Certificate
$ rpki-client -vvvf rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/40tPgNnj9wC8rExSxasj61t-37s.cer
File: 40tPgNnj9wC8rExSxasj61t-37s.cer (raw, json)
Hash identifier: Sc8+Gw8bjqEKOnLJ84B8QMTqaliGqP0qc50axJMfAEU=
Subject key identifier: E3:4B:4F:80:D9:E3:F7:00:BC:AC:4C:52:C5:AB:23:EB:5B:7E:DF:BB
Authority key identifier: 74:01:65:A8:0D:10:71:97:0A:BC:09:C0:2B:71:C1:AC:7C:1D:6E:0E
Certificate issuer: /CN=A90DC5BE/serialNumber=740165A80D1071970ABC09C02B71C1AC7C1D6E0E
Certificate serial: 8091
Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
Manifest: rsync://rpki.apnic.net/member_repository/A918E4B7/96E6675A784E11EEB19AD34DC4F9AE02/40tPgNnj9wC8rExSxasj61t-37s.mft
caRepository: rsync://rpki.apnic.net/member_repository/A918E4B7/96E6675A784E11EEB19AD34DC4F9AE02/
Notify URL: https://rrdp.apnic.net/notification.xml
Certificate not before: Tue 11 Aug 2026 00:10:30 +0000
Certificate not after: Tue 01 Dec 2026 00:00:00 +0000
Subordinate resources: IP: 45.130.164.0/22
IP: 45.151.152.0/22
IP: 74.113.232.0/22
IP: 143.246.44.0/22
Validation: OK
Signature path: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 17 Sep 2026 14:50:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 32913 (0x8091)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A90DC5BE, serialNumber=740165A80D1071970ABC09C02B71C1AC7C1D6E0E
Validity
Not Before: Aug 11 00:10:30 2026 GMT
Not After : Dec 1 00:00:00 2026 GMT
Subject: CN=A918E4B7, serialNumber=E34B4F80D9E3F700BCAC4C52C5AB23EB5B7EDFBB
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:27:11:55:06:b0:51:14:ab:a9:78:29:c3:34:
4b:fe:47:0e:f1:b3:03:8d:a7:c2:ae:24:14:bc:e7:
5f:4f:d4:18:e6:44:22:7a:6b:4c:5f:b4:0f:6a:3b:
d4:68:41:ae:78:2d:55:b1:37:e6:61:11:3d:47:24:
35:df:b3:c3:03:55:1a:e8:d6:3a:f6:b8:ae:2c:5e:
a0:32:05:ae:ce:c0:46:8f:b5:fc:e6:0b:12:88:b9:
42:50:a0:74:ac:b4:67:47:1b:1f:27:87:cb:00:da:
56:93:fd:b3:87:e1:4e:f8:cc:83:64:28:a5:c3:a7:
53:0a:cc:42:f4:bd:61:c2:3b:10:61:c8:52:1a:76:
85:ea:8b:d8:0a:ca:4f:37:6a:8f:4c:62:21:ac:1a:
9f:01:3f:42:86:25:50:2e:04:58:be:3f:f9:1c:3c:
31:ae:3a:0f:4f:69:95:d8:7c:5c:5a:05:03:82:37:
0f:d5:99:6b:5a:15:eb:c8:1a:72:f9:1e:e1:d8:19:
50:d7:f6:44:cc:7a:8c:f6:c6:5a:1c:d0:2e:53:23:
41:ca:6e:00:e1:4e:3c:cd:c0:06:69:d5:29:a6:56:
2b:5b:39:84:04:ca:a5:ae:35:59:56:b9:98:6c:18:
ce:b0:a4:87:9e:a9:f5:18:df:dc:b5:cb:b4:f8:30:
42:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E3:4B:4F:80:D9:E3:F7:00:BC:AC:4C:52:C5:AB:23:EB:5B:7E:DF:BB
X509v3 Authority Key Identifier:
keyid:74:01:65:A8:0D:10:71:97:0A:BC:09:C0:2B:71:C1:AC:7C:1D:6E:0E
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
CA Repository - URI:rsync://rpki.apnic.net/member_repository/A918E4B7/96E6675A784E11EEB19AD34DC4F9AE02/
RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A918E4B7/96E6675A784E11EEB19AD34DC4F9AE02/40tPgNnj9wC8rExSxasj61t-37s.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.130.164.0/22
45.151.152.0/22
74.113.232.0/22
143.246.44.0/22
Signature Algorithm: sha256WithRSAEncryption
52:10:61:26:35:cf:c9:a7:3d:f5:ad:60:b3:d6:66:bb:b8:2a:
f0:7b:43:a9:b9:4a:2e:e6:d8:f7:72:f1:27:17:33:0a:c3:dd:
75:68:c8:16:c1:c3:2e:f3:29:aa:56:85:81:b5:25:f7:e2:28:
f3:44:a4:10:eb:bc:88:1c:d5:5f:b7:12:83:b1:04:f1:02:4e:
91:7f:24:e7:7d:01:1e:14:c2:ee:21:99:18:da:28:5e:59:97:
e7:29:a5:76:5f:49:fb:96:bc:11:42:27:34:06:de:cb:25:49:
f1:32:c2:9c:8e:bb:38:ac:c2:82:6f:c3:7e:30:ff:0b:1a:c0:
4c:fe:4b:31:50:32:b1:f7:ce:fd:dd:fa:e3:07:5b:f2:e6:b9:
62:36:40:06:3f:bb:6d:ad:88:98:a5:21:ca:23:88:dd:d2:b6:
01:70:13:f0:f6:ee:c9:d8:43:fa:3a:ad:af:e0:2a:ce:ee:1a:
18:65:d2:23:84:ce:7f:a2:da:c5:5f:31:42:3d:bf:02:b2:bd:
33:3b:8d:6c:04:ef:06:7f:2d:6e:77:79:c8:63:00:90:78:0c:
d6:2e:6f:77:03:12:d6:c9:a2:a9:01:d2:96:6b:9f:f6:71:26:
8b:ca:6d:dc:2f:d7:cf:86:5c:7d:e9:70:0b:df:fb:c8:97:c6:
ed:5f:00:40
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 10 18:39:52 2026 by rpki-client