$ rpki-client -vvvf rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/f3dZIELjyHvlbu2B2cyw6XQCzdc.cer File: f3dZIELjyHvlbu2B2cyw6XQCzdc.cer (raw, json) Hash identifier: ElfyRyV8EbY55zkQdhFz78pokYphqwD9b3/kmmqcuZs= Subject key identifier: 7F:77:59:20:42:E3:C8:7B:E5:6E:ED:81:D9:CC:B0:E9:74:02:CD:D7 Authority key identifier: 0C:FC:E7:78:57:FC:F0:1F:39:D9:9A:62:B4:AA:62:E6:15:9E:76:F8 Certificate issuer: /CN=A90DC5BE/serialNumber=0CFCE77857FCF01F39D99A62B4AA62E6159E76F8 Certificate serial: 566E Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DPzneFf88B852ZpitKpi5hWedvg.cer CRL Distribution Point: rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.crl Manifest: rsync://rpki.apnic.net/member_repository/A9192A47/15907C22B82111EFAAE6F567C4F9AE02/f3dZIELjyHvlbu2B2cyw6XQCzdc.mft caRepository: rsync://rpki.apnic.net/member_repository/A9192A47/15907C22B82111EFAAE6F567C4F9AE02/ Notify URL: https://rrdp.apnic.net/notification.xml Certificate not before: Tue 10 Nov 2026 13:26:27 +0000 Certificate not after: Thu 30 Dec 2027 00:00:00 +0000 Subordinate resources: IP: 86.48.240.0/20 Validation: OK Signature path: rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.crl rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DPzneFf88B852ZpitKpi5hWedvg.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 21 Nov 2026 14:50:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 22126 (0x566e) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A90DC5BE, serialNumber=0CFCE77857FCF01F39D99A62B4AA62E6159E76F8 Validity Not Before: Nov 10 13:26:27 2026 GMT Not After : Dec 30 00:00:00 2027 GMT Subject: CN=A9192A47, serialNumber=7F77592042E3C87BE56EED81D9CCB0E97402CDD7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:eb:29:c4:27:13:ce:3e:4e:62:01:7a:8a:d9:36: 41:33:16:b1:01:0f:41:bb:71:60:69:8a:c4:d3:80: 40:0c:d0:33:96:4c:63:51:70:38:af:33:48:1e:ef: 26:49:fa:a9:98:fd:49:f8:e8:89:05:2b:6d:05:69: 68:d0:50:59:7c:8a:98:75:c6:cc:d1:e3:72:2a:ca: e9:b6:f0:44:37:50:be:05:ef:5b:41:2f:6d:a6:3d: bf:43:34:46:0d:2c:c6:9e:d5:6b:3b:be:21:05:26: 00:56:fe:e9:ab:2f:27:3d:19:de:0c:9e:c3:1c:ee: 5a:8b:cb:fd:a1:c2:5f:ee:0e:15:d3:43:f4:3c:22: d4:4f:12:4b:3b:f1:58:13:c6:5f:76:24:8a:50:11: 5a:65:34:68:26:8f:81:fa:c7:3c:07:d5:70:20:48: 96:e0:b8:48:24:ce:7a:83:6f:85:7a:ce:6c:f5:54: 76:9e:e7:1f:9b:61:f8:54:0b:6a:0f:9b:0b:35:b0: 38:16:bb:66:38:7f:4f:72:f6:dd:cb:df:a3:bc:40: 40:94:64:3d:97:31:2f:3b:a7:61:63:34:fb:92:c0: 0d:a9:cb:9f:94:94:3c:e3:9f:3d:f2:a5:33:e2:39: 8e:8b:09:2b:10:13:03:4e:92:d7:33:07:86:b6:4d: c9:b5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7F:77:59:20:42:E3:C8:7B:E5:6E:ED:81:D9:CC:B0:E9:74:02:CD:D7 X509v3 Authority Key Identifier: keyid:0C:FC:E7:78:57:FC:F0:1F:39:D9:9A:62:B4:AA:62:E6:15:9E:76:F8 X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DPzneFf88B852ZpitKpi5hWedvg.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: CA Repository - URI:rsync://rpki.apnic.net/member_repository/A9192A47/15907C22B82111EFAAE6F567C4F9AE02/ RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A9192A47/15907C22B82111EFAAE6F567C4F9AE02/f3dZIELjyHvlbu2B2cyw6XQCzdc.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 86.48.240.0/20 Signature Algorithm: sha256WithRSAEncryption 3c:4f:fa:a5:f6:77:16:f8:c9:bd:51:6d:9c:3d:08:9e:f6:d1: 58:f6:56:f6:1b:c9:a6:ab:bd:53:fb:4d:7e:d6:ed:b0:c9:c4: ae:c5:da:ee:29:7c:31:6f:16:0f:99:47:0b:ef:9a:38:4e:22: b7:b3:9b:c2:7f:2f:72:ee:dd:0a:43:38:38:1e:ad:c1:1b:53: d0:35:04:78:64:d3:5e:1c:ac:02:8f:6f:ba:1b:ae:5f:d4:da: 24:fe:50:e8:4b:75:dd:74:cf:5c:24:69:9a:5c:61:2d:21:41: b6:a2:c0:c7:95:ca:68:f0:3d:d5:67:ea:aa:06:03:fd:74:8b: a4:cc:ee:f2:3d:b9:47:6f:b4:7b:3e:4a:16:13:25:bb:e2:5b: 7a:3d:15:6a:4f:06:a8:58:3b:78:27:b4:63:7e:ab:28:c8:17: 55:b7:85:ba:93:16:cd:9e:8d:6c:13:0f:d1:6e:41:36:4a:30: 4e:e9:5f:fb:48:ac:fe:0e:d9:2d:70:e7:58:ea:df:62:d6:29: a8:d3:e7:ab:31:9e:40:c2:40:9d:1f:a4:e3:32:26:21:02:bc: d8:06:54:6c:ab:1a:ca:37:69:69:ce:dd:06:ec:ca:34:5e:ec: 39:1d:5b:54:d7:a9:14:9d:ed:76:ea:7a:98:81:8e:fb:ad:8c: 05:ab:57:64 -----BEGIN CERTIFICATE----- MIIF/TCCBOWgAwIBAgICVm4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkw REM1QkUxMTAvBgNVBAUTKDBDRkNFNzc4NTdGQ0YwMUYzOUQ5OUE2MkI0QUE2MkU2 MTU5RTc2RjgwHhcNMjYxMTEwMTMyNjI3WhcNMjcxMjMwMDAwMDAwWjBGMREwDwYD VQQDEwhBOTE5MkE0NzExMC8GA1UEBRMoN0Y3NzU5MjA0MkUzQzg3QkU1NkVFRDgx RDlDQ0IwRTk3NDAyQ0RENzCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEB AOspxCcTzj5OYgF6itk2QTMWsQEPQbtxYGmKxNOAQAzQM5ZMY1FwOK8zSB7vJkn6 qZj9SfjoiQUrbQVpaNBQWXyKmHXGzNHjcirK6bbwRDdQvgXvW0EvbaY9v0M0Rg0s xp7Vazu+IQUmAFb+6asvJz0Z3gyewxzuWovL/aHCX+4OFdND9Dwi1E8SSzvxWBPG X3YkilARWmU0aCaPgfrHPAfVcCBIluC4SCTOeoNvhXrObPVUdp7nH5th+FQLag+b CzWwOBa7Zjh/T3L23cvfo7xAQJRkPZcxLzunYWM0+5LADanLn5SUPOOfPfKlM+I5 josJKxATA06S1zMHhrZNybUCAwEAAaOCAvMwggLvMB0GA1UdDgQWBBR/d1kgQuPI e+Vu7YHZzLDpdALN1zAfBgNVHSMEGDAWgBQM/Od4V/zwHznZmmK0qmLmFZ52+DAO BgNVHQ8BAf8EBAMCAQYwDwYDVR0TAQH/BAUwAwEB/zBzBgNVHR8EbDBqMGigZqBk hmJyc3luYzovL3Jwa2kuYXBuaWMubmV0L3JlcG9zaXRvcnkvQjMyMkE1RjQxRDY2 MTFFMkEzRjI3RjdDNzJGRDFGRjIvRFB6bmVGZjg4Qjg1MlpwaXRLcGk1aFdlZHZn LmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5h cG5pYy5uZXQvcmVwb3NpdG9yeS85ODA2NTJFMEI3N0UxMUU3QTk2QTM5NTIxQTRG NEZCNC9EUHpuZUZmODhCODUyWnBpdEtwaTVoV2VkdmcuY2VyMEoGA1UdIAEB/wRA MD4wPAYIKwYBBQUHDgIwMDAuBggrBgEFBQcCARYiaHR0cHM6Ly93d3cuYXBuaWMu bmV0L1JQS0kvQ1BTLnBkZjCCASgGCCsGAQUFBwELBIIBGjCCARYwXwYIKwYBBQUH MAWGU3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx OTJBNDcvMTU5MDdDMjJCODIxMTFFRkFBRTZGNTY3QzRGOUFFMDIvMH4GCCsGAQUF BzAKhnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5 MTkyQTQ3LzE1OTA3QzIyQjgyMTExRUZBQUU2RjU2N0M0RjlBRTAyL2YzZFpJRUxq eUh2bGJ1MkIyY3l3NlhRQ3pkYy5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJk cC5hcG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAfBggrBgEFBQcBBwEB/wQQMA4w DAQCAAEwBgMEBFYw8DANBgkqhkiG9w0BAQsFAAOCAQEAPE/6pfZ3FvjJvVFtnD0I nvbRWPZW9hvJpqu9U/tNftbtsMnErsXa7il8MW8WD5lHC++aOE4it7Obwn8vcu7d CkM4OB6twRtT0DUEeGTTXhysAo9vuhuuX9TaJP5Q6Et13XTPXCRpmlxhLSFBtqLA x5XKaPA91WfqqgYD/XSLpMzu8j25R2+0ez5KFhMlu+Jbej0Vak8GqFg7eCe0Y36r KMgXVbeFupMWzZ6NbBMP0W5BNkowTulf+0is/g7ZLXDnWOrfYtYpqNPnqzGeQMJA nR+k4zImIQK82AZUbKsayjdpac7dBuzKNF7sOR1bVNepFJ3tdup6mIGO+62MBatX ZA== -----END CERTIFICATE-----Generated at Sat Nov 14 21:46:15 2026 by rpki-client