Certificate
$ rpki-client -vvf rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/i_fikwz8buuRbnOQ-JPgEAupOzI.cer
File: i_fikwz8buuRbnOQ-JPgEAupOzI.cer (raw, json)
Hash identifier: O7/1OT/MeathU6MXvXTHHt1YVukPGecKqyn8gCyJEX8=
Subject key identifier: 8B:F7:E2:93:0C:FC:6E:EB:91:6E:73:90:F8:93:E0:10:0B:A9:3B:32
Authority key identifier: 74:01:65:A8:0D:10:71:97:0A:BC:09:C0:2B:71:C1:AC:7C:1D:6E:0E
Certificate issuer: /CN=A90DC5BE/serialNumber=740165A80D1071970ABC09C02B71C1AC7C1D6E0E
Certificate serial: 5D5F
Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
Manifest: rsync://rpki.apnic.net/member_repository/A918C661/04AAB29E836D11EAB4A2D76DC4F9AE02/i_fikwz8buuRbnOQ-JPgEAupOzI.mft
caRepository: rsync://rpki.apnic.net/member_repository/A918C661/04AAB29E836D11EAB4A2D76DC4F9AE02/
Notify URL: https://rrdp.apnic.net/notification.xml
Certificate not before: Tue 05 Nov 2024 21:49:34 +0000
Certificate not after: Sat 31 Jan 2026 00:00:00 +0000
Subordinate resources: IP: 134.122.128.0/17
IP: 137.220.128.0/17
IP: 143.92.32.0/19
Validation: OK
Signature path: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 28 Nov 2024 20:12:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 23903 (0x5d5f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A90DC5BE/serialNumber=740165A80D1071970ABC09C02B71C1AC7C1D6E0E
Validity
Not Before: Nov 5 21:49:34 2024 GMT
Not After : Jan 31 00:00:00 2026 GMT
Subject: CN=A918C661/serialNumber=8BF7E2930CFC6EEB916E7390F893E0100BA93B32
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:93:4c:ed:a9:06:59:2f:90:93:b9:7a:48:82:
f0:52:b1:80:12:cc:ee:4f:6d:55:7e:67:cd:e6:c8:
69:ea:de:30:45:1a:a3:94:31:e0:6e:6b:06:fd:23:
92:6a:8d:d3:61:10:33:6b:bd:e7:65:0a:dc:17:8c:
2b:10:cc:06:73:14:d9:22:94:d3:80:6f:6d:74:98:
1b:8d:3f:93:34:a7:15:a8:d0:b3:c6:12:36:96:92:
a3:8f:55:0f:2d:0e:f6:be:bf:3f:8d:27:43:79:48:
95:a3:5d:4c:d0:16:98:78:9b:52:3e:d8:0c:ec:97:
fe:de:7d:57:f0:05:8f:6f:c1:b1:7a:2b:33:a8:4a:
47:69:7d:ec:21:c7:65:e9:b8:6c:9e:29:2d:94:bb:
f6:93:aa:89:02:77:a0:e2:69:99:b8:70:a6:77:06:
cc:20:26:92:16:73:54:01:e3:05:89:de:32:22:67:
92:4b:bf:20:28:ef:dd:60:8b:4b:d9:59:50:b9:42:
b9:ff:a2:aa:79:0f:84:a2:2a:f8:3e:23:7d:75:e1:
d8:5d:69:29:59:3b:53:10:87:63:03:30:ac:f0:db:
fe:e2:c9:3c:0f:29:a1:d3:66:bd:be:2e:97:32:4c:
3a:89:f4:5d:6a:e5:7e:fc:23:f6:78:b6:63:78:6f:
e6:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8B:F7:E2:93:0C:FC:6E:EB:91:6E:73:90:F8:93:E0:10:0B:A9:3B:32
X509v3 Authority Key Identifier:
keyid:74:01:65:A8:0D:10:71:97:0A:BC:09:C0:2B:71:C1:AC:7C:1D:6E:0E
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
CA Repository - URI:rsync://rpki.apnic.net/member_repository/A918C661/04AAB29E836D11EAB4A2D76DC4F9AE02/
RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A918C661/04AAB29E836D11EAB4A2D76DC4F9AE02/i_fikwz8buuRbnOQ-JPgEAupOzI.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
134.122.128.0/17
137.220.128.0/17
143.92.32.0/19
Signature Algorithm: sha256WithRSAEncryption
69:7e:d3:f8:e7:0b:b3:ae:5a:fa:55:29:73:b5:c6:fb:52:10:
b6:6c:fa:52:6f:8a:e1:b0:e4:0e:6b:25:d6:ab:fc:9e:cc:e4:
2c:ff:7d:d4:2c:58:96:8e:6a:c3:5d:76:69:74:58:36:20:02:
d0:79:1f:d8:a3:b1:c8:d7:14:0b:ba:df:f1:03:f5:26:a7:7d:
8e:56:24:5f:99:4c:93:df:48:f9:23:0e:7b:61:ee:62:e9:65:
e5:58:c5:24:d2:9e:ed:0a:f4:92:b2:0a:db:ad:07:ec:aa:7c:
3e:12:01:86:9c:36:b6:cd:ba:8b:4c:e4:ae:7f:ce:0b:36:18:
9d:3d:3e:7e:ab:89:6b:7f:89:86:61:59:3b:04:62:31:00:1b:
93:89:c9:4a:bb:d5:49:c9:7d:5a:30:f2:49:56:39:cd:da:f3:
0b:a8:7d:7d:14:5d:6e:c0:3a:cd:3b:e4:9a:ed:9c:ef:d3:57:
e7:74:ca:5f:e7:6a:91:75:27:a5:55:8a:9f:dd:70:66:ff:58:
9c:86:1f:7c:37:de:3e:76:eb:b2:6e:1b:a8:02:4d:8e:86:4d:
2e:5e:24:78:25:7b:36:fc:f5:7e:67:3e:56:31:2c:34:b6:8c:
17:df:33:8d:8d:4f:7f:46:81:40:41:b0:27:2c:d4:92:2a:b7:
eb:4d:a1:ed
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 21:41:40 2024 by rpki-client on console-ams.rpki-client.org