$ rpki-client -vvvf rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/EWbdVcFafHjcx9-JZmDZHgxN8-I.cer File: EWbdVcFafHjcx9-JZmDZHgxN8-I.cer (raw, json) Hash identifier: +FbNA0vpPbnK85nObNrjzspsYYBsnWI2KWsUjF23TVI= Subject key identifier: 11:66:DD:55:C1:5A:7C:78:DC:C7:DF:89:66:60:D9:1E:0C:4D:F3:E2 Authority key identifier: 0C:FC:E7:78:57:FC:F0:1F:39:D9:9A:62:B4:AA:62:E6:15:9E:76:F8 Certificate issuer: /CN=A90DC5BE/serialNumber=0CFCE77857FCF01F39D99A62B4AA62E6159E76F8 Certificate serial: 5686 Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DPzneFf88B852ZpitKpi5hWedvg.cer CRL Distribution Point: rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.crl Manifest: rsync://rpki.apnic.net/member_repository/A914878C/A93F054CDFFC11F1953416B20766CEF9/EWbdVcFafHjcx9-JZmDZHgxN8-I.mft caRepository: rsync://rpki.apnic.net/member_repository/A914878C/A93F054CDFFC11F1953416B20766CEF9/ Notify URL: https://rrdp.apnic.net/notification.xml Certificate not before: Sat 14 Nov 2026 07:26:12 +0000 Certificate not after: Wed 01 Mar 2028 00:00:00 +0000 Subordinate resources: IP: 141.229.20.0/23 Validation: OK Signature path: rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.crl rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DPzneFf88B852ZpitKpi5hWedvg.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 21 Nov 2026 14:50:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 22150 (0x5686) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A90DC5BE, serialNumber=0CFCE77857FCF01F39D99A62B4AA62E6159E76F8 Validity Not Before: Nov 14 07:26:12 2026 GMT Not After : Mar 1 00:00:00 2028 GMT Subject: CN=A914878C, serialNumber=1166DD55C15A7C78DCC7DF896660D91E0C4DF3E2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9b:3d:8c:62:98:57:c4:41:4b:ee:f7:74:d3:24: 5b:b1:a2:3a:ce:e2:b8:15:7e:d7:37:86:e5:02:a9: 3e:1c:3d:45:95:aa:d1:75:40:65:d6:7a:0b:79:52: cf:85:30:8d:a3:0e:37:77:e3:bb:21:0e:53:64:a5: c4:92:59:4b:f9:9d:ae:24:fa:32:8b:92:73:89:0f: 60:56:46:d4:59:0e:31:94:a8:18:83:52:5e:c8:31: ba:9a:e5:b3:d7:6d:6c:be:80:5a:85:9b:c4:e5:ae: cb:0f:9f:b9:0e:dd:85:b5:36:7d:dd:16:72:75:9a: ba:05:71:5d:60:e8:da:4d:a6:bc:cf:bb:1f:bd:04: 85:b9:2d:1e:53:94:73:24:d3:de:8c:cf:c9:33:26: 4c:77:62:e9:fb:ab:25:db:0e:88:19:6d:12:93:4f: 4b:d9:c4:37:76:59:8f:f1:71:e1:89:20:ad:c6:6c: 60:eb:90:ba:80:05:02:74:6d:e8:c3:22:51:4b:c5: 97:73:f3:91:0f:a5:6b:fb:65:6a:ca:28:9a:c9:75: 98:fc:4f:b7:b7:d2:bd:b9:d6:e6:c4:fa:49:43:35: e9:f3:0f:4f:9d:6a:46:c8:d9:f6:ef:3b:62:8a:21: c5:ed:66:61:e1:71:17:e5:94:33:fc:4e:87:99:01: 27:4b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 11:66:DD:55:C1:5A:7C:78:DC:C7:DF:89:66:60:D9:1E:0C:4D:F3:E2 X509v3 Authority Key Identifier: keyid:0C:FC:E7:78:57:FC:F0:1F:39:D9:9A:62:B4:AA:62:E6:15:9E:76:F8 X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DPzneFf88B852ZpitKpi5hWedvg.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: CA Repository - URI:rsync://rpki.apnic.net/member_repository/A914878C/A93F054CDFFC11F1953416B20766CEF9/ RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A914878C/A93F054CDFFC11F1953416B20766CEF9/EWbdVcFafHjcx9-JZmDZHgxN8-I.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 141.229.20.0/23 Signature Algorithm: sha256WithRSAEncryption b3:85:07:10:be:84:99:9b:b8:ac:71:09:e4:ab:f0:9f:25:ab: 65:36:e5:90:9e:8e:99:66:e7:96:c5:5d:80:d7:09:3a:74:b7: b7:ed:7d:b4:8f:2f:77:29:a1:e8:96:98:d4:17:d4:8f:47:26: 05:07:94:19:4f:00:4f:38:76:79:77:6a:48:b7:c0:2a:d7:a2: 3a:f6:52:22:b3:b0:00:d9:c3:4e:0e:db:02:e0:86:40:88:14: bb:f2:cb:a1:a8:13:15:2a:23:a2:3f:44:1f:b1:0f:e7:63:00: 7b:75:e4:5b:8a:55:57:0c:3b:71:a9:a7:4d:10:03:69:1f:10: 73:a2:7e:f9:55:37:52:dd:4b:8d:ab:d3:5d:fb:3d:7f:76:16: 93:45:bd:72:8e:8e:12:99:28:54:13:0f:41:aa:04:35:3d:da: 65:1e:f8:4c:64:87:93:c8:51:ea:14:61:1a:cc:7f:6b:1b:cb: e2:00:17:20:79:1e:f2:27:b1:73:a0:23:39:27:94:23:a0:a6: 29:20:98:47:cd:4d:23:f0:a3:79:b2:2b:03:da:ae:c8:6f:7b: 76:76:93:b6:ce:9b:b5:98:23:92:89:63:0b:0a:86:f7:22:9d: ed:78:05:da:89:bb:b7:df:da:3b:40:7a:ec:ed:e6:2c:46:ef: 90:92:7a:e0 -----BEGIN CERTIFICATE----- MIIF/TCCBOWgAwIBAgICVoYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkw REM1QkUxMTAvBgNVBAUTKDBDRkNFNzc4NTdGQ0YwMUYzOUQ5OUE2MkI0QUE2MkU2 MTU5RTc2RjgwHhcNMjYxMTE0MDcyNjEyWhcNMjgwMzAxMDAwMDAwWjBGMREwDwYD VQQDEwhBOTE0ODc4QzExMC8GA1UEBRMoMTE2NkRENTVDMTVBN0M3OERDQzdERjg5 NjY2MEQ5MUUwQzRERjNFMjCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEB AJs9jGKYV8RBS+73dNMkW7GiOs7iuBV+1zeG5QKpPhw9RZWq0XVAZdZ6C3lSz4Uw jaMON3fjuyEOU2SlxJJZS/mdriT6MouSc4kPYFZG1FkOMZSoGINSXsgxuprls9dt bL6AWoWbxOWuyw+fuQ7dhbU2fd0WcnWaugVxXWDo2k2mvM+7H70EhbktHlOUcyTT 3ozPyTMmTHdi6furJdsOiBltEpNPS9nEN3ZZj/Fx4YkgrcZsYOuQuoAFAnRt6MMi UUvFl3PzkQ+la/tlasoomsl1mPxPt7fSvbnW5sT6SUM16fMPT51qRsjZ9u87Yooh xe1mYeFxF+WUM/xOh5kBJ0sCAwEAAaOCAvMwggLvMB0GA1UdDgQWBBQRZt1VwVp8 eNzH34lmYNkeDE3z4jAfBgNVHSMEGDAWgBQM/Od4V/zwHznZmmK0qmLmFZ52+DAO BgNVHQ8BAf8EBAMCAQYwDwYDVR0TAQH/BAUwAwEB/zBzBgNVHR8EbDBqMGigZqBk hmJyc3luYzovL3Jwa2kuYXBuaWMubmV0L3JlcG9zaXRvcnkvQjMyMkE1RjQxRDY2 MTFFMkEzRjI3RjdDNzJGRDFGRjIvRFB6bmVGZjg4Qjg1MlpwaXRLcGk1aFdlZHZn LmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5h cG5pYy5uZXQvcmVwb3NpdG9yeS85ODA2NTJFMEI3N0UxMUU3QTk2QTM5NTIxQTRG NEZCNC9EUHpuZUZmODhCODUyWnBpdEtwaTVoV2VkdmcuY2VyMEoGA1UdIAEB/wRA MD4wPAYIKwYBBQUHDgIwMDAuBggrBgEFBQcCARYiaHR0cHM6Ly93d3cuYXBuaWMu bmV0L1JQS0kvQ1BTLnBkZjCCASgGCCsGAQUFBwELBIIBGjCCARYwXwYIKwYBBQUH MAWGU3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx NDg3OEMvQTkzRjA1NENERkZDMTFGMTk1MzQxNkIyMDc2NkNFRjkvMH4GCCsGAQUF BzAKhnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5 MTQ4NzhDL0E5M0YwNTRDREZGQzExRjE5NTM0MTZCMjA3NjZDRUY5L0VXYmRWY0Zh ZkhqY3g5LUpabURaSGd4TjgtSS5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJk cC5hcG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAfBggrBgEFBQcBBwEB/wQQMA4w DAQCAAEwBgMEAY3lFDANBgkqhkiG9w0BAQsFAAOCAQEAs4UHEL6EmZu4rHEJ5Kvw nyWrZTblkJ6OmWbnlsVdgNcJOnS3t+19tI8vdymh6JaY1BfUj0cmBQeUGU8ATzh2 eXdqSLfAKteiOvZSIrOwANnDTg7bAuCGQIgUu/LLoagTFSojoj9EH7EP52MAe3Xk W4pVVww7camnTRADaR8Qc6J++VU3Ut1LjavTXfs9f3YWk0W9co6OEpkoVBMPQaoE NT3aZR74TGSHk8hR6hRhGsx/axvL4gAXIHke8iexc6AjOSeUI6CmKSCYR81NI/Cj ebIrA9quyG97dnaTts6btZgjkoljCwqG9yKd7XgF2om7t9/aO0B67O3mLEbvkJJ6 4A== -----END CERTIFICATE-----Generated at Sat Nov 14 22:23:54 2026 by rpki-client