Certificate
$ rpki-client -vvf rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/fiRDENekVusSe5JsQvJteems24g.cer
File: fiRDENekVusSe5JsQvJteems24g.cer (raw, json)
Hash identifier: peP7qUtEzABRaqK3nfYzTNjsxs+/phAaLMAJjT2AEms=
Subject key identifier: 7E:24:43:10:D7:A4:56:EB:12:7B:92:6C:42:F2:6D:79:E9:AC:DB:88
Authority key identifier: 74:01:65:A8:0D:10:71:97:0A:BC:09:C0:2B:71:C1:AC:7C:1D:6E:0E
Certificate issuer: /CN=A90DC5BE/serialNumber=740165A80D1071970ABC09C02B71C1AC7C1D6E0E
Certificate serial: 561E
Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
Manifest: rsync://rpki.apnic.net/member_repository/A91DF93A/F7DFA72EE5F311EAB3A91561C4F9AE02/fiRDENekVusSe5JsQvJteems24g.mft
caRepository: rsync://rpki.apnic.net/member_repository/A91DF93A/F7DFA72EE5F311EAB3A91561C4F9AE02/
Notify URL: https://rrdp.apnic.net/notification.xml
Certificate not before: Mon 27 May 2024 23:39:54 +0000
Certificate not after: Sun 31 Aug 2025 00:00:00 +0000
Subordinate resources: IP: 169.136.64.0 -- 169.136.191.255
Validation: OK
Signature path: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 28 Nov 2024 20:12:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 22046 (0x561e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A90DC5BE/serialNumber=740165A80D1071970ABC09C02B71C1AC7C1D6E0E
Validity
Not Before: May 27 23:39:54 2024 GMT
Not After : Aug 31 00:00:00 2025 GMT
Subject: CN=A91DF93A/serialNumber=7E244310D7A456EB127B926C42F26D79E9ACDB88
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:d2:a3:fb:1b:9c:3f:a6:2d:3a:c2:21:f4:f0:
b4:7a:f8:90:3a:c8:a1:57:e2:f7:4f:b6:6d:fa:7f:
96:de:ac:5a:88:b8:8f:b5:a2:1d:e1:42:d2:3b:12:
1c:54:32:86:b2:0b:20:82:43:26:81:28:3f:35:7f:
08:a5:76:79:2f:e1:f9:c0:a5:70:49:ed:d7:3d:74:
95:61:da:37:df:31:16:ca:b1:f8:aa:1a:cb:4d:ba:
31:c7:c8:8d:28:db:79:10:ba:e0:dc:a1:c0:48:ac:
2f:4b:a2:4d:9e:69:44:ba:d8:3b:ad:cc:de:73:bb:
5f:0f:90:74:e6:7a:8c:ff:09:1f:6d:79:90:0b:20:
27:95:7f:ef:fb:74:b1:80:41:6d:9b:f2:2e:07:5e:
fb:90:8f:b8:85:09:30:17:ee:f8:17:a7:c5:d5:be:
d1:9a:01:9f:33:90:c0:ea:24:3e:1c:46:e7:3e:95:
6a:50:17:31:7f:0e:e9:5f:85:ad:27:82:2b:9e:48:
c9:d8:e3:5a:ab:27:0a:8a:5c:dd:e4:be:49:0e:37:
f2:c8:af:89:bb:15:b5:e4:0e:b0:d6:5f:ab:92:40:
80:3f:0d:4c:4b:6d:20:9d:d4:28:ad:74:f0:4e:09:
23:0c:e4:95:2b:70:c8:27:b1:f8:cb:54:6c:92:55:
7a:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7E:24:43:10:D7:A4:56:EB:12:7B:92:6C:42:F2:6D:79:E9:AC:DB:88
X509v3 Authority Key Identifier:
keyid:74:01:65:A8:0D:10:71:97:0A:BC:09:C0:2B:71:C1:AC:7C:1D:6E:0E
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
CA Repository - URI:rsync://rpki.apnic.net/member_repository/A91DF93A/F7DFA72EE5F311EAB3A91561C4F9AE02/
RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A91DF93A/F7DFA72EE5F311EAB3A91561C4F9AE02/fiRDENekVusSe5JsQvJteems24g.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
169.136.64.0-169.136.191.255
Signature Algorithm: sha256WithRSAEncryption
5c:a9:1b:19:c1:2f:4c:10:0e:17:39:aa:0b:5e:74:73:c9:a9:
90:b4:4b:7f:fd:75:c2:d7:c8:51:5f:31:a5:8e:ec:c6:20:c3:
fd:64:26:7b:36:ae:08:8f:ed:f0:a4:23:84:8d:39:91:00:37:
2e:59:58:1c:76:0f:14:2f:d4:52:5d:66:34:2e:65:9a:85:5b:
68:b3:56:05:7f:19:f8:b3:27:bd:c0:22:19:bf:e5:22:fa:77:
9a:47:92:0b:04:0b:75:e1:89:f6:fd:62:52:b5:28:f3:d3:fb:
e7:0e:bc:44:9e:7a:a3:6d:5b:72:39:c5:5d:c4:9c:78:b8:f7:
8e:2c:cd:f6:cb:83:cf:dc:11:bc:82:c4:68:68:8f:98:43:d7:
99:3b:18:d1:6e:65:6e:ba:96:d4:62:76:20:82:5b:29:cc:d2:
72:22:23:2f:8b:6c:e6:a0:23:81:19:6a:fa:86:29:d4:7a:42:
a5:9c:75:d5:56:21:d7:73:8c:67:06:1d:ff:82:e1:96:df:4b:
ba:15:b4:5a:8d:b3:15:85:cb:38:9a:2d:4f:63:f8:f8:15:59:
7a:88:30:ec:54:ec:02:c9:0e:38:2e:93:50:1b:c9:6c:21:13:
c9:90:37:e2:f8:3e:0b:c2:94:71:21:d7:e5:62:45:11:ea:f4:
c3:c0:c4:7c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 21:41:40 2024 by rpki-client on console-ams.rpki-client.org