Certificate
$ rpki-client -vvf rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/40tPgNnj9wC8rExSxasj61t-37s.cer
File: 40tPgNnj9wC8rExSxasj61t-37s.cer (raw, json)
Hash identifier: pZYti/Mfyb2/VKtQeV3KhHSbpD6tEC9J7YLwGE5oW1Q=
Subject key identifier: E3:4B:4F:80:D9:E3:F7:00:BC:AC:4C:52:C5:AB:23:EB:5B:7E:DF:BB
Authority key identifier: 74:01:65:A8:0D:10:71:97:0A:BC:09:C0:2B:71:C1:AC:7C:1D:6E:0E
Certificate issuer: /CN=A90DC5BE/serialNumber=740165A80D1071970ABC09C02B71C1AC7C1D6E0E
Certificate serial: 6A97
Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
Manifest: rsync://rpki.apnic.net/member_repository/A918E4B7/96E6675A784E11EEB19AD34DC4F9AE02/40tPgNnj9wC8rExSxasj61t-37s.mft
caRepository: rsync://rpki.apnic.net/member_repository/A918E4B7/96E6675A784E11EEB19AD34DC4F9AE02/
Notify URL: https://rrdp.apnic.net/notification.xml
Certificate not before: Tue 02 Sep 2025 03:45:42 +0000
Certificate not after: Tue 01 Dec 2026 00:00:00 +0000
Subordinate resources: IP: 45.130.164.0/22
IP: 45.151.152.0/22
Validation: OK
Signature path: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 11 Sep 2025 03:16:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 27287 (0x6a97)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A90DC5BE, serialNumber=740165A80D1071970ABC09C02B71C1AC7C1D6E0E
Validity
Not Before: Sep 2 03:45:42 2025 GMT
Not After : Dec 1 00:00:00 2026 GMT
Subject: CN=A918E4B7, serialNumber=E34B4F80D9E3F700BCAC4C52C5AB23EB5B7EDFBB
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:27:11:55:06:b0:51:14:ab:a9:78:29:c3:34:
4b:fe:47:0e:f1:b3:03:8d:a7:c2:ae:24:14:bc:e7:
5f:4f:d4:18:e6:44:22:7a:6b:4c:5f:b4:0f:6a:3b:
d4:68:41:ae:78:2d:55:b1:37:e6:61:11:3d:47:24:
35:df:b3:c3:03:55:1a:e8:d6:3a:f6:b8:ae:2c:5e:
a0:32:05:ae:ce:c0:46:8f:b5:fc:e6:0b:12:88:b9:
42:50:a0:74:ac:b4:67:47:1b:1f:27:87:cb:00:da:
56:93:fd:b3:87:e1:4e:f8:cc:83:64:28:a5:c3:a7:
53:0a:cc:42:f4:bd:61:c2:3b:10:61:c8:52:1a:76:
85:ea:8b:d8:0a:ca:4f:37:6a:8f:4c:62:21:ac:1a:
9f:01:3f:42:86:25:50:2e:04:58:be:3f:f9:1c:3c:
31:ae:3a:0f:4f:69:95:d8:7c:5c:5a:05:03:82:37:
0f:d5:99:6b:5a:15:eb:c8:1a:72:f9:1e:e1:d8:19:
50:d7:f6:44:cc:7a:8c:f6:c6:5a:1c:d0:2e:53:23:
41:ca:6e:00:e1:4e:3c:cd:c0:06:69:d5:29:a6:56:
2b:5b:39:84:04:ca:a5:ae:35:59:56:b9:98:6c:18:
ce:b0:a4:87:9e:a9:f5:18:df:dc:b5:cb:b4:f8:30:
42:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E3:4B:4F:80:D9:E3:F7:00:BC:AC:4C:52:C5:AB:23:EB:5B:7E:DF:BB
X509v3 Authority Key Identifier:
keyid:74:01:65:A8:0D:10:71:97:0A:BC:09:C0:2B:71:C1:AC:7C:1D:6E:0E
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
CA Repository - URI:rsync://rpki.apnic.net/member_repository/A918E4B7/96E6675A784E11EEB19AD34DC4F9AE02/
RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A918E4B7/96E6675A784E11EEB19AD34DC4F9AE02/40tPgNnj9wC8rExSxasj61t-37s.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.130.164.0/22
45.151.152.0/22
Signature Algorithm: sha256WithRSAEncryption
94:b2:ab:92:77:2e:a8:7d:8e:91:90:d0:7e:01:7c:25:e9:ba:
1c:1f:e1:3d:7b:72:88:c3:4e:40:39:ee:0f:92:cc:58:d7:74:
b2:49:4a:4e:b9:f6:4f:d6:05:22:3b:35:42:ac:9e:c3:68:07:
60:f7:c6:67:e2:31:58:24:3d:78:df:9c:87:33:86:9a:c3:83:
5c:a6:dd:e4:20:d7:21:8c:41:e9:52:5c:71:c3:3c:59:74:f7:
1d:f9:71:fe:bc:07:54:64:d1:a1:b8:79:cf:9f:03:a7:73:5a:
38:12:44:c9:90:b5:69:38:23:ba:c7:e3:40:9d:73:b9:15:eb:
d2:d0:4d:9f:e2:c8:6c:47:a1:70:18:49:21:5b:0f:04:63:d0:
2e:a5:df:2e:80:84:9d:7e:93:fc:a8:ad:a8:01:83:78:75:ba:
4f:37:de:41:c7:7b:3c:cb:e8:13:87:b5:c4:33:36:e7:d9:77:
28:b4:4e:4a:ca:6e:6f:9a:84:9b:a7:7c:7b:92:44:fc:a8:67:
6a:4f:70:e9:f1:3b:c4:42:d3:57:87:9b:96:9d:60:c6:67:2f:
2d:1b:22:f7:bc:27:5c:65:1d:76:71:15:5c:33:2b:51:47:c7:
f1:04:43:41:4f:bf:f3:cb:32:bf:01:86:aa:7a:5f:a5:66:69:
20:63:b5:f2
-----BEGIN CERTIFICATE-----
MIIGAzCCBOugAwIBAgICapcwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkw
REM1QkUxMTAvBgNVBAUTKDc0MDE2NUE4MEQxMDcxOTcwQUJDMDlDMDJCNzFDMUFD
N0MxRDZFMEUwHhcNMjUwOTAyMDM0NTQyWhcNMjYxMjAxMDAwMDAwWjBGMREwDwYD
VQQDEwhBOTE4RTRCNzExMC8GA1UEBRMoRTM0QjRGODBEOUUzRjcwMEJDQUM0QzUy
QzVBQjIzRUI1QjdFREZCQjCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEB
ALsnEVUGsFEUq6l4KcM0S/5HDvGzA42nwq4kFLznX0/UGOZEInprTF+0D2o71GhB
rngtVbE35mERPUckNd+zwwNVGujWOva4rixeoDIFrs7ARo+1/OYLEoi5QlCgdKy0
Z0cbHyeHywDaVpP9s4fhTvjMg2QopcOnUwrMQvS9YcI7EGHIUhp2heqL2ArKTzdq
j0xiIawanwE/QoYlUC4EWL4/+Rw8Ma46D09pldh8XFoFA4I3D9WZa1oV68gacvke
4dgZUNf2RMx6jPbGWhzQLlMjQcpuAOFOPM3ABmnVKaZWK1s5hATKpa41WVa5mGwY
zrCkh56p9Rjf3LXLtPgwQr8CAwEAAaOCAvkwggL1MB0GA1UdDgQWBBTjS0+A2eP3
ALysTFLFqyPrW37fuzAfBgNVHSMEGDAWgBR0AWWoDRBxlwq8CcArccGsfB1uDjAO
BgNVHQ8BAf8EBAMCAQYwDwYDVR0TAQH/BAUwAwEB/zBzBgNVHR8EbDBqMGigZqBk
hmJyc3luYzovL3Jwa2kuYXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRGMjAxRDY2
MTFFMjhBQzg4MzdDNzJGRDFGRjIvZEFGbHFBMFFjWmNLdkFuQUszSEJySHdkYmc0
LmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5h
cG5pYy5uZXQvcmVwb3NpdG9yeS85ODA2NTJFMEI3N0UxMUU3QTk2QTM5NTIxQTRG
NEZCNC9kQUZscUEwUWNaY0t2QW5BSzNIQnJId2RiZzQuY2VyMEoGA1UdIAEB/wRA
MD4wPAYIKwYBBQUHDgIwMDAuBggrBgEFBQcCARYiaHR0cHM6Ly93d3cuYXBuaWMu
bmV0L1JQS0kvQ1BTLnBkZjCCASgGCCsGAQUFBwELBIIBGjCCARYwXwYIKwYBBQUH
MAWGU3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
OEU0QjcvOTZFNjY3NUE3ODRFMTFFRUIxOUFEMzREQzRGOUFFMDIvMH4GCCsGAQUF
BzAKhnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5
MThFNEI3Lzk2RTY2NzVBNzg0RTExRUVCMTlBRDM0REM0RjlBRTAyLzQwdFBnTm5q
OXdDOHJFeFN4YXNqNjF0LTM3cy5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJk
cC5hcG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAlBggrBgEFBQcBBwEB/wQWMBQw
EgQCAAEwDAMEAi2CpAMEAi2XmDANBgkqhkiG9w0BAQsFAAOCAQEAlLKrkncuqH2O
kZDQfgF8Jem6HB/hPXtyiMNOQDnuD5LMWNd0sklKTrn2T9YFIjs1Qqyew2gHYPfG
Z+IxWCQ9eN+chzOGmsODXKbd5CDXIYxB6VJcccM8WXT3Hflx/rwHVGTRobh5z58D
p3NaOBJEyZC1aTgjusfjQJ1zuRXr0tBNn+LIbEehcBhJIVsPBGPQLqXfLoCEnX6T
/KitqAGDeHW6TzfeQcd7PMvoE4e1xDM259l3KLROSspub5qEm6d8e5JE/Khnak9w
6fE7xELTV4eblp1gxmcvLRsi97wnXGUddnEVXDMrUUfH8QRDQU+/88syvwGGqnpf
pWZpIGO18g==
-----END CERTIFICATE-----
Generated at Thu Sep 4 12:30:16 2025 by rpki-client