Certificate
$ rpki-client -vvf rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1h3BeAj1jg-ZsoUs50hg-FPLINs.cer
File: 1h3BeAj1jg-ZsoUs50hg-FPLINs.cer (raw, json)
Hash identifier: Tf0eREH1WWlM8DurH4UOvrnEcNYiFwZsBtRwDaR7DBQ=
Subject key identifier: D6:1D:C1:78:08:F5:8E:0F:99:B2:85:2C:E7:48:60:F8:53:CB:20:DB
Authority key identifier: 0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
Certificate issuer: /CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Certificate serial: 01C78E
Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
Manifest: rsync://rpki.apnic.net/member_repository/A916FD2B/3F86D79AA83511EDA776AB30C4F9AE02/1h3BeAj1jg-ZsoUs50hg-FPLINs.mft
caRepository: rsync://rpki.apnic.net/member_repository/A916FD2B/3F86D79AA83511EDA776AB30C4F9AE02/
Notify URL: https://rrdp.apnic.net/notification.xml
Certificate not before: Tue 31 Oct 2023 20:00:31 +0000
Certificate not after: Mon 30 Dec 2024 00:00:00 +0000
Subordinate resources: AS: 150310
IP: 103.250.220.0/23
IP: 2001:df1:45c0::/48
Validation: OK
Signature path: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 02 May 2024 06:28:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 116622 (0x1c78e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Validity
Not Before: Oct 31 20:00:31 2023 GMT
Not After : Dec 30 00:00:00 2024 GMT
Subject: CN=A916FD2B/serialNumber=D61DC17808F58E0F99B2852CE74860F853CB20DB
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:a0:f4:6f:43:41:cd:49:fb:7b:c3:d4:52:42:
f6:70:43:15:f1:e0:b3:83:1f:36:a1:ad:27:c3:9e:
43:a1:07:ef:4d:7c:6b:79:db:72:66:1f:7d:90:67:
83:5d:f4:90:29:d3:37:cf:e0:be:f8:38:22:e3:00:
0e:5b:41:c8:db:32:99:2b:97:08:90:be:9e:80:13:
dd:1e:b9:41:1a:bc:5b:8a:76:57:61:71:44:d7:ec:
94:48:24:d9:65:09:ac:fc:5b:e2:5a:b5:af:35:ca:
81:f9:09:d2:ca:59:6c:6e:8c:38:67:46:59:ab:77:
60:d3:3c:d7:71:5e:ea:2a:1b:0e:75:70:b9:92:85:
50:94:c3:53:41:1b:bc:38:10:57:33:dd:07:34:fe:
d6:3d:7e:99:fd:56:73:f9:c6:14:66:fb:e4:58:53:
30:f2:fc:22:9f:bd:10:13:f7:ce:9a:26:c3:70:54:
59:96:38:2e:8b:7e:e4:ac:7e:2d:dc:e5:44:4e:1b:
1f:18:99:e3:0b:bd:b0:2d:ec:c6:08:52:45:1f:73:
d0:d7:8b:b4:2d:6b:27:27:e7:22:2b:4c:ed:83:3c:
f7:67:7c:0b:b6:4f:90:d0:50:c6:53:ec:c2:55:4d:
40:b6:64:c6:26:99:29:e6:d3:05:02:ff:42:a1:74:
88:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D6:1D:C1:78:08:F5:8E:0F:99:B2:85:2C:E7:48:60:F8:53:CB:20:DB
X509v3 Authority Key Identifier:
keyid:0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
CA Repository - URI:rsync://rpki.apnic.net/member_repository/A916FD2B/3F86D79AA83511EDA776AB30C4F9AE02/
RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A916FD2B/3F86D79AA83511EDA776AB30C4F9AE02/1h3BeAj1jg-ZsoUs50hg-FPLINs.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
150310
sbgp-ipAddrBlock: critical
IPv4:
103.250.220.0/23
IPv6:
2001:df1:45c0::/48
Signature Algorithm: sha256WithRSAEncryption
87:5e:23:17:13:4c:29:76:6e:8f:a9:e2:34:0a:19:78:7f:d9:
e1:f9:75:0c:bd:2d:14:13:ef:73:31:46:42:9c:d0:31:f3:e6:
c9:7d:24:c5:3a:bb:ed:45:2a:20:b7:4c:dd:ef:54:09:6f:68:
a0:6e:e1:7b:7a:2d:93:d0:11:6e:b5:3e:9f:60:c5:e7:b1:da:
91:d2:0b:21:8f:6c:e7:78:81:e1:8d:28:3c:9d:ba:b4:d9:fa:
16:01:e7:92:ef:80:78:6c:08:6d:62:0d:3d:c2:02:a8:49:4b:
80:ee:77:ac:0a:c8:28:e2:25:44:37:71:83:28:21:72:fe:44:
c9:92:0f:92:1b:2d:05:87:22:88:4e:40:b7:07:e8:f5:70:8f:
c1:dc:c9:74:94:60:b5:d5:6b:16:ee:cb:55:2c:01:b8:76:52:
a9:c3:37:7f:bd:07:9f:5f:56:a2:97:88:9e:d8:5e:26:84:0a:
a7:97:64:c6:ca:0a:7c:6d:58:1e:e2:e1:ad:09:9b:d3:77:ef:
c7:72:9c:f9:60:06:7c:65:f3:f1:92:b8:33:59:18:0d:b3:20:
ce:97:f4:01:7e:da:5b:b5:0f:07:28:a2:93:62:e5:b6:64:f1:
bb:5e:43:7a:df:5b:e3:35:04:bc:bc:f0:d6:7d:7e:61:d2:5b:
aa:4c:a0:dc
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Thu Apr 25 07:21:05 2024 by rpki-client on console-ams.rpki-client.org