Certificate
$ rpki-client -vvf rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fjn-IfnRWFyu9Zj7fWoG6_0xBsI.cer
File: fjn-IfnRWFyu9Zj7fWoG6_0xBsI.cer (raw, json)
Hash identifier: FgHKrEIJCwYlYXStEmwAsoYViwc4u7Yrhpa4ST3DaM4=
Subject key identifier: 7E:39:FE:21:F9:D1:58:5C:AE:F5:98:FB:7D:6A:06:EB:FD:31:06:C2
Authority key identifier: 0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
Certificate issuer: /CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Certificate serial: 02156C
Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
Manifest: rsync://rpki.apnic.net/member_repository/A91AF4CC/D581C1BC914811EF87EADD52C4F9AE02/fjn-IfnRWFyu9Zj7fWoG6_0xBsI.mft
caRepository: rsync://rpki.apnic.net/member_repository/A91AF4CC/D581C1BC914811EF87EADD52C4F9AE02/
Notify URL: https://rrdp.apnic.net/notification.xml
Certificate not before: Wed 23 Oct 2024 14:12:33 +0000
Certificate not after: Sat 31 Jan 2026 00:00:00 +0000
Subordinate resources: AS: 153373
IP: 2001:df4:78c0::/48
Validation: OK
Signature path: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 31 Oct 2024 10:39:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 136556 (0x2156c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Validity
Not Before: Oct 23 14:12:33 2024 GMT
Not After : Jan 31 00:00:00 2026 GMT
Subject: CN=A91AF4CC/serialNumber=7E39FE21F9D1585CAEF598FB7D6A06EBFD3106C2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e7:1f:4d:49:3d:a4:93:04:bb:6c:e6:2f:12:a6:
06:b3:e8:2b:3d:ee:a7:d1:ae:8f:35:0d:9a:53:9a:
88:19:e3:b6:99:26:58:d4:3d:e0:51:f9:b0:51:3a:
cf:da:23:99:55:54:fc:a0:a1:b2:2c:93:64:02:98:
31:ce:4c:6f:c5:67:6e:b4:cb:74:90:57:60:cd:6d:
5c:80:d2:9f:31:73:df:d1:f2:37:eb:03:76:fb:e4:
5e:3e:9d:f7:33:24:21:8a:04:06:1c:47:37:05:82:
ea:1c:31:f5:db:24:bd:ac:f8:fa:6f:b3:12:70:4d:
d2:d6:7a:a1:eb:ce:ad:67:f7:f0:ce:57:18:17:dd:
70:7d:ac:1d:a2:c8:8a:2b:50:97:4a:60:e1:78:4b:
12:25:88:9e:e2:94:70:94:b5:22:9b:7b:e9:29:31:
48:0f:e8:f5:f0:5a:d3:bc:f6:3e:d7:56:9d:7e:eb:
d1:78:1e:87:ab:14:d8:07:25:b3:c4:45:6a:0d:b3:
1b:1e:21:c5:27:79:67:06:29:e6:82:5c:de:ce:41:
ce:d9:22:f9:ef:63:b6:35:ad:43:43:9f:68:12:c6:
7f:1c:a1:da:d3:eb:a0:88:45:8d:52:3b:9e:a2:d1:
85:e0:e1:8d:27:76:2d:75:f3:7c:5d:a5:33:38:4e:
1c:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7E:39:FE:21:F9:D1:58:5C:AE:F5:98:FB:7D:6A:06:EB:FD:31:06:C2
X509v3 Authority Key Identifier:
keyid:0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
CA Repository - URI:rsync://rpki.apnic.net/member_repository/A91AF4CC/D581C1BC914811EF87EADD52C4F9AE02/
RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A91AF4CC/D581C1BC914811EF87EADD52C4F9AE02/fjn-IfnRWFyu9Zj7fWoG6_0xBsI.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
153373
sbgp-ipAddrBlock: critical
IPv6:
2001:df4:78c0::/48
Signature Algorithm: sha256WithRSAEncryption
83:4a:62:78:72:d1:20:a7:96:38:0b:ff:9d:ea:19:c4:aa:d0:
c2:b8:d1:75:c0:ce:ec:5b:78:58:46:84:0f:44:b3:71:2c:18:
33:db:04:1d:16:8d:fd:5e:a2:c0:f2:0d:eb:85:a2:16:f5:fe:
e8:24:de:e8:de:a8:08:40:0e:66:26:3d:7e:73:87:dd:dc:d4:
fd:1e:4d:4f:76:27:d8:3c:1c:30:51:e7:57:2a:27:06:66:c8:
aa:19:4a:6f:41:56:a0:e8:da:53:70:d7:e0:87:d5:d5:82:62:
8c:be:ec:e8:05:fe:2f:ed:ef:c9:8d:d0:12:51:fb:a5:50:8b:
ec:b6:23:96:c4:a7:7b:26:31:1e:8d:02:cb:71:d8:55:6d:9a:
dd:1b:9c:c9:60:8a:7e:76:e7:a6:ec:75:a7:d7:1e:6d:17:13:
cd:76:0a:31:4d:31:c6:e9:40:15:3f:9c:3c:5a:91:85:74:22:
17:c5:8d:8f:5c:2c:23:e0:a4:f8:03:ed:2c:a1:f7:d5:fa:1b:
70:8d:f7:fb:52:5b:c1:1b:f4:c5:f9:12:d2:bd:b9:06:04:7c:
c8:89:b4:b9:0a:e2:70:08:31:24:38:52:98:75:73:6a:cb:ea:
1b:af:9b:06:83:6e:b0:44:c4:4a:56:98:43:db:d1:1f:46:bb:
be:ec:c8:04
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 24 11:39:34 2024 by rpki-client on console-ams.rpki-client.org