Certificate
$ rpki-client -vvf rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/IKFf0591NMenolMf7YtaFwipP1I.cer
File: IKFf0591NMenolMf7YtaFwipP1I.cer (raw, json)
Hash identifier: juabItTxFIKoUZTwHZVbW2ZPas837hknE8yB19PvY0U=
Subject key identifier: 20:A1:5F:D3:9F:75:34:C7:A7:A2:53:1F:ED:8B:5A:17:08:A9:3F:52
Authority key identifier: 0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
Certificate issuer: /CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Certificate serial: 02B53A
Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
Manifest: rsync://rpki.apnic.net/member_repository/A9191BBE/B7B98FAC529911F18991193D90833773/IKFf0591NMenolMf7YtaFwipP1I.mft
caRepository: rsync://rpki.apnic.net/member_repository/A9191BBE/B7B98FAC529911F18991193D90833773/
Notify URL: https://rrdp.apnic.net/notification.xml
Certificate not before: Mon 18 May 2026 09:12:43 +0000
Certificate not after: Tue 01 Dec 2026 00:00:00 +0000
Subordinate resources: AS: 55925
AS: 136147
IP: 103.105.73.0/24
IP: 202.94.73.0/24
IP: 2001:df1:6400::/48
Validation: OK
Signature path: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 28 May 2026 04:46:32 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 177466 (0x2b53a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A90DC5BE, serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Validity
Not Before: May 18 09:12:43 2026 GMT
Not After : Dec 1 00:00:00 2026 GMT
Subject: CN=A9191BBE, serialNumber=20A15FD39F7534C7A7A2531FED8B5A1708A93F52
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:a4:36:24:29:ea:c5:ee:a0:a5:be:07:a4:cb:
11:e4:3e:29:a2:9b:22:a5:91:bf:5d:d6:2f:6e:46:
60:35:92:8d:05:e5:60:af:53:91:b1:11:e2:f1:d2:
47:5b:39:92:c3:20:69:9f:42:dc:e8:1f:b9:bf:2e:
27:19:30:7f:5b:c8:bb:98:1f:ad:54:6c:cf:02:cc:
dc:80:59:74:c6:17:f2:cb:6e:38:81:6c:62:a1:41:
e2:dd:5a:4f:81:17:48:a3:c0:a6:5a:d0:3b:0f:ac:
11:47:74:c8:05:b2:f1:0e:cd:e8:f2:bc:0e:56:de:
1e:7f:eb:4d:10:8f:86:3c:f5:ab:67:16:07:9e:09:
cf:72:ad:7e:49:84:4d:97:80:4d:8b:5a:3d:ee:08:
71:57:37:ca:6c:29:40:e2:5d:b6:d2:10:4c:50:d7:
7d:4f:44:54:cc:02:00:30:42:14:c1:a3:a8:63:8f:
4c:4c:82:97:42:54:e4:3d:62:d4:dc:67:5a:f2:bc:
c6:b7:6c:f4:a0:8d:62:94:68:f0:69:89:05:c7:90:
62:16:a5:bb:36:1e:72:1f:c0:64:58:24:67:87:f6:
c2:57:d4:7a:85:f8:d5:1c:3d:53:ba:1a:d5:2b:52:
d5:13:51:41:2a:b9:5a:44:9f:fc:0a:ef:9a:b6:d2:
65:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
20:A1:5F:D3:9F:75:34:C7:A7:A2:53:1F:ED:8B:5A:17:08:A9:3F:52
X509v3 Authority Key Identifier:
keyid:0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
CA Repository - URI:rsync://rpki.apnic.net/member_repository/A9191BBE/B7B98FAC529911F18991193D90833773/
RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A9191BBE/B7B98FAC529911F18991193D90833773/IKFf0591NMenolMf7YtaFwipP1I.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
55925
136147
sbgp-ipAddrBlock: critical
IPv4:
103.105.73.0/24
202.94.73.0/24
IPv6:
2001:df1:6400::/48
Signature Algorithm: sha256WithRSAEncryption
cf:79:2a:cb:88:34:38:b5:51:e1:74:63:fb:1e:bd:bb:3e:87:
0d:58:40:3b:c8:0d:24:58:18:3e:de:75:f7:05:5d:90:9b:c4:
20:f5:9b:2d:e7:09:97:32:ba:59:b9:6c:ae:aa:99:3a:20:9b:
16:98:28:19:3a:2d:bc:2d:f2:b4:54:0c:fa:51:e4:2b:5f:8b:
fd:5a:61:ad:88:75:f4:4b:45:33:b6:86:f6:3a:16:cd:11:46:
f8:75:7c:42:60:37:98:ad:ac:fd:00:cf:5b:61:05:ab:df:d7:
99:ad:85:7f:71:13:f6:1a:f2:58:a2:84:31:5d:84:e3:db:1d:
ab:ac:16:14:8e:92:8f:98:cd:2c:bf:51:5d:3e:aa:1c:eb:06:
95:32:58:41:d9:cb:8d:c7:c7:ee:ff:e5:1d:d4:ee:22:5b:53:
bf:81:3d:60:92:52:db:b9:fb:e4:9d:94:19:ab:31:6b:3c:5a:
6f:a0:2f:c6:7e:48:39:32:82:78:d3:e8:db:bd:6b:e7:91:cb:
7b:de:58:f5:ce:43:a7:d2:d7:ef:55:53:5f:ff:4d:48:a9:ec:
39:c9:39:ef:4f:be:64:fd:66:38:e7:e6:2b:d7:e9:57:77:30:
7d:24:9d:20:af:73:ce:ab:25:43:31:b2:a6:45:ed:e1:c3:f9:
34:11:1b:dc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 21 08:40:47 2026 by rpki-client