$ rpki-client -vvvf rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/di24dh9cviDmcXU7CyJk1j3nvxI.cer File: di24dh9cviDmcXU7CyJk1j3nvxI.cer (raw, json) Hash identifier: 4LZGryh74HM2fmpMhI2h1iAaVflTJNIg6e4TMVk8YP8= Subject key identifier: 76:2D:B8:76:1F:5C:BE:20:E6:71:75:3B:0B:22:64:D6:3D:E7:BF:12 Authority key identifier: 0C:FC:E7:78:57:FC:F0:1F:39:D9:9A:62:B4:AA:62:E6:15:9E:76:F8 Certificate issuer: /CN=A90DC5BE/serialNumber=0CFCE77857FCF01F39D99A62B4AA62E6159E76F8 Certificate serial: 5664 Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DPzneFf88B852ZpitKpi5hWedvg.cer CRL Distribution Point: rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.crl Manifest: rsync://rpki.apnic.net/member_repository/A91F14FA/F3231BE6DCF311F18BD0DE751B66CEF9/di24dh9cviDmcXU7CyJk1j3nvxI.mft caRepository: rsync://rpki.apnic.net/member_repository/A91F14FA/F3231BE6DCF311F18BD0DE751B66CEF9/ Notify URL: https://rrdp.apnic.net/notification.xml Certificate not before: Tue 10 Nov 2026 10:46:17 +0000 Certificate not after: Fri 30 Jul 2027 00:00:00 +0000 Subordinate resources: IP: 151.153.0.0/16 Validation: OK Signature path: rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.crl rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DPzneFf88B852ZpitKpi5hWedvg.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 22 Nov 2026 02:50:31 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 22116 (0x5664) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A90DC5BE, serialNumber=0CFCE77857FCF01F39D99A62B4AA62E6159E76F8 Validity Not Before: Nov 10 10:46:17 2026 GMT Not After : Jul 30 00:00:00 2027 GMT Subject: CN=A91F14FA, serialNumber=762DB8761F5CBE20E671753B0B2264D63DE7BF12 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a3:16:86:c1:fd:50:11:fd:a6:93:a5:34:5b:1a: 84:91:b6:da:e9:2c:1c:29:f8:1d:f9:be:6f:d2:a8: 6c:11:81:b2:4f:ce:be:f8:03:ce:3a:f7:5b:fc:98: bc:ab:b1:c1:8b:05:34:cf:36:7f:9b:60:4e:82:99: 17:ec:ca:02:52:16:ff:81:59:0d:c6:54:9d:3f:03: 86:de:99:93:aa:07:10:01:7a:c8:ab:49:91:b1:a6: c2:f4:7a:27:10:56:d8:db:03:97:41:28:f2:f0:4a: b2:7f:ab:ec:dd:ae:7b:e7:87:49:4e:b5:78:25:47: 65:1b:c6:a5:a1:3e:e3:e2:ac:70:ef:47:ea:55:5e: cc:0e:6c:ef:c8:a8:eb:2a:d5:54:4a:50:06:bc:27: 99:2f:e4:f4:39:d3:ba:8a:64:0e:42:95:4f:17:b2: 59:42:c0:43:e2:2c:df:13:da:11:2c:af:e6:31:2b: 37:97:32:b6:a9:c1:23:1a:5f:31:06:b2:78:1b:da: a8:e1:c7:98:54:64:82:d8:e4:c5:29:40:55:9c:09: 2f:b8:58:ea:9b:42:a9:fe:f2:4c:b1:3d:8a:5a:59: d5:dc:33:92:51:17:60:a5:73:17:46:03:98:66:1a: d5:73:0b:eb:22:c9:ac:ed:47:ff:86:62:6e:61:c3: 3b:f7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 76:2D:B8:76:1F:5C:BE:20:E6:71:75:3B:0B:22:64:D6:3D:E7:BF:12 X509v3 Authority Key Identifier: keyid:0C:FC:E7:78:57:FC:F0:1F:39:D9:9A:62:B4:AA:62:E6:15:9E:76:F8 X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DPzneFf88B852ZpitKpi5hWedvg.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: CA Repository - URI:rsync://rpki.apnic.net/member_repository/A91F14FA/F3231BE6DCF311F18BD0DE751B66CEF9/ RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A91F14FA/F3231BE6DCF311F18BD0DE751B66CEF9/di24dh9cviDmcXU7CyJk1j3nvxI.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 151.153.0.0/16 Signature Algorithm: sha256WithRSAEncryption d2:f7:4d:84:5f:73:82:a2:67:29:f3:d1:c2:62:74:fe:a0:b1: 67:b6:f6:d3:4f:49:7c:32:12:e9:b3:7f:d3:14:ba:a7:88:f8: 1d:e0:b9:ba:f2:f1:aa:3b:ae:d6:8d:7e:57:1b:0c:bf:b0:69: 82:50:83:54:52:bc:e1:52:2d:93:a6:04:5c:41:fd:cc:2a:a2: 75:a0:f1:a4:f7:7c:aa:5f:65:a5:c4:39:81:cf:76:ee:27:39: 8d:f9:df:c6:74:b8:2a:c1:b0:80:85:84:13:95:bd:35:7b:a7: f4:aa:07:b2:8d:e6:f3:c6:69:de:e8:28:78:b4:ef:cd:4b:de: e4:27:6d:cb:dd:6f:88:a1:2a:b5:0c:d2:9d:7e:41:0e:ab:b3: d0:23:0d:75:0a:4e:fa:b8:2e:a2:15:d6:28:19:38:ab:10:d0: 4b:7f:cd:19:64:d7:68:56:af:05:8d:cf:db:50:11:b2:2f:f1: a2:2e:0c:ef:25:d7:0e:ac:3f:95:5e:f4:d1:36:ec:85:47:7b: 17:b9:23:75:9a:66:b3:f4:fc:68:7d:da:d2:b6:fd:4f:1f:4f: e2:0f:c1:4f:cc:68:5b:5a:d4:db:f1:72:7a:b1:59:07:b9:f9: 9d:c3:c2:56:4a:68:0c:59:1b:c6:df:90:db:61:0a:09:90:f5: ab:71:be:b7 -----BEGIN CERTIFICATE----- MIIF/DCCBOSgAwIBAgICVmQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkw REM1QkUxMTAvBgNVBAUTKDBDRkNFNzc4NTdGQ0YwMUYzOUQ5OUE2MkI0QUE2MkU2 MTU5RTc2RjgwHhcNMjYxMTEwMTA0NjE3WhcNMjcwNzMwMDAwMDAwWjBGMREwDwYD VQQDEwhBOTFGMTRGQTExMC8GA1UEBRMoNzYyREI4NzYxRjVDQkUyMEU2NzE3NTNC MEIyMjY0RDYzREU3QkYxMjCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEB AKMWhsH9UBH9ppOlNFsahJG22uksHCn4Hfm+b9KobBGBsk/OvvgDzjr3W/yYvKux wYsFNM82f5tgToKZF+zKAlIW/4FZDcZUnT8Dht6Zk6oHEAF6yKtJkbGmwvR6JxBW 2NsDl0Eo8vBKsn+r7N2ue+eHSU61eCVHZRvGpaE+4+KscO9H6lVezA5s78io6yrV VEpQBrwnmS/k9DnTuopkDkKVTxeyWULAQ+Is3xPaESyv5jErN5cytqnBIxpfMQay eBvaqOHHmFRkgtjkxSlAVZwJL7hY6ptCqf7yTLE9ilpZ1dwzklEXYKVzF0YDmGYa 1XML6yLJrO1H/4ZibmHDO/cCAwEAAaOCAvIwggLuMB0GA1UdDgQWBBR2Lbh2H1y+ IOZxdTsLImTWPee/EjAfBgNVHSMEGDAWgBQM/Od4V/zwHznZmmK0qmLmFZ52+DAO BgNVHQ8BAf8EBAMCAQYwDwYDVR0TAQH/BAUwAwEB/zBzBgNVHR8EbDBqMGigZqBk hmJyc3luYzovL3Jwa2kuYXBuaWMubmV0L3JlcG9zaXRvcnkvQjMyMkE1RjQxRDY2 MTFFMkEzRjI3RjdDNzJGRDFGRjIvRFB6bmVGZjg4Qjg1MlpwaXRLcGk1aFdlZHZn LmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5h cG5pYy5uZXQvcmVwb3NpdG9yeS85ODA2NTJFMEI3N0UxMUU3QTk2QTM5NTIxQTRG NEZCNC9EUHpuZUZmODhCODUyWnBpdEtwaTVoV2VkdmcuY2VyMEoGA1UdIAEB/wRA MD4wPAYIKwYBBQUHDgIwMDAuBggrBgEFBQcCARYiaHR0cHM6Ly93d3cuYXBuaWMu bmV0L1JQS0kvQ1BTLnBkZjCCASgGCCsGAQUFBwELBIIBGjCCARYwXwYIKwYBBQUH MAWGU3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx RjE0RkEvRjMyMzFCRTZEQ0YzMTFGMThCRDBERTc1MUI2NkNFRjkvMH4GCCsGAQUF BzAKhnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5 MUYxNEZBL0YzMjMxQkU2RENGMzExRjE4QkQwREU3NTFCNjZDRUY5L2RpMjRkaDlj dmlEbWNYVTdDeUprMWozbnZ4SS5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJk cC5hcG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAeBggrBgEFBQcBBwEB/wQPMA0w CwQCAAEwBQMDAJeZMA0GCSqGSIb3DQEBCwUAA4IBAQDS902EX3OComcp89HCYnT+ oLFntvbTT0l8MhLps3/TFLqniPgd4Lm68vGqO67WjX5XGwy/sGmCUINUUrzhUi2T pgRcQf3MKqJ1oPGk93yqX2WlxDmBz3buJzmN+d/GdLgqwbCAhYQTlb01e6f0qgey jebzxmne6Ch4tO/NS97kJ23L3W+IoSq1DNKdfkEOq7PQIw11Ck76uC6iFdYoGTir ENBLf80ZZNdoVq8Fjc/bUBGyL/GiLgzvJdcOrD+VXvTRNuyFR3sXuSN1mmaz9Pxo fdrStv1PH0/iD8FPzGhbWtTb8XJ6sVkHufmdw8JWSmgMWRvG35DbYQoJkPWrcb63 -----END CERTIFICATE-----Generated at Sun Nov 15 10:32:04 2026 by rpki-client