$ rpki-client -vvvf rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/9_nYpDVdZzudTn8VXTp45eZg_qU.cer File: 9_nYpDVdZzudTn8VXTp45eZg_qU.cer (raw, json) Hash identifier: 30v51x5hiaT2qozUxvpY5E3di+KNE5teF2DMaqtpvRE= Subject key identifier: F7:F9:D8:A4:35:5D:67:3B:9D:4E:7F:15:5D:3A:78:E5:E6:60:FE:A5 Authority key identifier: 0C:FC:E7:78:57:FC:F0:1F:39:D9:9A:62:B4:AA:62:E6:15:9E:76:F8 Certificate issuer: /CN=A90DC5BE/serialNumber=0CFCE77857FCF01F39D99A62B4AA62E6159E76F8 Certificate serial: 5625 Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DPzneFf88B852ZpitKpi5hWedvg.cer CRL Distribution Point: rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.crl Manifest: rsync://rpki.apnic.net/member_repository/A9136DD6/D162E03A3D3A11ECBEF77C76C4F9AE02/9_nYpDVdZzudTn8VXTp45eZg_qU.mft caRepository: rsync://rpki.apnic.net/member_repository/A9136DD6/D162E03A3D3A11ECBEF77C76C4F9AE02/ Notify URL: https://rrdp.apnic.net/notification.xml Certificate not before: Thu 29 Oct 2026 12:41:31 +0000 Certificate not after: Mon 31 Jan 2028 00:00:00 +0000 Subordinate resources: IP: 178.160.128.0/18 Validation: OK Signature path: rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.crl rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DPzneFf88B852ZpitKpi5hWedvg.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 21 Nov 2026 14:50:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 22053 (0x5625) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A90DC5BE, serialNumber=0CFCE77857FCF01F39D99A62B4AA62E6159E76F8 Validity Not Before: Oct 29 12:41:31 2026 GMT Not After : Jan 31 00:00:00 2028 GMT Subject: CN=A9136DD6, serialNumber=F7F9D8A4355D673B9D4E7F155D3A78E5E660FEA5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:de:9b:0c:3e:9f:0a:35:71:1d:4a:e0:3e:9b:65: f6:8b:1b:51:01:5f:b5:48:67:4a:4d:84:0a:2c:4f: 1f:32:32:f5:21:54:59:94:f2:73:4c:be:12:1e:4f: d4:a1:65:dc:8c:28:56:50:a8:db:27:ff:e3:79:26: bb:72:43:62:28:a9:d7:8b:06:75:aa:57:4e:ac:92: 44:7a:cd:f3:65:d8:fa:04:c3:55:20:61:00:a7:da: c0:7c:d6:da:55:34:c3:ee:09:33:ba:65:1d:2f:95: 62:a5:cb:70:97:32:a6:9e:65:b6:bc:68:33:a6:49: 0a:7f:14:ba:e2:6d:06:39:be:c2:47:8f:ff:c0:77: d1:8b:24:b4:97:72:58:db:44:d3:00:05:a6:7c:96: 9d:2b:e0:cd:67:f5:31:aa:2e:e9:ce:43:02:fb:37: d6:f0:5c:67:07:21:11:ce:9d:e6:55:0b:4d:39:9d: 09:82:7c:0b:7b:f5:e9:04:eb:30:e1:a5:62:d9:97: 2e:bc:0a:a5:69:cb:24:68:0d:fb:ae:8e:70:a3:4c: 53:9d:a1:7e:4c:74:db:7e:41:dd:67:a3:ff:6a:a8: 59:c8:47:30:d0:23:01:74:3a:32:ed:f7:d0:cf:41: e9:ab:1f:eb:b9:5d:45:4e:a7:2c:f3:0a:1f:df:8c: 6a:39 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F7:F9:D8:A4:35:5D:67:3B:9D:4E:7F:15:5D:3A:78:E5:E6:60:FE:A5 X509v3 Authority Key Identifier: keyid:0C:FC:E7:78:57:FC:F0:1F:39:D9:9A:62:B4:AA:62:E6:15:9E:76:F8 X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DPzneFf88B852ZpitKpi5hWedvg.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: CA Repository - URI:rsync://rpki.apnic.net/member_repository/A9136DD6/D162E03A3D3A11ECBEF77C76C4F9AE02/ RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A9136DD6/D162E03A3D3A11ECBEF77C76C4F9AE02/9_nYpDVdZzudTn8VXTp45eZg_qU.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 178.160.128.0/18 Signature Algorithm: sha256WithRSAEncryption 0b:18:85:21:83:24:61:0a:de:01:30:73:26:96:38:59:69:09: f2:b6:0e:dc:d0:42:ef:fb:21:c9:3d:cd:c2:85:04:7b:27:79: 1e:8f:6c:0c:c6:d8:5e:07:82:02:62:c9:3a:ee:9c:e1:24:10: 11:5c:21:13:4f:0d:c7:0f:76:87:5d:39:57:00:40:dd:0e:21: 6f:9c:2f:f0:64:89:6a:a5:d0:ee:9d:1c:fb:74:bd:d1:86:2c: ca:a0:67:d6:54:ab:15:8e:0d:6f:4c:a2:86:4f:6e:db:4a:f1: d5:aa:64:09:95:f3:f7:f1:5e:d9:a1:2d:f4:c7:6c:02:66:9b: 13:76:df:06:af:a1:44:33:25:1f:e4:51:f7:95:6e:9e:80:82: 6b:4a:dd:74:85:06:c7:19:8b:90:46:c7:95:61:32:f6:b8:ab: 51:a3:f5:04:75:5a:a0:59:cf:2a:a0:0b:dc:dd:79:f8:ff:2f: 3e:72:d3:83:16:6a:a4:36:85:69:b9:b3:01:71:0a:c1:3e:df: d4:b6:8b:36:57:87:db:f2:86:00:fa:49:f6:46:5d:aa:1a:10: 1e:61:e8:51:1e:d8:a1:3d:91:c0:c3:09:ac:77:c2:19:ed:44: 25:f8:ce:4b:e1:8a:1e:ee:c2:07:df:76:a9:45:e5:79:20:87: 7b:f8:73:83 -----BEGIN CERTIFICATE----- MIIF/TCCBOWgAwIBAgICViUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkw REM1QkUxMTAvBgNVBAUTKDBDRkNFNzc4NTdGQ0YwMUYzOUQ5OUE2MkI0QUE2MkU2 MTU5RTc2RjgwHhcNMjYxMDI5MTI0MTMxWhcNMjgwMTMxMDAwMDAwWjBGMREwDwYD VQQDEwhBOTEzNkRENjExMC8GA1UEBRMoRjdGOUQ4QTQzNTVENjczQjlENEU3RjE1 NUQzQTc4RTVFNjYwRkVBNTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEB AN6bDD6fCjVxHUrgPptl9osbUQFftUhnSk2ECixPHzIy9SFUWZTyc0y+Eh5P1KFl 3IwoVlCo2yf/43kmu3JDYiip14sGdapXTqySRHrN82XY+gTDVSBhAKfawHzW2lU0 w+4JM7plHS+VYqXLcJcypp5ltrxoM6ZJCn8UuuJtBjm+wkeP/8B30YsktJdyWNtE 0wAFpnyWnSvgzWf1Maou6c5DAvs31vBcZwchEc6d5lULTTmdCYJ8C3v16QTrMOGl YtmXLrwKpWnLJGgN+66OcKNMU52hfkx0235B3Wej/2qoWchHMNAjAXQ6Mu330M9B 6asf67ldRU6nLPMKH9+MajkCAwEAAaOCAvMwggLvMB0GA1UdDgQWBBT3+dikNV1n O51OfxVdOnjl5mD+pTAfBgNVHSMEGDAWgBQM/Od4V/zwHznZmmK0qmLmFZ52+DAO BgNVHQ8BAf8EBAMCAQYwDwYDVR0TAQH/BAUwAwEB/zBzBgNVHR8EbDBqMGigZqBk hmJyc3luYzovL3Jwa2kuYXBuaWMubmV0L3JlcG9zaXRvcnkvQjMyMkE1RjQxRDY2 MTFFMkEzRjI3RjdDNzJGRDFGRjIvRFB6bmVGZjg4Qjg1MlpwaXRLcGk1aFdlZHZn LmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5h cG5pYy5uZXQvcmVwb3NpdG9yeS85ODA2NTJFMEI3N0UxMUU3QTk2QTM5NTIxQTRG NEZCNC9EUHpuZUZmODhCODUyWnBpdEtwaTVoV2VkdmcuY2VyMEoGA1UdIAEB/wRA MD4wPAYIKwYBBQUHDgIwMDAuBggrBgEFBQcCARYiaHR0cHM6Ly93d3cuYXBuaWMu bmV0L1JQS0kvQ1BTLnBkZjCCASgGCCsGAQUFBwELBIIBGjCCARYwXwYIKwYBBQUH MAWGU3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx MzZERDYvRDE2MkUwM0EzRDNBMTFFQ0JFRjc3Qzc2QzRGOUFFMDIvMH4GCCsGAQUF BzAKhnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5 MTM2REQ2L0QxNjJFMDNBM0QzQTExRUNCRUY3N0M3NkM0RjlBRTAyLzlfbllwRFZk Wnp1ZFRuOFZYVHA0NWVaZ19xVS5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJk cC5hcG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAfBggrBgEFBQcBBwEB/wQQMA4w DAQCAAEwBgMEBrKggDANBgkqhkiG9w0BAQsFAAOCAQEACxiFIYMkYQreATBzJpY4 WWkJ8rYO3NBC7/shyT3NwoUEeyd5Ho9sDMbYXgeCAmLJOu6c4SQQEVwhE08Nxw92 h105VwBA3Q4hb5wv8GSJaqXQ7p0c+3S90YYsyqBn1lSrFY4Nb0yihk9u20rx1apk CZXz9/Fe2aEt9MdsAmabE3bfBq+hRDMlH+RR95VunoCCa0rddIUGxxmLkEbHlWEy 9rirUaP1BHVaoFnPKqAL3N15+P8vPnLTgxZqpDaFabmzAXEKwT7f1LaLNleH2/KG APpJ9kZdqhoQHmHoUR7YoT2RwMMJrHfCGe1EJfjOS+GKHu7CB992qUXleSCHe/hz gw== -----END CERTIFICATE-----Generated at Sat Nov 14 21:45:44 2026 by rpki-client