9a:3a:fb:3a:68:02:19:f3:3f:de:9b:
                    49:d9:f0:42:98:6b:71:3b:77:3a:06:8f:ac:01:e2:
                    83:6b:4a:96:dd:59:d4:52:a8:92:e1:0f:a8:fa:ff:
                    7b:5c:48:7d:2e:17:a2:fd:bc:9b:26:b2:41:bb:9d:
                    c8:0f:84:d8:79:5f:36:f6:bf:b6:b2:e5:c1:11:32:
                    04:f8:5f:68:6a:97:14:cc:6e:99:76:29:4c:e1:81:
                    fe:2f:b4:73:8b:92:0d:f5:19:30:b8:8f:b3:62:01:
                    bf:ad:2e:db:e4:31:05:bc:9e:00:d2:c5:0e:30:2a:
                    6e:90:db:13:2a:b1:99:9a:2e:ee:83:e8:fe:b0:40:
                    a6:14:1a:56:93:8c:31:68:e0:94:f6:5d:cf:62:e6:
                    98:34:b0:86:35:a2:c2:e3:1f:41:1a:d1:7f:53:18:
                    6d:a2:ba:47:55:ff:a2:a5:d9:b5:97:c2:75:f8:9c:
                    0e:0b:ef:36:6e:00:9d:50:bb:cf:99:53:58:18:72:
                    8e:f9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                14:F9:FF:4A:23:A7:20:B7:3B:AF:E6:03:35:3F:11:EB:97:39:27:19
            X509v3 Authority Key Identifier:
                keyid:0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                CA Repository - URI:rsync://rpki.apnic.net/member_repository/A91BF8F4/707765A838A111ED9F3C0C82C4F9AE02/
                RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A91BF8F4/707765A838A111ED9F3C0C82C4F9AE02/FPn_SiOnILc7r-YDNT8R65c5Jxk.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  149630

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.183.38.0/23
                IPv6:
                  2001:df0:83c0::/48

    Signature Algorithm: sha256WithRSAEncryption
         d1:9e:23:5d:74:0a:28:f9:24:12:e8:d1:dc:87:7e:d7:84:3d:
         32:e3:2d:95:f6:82:1f:eb:50:81:c9:a1:ac:25:82:5f:df:42:
         08:6b:20:66:40:c4:19:3b:c2:06:58:38:f7:54:af:cc:ff:c2:
         69:7c:7f:d3:44:53:be:22:eb:24:d0:62:7c:22:dd:56:10:98:
         b6:4e:22:a1:34:ae:24:61:b6:32:7e:f7:46:e4:3f:9d:90:f5:
         d5:1b:fd:4d:68:2b:88:f2:0d:ef:57:27:eb:96:e6:77:8d:0e:
         1a:eb:49:e4:a7:68:fa:a4:f4:8a:60:5e:05:de:9d:5a:d3:07:
         11:7b:e6:dd:09:b9:85:21:94:a5:78:a8:c0:8a:30:a3:64:a1:
         a5:e6:5e:34:8b:2f:f1:fb:0a:3f:e5:74:a9:63:35:91:fb:79:
         2d:87:4c:e9:b0:92:1f:46:c3:70:17:f8:28:fd:56:ac:8a:dc:
         9e:91:24:f3:10:45:e8:40:e5:f4:84:52:32:e9:8c:3a:50:6d:
         b3:9d:f7:c4:28:16:1c:e4:02:04:dc:50:4e:e7:f8:3e:8f:0e:
         9f:08:ce:57:48:f3:ef:3e:20:e4:6f:77:aa:d7:90:0e:d1:7d:
         01:80:b0:d9:87:4d:29:47:a6:47:b5:1f:a5:b0:50:c8:5e:04:
         9f:e0:72:e2
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Fri Apr 4 01:55:57 2025 by rpki-client