Certificate
$ rpki-client -vvf rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/i_fikwz8buuRbnOQ-JPgEAupOzI.cer
File: i_fikwz8buuRbnOQ-JPgEAupOzI.cer (raw, json)
Hash identifier: jrPdZI3jwBg6VBnlO1HezoIpo1MX236SPwZC+D+KoKw=
Subject key identifier: 8B:F7:E2:93:0C:FC:6E:EB:91:6E:73:90:F8:93:E0:10:0B:A9:3B:32
Authority key identifier: 74:01:65:A8:0D:10:71:97:0A:BC:09:C0:2B:71:C1:AC:7C:1D:6E:0E
Certificate issuer: /CN=A90DC5BE/serialNumber=740165A80D1071970ABC09C02B71C1AC7C1D6E0E
Certificate serial: 4E9A
Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
Manifest: rsync://rpki.apnic.net/member_repository/A918C661/04AAB29E836D11EAB4A2D76DC4F9AE02/i_fikwz8buuRbnOQ-JPgEAupOzI.mft
caRepository: rsync://rpki.apnic.net/member_repository/A918C661/04AAB29E836D11EAB4A2D76DC4F9AE02/
Notify URL: https://rrdp.apnic.net/notification.xml
Certificate not before: Tue 07 Nov 2023 17:17:49 +0000
Certificate not after: Fri 31 Jan 2025 00:00:00 +0000
Subordinate resources: IP: 134.122.128.0/17
IP: 137.220.128.0/17
IP: 143.92.32.0/19
Validation: OK
Signature path: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 27 Apr 2024 02:50:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 20122 (0x4e9a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A90DC5BE/serialNumber=740165A80D1071970ABC09C02B71C1AC7C1D6E0E
Validity
Not Before: Nov 7 17:17:49 2023 GMT
Not After : Jan 31 00:00:00 2025 GMT
Subject: CN=A918C661/serialNumber=8BF7E2930CFC6EEB916E7390F893E0100BA93B32
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:93:4c:ed:a9:06:59:2f:90:93:b9:7a:48:82:
f0:52:b1:80:12:cc:ee:4f:6d:55:7e:67:cd:e6:c8:
69:ea:de:30:45:1a:a3:94:31:e0:6e:6b:06:fd:23:
92:6a:8d:d3:61:10:33:6b:bd:e7:65:0a:dc:17:8c:
2b:10:cc:06:73:14:d9:22:94:d3:80:6f:6d:74:98:
1b:8d:3f:93:34:a7:15:a8:d0:b3:c6:12:36:96:92:
a3:8f:55:0f:2d:0e:f6:be:bf:3f:8d:27:43:79:48:
95:a3:5d:4c:d0:16:98:78:9b:52:3e:d8:0c:ec:97:
fe:de:7d:57:f0:05:8f:6f:c1:b1:7a:2b:33:a8:4a:
47:69:7d:ec:21:c7:65:e9:b8:6c:9e:29:2d:94:bb:
f6:93:aa:89:02:77:a0:e2:69:99:b8:70:a6:77:06:
cc:20:26:92:16:73:54:01:e3:05:89:de:32:22:67:
92:4b:bf:20:28:ef:dd:60:8b:4b:d9:59:50:b9:42:
b9:ff:a2:aa:79:0f:84:a2:2a:f8:3e:23:7d:75:e1:
d8:5d:69:29:59:3b:53:10:87:63:03:30:ac:f0:db:
fe:e2:c9:3c:0f:29:a1:d3:66:bd:be:2e:97:32:4c:
3a:89:f4:5d:6a:e5:7e:fc:23:f6:78:b6:63:78:6f:
e6:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8B:F7:E2:93:0C:FC:6E:EB:91:6E:73:90:F8:93:E0:10:0B:A9:3B:32
X509v3 Authority Key Identifier:
keyid:74:01:65:A8:0D:10:71:97:0A:BC:09:C0:2B:71:C1:AC:7C:1D:6E:0E
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
CA Repository - URI:rsync://rpki.apnic.net/member_repository/A918C661/04AAB29E836D11EAB4A2D76DC4F9AE02/
RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A918C661/04AAB29E836D11EAB4A2D76DC4F9AE02/i_fikwz8buuRbnOQ-JPgEAupOzI.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
134.122.128.0/17
137.220.128.0/17
143.92.32.0/19
Signature Algorithm: sha256WithRSAEncryption
b2:80:a6:76:42:ca:62:50:46:11:1f:4c:52:1d:eb:45:fb:27:
82:78:28:ea:04:30:ef:bb:aa:2c:ea:fd:bf:a1:74:11:b8:90:
73:cb:9c:63:56:7b:89:b7:44:c6:01:7c:ed:4f:72:a5:6c:95:
ba:95:ce:4c:dd:d7:41:b8:a8:9c:2e:b5:10:03:cd:06:fc:0e:
9c:61:7d:29:da:d4:e0:77:1e:e9:23:16:27:60:3e:40:85:77:
09:51:0c:c7:ef:a5:02:f7:2c:4f:94:3d:52:0b:7a:a8:69:36:
2a:5d:a9:b2:a0:13:6b:f2:fc:08:e9:f0:a0:61:3a:f3:19:b8:
d4:52:90:c2:be:34:27:26:d5:30:f3:25:24:ed:d4:49:3b:09:
49:d5:da:26:74:a0:92:d0:6d:29:9d:9a:0e:4a:f5:ff:d5:4f:
e5:b7:d7:b8:58:8b:37:77:83:b8:c0:d3:9d:76:e8:60:6d:41:
94:ac:b7:ba:2e:9b:b1:7b:63:27:ff:da:96:d2:b4:18:24:7a:
2a:e2:06:1e:f0:3a:a5:21:ab:23:22:c9:20:d5:81:24:19:a7:
06:08:02:92:1a:34:39:67:a7:75:a7:31:a4:8f:f4:c7:17:5c:
fa:04:4d:9d:03:6a:11:ac:92:6c:0a:00:36:b0:b0:6a:27:76:
82:6c:87:77
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 20 05:36:36 2024 by rpki-client on console-ams.rpki-client.org