$ rpki-client -vvvf rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/YmINYNuoUorqQhLM7bcpYTqZFVw.cer File: YmINYNuoUorqQhLM7bcpYTqZFVw.cer (raw, json) Hash identifier: Cbw+Q+yEIzDuAWVk38ajSpgPVdtN3bB/NCU+vM+FzLc= Subject key identifier: 62:62:0D:60:DB:A8:52:8A:EA:42:12:CC:ED:B7:29:61:3A:99:15:5C Authority key identifier: 0C:FC:E7:78:57:FC:F0:1F:39:D9:9A:62:B4:AA:62:E6:15:9E:76:F8 Certificate issuer: /CN=A90DC5BE/serialNumber=0CFCE77857FCF01F39D99A62B4AA62E6159E76F8 Certificate serial: 562A Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DPzneFf88B852ZpitKpi5hWedvg.cer CRL Distribution Point: rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.crl Manifest: rsync://rpki.apnic.net/member_repository/A912CDC5/BF1E7118BAC711EC8E6CA287C4F9AE02/YmINYNuoUorqQhLM7bcpYTqZFVw.mft caRepository: rsync://rpki.apnic.net/member_repository/A912CDC5/BF1E7118BAC711EC8E6CA287C4F9AE02/ Notify URL: https://rrdp.apnic.net/notification.xml Certificate not before: Fri 30 Oct 2026 12:37:59 +0000 Certificate not after: Thu 30 Dec 2027 00:00:00 +0000 Subordinate resources: IP: 194.127.104.0/23 Validation: OK Signature path: rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.crl rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DPzneFf88B852ZpitKpi5hWedvg.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 21 Nov 2026 14:50:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 22058 (0x562a) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A90DC5BE, serialNumber=0CFCE77857FCF01F39D99A62B4AA62E6159E76F8 Validity Not Before: Oct 30 12:37:59 2026 GMT Not After : Dec 30 00:00:00 2027 GMT Subject: CN=A912CDC5, serialNumber=62620D60DBA8528AEA4212CCEDB729613A99155C Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d5:23:cd:3d:50:09:1e:5f:29:a9:71:f5:19:8d: fb:37:52:f2:88:3b:19:30:5a:c4:b5:be:c2:85:b2: 25:6f:25:f9:5c:32:ea:8a:ab:ff:f3:9b:de:8a:93: 8f:98:78:c8:8c:67:39:a3:33:73:b1:6b:b1:6c:26: e8:7c:38:6c:37:f2:72:4d:da:af:c2:91:70:68:d5: 4a:2f:1b:ff:98:ae:e2:bb:50:79:0f:cd:44:d5:f7: d8:9c:7a:61:ea:ab:01:5a:49:d1:c7:88:3e:0f:74: 4b:02:c1:92:f4:3d:a5:f5:74:ba:b7:df:22:ed:9d: f8:db:6f:91:42:14:46:9e:4d:d3:39:0b:7d:f4:05: 8d:2d:2d:2c:56:e5:61:3f:34:17:bf:3b:83:06:f5: d7:85:9b:4f:95:03:18:90:07:e9:6c:66:f2:02:dd: 35:db:f7:f8:fa:18:d2:3e:81:98:9c:1a:23:c7:83: 84:df:d7:06:a0:b7:7e:53:3c:09:cd:d7:c1:64:6b: 67:8e:d1:06:31:56:68:f1:22:aa:4c:2e:76:4a:0d: 7d:42:23:89:40:58:e9:27:4e:a4:90:fc:66:e6:41: 2d:57:3a:e0:b9:64:c5:be:ab:2e:7c:38:c5:8f:13: 49:65:d4:5f:2d:c5:b7:d4:22:a6:0b:a9:a5:47:a2: c4:f1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 62:62:0D:60:DB:A8:52:8A:EA:42:12:CC:ED:B7:29:61:3A:99:15:5C X509v3 Authority Key Identifier: keyid:0C:FC:E7:78:57:FC:F0:1F:39:D9:9A:62:B4:AA:62:E6:15:9E:76:F8 X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DPzneFf88B852ZpitKpi5hWedvg.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: CA Repository - URI:rsync://rpki.apnic.net/member_repository/A912CDC5/BF1E7118BAC711EC8E6CA287C4F9AE02/ RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A912CDC5/BF1E7118BAC711EC8E6CA287C4F9AE02/YmINYNuoUorqQhLM7bcpYTqZFVw.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 194.127.104.0/23 Signature Algorithm: sha256WithRSAEncryption 8d:71:b5:bd:4e:a8:2a:66:df:2b:c5:39:36:b5:09:a7:f6:c2: 66:a9:13:16:f3:fd:cd:59:3b:c3:bb:1b:6f:8a:a0:51:f2:4a: 55:00:2c:28:d2:b9:21:84:87:42:d9:fb:df:f4:e1:0e:cb:69: 27:f3:61:22:0c:98:3f:a3:69:c3:a6:58:d3:bf:98:1b:51:a6: f5:3c:d6:f1:48:55:72:4a:19:43:b5:c6:a3:08:13:5e:51:ef: b6:00:ea:93:8c:2f:b4:b6:07:03:14:56:ac:ad:f2:d9:28:b2: 84:81:fb:87:13:88:22:18:6d:1f:cc:cf:38:18:84:58:dd:3e: 8a:34:c3:12:a3:c8:37:3a:27:af:ac:a4:57:8d:ce:5c:18:3a: f2:52:15:69:8b:a1:b1:30:1f:73:2e:6d:82:99:b6:10:26:c9: 83:5c:af:72:3e:66:cc:3c:93:eb:e2:93:b1:49:6f:11:87:bb: c9:d5:03:da:af:41:9b:81:00:83:6e:d0:96:2c:a0:71:7c:40: 93:f6:f7:5d:98:03:43:63:6f:4d:35:03:a3:a2:9a:b3:e2:a3: 41:a7:30:c6:72:fe:9b:cc:02:14:0f:f8:6e:1a:b5:83:9c:a2: d5:db:14:0b:e1:a4:f5:50:1b:31:b2:e0:57:ef:c8:d9:e8:d1: c5:d2:18:0f -----BEGIN CERTIFICATE----- MIIF/TCCBOWgAwIBAgICViowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkw REM1QkUxMTAvBgNVBAUTKDBDRkNFNzc4NTdGQ0YwMUYzOUQ5OUE2MkI0QUE2MkU2 MTU5RTc2RjgwHhcNMjYxMDMwMTIzNzU5WhcNMjcxMjMwMDAwMDAwWjBGMREwDwYD VQQDEwhBOTEyQ0RDNTExMC8GA1UEBRMoNjI2MjBENjBEQkE4NTI4QUVBNDIxMkND RURCNzI5NjEzQTk5MTU1QzCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEB ANUjzT1QCR5fKalx9RmN+zdS8og7GTBaxLW+woWyJW8l+Vwy6oqr//Ob3oqTj5h4 yIxnOaMzc7FrsWwm6Hw4bDfyck3ar8KRcGjVSi8b/5iu4rtQeQ/NRNX32Jx6Yeqr AVpJ0ceIPg90SwLBkvQ9pfV0urffIu2d+NtvkUIURp5N0zkLffQFjS0tLFblYT80 F787gwb114WbT5UDGJAH6Wxm8gLdNdv3+PoY0j6BmJwaI8eDhN/XBqC3flM8Cc3X wWRrZ47RBjFWaPEiqkwudkoNfUIjiUBY6SdOpJD8ZuZBLVc64Llkxb6rLnw4xY8T SWXUXy3Ft9QipguppUeixPECAwEAAaOCAvMwggLvMB0GA1UdDgQWBBRiYg1g26hS iupCEszttylhOpkVXDAfBgNVHSMEGDAWgBQM/Od4V/zwHznZmmK0qmLmFZ52+DAO BgNVHQ8BAf8EBAMCAQYwDwYDVR0TAQH/BAUwAwEB/zBzBgNVHR8EbDBqMGigZqBk hmJyc3luYzovL3Jwa2kuYXBuaWMubmV0L3JlcG9zaXRvcnkvQjMyMkE1RjQxRDY2 MTFFMkEzRjI3RjdDNzJGRDFGRjIvRFB6bmVGZjg4Qjg1MlpwaXRLcGk1aFdlZHZn LmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5h cG5pYy5uZXQvcmVwb3NpdG9yeS85ODA2NTJFMEI3N0UxMUU3QTk2QTM5NTIxQTRG NEZCNC9EUHpuZUZmODhCODUyWnBpdEtwaTVoV2VkdmcuY2VyMEoGA1UdIAEB/wRA MD4wPAYIKwYBBQUHDgIwMDAuBggrBgEFBQcCARYiaHR0cHM6Ly93d3cuYXBuaWMu bmV0L1JQS0kvQ1BTLnBkZjCCASgGCCsGAQUFBwELBIIBGjCCARYwXwYIKwYBBQUH MAWGU3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx MkNEQzUvQkYxRTcxMThCQUM3MTFFQzhFNkNBMjg3QzRGOUFFMDIvMH4GCCsGAQUF BzAKhnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5 MTJDREM1L0JGMUU3MTE4QkFDNzExRUM4RTZDQTI4N0M0RjlBRTAyL1ltSU5ZTnVv VW9ycVFoTE03YmNwWVRxWkZWdy5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJk cC5hcG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAfBggrBgEFBQcBBwEB/wQQMA4w DAQCAAEwBgMEAcJ/aDANBgkqhkiG9w0BAQsFAAOCAQEAjXG1vU6oKmbfK8U5NrUJ p/bCZqkTFvP9zVk7w7sbb4qgUfJKVQAsKNK5IYSHQtn73/ThDstpJ/NhIgyYP6Np w6ZY07+YG1Gm9TzW8UhVckoZQ7XGowgTXlHvtgDqk4wvtLYHAxRWrK3y2SiyhIH7 hxOIIhhtH8zPOBiEWN0+ijTDEqPINzonr6ykV43OXBg68lIVaYuhsTAfcy5tgpm2 ECbJg1yvcj5mzDyT6+KTsUlvEYe7ydUD2q9Bm4EAg27QliygcXxAk/b3XZgDQ2Nv TTUDo6Kas+KjQacwxnL+m8wCFA/4bhq1g5yi1dsUC+Gk9VAbMbLgV+/I2ejRxdIY Dw== -----END CERTIFICATE-----Generated at Sat Nov 14 22:39:09 2026 by rpki-client