$ rpki-client -vvvf rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/D6tO-YKPSvJnwW2K1HEKjuybu64.cer File: D6tO-YKPSvJnwW2K1HEKjuybu64.cer (raw, json) Hash identifier: ZNWjVW1bpNLKcCROgaSU5u7rZkMXgB2wGnN0wELwihE= Subject key identifier: 0F:AB:4E:F9:82:8F:4A:F2:67:C1:6D:8A:D4:71:0A:8E:EC:9B:BB:AE Authority key identifier: 0C:FC:E7:78:57:FC:F0:1F:39:D9:9A:62:B4:AA:62:E6:15:9E:76:F8 Certificate issuer: /CN=A90DC5BE/serialNumber=0CFCE77857FCF01F39D99A62B4AA62E6159E76F8 Certificate serial: 564B Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DPzneFf88B852ZpitKpi5hWedvg.cer CRL Distribution Point: rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.crl Manifest: rsync://rpki.apnic.net/member_repository/A91BEBE9/94C9B878005D11EEBE7A9241C4F9AE02/D6tO-YKPSvJnwW2K1HEKjuybu64.mft caRepository: rsync://rpki.apnic.net/member_repository/A91BEBE9/94C9B878005D11EEBE7A9241C4F9AE02/ Notify URL: https://rrdp.apnic.net/notification.xml Certificate not before: Thu 05 Nov 2026 21:17:43 +0000 Certificate not after: Tue 31 Aug 2027 00:00:00 +0000 Subordinate resources: IP: 217.10.226.0/24 IP: 217.10.229.0 -- 217.10.233.255 Validation: OK Signature path: rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.crl rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DPzneFf88B852ZpitKpi5hWedvg.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 21 Nov 2026 14:50:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 22091 (0x564b) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A90DC5BE, serialNumber=0CFCE77857FCF01F39D99A62B4AA62E6159E76F8 Validity Not Before: Nov 5 21:17:43 2026 GMT Not After : Aug 31 00:00:00 2027 GMT Subject: CN=A91BEBE9, serialNumber=0FAB4EF9828F4AF267C16D8AD4710A8EEC9BBBAE Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:23:0c:00:dc:df:2f:fc:c2:94:29:3a:49:98: 73:f1:dd:1a:15:12:bd:65:8e:35:db:50:6e:67:3a: 2f:01:fd:99:6f:61:55:3e:7b:3f:82:8f:af:8f:20: 66:b9:52:de:52:c0:d6:e1:2e:3a:e1:57:81:7c:17: e7:64:fa:14:e0:91:0c:26:4e:5a:5c:27:38:11:5d: a8:99:bb:fa:3e:34:1c:34:a8:35:a7:f1:7f:e6:81: 22:e0:9b:69:64:e6:32:81:82:14:42:f2:c2:72:17: 04:d6:99:13:8c:84:a7:05:9d:d3:86:5c:04:18:77: 1c:a3:aa:7b:90:56:b2:47:66:e5:4b:4d:31:ac:d6: 3f:36:de:fd:31:ce:a6:86:1e:ef:c6:00:ed:06:d7: 23:34:b4:2d:19:41:74:7c:95:22:5f:7e:29:b5:0d: cb:b2:8c:76:8b:0c:e9:41:d1:2c:d0:38:8a:01:ba: 3d:18:71:a5:33:bd:ca:3b:b3:dc:d3:d3:cd:4f:18: e4:20:48:45:a8:84:93:6c:31:23:c1:58:9e:45:54: b2:19:28:a5:19:1b:13:25:cf:03:6d:de:50:39:a1: e7:86:9f:39:01:71:6c:5c:da:52:cf:54:13:58:22: be:39:c5:7d:40:2e:33:04:31:5d:b7:92:81:14:1c: 58:f7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0F:AB:4E:F9:82:8F:4A:F2:67:C1:6D:8A:D4:71:0A:8E:EC:9B:BB:AE X509v3 Authority Key Identifier: keyid:0C:FC:E7:78:57:FC:F0:1F:39:D9:9A:62:B4:AA:62:E6:15:9E:76:F8 X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DPzneFf88B852ZpitKpi5hWedvg.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: CA Repository - URI:rsync://rpki.apnic.net/member_repository/A91BEBE9/94C9B878005D11EEBE7A9241C4F9AE02/ RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A91BEBE9/94C9B878005D11EEBE7A9241C4F9AE02/D6tO-YKPSvJnwW2K1HEKjuybu64.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 217.10.226.0/24 217.10.229.0-217.10.233.255 Signature Algorithm: sha256WithRSAEncryption 01:e8:ea:07:bd:25:eb:03:aa:7f:b3:f2:de:d1:50:da:10:d1: 52:11:05:7b:2c:cf:e7:91:c2:f9:df:3f:88:8d:be:e3:98:b8: 54:78:4c:f6:7d:16:9e:62:d7:f1:95:e9:0b:18:d7:06:46:35: 98:4f:ed:2b:da:97:78:92:e2:e4:7c:86:90:2d:ba:6a:cf:94: dc:6f:16:6e:6b:3a:f8:35:9f:f5:79:98:ae:56:3e:bb:01:cf: de:1d:c8:f0:fb:e0:cd:77:4c:5c:eb:ff:b5:ff:11:86:f9:92: 9e:eb:11:5c:22:14:98:55:51:8b:9c:b3:64:11:db:75:01:10: 86:1f:e8:a4:fc:65:1e:82:56:03:03:06:a1:3d:23:b8:d8:f4: 4a:f4:41:30:44:d5:31:1a:62:ab:91:0d:ef:e1:b9:8f:3b:a3: f8:ea:7b:40:43:7f:10:18:50:59:1e:65:eb:f3:f7:d2:27:7c: c7:3a:13:25:a5:35:fc:ec:d7:f8:df:91:95:1c:4d:57:23:4b: 69:87:7a:de:74:63:97:97:35:9f:51:f3:9c:a9:ce:9e:f3:6d: 23:77:0d:4b:7e:a7:cd:c0:6a:fd:ea:37:5c:b5:76:bd:89:ec: c6:d6:bb:44:4b:f3:33:81:da:11:92:70:44:d4:24:35:45:a6: 51:3e:9c:3a -----BEGIN CERTIFICATE----- MIIGCzCCBPOgAwIBAgICVkswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkw REM1QkUxMTAvBgNVBAUTKDBDRkNFNzc4NTdGQ0YwMUYzOUQ5OUE2MkI0QUE2MkU2 MTU5RTc2RjgwHhcNMjYxMTA1MjExNzQzWhcNMjcwODMxMDAwMDAwWjBGMREwDwYD VQQDEwhBOTFCRUJFOTExMC8GA1UEBRMoMEZBQjRFRjk4MjhGNEFGMjY3QzE2RDhB RDQ3MTBBOEVFQzlCQkJBRTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEB AL0jDADc3y/8wpQpOkmYc/HdGhUSvWWONdtQbmc6LwH9mW9hVT57P4KPr48gZrlS 3lLA1uEuOuFXgXwX52T6FOCRDCZOWlwnOBFdqJm7+j40HDSoNafxf+aBIuCbaWTm MoGCFELywnIXBNaZE4yEpwWd04ZcBBh3HKOqe5BWskdm5UtNMazWPzbe/THOpoYe 78YA7QbXIzS0LRlBdHyVIl9+KbUNy7KMdosM6UHRLNA4igG6PRhxpTO9yjuz3NPT zU8Y5CBIRaiEk2wxI8FYnkVUshkopRkbEyXPA23eUDmh54afOQFxbFzaUs9UE1gi vjnFfUAuMwQxXbeSgRQcWPcCAwEAAaOCAwEwggL9MB0GA1UdDgQWBBQPq075go9K 8mfBbYrUcQqO7Ju7rjAfBgNVHSMEGDAWgBQM/Od4V/zwHznZmmK0qmLmFZ52+DAO BgNVHQ8BAf8EBAMCAQYwDwYDVR0TAQH/BAUwAwEB/zBzBgNVHR8EbDBqMGigZqBk hmJyc3luYzovL3Jwa2kuYXBuaWMubmV0L3JlcG9zaXRvcnkvQjMyMkE1RjQxRDY2 MTFFMkEzRjI3RjdDNzJGRDFGRjIvRFB6bmVGZjg4Qjg1MlpwaXRLcGk1aFdlZHZn LmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5h cG5pYy5uZXQvcmVwb3NpdG9yeS85ODA2NTJFMEI3N0UxMUU3QTk2QTM5NTIxQTRG NEZCNC9EUHpuZUZmODhCODUyWnBpdEtwaTVoV2VkdmcuY2VyMEoGA1UdIAEB/wRA MD4wPAYIKwYBBQUHDgIwMDAuBggrBgEFBQcCARYiaHR0cHM6Ly93d3cuYXBuaWMu bmV0L1JQS0kvQ1BTLnBkZjCCASgGCCsGAQUFBwELBIIBGjCCARYwXwYIKwYBBQUH MAWGU3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx QkVCRTkvOTRDOUI4NzgwMDVEMTFFRUJFN0E5MjQxQzRGOUFFMDIvMH4GCCsGAQUF BzAKhnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5 MUJFQkU5Lzk0QzlCODc4MDA1RDExRUVCRTdBOTI0MUM0RjlBRTAyL0Q2dE8tWUtQ U3ZKbndXMksxSEVLanV5YnU2NC5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJk cC5hcG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAtBggrBgEFBQcBBwEB/wQeMBww GgQCAAEwFAMEANkK4jAMAwQA2QrlAwQB2QroMA0GCSqGSIb3DQEBCwUAA4IBAQAB 6OoHvSXrA6p/s/Le0VDaENFSEQV7LM/nkcL53z+Ijb7jmLhUeEz2fRaeYtfxlekL GNcGRjWYT+0r2pd4kuLkfIaQLbpqz5TcbxZuazr4NZ/1eZiuVj67Ac/eHcjw++DN d0xc6/+1/xGG+ZKe6xFcIhSYVVGLnLNkEdt1ARCGH+ik/GUeglYDAwahPSO42PRK 9EEwRNUxGmKrkQ3v4bmPO6P46ntAQ38QGFBZHmXr8/fSJ3zHOhMlpTX87Nf435GV HE1XI0tph3redGOXlzWfUfOcqc6e820jdw1LfqfNwGr96jdctXa9iezG1rtES/Mz gdoRknBE1CQ1RaZRPpw6 -----END CERTIFICATE-----Generated at Sat Nov 14 22:36:51 2026 by rpki-client