Certificate
$ rpki-client -vvf rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/fn-3i_rxIdy3dJPgd5raTNDVmBo.cer
File: fn-3i_rxIdy3dJPgd5raTNDVmBo.cer (raw, json)
Hash identifier: 3mYu3z+Jp9rxpLVw+7tLIGT0XqAFcKU1QHLK2R0aONc=
Subject key identifier: 7E:7F:B7:8B:FA:F1:21:DC:B7:74:93:E0:77:9A:DA:4C:D0:D5:98:1A
Authority key identifier: 74:01:65:A8:0D:10:71:97:0A:BC:09:C0:2B:71:C1:AC:7C:1D:6E:0E
Certificate issuer: /CN=A90DC5BE/serialNumber=740165A80D1071970ABC09C02B71C1AC7C1D6E0E
Certificate serial: 4E57
Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
Manifest: rsync://rpki.apnic.net/member_repository/A91DE7DE/C332AFB604E111E98EA7D872C4F9AE02/fn-3i_rxIdy3dJPgd5raTNDVmBo.mft
caRepository: rsync://rpki.apnic.net/member_repository/A91DE7DE/C332AFB604E111E98EA7D872C4F9AE02/
Notify URL: https://rrdp.apnic.net/notification.xml
Certificate not before: Sat 28 Oct 2023 17:48:58 +0000
Certificate not after: Mon 30 Dec 2024 00:00:00 +0000
Subordinate resources: IP: 138.75.0.0/16
IP: 144.89.128.0/17
Validation: OK
Signature path: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 15 May 2024 02:42:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 20055 (0x4e57)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A90DC5BE/serialNumber=740165A80D1071970ABC09C02B71C1AC7C1D6E0E
Validity
Not Before: Oct 28 17:48:58 2023 GMT
Not After : Dec 30 00:00:00 2024 GMT
Subject: CN=A91DE7DE/serialNumber=7E7FB78BFAF121DCB77493E0779ADA4CD0D5981A
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:2d:2b:38:a3:1f:c6:0b:30:b4:03:fa:1e:f1:
eb:d3:e9:26:99:9c:de:27:5a:cb:c4:d4:c5:49:a5:
2a:6b:21:c5:d1:75:83:eb:b7:ef:21:4d:08:ae:ce:
1f:07:e4:4d:68:11:96:a3:56:2c:ca:80:78:bc:b9:
c6:57:69:0b:8e:5c:47:b6:6a:d9:48:f4:26:27:78:
d1:3b:9e:50:af:2c:a7:d9:f7:4f:a3:c5:af:bc:e7:
c8:ba:13:5c:dc:8b:f0:ab:e3:74:d9:ca:32:ac:78:
93:e3:9d:db:44:6a:43:8d:0b:16:c6:9b:66:62:9a:
ea:d9:f5:69:0f:1e:ef:02:a5:ef:08:54:ee:4d:8a:
b4:0a:80:a7:48:d3:4a:73:ed:10:54:a4:c9:fa:d6:
ee:f2:95:42:a6:8e:b8:4b:ef:02:26:e0:6f:e3:43:
18:c6:45:47:b1:cb:da:01:b7:ec:2d:1f:48:1c:c7:
7e:4d:d8:d0:76:d9:4a:29:10:0c:94:52:ee:7e:b3:
dd:33:d9:6f:9a:99:6b:13:a3:25:57:3a:73:73:12:
d6:5f:1a:ae:e5:04:04:16:ee:31:ea:2f:d7:64:b6:
67:64:6a:67:3e:3c:fc:92:5a:55:3b:ec:07:09:37:
81:2e:b9:dd:17:25:1e:56:4d:ee:dc:8f:dc:ea:bf:
83:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7E:7F:B7:8B:FA:F1:21:DC:B7:74:93:E0:77:9A:DA:4C:D0:D5:98:1A
X509v3 Authority Key Identifier:
keyid:74:01:65:A8:0D:10:71:97:0A:BC:09:C0:2B:71:C1:AC:7C:1D:6E:0E
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
CA Repository - URI:rsync://rpki.apnic.net/member_repository/A91DE7DE/C332AFB604E111E98EA7D872C4F9AE02/
RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A91DE7DE/C332AFB604E111E98EA7D872C4F9AE02/fn-3i_rxIdy3dJPgd5raTNDVmBo.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
138.75.0.0/16
144.89.128.0/17
Signature Algorithm: sha256WithRSAEncryption
4d:e4:56:7c:02:55:bc:df:ac:6f:a8:32:0e:43:62:aa:ca:03:
68:69:16:fd:da:f5:ea:3d:88:77:ed:69:c2:da:42:f2:23:4d:
ce:e7:6a:e9:64:18:28:7e:45:15:3b:64:69:63:f0:be:1e:aa:
da:b8:f7:15:c3:45:c4:ac:ca:d6:c5:49:2a:e6:2a:49:11:ec:
8b:72:ca:e9:5c:64:1e:7e:5f:0c:d9:be:77:d9:c8:b6:78:4c:
46:68:8e:ce:3d:24:66:6d:1b:39:59:63:8e:96:83:ec:bd:70:
d0:40:8f:a3:cc:53:f5:fc:48:58:dd:7b:12:e0:fe:12:5b:0b:
54:df:88:d2:c1:17:27:95:10:00:5c:b3:31:0a:ba:92:2f:66:
21:78:68:f3:6e:07:bd:5e:d0:3b:3e:8c:f0:5c:bb:d8:1b:98:
9e:2c:48:14:f9:14:d7:ec:ae:ae:4e:4c:62:5f:c2:cd:b4:58:
25:65:9a:50:1f:69:64:08:a6:7b:d3:68:ff:13:82:31:ee:4a:
ad:e7:1b:fd:88:ac:23:d8:b5:b4:b2:eb:74:9d:97:e6:43:b3:
9f:2c:10:84:ed:75:5b:b6:93:ac:32:66:77:70:3c:1f:71:6f:
6a:8a:6e:7f:4d:5e:a9:df:9f:a0:b8:c7:7a:e3:b0:e4:d6:4d:
11:7e:2f:b5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 9 03:38:11 2024 by rpki-client on console-ams.rpki-client.org