Certificate
$ rpki-client -vvf rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FUjxCV8eD5t4Sxt_3Y8OdZyELf4.cer
File: FUjxCV8eD5t4Sxt_3Y8OdZyELf4.cer (raw, json)
Hash identifier: vP+3BWo6zrczGtAtulHoCnVbwAK3xRhivO3VxgomPKo=
Subject key identifier: 15:48:F1:09:5F:1E:0F:9B:78:4B:1B:7F:DD:8F:0E:75:9C:84:2D:FE
Authority key identifier: 0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
Certificate issuer: /CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Certificate serial: 021474
Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
Manifest: rsync://rpki.apnic.net/member_repository/A91DBF0C/4A0FFA968C5B11EFA706757FC4F9AE02/FUjxCV8eD5t4Sxt_3Y8OdZyELf4.mft
caRepository: rsync://rpki.apnic.net/member_repository/A91DBF0C/4A0FFA968C5B11EFA706757FC4F9AE02/
Notify URL: https://rrdp.apnic.net/notification.xml
Certificate not before: Thu 17 Oct 2024 07:42:03 +0000
Certificate not after: Tue 30 Dec 2025 00:00:00 +0000
Subordinate resources: AS: 153312
IP: 2401:c060::/32
Validation: OK
Signature path: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 28 Oct 2024 02:50:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 136308 (0x21474)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Validity
Not Before: Oct 17 07:42:03 2024 GMT
Not After : Dec 30 00:00:00 2025 GMT
Subject: CN=A91DBF0C/serialNumber=1548F1095F1E0F9B784B1B7FDD8F0E759C842DFE
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:db:d5:25:29:09:1f:1f:7f:80:b4:86:5f:73:
04:11:8e:5a:75:3b:2a:78:40:97:53:52:0b:38:b4:
a6:c7:ab:4e:af:5a:5b:28:0d:78:00:1e:2e:03:96:
74:7e:eb:a4:e1:73:d1:b5:8d:f6:63:34:1e:38:a5:
ea:ee:c4:d3:12:a8:c3:46:5e:e5:74:fc:22:5c:9f:
ed:8b:b0:28:00:db:72:92:0e:82:df:d0:76:49:63:
06:f5:75:2c:99:3d:72:82:47:19:36:7e:8a:ee:12:
2b:c7:63:c7:30:3b:9e:a3:5e:26:60:aa:0f:b6:77:
3d:92:76:fc:57:46:7a:55:d6:e9:0e:05:2e:49:ba:
f0:ed:28:39:19:0a:69:98:8c:d2:0f:28:2a:e4:1b:
06:b5:b3:f0:90:02:21:b1:8a:c4:53:b3:9c:af:bc:
a6:7a:76:71:00:5e:c0:dc:22:88:5c:0a:b5:35:d7:
1e:3d:61:92:b6:79:8c:8a:b5:31:ba:eb:1b:e4:be:
62:ae:a0:57:20:19:51:9c:ce:0e:06:3a:d5:df:8c:
a0:73:dc:fa:76:07:a9:f7:57:12:f0:2b:a1:65:60:
98:52:b2:a2:78:e4:6c:a8:68:d3:af:16:70:da:e8:
a9:cd:4f:12:0c:87:ea:bb:47:94:33:a4:70:66:09:
23:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
15:48:F1:09:5F:1E:0F:9B:78:4B:1B:7F:DD:8F:0E:75:9C:84:2D:FE
X509v3 Authority Key Identifier:
keyid:0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
CA Repository - URI:rsync://rpki.apnic.net/member_repository/A91DBF0C/4A0FFA968C5B11EFA706757FC4F9AE02/
RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A91DBF0C/4A0FFA968C5B11EFA706757FC4F9AE02/FUjxCV8eD5t4Sxt_3Y8OdZyELf4.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
153312
sbgp-ipAddrBlock: critical
IPv6:
2401:c060::/32
Signature Algorithm: sha256WithRSAEncryption
23:7c:97:f4:f7:d9:e6:22:bd:98:0c:29:74:b4:f6:0c:3a:ed:
0d:f8:1c:96:2a:42:08:25:c9:4b:34:55:db:37:10:97:61:b1:
63:d5:02:e3:29:cc:c4:5e:4d:71:ea:6c:96:89:cf:67:8a:d2:
ea:b4:f7:54:93:1b:99:0f:bc:fd:12:01:48:3d:3a:1d:f2:16:
88:64:0c:82:91:da:26:a8:b9:01:48:cf:0a:9a:7f:b9:96:eb:
39:0e:a2:2c:ce:21:03:ae:41:7c:31:28:a6:50:a6:ad:74:6a:
2a:1b:fe:7e:9e:43:7d:d7:3b:6f:11:b9:ad:b1:b2:03:81:24:
57:0e:18:11:a6:2b:a0:e6:c3:29:3e:44:1c:45:4f:d1:e6:e7:
70:45:40:b4:e8:1f:c7:a7:be:d4:3a:b7:9a:c3:25:77:af:38:
52:f8:3b:05:33:11:e2:6f:80:5a:37:9b:13:af:57:fe:ed:f5:
42:b3:b0:9d:b8:f2:03:a2:ef:1e:9e:60:e8:c3:c0:db:31:c8:
57:7d:39:31:43:56:c5:d8:fc:5c:dc:06:73:21:ec:54:df:84:
f7:8f:29:4c:0c:97:4c:ce:19:85:9c:8a:9a:4c:82:eb:8b:1c:
a9:78:e5:ab:75:f9:d3:17:ac:81:2b:f2:32:34:fc:b7:fb:f7:
a8:b6:e1:aa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 21 04:28:43 2024 by rpki-client on console.sobornost.net