$ rpki-client -vvvf rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/6pyGRqLT_LNzvKZeKJ1kSO6ozbw.cer File: 6pyGRqLT_LNzvKZeKJ1kSO6ozbw.cer (raw, json) Hash identifier: fEn4xZR6Gg2314UA4R09o5ttJM2ML5HbgXGol8UwcxQ= Subject key identifier: EA:9C:86:46:A2:D3:FC:B3:73:BC:A6:5E:28:9D:64:48:EE:A8:CD:BC Authority key identifier: 0C:FC:E7:78:57:FC:F0:1F:39:D9:9A:62:B4:AA:62:E6:15:9E:76:F8 Certificate issuer: /CN=A90DC5BE/serialNumber=0CFCE77857FCF01F39D99A62B4AA62E6159E76F8 Certificate serial: 5647 Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DPzneFf88B852ZpitKpi5hWedvg.cer CRL Distribution Point: rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.crl Manifest: rsync://rpki.apnic.net/member_repository/A91452AC/248C36221A9F11EB9FD2D363C4F9AE02/6pyGRqLT_LNzvKZeKJ1kSO6ozbw.mft caRepository: rsync://rpki.apnic.net/member_repository/A91452AC/248C36221A9F11EB9FD2D363C4F9AE02/ Notify URL: https://rrdp.apnic.net/notification.xml Certificate not before: Thu 05 Nov 2026 12:46:55 +0000 Certificate not after: Mon 31 Jan 2028 00:00:00 +0000 Subordinate resources: IP: 217.194.140.0/22 Validation: OK Signature path: rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.crl rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DPzneFf88B852ZpitKpi5hWedvg.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 21 Nov 2026 14:50:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 22087 (0x5647) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A90DC5BE, serialNumber=0CFCE77857FCF01F39D99A62B4AA62E6159E76F8 Validity Not Before: Nov 5 12:46:55 2026 GMT Not After : Jan 31 00:00:00 2028 GMT Subject: CN=A91452AC, serialNumber=EA9C8646A2D3FCB373BCA65E289D6448EEA8CDBC Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e6:04:3e:ff:56:a4:9c:bd:2e:7f:98:81:77:ce: 93:9c:38:5d:3c:9f:bb:9f:0a:ff:ca:04:66:a7:aa: 01:04:92:a0:be:90:4e:63:70:0a:fa:d2:7a:b7:d0: 68:cd:a6:70:80:41:57:b8:88:af:bd:57:7e:8c:40: ec:28:b4:2b:c5:4c:88:8f:37:d9:5c:20:d6:46:e8: b7:9d:27:1c:1d:6b:84:ed:49:6a:65:7d:84:91:22: 51:33:6a:94:31:13:b3:2e:f2:de:ec:e8:13:c1:e5: 91:d2:e3:84:12:7a:b3:39:fe:57:c4:81:75:c5:c0: 36:25:4e:0d:c6:dc:9f:f6:80:b2:71:fc:f7:7e:3b: 39:55:73:0e:68:3a:63:39:09:61:64:da:24:1d:b5: 54:ba:97:ad:be:47:61:1a:cd:ee:2f:b2:58:2f:f6: d2:18:a2:b8:23:c4:6f:d7:b3:04:64:e2:0c:99:0e: 50:b0:ea:91:ae:ca:e2:07:d6:4f:e2:02:2b:2a:85: ea:3d:91:fd:7b:69:b7:22:42:b8:8a:89:74:04:9a: 18:8b:cd:93:47:df:d0:2b:ab:e7:23:26:78:eb:29: 0a:81:0b:82:15:66:83:c7:74:b4:84:1a:68:12:b2: 8e:01:bb:53:4f:2c:5d:e5:10:b1:12:86:71:bb:70: 52:79 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EA:9C:86:46:A2:D3:FC:B3:73:BC:A6:5E:28:9D:64:48:EE:A8:CD:BC X509v3 Authority Key Identifier: keyid:0C:FC:E7:78:57:FC:F0:1F:39:D9:9A:62:B4:AA:62:E6:15:9E:76:F8 X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DPzneFf88B852ZpitKpi5hWedvg.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: CA Repository - URI:rsync://rpki.apnic.net/member_repository/A91452AC/248C36221A9F11EB9FD2D363C4F9AE02/ RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A91452AC/248C36221A9F11EB9FD2D363C4F9AE02/6pyGRqLT_LNzvKZeKJ1kSO6ozbw.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 217.194.140.0/22 Signature Algorithm: sha256WithRSAEncryption 96:8d:a8:ec:57:8f:42:10:2a:d4:ac:1d:9f:d2:c8:a4:2b:73: 84:52:3c:91:d6:5d:d0:5b:15:d0:10:2e:a6:37:7d:2c:f9:da: dc:49:c7:1a:81:10:6d:f8:68:f9:75:d0:7e:e7:d0:b7:5c:13: e5:3e:3a:40:56:84:ea:db:a6:ea:ce:2b:76:fd:31:e6:85:f0: 4a:e8:40:17:c6:9a:2b:62:a7:b5:b3:a6:02:b6:56:f0:55:64: f6:76:6d:54:6a:d1:19:b9:29:7c:23:8c:8e:08:5a:20:5b:f6: f6:9f:1e:98:07:0c:e7:43:7e:5b:79:95:04:b0:4e:f2:86:d5: 0f:e4:f6:6e:f6:67:ce:e1:8d:ac:39:17:60:5a:2b:8a:5c:eb: 18:86:af:d3:77:85:2a:5a:e7:9c:0b:1f:27:af:f9:4c:da:8f: d4:fa:77:de:ca:db:b9:68:f9:3d:e3:03:25:4d:42:02:d7:fb: a5:98:90:90:94:9e:12:f4:fa:11:37:e5:ff:6c:f0:29:60:bb: 06:87:63:85:a7:fc:0c:c1:1f:db:51:36:4f:e4:61:98:e2:30: 3a:b6:3a:27:bd:e2:19:bd:81:60:32:f1:68:10:f4:63:26:4a: 60:85:4d:a2:57:93:79:44:42:ab:c0:4a:19:63:38:97:f0:cb: 67:15:43:38 -----BEGIN CERTIFICATE----- MIIF/TCCBOWgAwIBAgICVkcwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkw REM1QkUxMTAvBgNVBAUTKDBDRkNFNzc4NTdGQ0YwMUYzOUQ5OUE2MkI0QUE2MkU2 MTU5RTc2RjgwHhcNMjYxMTA1MTI0NjU1WhcNMjgwMTMxMDAwMDAwWjBGMREwDwYD VQQDEwhBOTE0NTJBQzExMC8GA1UEBRMoRUE5Qzg2NDZBMkQzRkNCMzczQkNBNjVF Mjg5RDY0NDhFRUE4Q0RCQzCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEB AOYEPv9WpJy9Ln+YgXfOk5w4XTyfu58K/8oEZqeqAQSSoL6QTmNwCvrSerfQaM2m cIBBV7iIr71XfoxA7Ci0K8VMiI832Vwg1kbot50nHB1rhO1JamV9hJEiUTNqlDET sy7y3uzoE8HlkdLjhBJ6szn+V8SBdcXANiVODcbcn/aAsnH89347OVVzDmg6YzkJ YWTaJB21VLqXrb5HYRrN7i+yWC/20hiiuCPEb9ezBGTiDJkOULDqka7K4gfWT+IC KyqF6j2R/XtptyJCuIqJdASaGIvNk0ff0Cur5yMmeOspCoELghVmg8d0tIQaaBKy jgG7U08sXeUQsRKGcbtwUnkCAwEAAaOCAvMwggLvMB0GA1UdDgQWBBTqnIZGotP8 s3O8pl4onWRI7qjNvDAfBgNVHSMEGDAWgBQM/Od4V/zwHznZmmK0qmLmFZ52+DAO BgNVHQ8BAf8EBAMCAQYwDwYDVR0TAQH/BAUwAwEB/zBzBgNVHR8EbDBqMGigZqBk hmJyc3luYzovL3Jwa2kuYXBuaWMubmV0L3JlcG9zaXRvcnkvQjMyMkE1RjQxRDY2 MTFFMkEzRjI3RjdDNzJGRDFGRjIvRFB6bmVGZjg4Qjg1MlpwaXRLcGk1aFdlZHZn LmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5h cG5pYy5uZXQvcmVwb3NpdG9yeS85ODA2NTJFMEI3N0UxMUU3QTk2QTM5NTIxQTRG NEZCNC9EUHpuZUZmODhCODUyWnBpdEtwaTVoV2VkdmcuY2VyMEoGA1UdIAEB/wRA MD4wPAYIKwYBBQUHDgIwMDAuBggrBgEFBQcCARYiaHR0cHM6Ly93d3cuYXBuaWMu bmV0L1JQS0kvQ1BTLnBkZjCCASgGCCsGAQUFBwELBIIBGjCCARYwXwYIKwYBBQUH MAWGU3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx NDUyQUMvMjQ4QzM2MjIxQTlGMTFFQjlGRDJEMzYzQzRGOUFFMDIvMH4GCCsGAQUF BzAKhnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5 MTQ1MkFDLzI0OEMzNjIyMUE5RjExRUI5RkQyRDM2M0M0RjlBRTAyLzZweUdScUxU X0xOenZLWmVLSjFrU082b3pidy5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJk cC5hcG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAfBggrBgEFBQcBBwEB/wQQMA4w DAQCAAEwBgMEAtnCjDANBgkqhkiG9w0BAQsFAAOCAQEAlo2o7FePQhAq1Kwdn9LI pCtzhFI8kdZd0FsV0BAupjd9LPna3EnHGoEQbfho+XXQfufQt1wT5T46QFaE6tum 6s4rdv0x5oXwSuhAF8aaK2KntbOmArZW8FVk9nZtVGrRGbkpfCOMjghaIFv29p8e mAcM50N+W3mVBLBO8obVD+T2bvZnzuGNrDkXYForilzrGIav03eFKlrnnAsfJ6/5 TNqP1Pp33srbuWj5PeMDJU1CAtf7pZiQkJSeEvT6ETfl/2zwKWC7Bodjhaf8DMEf 21E2T+RhmOIwOrY6J73iGb2BYDLxaBD0YyZKYIVNoleTeURCq8BKGWM4l/DLZxVD OA== -----END CERTIFICATE-----Generated at Sat Nov 14 22:34:05 2026 by rpki-client