Certificate
$ rpki-client -vvf rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/FYOTMKge2Jkgc6I4BMn1kFOPudI.cer
File: FYOTMKge2Jkgc6I4BMn1kFOPudI.cer (raw, json)
Hash identifier: f+iqQwBw40hO7fBVzaRnT25XBgrG0kxCr8eenP6pZCI=
Subject key identifier: 15:83:93:30:A8:1E:D8:99:20:73:A2:38:04:C9:F5:90:53:8F:B9:D2
Authority key identifier: 74:01:65:A8:0D:10:71:97:0A:BC:09:C0:2B:71:C1:AC:7C:1D:6E:0E
Certificate issuer: /CN=A90DC5BE/serialNumber=740165A80D1071970ABC09C02B71C1AC7C1D6E0E
Certificate serial: 5281
Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
Manifest: rsync://rpki.apnic.net/member_repository/A9159B6F/2AD5F6D8D09C11EE80AB8D7EC4F9AE02/FYOTMKge2Jkgc6I4BMn1kFOPudI.mft
caRepository: rsync://rpki.apnic.net/member_repository/A9159B6F/2AD5F6D8D09C11EE80AB8D7EC4F9AE02/
Notify URL: https://rrdp.apnic.net/notification.xml
Certificate not before: Wed 21 Feb 2024 09:32:51 +0000
Certificate not after: Wed 28 May 2025 00:00:00 +0000
Subordinate resources: IP: 157.20.74.0/23
Validation: OK
Signature path: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 28 Nov 2024 20:12:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 21121 (0x5281)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A90DC5BE/serialNumber=740165A80D1071970ABC09C02B71C1AC7C1D6E0E
Validity
Not Before: Feb 21 09:32:51 2024 GMT
Not After : May 28 00:00:00 2025 GMT
Subject: CN=A9159B6F/serialNumber=15839330A81ED8992073A23804C9F590538FB9D2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:d5:c6:df:e2:a6:fc:c3:86:20:4c:52:c0:dc:
aa:39:5f:f7:7c:46:9a:e5:55:6d:f6:fc:2e:90:3c:
ef:c4:fa:31:0b:5e:d3:5a:c9:67:3b:56:0c:7f:5f:
41:73:3d:a7:4a:44:7f:ff:da:f6:98:3c:e5:13:e1:
1b:ca:7b:ea:b9:36:a0:7b:ac:79:9d:97:2e:0d:d7:
7f:96:d5:c8:21:04:39:23:11:58:c7:99:b8:71:2e:
5f:db:bb:c9:64:0c:8f:77:8a:86:6a:89:02:24:da:
db:45:0a:4a:a1:7a:3e:14:68:55:68:70:da:0a:e2:
5e:6c:26:a5:22:2d:c1:47:12:f5:fd:78:ca:38:c5:
40:cb:37:92:07:83:1d:b0:4a:c7:28:f5:5f:77:08:
1c:76:6c:93:b9:7e:72:79:55:c0:04:7e:76:70:a0:
6b:4f:a6:86:f5:5d:c1:6a:81:84:fe:cc:89:e4:94:
38:62:6e:44:5f:17:52:5b:09:cd:04:9e:31:32:f5:
09:8c:43:d1:0f:10:85:e1:dc:39:c2:97:95:69:ae:
ab:dc:5a:b5:d5:6f:aa:22:f3:be:f5:db:13:48:77:
d2:1a:41:7c:ae:1c:9f:fa:59:59:24:a0:21:c7:23:
e0:ed:15:8a:68:c1:22:99:0e:e4:bb:f6:11:44:3d:
b9:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
15:83:93:30:A8:1E:D8:99:20:73:A2:38:04:C9:F5:90:53:8F:B9:D2
X509v3 Authority Key Identifier:
keyid:74:01:65:A8:0D:10:71:97:0A:BC:09:C0:2B:71:C1:AC:7C:1D:6E:0E
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
CA Repository - URI:rsync://rpki.apnic.net/member_repository/A9159B6F/2AD5F6D8D09C11EE80AB8D7EC4F9AE02/
RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A9159B6F/2AD5F6D8D09C11EE80AB8D7EC4F9AE02/FYOTMKge2Jkgc6I4BMn1kFOPudI.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
157.20.74.0/23
Signature Algorithm: sha256WithRSAEncryption
99:a0:70:31:d0:31:13:cc:a3:f1:a6:ed:95:2c:68:dd:3e:c0:
66:25:26:43:63:da:41:61:95:1b:04:e3:80:f5:3d:04:60:67:
0c:25:03:1d:59:2b:cc:8b:f6:9e:d3:5b:c5:2f:57:31:53:7f:
65:7a:88:45:81:1a:95:b8:76:33:30:5a:b8:d2:af:98:e8:30:
d8:01:b6:52:d1:5f:65:55:44:f3:bd:10:90:d3:83:8d:57:d3:
7e:30:6a:44:1b:a8:0a:ea:73:ec:2f:c5:15:9e:43:ad:52:7d:
51:c2:dc:d8:b4:d8:13:04:4e:12:2f:ad:b3:94:54:ab:89:b9:
d8:1b:a4:0b:db:37:17:01:7f:53:81:0e:62:e1:6a:97:b5:d6:
26:39:3c:f7:df:07:ff:03:11:68:b8:fc:6d:ec:71:ee:a8:3e:
55:62:55:ee:33:4a:94:04:83:5a:ea:f4:65:43:3f:f6:cf:fd:
7e:4d:fa:55:8f:23:11:ea:25:ac:b2:d9:2d:1f:59:d8:dc:f8:
d9:53:c8:62:82:93:47:d6:fd:9c:be:00:57:61:de:16:5d:0c:
ae:a0:1b:44:b2:94:d1:14:71:4d:36:13:2e:92:91:da:1e:e4:
08:b6:b3:ec:02:e3:63:1d:60:77:a8:7b:56:1f:fc:bc:4f:b5:
7e:3f:b0:24
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 21:04:29 2024 by rpki-client on console-fra.rpki-client.org