Certificate
$ rpki-client -vvf rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/40tPgNnj9wC8rExSxasj61t-37s.cer
File: 40tPgNnj9wC8rExSxasj61t-37s.cer (raw, json)
Hash identifier: 9C309nalobcQeMiXnd/qM41qCJgLtGzzLiAALvI/Vn0=
Subject key identifier: E3:4B:4F:80:D9:E3:F7:00:BC:AC:4C:52:C5:AB:23:EB:5B:7E:DF:BB
Authority key identifier: 74:01:65:A8:0D:10:71:97:0A:BC:09:C0:2B:71:C1:AC:7C:1D:6E:0E
Certificate issuer: /CN=A90DC5BE/serialNumber=740165A80D1071970ABC09C02B71C1AC7C1D6E0E
Certificate serial: 786F
Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
Manifest: rsync://rpki.apnic.net/member_repository/A918E4B7/96E6675A784E11EEB19AD34DC4F9AE02/40tPgNnj9wC8rExSxasj61t-37s.mft
caRepository: rsync://rpki.apnic.net/member_repository/A918E4B7/96E6675A784E11EEB19AD34DC4F9AE02/
Notify URL: https://rrdp.apnic.net/notification.xml
Certificate not before: Wed 11 Mar 2026 13:39:59 +0000
Certificate not after: Tue 01 Dec 2026 00:00:00 +0000
Subordinate resources: IP: 45.130.164.0/22
IP: 45.151.152.0/22
IP: 74.113.232.0/22
Validation: OK
Signature path: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 20 Mar 2026 02:50:12 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 30831 (0x786f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A90DC5BE, serialNumber=740165A80D1071970ABC09C02B71C1AC7C1D6E0E
Validity
Not Before: Mar 11 13:39:59 2026 GMT
Not After : Dec 1 00:00:00 2026 GMT
Subject: CN=A918E4B7, serialNumber=E34B4F80D9E3F700BCAC4C52C5AB23EB5B7EDFBB
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:27:11:55:06:b0:51:14:ab:a9:78:29:c3:34:
4b:fe:47:0e:f1:b3:03:8d:a7:c2:ae:24:14:bc:e7:
5f:4f:d4:18:e6:44:22:7a:6b:4c:5f:b4:0f:6a:3b:
d4:68:41:ae:78:2d:55:b1:37:e6:61:11:3d:47:24:
35:df:b3:c3:03:55:1a:e8:d6:3a:f6:b8:ae:2c:5e:
a0:32:05:ae:ce:c0:46:8f:b5:fc:e6:0b:12:88:b9:
42:50:a0:74:ac:b4:67:47:1b:1f:27:87:cb:00:da:
56:93:fd:b3:87:e1:4e:f8:cc:83:64:28:a5:c3:a7:
53:0a:cc:42:f4:bd:61:c2:3b:10:61:c8:52:1a:76:
85:ea:8b:d8:0a:ca:4f:37:6a:8f:4c:62:21:ac:1a:
9f:01:3f:42:86:25:50:2e:04:58:be:3f:f9:1c:3c:
31:ae:3a:0f:4f:69:95:d8:7c:5c:5a:05:03:82:37:
0f:d5:99:6b:5a:15:eb:c8:1a:72:f9:1e:e1:d8:19:
50:d7:f6:44:cc:7a:8c:f6:c6:5a:1c:d0:2e:53:23:
41:ca:6e:00:e1:4e:3c:cd:c0:06:69:d5:29:a6:56:
2b:5b:39:84:04:ca:a5:ae:35:59:56:b9:98:6c:18:
ce:b0:a4:87:9e:a9:f5:18:df:dc:b5:cb:b4:f8:30:
42:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E3:4B:4F:80:D9:E3:F7:00:BC:AC:4C:52:C5:AB:23:EB:5B:7E:DF:BB
X509v3 Authority Key Identifier:
keyid:74:01:65:A8:0D:10:71:97:0A:BC:09:C0:2B:71:C1:AC:7C:1D:6E:0E
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
CA Repository - URI:rsync://rpki.apnic.net/member_repository/A918E4B7/96E6675A784E11EEB19AD34DC4F9AE02/
RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A918E4B7/96E6675A784E11EEB19AD34DC4F9AE02/40tPgNnj9wC8rExSxasj61t-37s.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.130.164.0/22
45.151.152.0/22
74.113.232.0/22
Signature Algorithm: sha256WithRSAEncryption
4b:a6:72:94:50:2e:6d:19:1c:e1:0c:fe:77:88:ca:53:f2:33:
24:5f:b6:5b:0b:31:f3:75:ee:81:bc:aa:c3:1f:74:69:d6:bc:
c2:2d:4c:b4:0f:d2:17:4e:8d:da:07:3e:0f:c1:30:6d:1a:bf:
9a:0e:8a:f0:a2:1d:8a:79:ee:c5:be:2e:a0:5e:3b:e8:e2:97:
7f:1e:63:92:f5:a2:09:e0:f7:88:24:1f:d3:fd:3f:9f:4c:5f:
c8:cf:e0:d7:14:c5:80:00:8e:52:de:71:54:a6:1b:6f:28:18:
01:9d:fe:46:f9:49:2c:33:84:25:a8:94:a6:71:5b:84:60:e2:
f1:b4:ad:04:a2:18:fc:2a:39:f6:9c:48:67:3d:12:ed:f9:a9:
14:0c:8c:c1:b7:b1:fd:a2:a8:69:f8:a2:44:14:67:9c:dd:8a:
b5:9a:f5:04:7e:dc:da:41:59:dd:64:92:94:c7:58:78:fd:03:
81:5d:5b:18:14:71:f2:4c:d8:69:11:99:b6:91:5a:bb:39:8f:
61:04:46:b2:93:6d:d1:91:bb:ca:e5:d5:5f:ba:8c:4e:f4:84:
d8:af:96:41:38:7a:ff:d6:6a:1b:f0:35:02:d3:f3:da:5f:bf:
de:b7:42:f3:94:ae:80:28:a9:57:b5:54:60:51:cc:39:c3:ba:
08:0e:a6:79
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 13 09:59:45 2026 by rpki-client