Certificate

$ rpki-client -vvf rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FFiKS-nrikuZgtGyXesMYHOK77s.cer
File:                     FFiKS-nrikuZgtGyXesMYHOK77s.cer (raw, json)
Hash identifier:          7UnGKszShjB5DjHnbAD4yH5buhCWbjsNYEQLyL+5lIw=
Subject key identifier:   14:58:8A:4B:E9:EB:8A:4B:99:82:D1:B2:5D:EB:0C:60:73:8A:EF:BB
Authority key identifier: 0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
Certificate issuer:       /CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Certificate serial:       01B0F5
Authority info access:    rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
Manifest:                 rsync://rpki.apnic.net/member_repository/A91E9CE4/69CCB5BC089C11EDBFA2FB4BC4F9AE02/FFiKS-nrikuZgtGyXesMYHOK77s.mft
caRepository:             rsync://rpki.apnic.net/member_repository/A91E9CE4/69CCB5BC089C11EDBFA2FB4BC4F9AE02/
Notify URL:               https://rrdp.apnic.net/notification.xml
Certificate not before:   Tue 18 Jul 2023 20:27:26 +0000
Certificate not after:    Sun 01 Dec 2024 00:00:00 +0000
Subordinate resources:    AS: 147008
                          IP: 103.172.191.0/24
                          IP: 2001:df0:f8c0::/48

Validation:               OK
Signature path:           rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 27 Apr 2024 02:50:25 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 110837 (0x1b0f5)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
        Validity
            Not Before: Jul 18 20:27:26 2023 GMT
            Not After : Dec  1 00:00:00 2024 GMT
        Subject: CN=A91E9CE4/serialNumber=14588A4BE9EB8A4B9982D1B25DEB0C60738AEFBB
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e0:a3:14:b3:fd:38:40:7f:98:5e:b3:38:e2:b5:
                    63:e0:87:8e:9e:0a:dd:b3:51:5c:99:44:cc:35:76:
                    ee:60:35:32:2b:05:96:d3:8d:5e:7e:90:c9:19:61:
                    b6:d6:b0:e4:5d:cc:43:5d:02:50:c0:93:6c:16:07:
                    49:c0:73:d6:a0:9e:bd:e3:fc:d4:cc:e0:79:68:c3:
                    e9:6c:da:12:0b:e3:53:30:2c:6e:ae:96:21:d8:50:
                    f7:cb:52:ba:26:6a:2e:23:09:9a:23:10:25:55:18:
                    d1:b2:c9:74:18:40:33:c1:fc:68:1b:2c:78:67:39:
                    81:09:95:dc:eb:83:88:0b:54:b4:58:30:64:be:c1:
                    ba:1f:75:9b:88:da:a1:69:f6:be:21:db:59:b0:72:
                    85:3c:0d:3f:6e:82:cf:ae:5a:a9:5c:4e:f7:20:87:
                    d6:7b:0e:d5:10:4c:af:d7:bb:31:79:f1:7c:bd:16:
                    71:51:d2:05:96:37:e3:3f:68:ce:35:ef:28:35:c3:
                    68:f0:48:f3:d4:e3:9c:8e:ee:14:3f:4a:b9:25:3c:
                    44:bb:4a:5a:3e:37:81:b2:56:25:b1:cb:79:82:40:
                    b0:63:85:1e:7a:b9:ed:57:60:8b:20:51:2d:24:e7:
                    ed:7a:5e:9d:6d:e6:48:85:bc:40:bb:97:ed:22:39:
                    b2:27
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                14:58:8A:4B:E9:EB:8A:4B:99:82:D1:B2:5D:EB:0C:60:73:8A:EF:BB
            X509v3 Authority Key Identifier:
                keyid:0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                CA Repository - URI:rsync://rpki.apnic.net/member_repository/A91E9CE4/69CCB5BC089C11EDBFA2FB4BC4F9AE02/
                RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A91E9CE4/69CCB5BC089C11EDBFA2FB4BC4F9AE02/FFiKS-nrikuZgtGyXesMYHOK77s.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  147008

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.172.191.0/24
                IPv6:
                  2001:df0:f8c0::/48

    Signature Algorithm: sha256WithRSAEncryption
         4a:b2:eb:b6:85:b5:9f:10:8f:e5:a7:26:f1:0d:81:a3:c7:83:
         0a:dc:3c:5d:09:dc:50:cd:1a:0e:08:fb:a7:79:a6:38:39:0e:
         69:28:e2:95:e8:7f:77:0e:31:cf:a7:0b:cc:30:bb:1e:cc:9d:
         f8:dc:a2:2d:ae:a1:38:5b:76:09:04:39:16:3b:11:4f:88:c4:
         4c:48:a9:91:9b:97:99:1a:45:9a:73:79:1d:c0:10:8f:d8:b0:
         7b:2e:e9:ea:dc:18:9b:d9:01:f5:c8:1d:ad:f3:40:a1:71:44:
         e8:3c:83:52:95:0c:10:ad:52:c4:3a:ce:62:90:ae:61:18:72:
         d1:a6:40:67:41:59:1c:ea:1e:51:59:f2:7f:53:33:92:20:d5:
         47:7a:b0:1c:a0:84:7c:95:c2:d3:63:b2:39:9c:f1:c3:9b:66:
         81:91:72:de:4f:1b:cf:50:c4:e6:bf:18:6c:da:ff:32:4b:7c:
         ab:98:e0:a5:05:20:74:b4:08:77:c0:49:67:4b:c8:30:6b:74:
         4e:ee:b1:81:07:c4:1b:96:8f:9e:1c:80:e4:e0:56:70:75:e5:
         7d:0b:da:a4:00:76:03:96:75:c6:4b:6f:57:49:91:96:08:ee:
         81:33:6c:92:f5:e4:a8:31:8c:e8:36:af:7f:f9:08:96:90:47:
         35:df:d9:fd
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Sat Apr 20 05:36:50 2024 by rpki-client on console-ams.rpki-client.org