Certificate
$ rpki-client -vvf rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/IjvkLOOp2KZWIHnlEHR8D_xFImM.cer
File: IjvkLOOp2KZWIHnlEHR8D_xFImM.cer (raw, json)
Hash identifier: 00CrdrFjwQ7l+rXbQFR1UySj1WoJRQX7F0LUSBdYRXI=
Subject key identifier: 22:3B:E4:2C:E3:A9:D8:A6:56:20:79:E5:10:74:7C:0F:FC:45:22:63
Authority key identifier: 0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
Certificate issuer: /CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Certificate serial: 029A85
Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
Manifest: rsync://rpki.apnic.net/member_repository/A9156BBA/A2CA43DC0D2211F1B9B71E59083D8C67/IjvkLOOp2KZWIHnlEHR8D_xFImM.mft
caRepository: rsync://rpki.apnic.net/member_repository/A9156BBA/A2CA43DC0D2211F1B9B71E59083D8C67/
Notify URL: https://rrdp.apnic.net/notification.xml
Certificate not before: Fri 27 Feb 2026 03:48:55 +0000
Certificate not after: Sat 01 May 2027 00:00:00 +0000
Subordinate resources: AS: 154501
Validation: OK
Signature path: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 09 Mar 2026 01:47:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 170629 (0x29a85)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A90DC5BE, serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Validity
Not Before: Feb 27 03:48:55 2026 GMT
Not After : May 1 00:00:00 2027 GMT
Subject: CN=A9156BBA, serialNumber=223BE42CE3A9D8A6562079E510747C0FFC452263
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:2e:a5:4b:76:80:e6:64:4d:86:cc:9d:c2:31:
fe:86:78:41:fd:2a:fa:26:12:aa:f0:6c:c8:1b:30:
40:aa:e0:88:3b:03:3a:3f:a9:67:6d:d6:83:ca:91:
fe:02:a2:06:ba:2e:c5:be:f7:73:9b:9c:60:e9:55:
31:88:70:db:7d:f5:e8:f7:cc:73:ae:6a:13:98:bd:
31:f9:cd:da:92:c2:cc:0e:3f:ab:60:0f:6f:95:ae:
7e:8d:f6:4e:bf:b2:c1:6d:8d:5a:52:4c:a0:1c:1d:
ee:df:09:25:e2:56:bb:f7:05:c6:95:a9:10:d2:0e:
ff:bf:d2:fe:01:73:e2:64:56:6d:a0:19:09:55:62:
02:f4:2d:e7:77:1e:2c:fc:23:41:d1:8a:08:06:3f:
96:2d:f4:68:7c:5c:c6:c7:b7:0b:09:a4:c8:a6:ac:
62:44:aa:2e:d7:73:48:87:e4:48:55:c5:7e:17:70:
92:ae:9d:8b:2f:cd:ab:d1:05:a3:08:c2:86:f8:c8:
3d:64:27:71:55:bf:d3:43:de:42:56:47:74:ab:cb:
58:56:b2:80:af:0a:5f:15:12:ff:30:76:df:0a:10:
4e:10:24:c4:ee:c4:25:71:c4:79:fe:b9:60:4d:83:
c4:6b:21:ff:50:d5:36:58:78:e9:39:ad:95:27:2e:
00:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
22:3B:E4:2C:E3:A9:D8:A6:56:20:79:E5:10:74:7C:0F:FC:45:22:63
X509v3 Authority Key Identifier:
keyid:0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
CA Repository - URI:rsync://rpki.apnic.net/member_repository/A9156BBA/A2CA43DC0D2211F1B9B71E59083D8C67/
RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A9156BBA/A2CA43DC0D2211F1B9B71E59083D8C67/IjvkLOOp2KZWIHnlEHR8D_xFImM.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
154501
Signature Algorithm: sha256WithRSAEncryption
a2:66:ca:bb:d3:5a:16:ac:c6:b5:69:20:b8:de:99:e4:7b:15:
15:f7:d4:5a:9b:84:98:92:b4:2d:17:1f:95:e1:09:ee:0e:a0:
98:0f:c5:90:1d:9f:de:4d:f4:23:b6:7c:0a:94:c1:68:6b:cf:
69:ae:75:6a:1d:c1:06:9d:40:b3:96:68:e5:88:28:e3:14:f7:
25:3c:2a:50:1c:ed:a0:56:72:aa:8a:e1:89:0a:f5:b5:a4:48:
a6:9f:f7:c3:46:a6:9a:c1:2d:b9:a3:74:6b:9e:11:65:4d:18:
1d:6b:8b:94:d9:0f:62:c8:87:bc:72:1e:9b:8d:d4:9f:93:41:
39:8d:e6:b6:1d:b3:6f:5f:4d:99:25:7f:e0:bb:ae:80:01:8f:
33:53:50:cd:63:4a:f4:28:a9:b9:dd:3b:5a:56:ec:3c:b9:30:
d0:e8:a5:be:41:a6:70:9c:a3:b2:4a:b2:0a:c8:d0:6f:32:da:
00:c7:81:25:d3:22:4e:41:22:2b:a2:31:6f:61:94:84:b8:b5:
90:6c:7a:2c:a4:1a:af:7a:e4:dc:ba:56:7f:33:44:fa:40:ce:
b6:96:b7:1a:e0:4b:38:f5:2c:a8:88:a7:c1:c7:0f:d0:cb:c8:
32:04:ff:16:8a:5b:fe:98:fb:ee:1a:01:6e:74:3f:53:ca:fc:
7e:f5:a9:93
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 04:45:54 2026 by rpki-client