
Certificate
$ rpki-client -vvvf rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/IKFf0591NMenolMf7YtaFwipP1I.cer
File: IKFf0591NMenolMf7YtaFwipP1I.cer (raw, json)
Hash identifier: NTBhfaAv4/Ba5KbXSmopRP5lmzAweiDrhFV+E29xfcU=
Subject key identifier: 20:A1:5F:D3:9F:75:34:C7:A7:A2:53:1F:ED:8B:5A:17:08:A9:3F:52
Authority key identifier: 0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
Certificate issuer: /CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Certificate serial: 02D0DA
Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
Manifest: rsync://rpki.apnic.net/member_repository/A9191BBE/B7B98FAC529911F18991193D90833773/IKFf0591NMenolMf7YtaFwipP1I.mft
caRepository: rsync://rpki.apnic.net/member_repository/A9191BBE/B7B98FAC529911F18991193D90833773/
Notify URL: https://rrdp.apnic.net/notification.xml
Certificate not before: Fri 28 Aug 2026 13:33:26 +0000
Certificate not after: Wed 01 Dec 2027 00:00:00 +0000
Subordinate resources: AS: 55925
AS: 136147
IP: 103.105.73.0/24
IP: 202.94.73.0/24
IP: 2001:df1:6400::/48
Validation: OK
Signature path: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 24 Sep 2026 23:01:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 184538 (0x2d0da)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A90DC5BE, serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Validity
Not Before: Aug 28 13:33:26 2026 GMT
Not After : Dec 1 00:00:00 2027 GMT
Subject: CN=A9191BBE, serialNumber=20A15FD39F7534C7A7A2531FED8B5A1708A93F52
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:a4:36:24:29:ea:c5:ee:a0:a5:be:07:a4:cb:
11:e4:3e:29:a2:9b:22:a5:91:bf:5d:d6:2f:6e:46:
60:35:92:8d:05:e5:60:af:53:91:b1:11:e2:f1:d2:
47:5b:39:92:c3:20:69:9f:42:dc:e8:1f:b9:bf:2e:
27:19:30:7f:5b:c8:bb:98:1f:ad:54:6c:cf:02:cc:
dc:80:59:74:c6:17:f2:cb:6e:38:81:6c:62:a1:41:
e2:dd:5a:4f:81:17:48:a3:c0:a6:5a:d0:3b:0f:ac:
11:47:74:c8:05:b2:f1:0e:cd:e8:f2:bc:0e:56:de:
1e:7f:eb:4d:10:8f:86:3c:f5:ab:67:16:07:9e:09:
cf:72:ad:7e:49:84:4d:97:80:4d:8b:5a:3d:ee:08:
71:57:37:ca:6c:29:40:e2:5d:b6:d2:10:4c:50:d7:
7d:4f:44:54:cc:02:00:30:42:14:c1:a3:a8:63:8f:
4c:4c:82:97:42:54:e4:3d:62:d4:dc:67:5a:f2:bc:
c6:b7:6c:f4:a0:8d:62:94:68:f0:69:89:05:c7:90:
62:16:a5:bb:36:1e:72:1f:c0:64:58:24:67:87:f6:
c2:57:d4:7a:85:f8:d5:1c:3d:53:ba:1a:d5:2b:52:
d5:13:51:41:2a:b9:5a:44:9f:fc:0a:ef:9a:b6:d2:
65:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
20:A1:5F:D3:9F:75:34:C7:A7:A2:53:1F:ED:8B:5A:17:08:A9:3F:52
X509v3 Authority Key Identifier:
keyid:0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
CA Repository - URI:rsync://rpki.apnic.net/member_repository/A9191BBE/B7B98FAC529911F18991193D90833773/
RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A9191BBE/B7B98FAC529911F18991193D90833773/IKFf0591NMenolMf7YtaFwipP1I.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
55925
136147
sbgp-ipAddrBlock: critical
IPv4:
103.105.73.0/24
202.94.73.0/24
IPv6:
2001:df1:6400::/48
Signature Algorithm: sha256WithRSAEncryption
00:b4:79:bc:7e:b0:00:44:e3:9c:fe:f7:e2:8f:b0:f6:99:19:
bc:0e:aa:c8:de:f7:26:c1:9e:03:75:80:5d:72:f4:c6:46:0a:
06:40:8e:e8:ba:42:7b:cd:d2:2a:09:76:e7:2c:23:f8:79:16:
83:d2:14:df:d1:2a:75:39:55:57:01:cf:39:e8:96:cb:58:89:
dd:77:83:fa:4d:e8:9d:8e:76:7e:6c:1e:6c:e0:52:56:2d:86:
ad:88:eb:c9:97:23:3a:16:f2:8b:0c:ea:e8:bc:94:32:e5:8e:
e1:77:9a:88:1c:96:5a:3e:ba:43:5e:8c:5e:19:9a:05:ee:8a:
b6:f8:30:3d:f7:0b:b1:28:a7:9b:23:23:ab:4a:23:4f:b6:b5:
ee:5b:ee:c8:b8:dd:3c:ed:46:fd:6a:25:2f:31:8b:1d:7e:6d:
b3:fa:3a:a1:0a:27:aa:0a:5a:42:5f:f1:55:ad:0f:87:51:32:
c9:8e:60:29:ae:26:67:3d:2e:50:3b:f3:56:64:88:d7:02:44:
f1:57:44:b0:97:95:82:70:fe:ac:b5:bd:13:21:13:05:fc:d9:
d3:a0:a4:dc:76:30:c4:89:34:40:e5:56:db:4c:9b:7d:2c:08:
db:55:18:bb:72:12:ed:5c:3a:4f:96:7b:b9:cc:9a:e0:ad:63:
f8:6c:ff:c2
-----BEGIN CERTIFICATE-----
MIIGNjCCBR6gAwIBAgIDAtDaMA0GCSqGSIb3DQEBCwUAMEYxETAPBgNVBAMTCEE5
MERDNUJFMTEwLwYDVQQFEygwRTY1QTRGNUZEMzZCNUJENjhFQjNDOTIzNDA4OTc4
QzkwN0FBNzlGMB4XDTI2MDgyODEzMzMyNloXDTI3MTIwMTAwMDAwMFowRjERMA8G
A1UEAxMIQTkxOTFCQkUxMTAvBgNVBAUTKDIwQTE1RkQzOUY3NTM0QzdBN0EyNTMx
RkVEOEI1QTE3MDhBOTNGNTIwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB
AQCrpDYkKerF7qClvgekyxHkPimimyKlkb9d1i9uRmA1ko0F5WCvU5GxEeLx0kdb
OZLDIGmfQtzoH7m/LicZMH9byLuYH61UbM8CzNyAWXTGF/LLbjiBbGKhQeLdWk+B
F0ijwKZa0DsPrBFHdMgFsvEOzejyvA5W3h5/600Qj4Y89atnFgeeCc9yrX5JhE2X
gE2LWj3uCHFXN8psKUDiXbbSEExQ131PRFTMAgAwQhTBo6hjj0xMgpdCVOQ9YtTc
Z1ryvMa3bPSgjWKUaPBpiQXHkGIWpbs2HnIfwGRYJGeH9sJX1HqF+NUcPVO6GtUr
UtUTUUEquVpEn/wK75q20mXlAgMBAAGjggMrMIIDJzAdBgNVHQ4EFgQUIKFf0591
NMenolMf7YtaFwipP1IwHwYDVR0jBBgwFoAUDmWk9f02tb1o6zySNAiXjJB6p58w
DgYDVR0PAQH/BAQDAgEGMA8GA1UdEwEB/wQFMAMBAf8wcwYDVR0fBGwwajBooGag
ZIZicnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2
NjExRTJCQjQ2OEY3QzcyRkQxRkYyL0RtV2s5ZjAydGIxbzZ6eVNOQWlYakpCNnA1
OC5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L3JlcG9zaXRvcnkvOTgwNjUyRTBCNzdFMTFFN0E5NkEzOTUyMUE0
RjRGQjQvRG1XazlmMDJ0YjFvNnp5U05BaVhqSkI2cDU4LmNlcjBKBgNVHSABAf8E
QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj
Lm5ldC9SUEtJL0NQUy5wZGYwggEoBggrBgEFBQcBCwSCARowggEWMF8GCCsGAQUF
BzAFhlNyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5
MTkxQkJFL0I3Qjk4RkFDNTI5OTExRjE4OTkxMTkzRDkwODMzNzczLzB+BggrBgEF
BQcwCoZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9B
OTE5MUJCRS9CN0I5OEZBQzUyOTkxMUYxODk5MTE5M0Q5MDgzMzc3My9JS0ZmMDU5
MU5NZW5vbE1mN1l0YUZ3aXBQMUkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3Jy
ZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQgBAf8EEDAO
oAwwCgIDANp1AgMCE9MwNgYIKwYBBQUHAQcBAf8EJzAlMBIEAgABMAwDBABnaUkD
BADKXkkwDwQCAAIwCQMHACABDfFkADANBgkqhkiG9w0BAQsFAAOCAQEAALR5vH6w
AETjnP734o+w9pkZvA6qyN73JsGeA3WAXXL0xkYKBkCO6LpCe83SKgl25ywj+HkW
g9IU39EqdTlVVwHPOeiWy1iJ3XeD+k3onY52fmwebOBSVi2GrYjryZcjOhbyiwzq
6LyUMuWO4XeaiByWWj66Q16MXhmaBe6KtvgwPfcLsSinmyMjq0ojT7a17lvuyLjd
PO1G/WolLzGLHX5ts/o6oQonqgpaQl/xVa0Ph1EyyY5gKa4mZz0uUDvzVmSI1wJE
8VdEsJeVgnD+rLW9EyETBfzZ06Ck3HYwxIk0QOVW20ybfSwI21UYu3IS7Vw6T5Z7
ucya4K1j+Gz/wg==
-----END CERTIFICATE-----
Generated at Sat Sep 19 08:43:15 2026 by rpki-client