$ rpki-client -vvvf rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/JSwA6X56eGlZOIzyBKTH5kVYDGg.cer File: JSwA6X56eGlZOIzyBKTH5kVYDGg.cer (raw, json) Hash identifier: IX8QkeSrx97k9ITCEhmHJJZU7XP/w9gtUtk2Td1AE9I= Subject key identifier: 25:2C:00:E9:7E:7A:78:69:59:38:8C:F2:04:A4:C7:E6:45:58:0C:68 Authority key identifier: 0C:FC:E7:78:57:FC:F0:1F:39:D9:9A:62:B4:AA:62:E6:15:9E:76:F8 Certificate issuer: /CN=A90DC5BE/serialNumber=0CFCE77857FCF01F39D99A62B4AA62E6159E76F8 Certificate serial: 5638 Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DPzneFf88B852ZpitKpi5hWedvg.cer CRL Distribution Point: rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.crl Manifest: rsync://rpki.apnic.net/member_repository/A919DA26/F5105E4CA2F711EFA2368F77C4F9AE02/JSwA6X56eGlZOIzyBKTH5kVYDGg.mft caRepository: rsync://rpki.apnic.net/member_repository/A919DA26/F5105E4CA2F711EFA2368F77C4F9AE02/ Notify URL: https://rrdp.apnic.net/notification.xml Certificate not before: Mon 02 Nov 2026 14:23:16 +0000 Certificate not after: Thu 30 Dec 2027 00:00:00 +0000 Subordinate resources: IP: 193.36.72.0/24 Validation: OK Signature path: rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.crl rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DPzneFf88B852ZpitKpi5hWedvg.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 21 Nov 2026 14:50:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 22072 (0x5638) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A90DC5BE, serialNumber=0CFCE77857FCF01F39D99A62B4AA62E6159E76F8 Validity Not Before: Nov 2 14:23:16 2026 GMT Not After : Dec 30 00:00:00 2027 GMT Subject: CN=A919DA26, serialNumber=252C00E97E7A786959388CF204A4C7E645580C68 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:c9:26:8b:ed:46:2b:f5:f0:76:e0:91:6e:89: 49:be:0d:2b:bb:c4:e4:e0:08:84:f1:18:60:de:de: 3b:d9:1f:9f:68:12:ab:bf:4f:19:2e:4d:a1:15:9d: 07:da:8e:e2:98:78:2a:0e:a9:9c:59:cc:95:e4:73: 96:ef:c6:d6:83:ca:e1:9d:31:88:8e:3b:37:e7:24: 89:6d:f0:f7:97:ce:b5:9f:23:14:ed:5b:18:84:35: 9e:49:a2:8c:51:4a:87:00:69:5e:9b:9a:e4:9e:e5: 49:29:d9:26:ce:07:b5:8f:4b:ba:a9:4e:c5:c0:29: 53:40:89:2a:35:58:59:53:ea:ba:c9:70:a9:f0:8f: 23:86:6e:0c:3a:a0:b2:59:33:80:73:79:eb:83:c5: 72:53:23:10:1f:47:b4:d8:45:8a:61:96:12:73:46: a8:82:cc:c1:21:73:a3:db:69:c9:c8:36:8a:d8:98: 43:c8:1d:41:6a:75:4d:ed:08:95:b1:1d:f1:93:c3: 02:33:f1:84:11:03:ee:af:7e:b5:c9:ee:60:c8:3b: c4:09:00:1b:d5:12:e5:3c:c3:f6:ca:99:c3:c9:9d: 9b:d3:af:be:b5:1b:6a:1b:0b:0e:37:51:60:cb:df: d3:d1:63:dc:b1:e7:09:a3:ee:25:3c:b7:ce:61:92: 0c:2f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 25:2C:00:E9:7E:7A:78:69:59:38:8C:F2:04:A4:C7:E6:45:58:0C:68 X509v3 Authority Key Identifier: keyid:0C:FC:E7:78:57:FC:F0:1F:39:D9:9A:62:B4:AA:62:E6:15:9E:76:F8 X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DPzneFf88B852ZpitKpi5hWedvg.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: CA Repository - URI:rsync://rpki.apnic.net/member_repository/A919DA26/F5105E4CA2F711EFA2368F77C4F9AE02/ RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A919DA26/F5105E4CA2F711EFA2368F77C4F9AE02/JSwA6X56eGlZOIzyBKTH5kVYDGg.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 193.36.72.0/24 Signature Algorithm: sha256WithRSAEncryption 23:57:56:83:05:ca:ad:35:5b:20:74:ed:18:1a:2a:ab:33:43: 09:06:b3:98:c9:3d:e3:a6:3d:a8:46:0f:de:c8:a7:73:88:f9: 1c:68:c9:47:9f:8f:33:81:92:e4:18:26:b7:b3:42:cc:ba:32: 7a:f3:3e:22:4f:97:ff:01:7c:5c:a9:bc:53:ad:ba:89:96:9c: d0:96:99:15:87:99:dc:5f:b7:c4:69:cd:42:5e:b2:f1:58:31: e2:8c:f7:fd:fb:b5:0f:58:1e:a1:13:78:60:b5:1f:37:de:15: 82:60:3a:99:b8:d2:a5:9a:36:a5:8a:0c:fd:3a:3c:51:fa:b8: a3:5f:75:d2:45:b6:a3:32:1a:e6:1b:90:21:26:05:cd:bb:8c: 3b:fd:80:9b:84:e0:ad:e4:72:4d:9c:50:70:90:81:b9:9d:f6: bb:74:24:da:f7:95:43:ce:80:0d:62:eb:26:2c:a4:47:58:27: e0:0e:20:c0:f3:e1:41:3e:0e:92:21:b8:de:62:51:16:ed:a3: 2f:42:d3:15:17:f1:8e:6f:9c:5b:24:ff:be:5b:51:09:60:e4: 4b:64:b1:91:bf:69:d3:95:a3:ef:86:7f:7a:f0:ab:cd:de:d5: 63:f6:26:1b:d1:34:1c:5b:10:91:a9:d9:78:11:ee:23:f9:77: 2e:f1:b5:9a -----BEGIN CERTIFICATE----- MIIF/TCCBOWgAwIBAgICVjgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkw REM1QkUxMTAvBgNVBAUTKDBDRkNFNzc4NTdGQ0YwMUYzOUQ5OUE2MkI0QUE2MkU2 MTU5RTc2RjgwHhcNMjYxMTAyMTQyMzE2WhcNMjcxMjMwMDAwMDAwWjBGMREwDwYD VQQDEwhBOTE5REEyNjExMC8GA1UEBRMoMjUyQzAwRTk3RTdBNzg2OTU5Mzg4Q0Yy MDRBNEM3RTY0NTU4MEM2ODCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEB AL7JJovtRiv18HbgkW6JSb4NK7vE5OAIhPEYYN7eO9kfn2gSq79PGS5NoRWdB9qO 4ph4Kg6pnFnMleRzlu/G1oPK4Z0xiI47N+ckiW3w95fOtZ8jFO1bGIQ1nkmijFFK hwBpXpua5J7lSSnZJs4HtY9LuqlOxcApU0CJKjVYWVPquslwqfCPI4ZuDDqgslkz gHN564PFclMjEB9HtNhFimGWEnNGqILMwSFzo9tpycg2itiYQ8gdQWp1Te0IlbEd 8ZPDAjPxhBED7q9+tcnuYMg7xAkAG9US5TzD9sqZw8mdm9OvvrUbahsLDjdRYMvf 09Fj3LHnCaPuJTy3zmGSDC8CAwEAAaOCAvMwggLvMB0GA1UdDgQWBBQlLADpfnp4 aVk4jPIEpMfmRVgMaDAfBgNVHSMEGDAWgBQM/Od4V/zwHznZmmK0qmLmFZ52+DAO BgNVHQ8BAf8EBAMCAQYwDwYDVR0TAQH/BAUwAwEB/zBzBgNVHR8EbDBqMGigZqBk hmJyc3luYzovL3Jwa2kuYXBuaWMubmV0L3JlcG9zaXRvcnkvQjMyMkE1RjQxRDY2 MTFFMkEzRjI3RjdDNzJGRDFGRjIvRFB6bmVGZjg4Qjg1MlpwaXRLcGk1aFdlZHZn LmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5h cG5pYy5uZXQvcmVwb3NpdG9yeS85ODA2NTJFMEI3N0UxMUU3QTk2QTM5NTIxQTRG NEZCNC9EUHpuZUZmODhCODUyWnBpdEtwaTVoV2VkdmcuY2VyMEoGA1UdIAEB/wRA MD4wPAYIKwYBBQUHDgIwMDAuBggrBgEFBQcCARYiaHR0cHM6Ly93d3cuYXBuaWMu bmV0L1JQS0kvQ1BTLnBkZjCCASgGCCsGAQUFBwELBIIBGjCCARYwXwYIKwYBBQUH MAWGU3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx OURBMjYvRjUxMDVFNENBMkY3MTFFRkEyMzY4Rjc3QzRGOUFFMDIvMH4GCCsGAQUF BzAKhnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5 MTlEQTI2L0Y1MTA1RTRDQTJGNzExRUZBMjM2OEY3N0M0RjlBRTAyL0pTd0E2WDU2 ZUdsWk9JenlCS1RINWtWWURHZy5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJk cC5hcG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAfBggrBgEFBQcBBwEB/wQQMA4w DAQCAAEwBgMEAMEkSDANBgkqhkiG9w0BAQsFAAOCAQEAI1dWgwXKrTVbIHTtGBoq qzNDCQazmMk946Y9qEYP3sinc4j5HGjJR5+PM4GS5Bgmt7NCzLoyevM+Ik+X/wF8 XKm8U626iZac0JaZFYeZ3F+3xGnNQl6y8Vgx4oz3/fu1D1geoRN4YLUfN94VgmA6 mbjSpZo2pYoM/To8Ufq4o1910kW2ozIa5huQISYFzbuMO/2Am4TgreRyTZxQcJCB uZ32u3Qk2veVQ86ADWLrJiykR1gn4A4gwPPhQT4OkiG43mJRFu2jL0LTFRfxjm+c WyT/vltRCWDkS2Sxkb9p05Wj74Z/evCrzd7VY/YmG9E0HFsQkanZeBHuI/l3LvG1 mg== -----END CERTIFICATE-----Generated at Sat Nov 14 22:35:44 2026 by rpki-client