Certificate
$ rpki-client -vvvf rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/40tPgNnj9wC8rExSxasj61t-37s.cer
File: 40tPgNnj9wC8rExSxasj61t-37s.cer (raw, json)
Hash identifier: U011SbVofSrHgOi2F0SBZNks5X75gEt+bld7ylw/ZKE=
Subject key identifier: E3:4B:4F:80:D9:E3:F7:00:BC:AC:4C:52:C5:AB:23:EB:5B:7E:DF:BB
Authority key identifier: 74:01:65:A8:0D:10:71:97:0A:BC:09:C0:2B:71:C1:AC:7C:1D:6E:0E
Certificate issuer: /CN=A90DC5BE/serialNumber=740165A80D1071970ABC09C02B71C1AC7C1D6E0E
Certificate serial: 8332
Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
Manifest: rsync://rpki.apnic.net/member_repository/A918E4B7/96E6675A784E11EEB19AD34DC4F9AE02/40tPgNnj9wC8rExSxasj61t-37s.mft
caRepository: rsync://rpki.apnic.net/member_repository/A918E4B7/96E6675A784E11EEB19AD34DC4F9AE02/
Notify URL: https://rrdp.apnic.net/notification.xml
Certificate not before: Sat 03 Oct 2026 13:23:47 +0000
Certificate not after: Wed 01 Dec 2027 00:00:00 +0000
Subordinate resources: IP: 45.130.164.0/22
IP: 45.151.152.0/22
IP: 74.113.232.0/22
IP: 143.246.44.0/22
Validation: OK
Signature path: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 07 Nov 2026 14:50:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 33586 (0x8332)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A90DC5BE, serialNumber=740165A80D1071970ABC09C02B71C1AC7C1D6E0E
Validity
Not Before: Oct 3 13:23:47 2026 GMT
Not After : Dec 1 00:00:00 2027 GMT
Subject: CN=A918E4B7, serialNumber=E34B4F80D9E3F700BCAC4C52C5AB23EB5B7EDFBB
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:27:11:55:06:b0:51:14:ab:a9:78:29:c3:34:
4b:fe:47:0e:f1:b3:03:8d:a7:c2:ae:24:14:bc:e7:
5f:4f:d4:18:e6:44:22:7a:6b:4c:5f:b4:0f:6a:3b:
d4:68:41:ae:78:2d:55:b1:37:e6:61:11:3d:47:24:
35:df:b3:c3:03:55:1a:e8:d6:3a:f6:b8:ae:2c:5e:
a0:32:05:ae:ce:c0:46:8f:b5:fc:e6:0b:12:88:b9:
42:50:a0:74:ac:b4:67:47:1b:1f:27:87:cb:00:da:
56:93:fd:b3:87:e1:4e:f8:cc:83:64:28:a5:c3:a7:
53:0a:cc:42:f4:bd:61:c2:3b:10:61:c8:52:1a:76:
85:ea:8b:d8:0a:ca:4f:37:6a:8f:4c:62:21:ac:1a:
9f:01:3f:42:86:25:50:2e:04:58:be:3f:f9:1c:3c:
31:ae:3a:0f:4f:69:95:d8:7c:5c:5a:05:03:82:37:
0f:d5:99:6b:5a:15:eb:c8:1a:72:f9:1e:e1:d8:19:
50:d7:f6:44:cc:7a:8c:f6:c6:5a:1c:d0:2e:53:23:
41:ca:6e:00:e1:4e:3c:cd:c0:06:69:d5:29:a6:56:
2b:5b:39:84:04:ca:a5:ae:35:59:56:b9:98:6c:18:
ce:b0:a4:87:9e:a9:f5:18:df:dc:b5:cb:b4:f8:30:
42:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E3:4B:4F:80:D9:E3:F7:00:BC:AC:4C:52:C5:AB:23:EB:5B:7E:DF:BB
X509v3 Authority Key Identifier:
keyid:74:01:65:A8:0D:10:71:97:0A:BC:09:C0:2B:71:C1:AC:7C:1D:6E:0E
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
CA Repository - URI:rsync://rpki.apnic.net/member_repository/A918E4B7/96E6675A784E11EEB19AD34DC4F9AE02/
RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A918E4B7/96E6675A784E11EEB19AD34DC4F9AE02/40tPgNnj9wC8rExSxasj61t-37s.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.130.164.0/22
45.151.152.0/22
74.113.232.0/22
143.246.44.0/22
Signature Algorithm: sha256WithRSAEncryption
37:9f:91:1f:7c:b2:43:f6:c4:63:a1:a6:37:e6:26:e1:2c:ac:
e3:d7:02:6c:1b:36:a3:2d:6f:5a:c6:21:1a:f0:3c:df:17:4e:
bd:bf:05:84:19:2f:ca:4a:4c:00:47:d7:42:83:65:8d:f8:27:
9d:77:25:b7:6e:fd:e5:e0:27:16:76:79:4e:0e:a4:2c:0a:cf:
af:8a:3c:e6:7a:37:8d:da:78:15:d9:ef:6f:1b:6a:8b:af:cb:
d6:25:8a:c2:1e:f5:2d:6a:9f:9a:e6:e7:fb:7f:ac:b4:3c:15:
b7:02:d3:cf:07:e6:84:79:e2:01:0d:be:cc:7d:eb:86:14:cc:
6e:2d:bd:46:ef:29:87:e1:d1:4b:9d:65:3d:16:dd:e7:0c:60:
84:c6:05:e0:bf:fa:0b:fd:15:a9:f6:68:b9:09:35:64:a3:9d:
c7:7f:29:d5:4b:43:85:00:57:11:f3:b4:29:93:48:27:98:30:
ff:94:ef:5f:5f:76:45:1b:ad:55:a0:89:98:9f:89:b6:ea:27:
10:e7:ee:b9:1c:81:ab:24:f1:cc:ad:12:0b:fc:ca:5b:9a:b0:
a5:a6:d3:df:93:be:92:41:a0:00:ee:4c:75:f4:9d:3d:51:f0:
61:aa:3b:d7:e1:39:72:76:21:a0:ad:1b:a2:c3:df:4f:26:b0:
eb:42:92:96
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 31 22:50:12 2026 by rpki-client