$ rpki-client -vvvf rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/ey-Vzm_cJTG7yj5TwdbtG6KqNgQ.cer File: ey-Vzm_cJTG7yj5TwdbtG6KqNgQ.cer (raw, json) Hash identifier: RFCWHAgXSdj6azZnMnY/59zeD2gGDadAThI3pBC1x08= Subject key identifier: 7B:2F:95:CE:6F:DC:25:31:BB:CA:3E:53:C1:D6:ED:1B:A2:AA:36:04 Authority key identifier: 0C:FC:E7:78:57:FC:F0:1F:39:D9:9A:62:B4:AA:62:E6:15:9E:76:F8 Certificate issuer: /CN=A90DC5BE/serialNumber=0CFCE77857FCF01F39D99A62B4AA62E6159E76F8 Certificate serial: 5642 Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DPzneFf88B852ZpitKpi5hWedvg.cer CRL Distribution Point: rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.crl Manifest: rsync://rpki.apnic.net/member_repository/A915E18D/70015C422AE211EBBBFC4F0AC4F9AE02/ey-Vzm_cJTG7yj5TwdbtG6KqNgQ.mft caRepository: rsync://rpki.apnic.net/member_repository/A915E18D/70015C422AE211EBBBFC4F0AC4F9AE02/ Notify URL: https://rrdp.apnic.net/notification.xml Certificate not before: Wed 04 Nov 2026 13:05:00 +0000 Certificate not after: Thu 30 Dec 2027 00:00:00 +0000 Subordinate resources: IP: 89.147.120.0/22 IP: 176.116.127.0/24 Validation: OK Signature path: rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.crl rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DPzneFf88B852ZpitKpi5hWedvg.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 22 Nov 2026 02:50:31 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 22082 (0x5642) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A90DC5BE, serialNumber=0CFCE77857FCF01F39D99A62B4AA62E6159E76F8 Validity Not Before: Nov 4 13:05:00 2026 GMT Not After : Dec 30 00:00:00 2027 GMT Subject: CN=A915E18D, serialNumber=7B2F95CE6FDC2531BBCA3E53C1D6ED1BA2AA3604 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d2:00:43:4c:c4:2d:4e:c5:64:9e:d7:f1:91:f6: 07:14:2f:11:39:93:c3:64:73:7f:74:18:75:87:bb: 1b:60:4f:e7:4c:80:bb:76:9a:1a:28:a4:0f:5b:55: 1c:28:dc:9f:90:2e:d2:16:e2:84:b5:ec:db:d3:dd: bf:6d:0d:82:01:d0:e5:95:75:bf:ba:74:24:6a:91: 09:bb:ce:29:b8:a3:10:76:14:dc:ed:63:36:73:11: 96:dd:d1:cb:b7:7c:89:1f:b0:bc:db:99:b4:68:37: 15:8b:c9:f6:c1:1a:42:8a:23:f6:38:e2:f3:f0:82: 3a:ac:93:e6:50:88:21:39:ad:f1:17:a9:ae:0a:cd: d7:22:b8:d9:07:06:9c:5e:9e:8f:e2:ae:84:9d:51: b3:89:3a:61:f8:ba:1a:3a:33:9a:dc:db:45:24:46: e8:bb:8f:ce:8a:77:ab:8b:b8:c0:85:33:5b:e5:be: 8b:8f:cc:70:ca:b6:0c:e0:86:51:54:72:d4:51:f8: 60:f2:5c:78:76:78:d1:ea:c1:23:e3:4b:c4:4b:4b: b0:12:56:cd:61:59:94:b8:aa:9c:78:2b:8d:b7:b4: 7b:e5:f2:92:4c:3c:c4:a3:d0:da:91:bf:f7:25:43: 7a:fc:c7:12:75:e6:96:99:47:f3:03:4f:da:ca:89: 40:c1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7B:2F:95:CE:6F:DC:25:31:BB:CA:3E:53:C1:D6:ED:1B:A2:AA:36:04 X509v3 Authority Key Identifier: keyid:0C:FC:E7:78:57:FC:F0:1F:39:D9:9A:62:B4:AA:62:E6:15:9E:76:F8 X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DPzneFf88B852ZpitKpi5hWedvg.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: CA Repository - URI:rsync://rpki.apnic.net/member_repository/A915E18D/70015C422AE211EBBBFC4F0AC4F9AE02/ RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A915E18D/70015C422AE211EBBBFC4F0AC4F9AE02/ey-Vzm_cJTG7yj5TwdbtG6KqNgQ.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 89.147.120.0/22 176.116.127.0/24 Signature Algorithm: sha256WithRSAEncryption cc:51:a2:7f:7e:2c:2c:45:28:8e:d4:f8:87:0e:bb:6b:6b:b9: c7:17:58:09:76:ae:7d:1e:a9:08:46:d4:4e:c9:76:2d:68:dc: cf:cb:06:0e:53:73:e6:ac:af:ab:9a:27:31:78:81:23:5f:ae: b7:55:22:b6:ef:93:60:b3:c0:61:ce:08:a7:42:e6:af:f5:63: 07:80:0b:2a:61:d6:bd:a7:23:f9:2c:05:fa:a0:ea:ee:bc:3d: c3:ec:cd:52:6d:6b:2e:de:47:6f:fc:66:80:5c:a7:9a:58:a0: f7:08:5d:59:89:04:41:77:98:27:3e:4e:34:91:15:57:ca:93: 11:b2:a6:b8:82:98:83:db:4c:25:d4:a7:67:3e:45:bc:95:1c: f2:d0:16:c7:10:b4:56:9f:52:79:68:a7:a7:30:d4:be:e4:6c: 3a:26:0c:b4:df:83:5e:94:65:8c:fe:06:a2:7c:18:f4:68:2c: 00:6c:aa:f3:c2:dd:49:2e:f7:33:8b:07:d6:f6:9d:f5:d2:72: 08:f9:45:37:17:3b:a5:51:83:54:2b:ad:69:a5:88:9f:0f:0b: bf:67:39:c1:fd:e4:f8:56:dd:fa:6f:6f:b2:f3:13:ff:9d:e7: 78:f0:77:c0:19:0f:91:8f:d2:98:31:a7:2a:50:4e:1a:16:fd: e0:a3:06:69 -----BEGIN CERTIFICATE----- MIIGAzCCBOugAwIBAgICVkIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkw REM1QkUxMTAvBgNVBAUTKDBDRkNFNzc4NTdGQ0YwMUYzOUQ5OUE2MkI0QUE2MkU2 MTU5RTc2RjgwHhcNMjYxMTA0MTMwNTAwWhcNMjcxMjMwMDAwMDAwWjBGMREwDwYD VQQDEwhBOTE1RTE4RDExMC8GA1UEBRMoN0IyRjk1Q0U2RkRDMjUzMUJCQ0EzRTUz QzFENkVEMUJBMkFBMzYwNDCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEB ANIAQ0zELU7FZJ7X8ZH2BxQvETmTw2Rzf3QYdYe7G2BP50yAu3aaGiikD1tVHCjc n5Au0hbihLXs29Pdv20NggHQ5ZV1v7p0JGqRCbvOKbijEHYU3O1jNnMRlt3Ry7d8 iR+wvNuZtGg3FYvJ9sEaQooj9jji8/CCOqyT5lCIITmt8ReprgrN1yK42QcGnF6e j+KuhJ1Rs4k6Yfi6GjozmtzbRSRG6LuPzop3q4u4wIUzW+W+i4/McMq2DOCGUVRy 1FH4YPJceHZ40erBI+NLxEtLsBJWzWFZlLiqnHgrjbe0e+Xykkw8xKPQ2pG/9yVD evzHEnXmlplH8wNP2sqJQMECAwEAAaOCAvkwggL1MB0GA1UdDgQWBBR7L5XOb9wl MbvKPlPB1u0boqo2BDAfBgNVHSMEGDAWgBQM/Od4V/zwHznZmmK0qmLmFZ52+DAO BgNVHQ8BAf8EBAMCAQYwDwYDVR0TAQH/BAUwAwEB/zBzBgNVHR8EbDBqMGigZqBk hmJyc3luYzovL3Jwa2kuYXBuaWMubmV0L3JlcG9zaXRvcnkvQjMyMkE1RjQxRDY2 MTFFMkEzRjI3RjdDNzJGRDFGRjIvRFB6bmVGZjg4Qjg1MlpwaXRLcGk1aFdlZHZn LmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5h cG5pYy5uZXQvcmVwb3NpdG9yeS85ODA2NTJFMEI3N0UxMUU3QTk2QTM5NTIxQTRG NEZCNC9EUHpuZUZmODhCODUyWnBpdEtwaTVoV2VkdmcuY2VyMEoGA1UdIAEB/wRA MD4wPAYIKwYBBQUHDgIwMDAuBggrBgEFBQcCARYiaHR0cHM6Ly93d3cuYXBuaWMu bmV0L1JQS0kvQ1BTLnBkZjCCASgGCCsGAQUFBwELBIIBGjCCARYwXwYIKwYBBQUH MAWGU3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx NUUxOEQvNzAwMTVDNDIyQUUyMTFFQkJCRkM0RjBBQzRGOUFFMDIvMH4GCCsGAQUF BzAKhnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5 MTVFMThELzcwMDE1QzQyMkFFMjExRUJCQkZDNEYwQUM0RjlBRTAyL2V5LVZ6bV9j SlRHN3lqNVR3ZGJ0RzZLcU5nUS5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJk cC5hcG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAlBggrBgEFBQcBBwEB/wQWMBQw EgQCAAEwDAMEAlmTeAMEALB0fzANBgkqhkiG9w0BAQsFAAOCAQEAzFGif34sLEUo jtT4hw67a2u5xxdYCXaufR6pCEbUTsl2LWjcz8sGDlNz5qyvq5onMXiBI1+ut1Ui tu+TYLPAYc4Ip0Lmr/VjB4ALKmHWvacj+SwF+qDq7rw9w+zNUm1rLt5Hb/xmgFyn mlig9whdWYkEQXeYJz5ONJEVV8qTEbKmuIKYg9tMJdSnZz5FvJUc8tAWxxC0Vp9S eWinpzDUvuRsOiYMtN+DXpRljP4GonwY9GgsAGyq88LdSS73M4sH1vad9dJyCPlF Nxc7pVGDVCutaaWInw8Lv2c5wf3k+Fbd+m9vsvMT/53nePB3wBkPkY/SmDGnKlBO Ghb94KMGaQ== -----END CERTIFICATE-----Generated at Sun Nov 15 11:47:21 2026 by rpki-client