Certificate
$ rpki-client -vvf rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/fn-3i_rxIdy3dJPgd5raTNDVmBo.cer
File: fn-3i_rxIdy3dJPgd5raTNDVmBo.cer (raw, json)
Hash identifier: mCT6gKGZB/GS9PMdCMrRzlggIoMyW7IdLKgsMp37vx4=
Subject key identifier: 7E:7F:B7:8B:FA:F1:21:DC:B7:74:93:E0:77:9A:DA:4C:D0:D5:98:1A
Authority key identifier: 74:01:65:A8:0D:10:71:97:0A:BC:09:C0:2B:71:C1:AC:7C:1D:6E:0E
Certificate issuer: /CN=A90DC5BE/serialNumber=740165A80D1071970ABC09C02B71C1AC7C1D6E0E
Certificate serial: 5D70
Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
Manifest: rsync://rpki.apnic.net/member_repository/A91DE7DE/C332AFB604E111E98EA7D872C4F9AE02/fn-3i_rxIdy3dJPgd5raTNDVmBo.mft
caRepository: rsync://rpki.apnic.net/member_repository/A91DE7DE/C332AFB604E111E98EA7D872C4F9AE02/
Notify URL: https://rrdp.apnic.net/notification.xml
Certificate not before: Wed 06 Nov 2024 08:54:56 +0000
Certificate not after: Tue 30 Dec 2025 00:00:00 +0000
Subordinate resources: IP: 138.75.0.0/16
IP: 144.89.128.0/17
Validation: OK
Signature path: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 28 Nov 2024 20:12:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 23920 (0x5d70)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A90DC5BE/serialNumber=740165A80D1071970ABC09C02B71C1AC7C1D6E0E
Validity
Not Before: Nov 6 08:54:56 2024 GMT
Not After : Dec 30 00:00:00 2025 GMT
Subject: CN=A91DE7DE/serialNumber=7E7FB78BFAF121DCB77493E0779ADA4CD0D5981A
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:2d:2b:38:a3:1f:c6:0b:30:b4:03:fa:1e:f1:
eb:d3:e9:26:99:9c:de:27:5a:cb:c4:d4:c5:49:a5:
2a:6b:21:c5:d1:75:83:eb:b7:ef:21:4d:08:ae:ce:
1f:07:e4:4d:68:11:96:a3:56:2c:ca:80:78:bc:b9:
c6:57:69:0b:8e:5c:47:b6:6a:d9:48:f4:26:27:78:
d1:3b:9e:50:af:2c:a7:d9:f7:4f:a3:c5:af:bc:e7:
c8:ba:13:5c:dc:8b:f0:ab:e3:74:d9:ca:32:ac:78:
93:e3:9d:db:44:6a:43:8d:0b:16:c6:9b:66:62:9a:
ea:d9:f5:69:0f:1e:ef:02:a5:ef:08:54:ee:4d:8a:
b4:0a:80:a7:48:d3:4a:73:ed:10:54:a4:c9:fa:d6:
ee:f2:95:42:a6:8e:b8:4b:ef:02:26:e0:6f:e3:43:
18:c6:45:47:b1:cb:da:01:b7:ec:2d:1f:48:1c:c7:
7e:4d:d8:d0:76:d9:4a:29:10:0c:94:52:ee:7e:b3:
dd:33:d9:6f:9a:99:6b:13:a3:25:57:3a:73:73:12:
d6:5f:1a:ae:e5:04:04:16:ee:31:ea:2f:d7:64:b6:
67:64:6a:67:3e:3c:fc:92:5a:55:3b:ec:07:09:37:
81:2e:b9:dd:17:25:1e:56:4d:ee:dc:8f:dc:ea:bf:
83:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7E:7F:B7:8B:FA:F1:21:DC:B7:74:93:E0:77:9A:DA:4C:D0:D5:98:1A
X509v3 Authority Key Identifier:
keyid:74:01:65:A8:0D:10:71:97:0A:BC:09:C0:2B:71:C1:AC:7C:1D:6E:0E
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
CA Repository - URI:rsync://rpki.apnic.net/member_repository/A91DE7DE/C332AFB604E111E98EA7D872C4F9AE02/
RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A91DE7DE/C332AFB604E111E98EA7D872C4F9AE02/fn-3i_rxIdy3dJPgd5raTNDVmBo.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
138.75.0.0/16
144.89.128.0/17
Signature Algorithm: sha256WithRSAEncryption
c0:0d:a4:3c:86:2f:3b:4a:7c:d6:00:69:cd:74:38:dc:68:7d:
15:6b:0d:2a:ce:41:13:aa:1b:ca:8f:36:db:04:b4:24:75:e3:
55:5f:99:c2:56:92:e9:73:47:85:d3:61:72:4f:59:89:c1:46:
ff:9b:8f:1f:0c:1b:12:29:b8:6c:91:e7:99:cc:00:a8:67:bd:
cd:ce:56:11:f6:6a:88:c3:5d:ae:52:e3:59:e8:9b:51:8a:8a:
e8:00:21:4f:6a:55:b9:39:47:1d:c0:1b:19:94:02:85:dc:0a:
e8:bf:71:09:e4:07:64:44:69:84:ee:2f:8c:83:55:96:d8:59:
25:f0:d7:54:8b:d9:64:cd:00:33:26:b9:56:5f:43:21:8f:11:
3b:d7:b4:c3:67:5c:45:d3:c8:d5:21:de:3e:35:c0:97:0d:80:
75:a4:6d:20:d2:ee:80:57:fb:1c:cb:59:5f:4e:6c:f2:0d:84:
01:12:1c:64:74:66:72:1d:fa:dd:f2:06:1d:48:7e:66:75:87:
ce:77:9b:fe:07:c8:07:26:1a:38:9f:63:2d:c0:8b:dc:17:ff:
93:c9:e7:d2:82:19:6f:e9:77:96:bb:21:1c:be:fc:77:ca:57:
4c:c6:d9:97:59:bb:a4:88:1e:e6:a6:2b:b2:1d:4a:fb:1e:ae:
69:a2:d5:e6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 21:04:30 2024 by rpki-client on console-fra.rpki-client.org