$ rpki-client -vvvf rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/oSdEuZXDKqSsBMnm9D5Af7sbGjE.cer File: oSdEuZXDKqSsBMnm9D5Af7sbGjE.cer (raw, json) Hash identifier: XL9d45RPwv8zQBzAYMhG1njo+fc79vOC9+7ywSVGbC0= Subject key identifier: A1:27:44:B9:95:C3:2A:A4:AC:04:C9:E6:F4:3E:40:7F:BB:1B:1A:31 Authority key identifier: 0C:FC:E7:78:57:FC:F0:1F:39:D9:9A:62:B4:AA:62:E6:15:9E:76:F8 Certificate issuer: /CN=A90DC5BE/serialNumber=0CFCE77857FCF01F39D99A62B4AA62E6159E76F8 Certificate serial: 5679 Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DPzneFf88B852ZpitKpi5hWedvg.cer CRL Distribution Point: rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.crl Manifest: rsync://rpki.apnic.net/member_repository/A9110127/1C7EED4EDE6111F19E0AEE7E0B66CEF9/oSdEuZXDKqSsBMnm9D5Af7sbGjE.mft caRepository: rsync://rpki.apnic.net/member_repository/A9110127/1C7EED4EDE6111F19E0AEE7E0B66CEF9/ Notify URL: https://rrdp.apnic.net/notification.xml Certificate not before: Thu 12 Nov 2026 06:20:13 +0000 Certificate not after: Wed 01 Mar 2028 00:00:00 +0000 Subordinate resources: IP: 141.229.22.0/23 Validation: OK Signature path: rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.crl rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DPzneFf88B852ZpitKpi5hWedvg.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 21 Nov 2026 14:50:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 22137 (0x5679) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A90DC5BE, serialNumber=0CFCE77857FCF01F39D99A62B4AA62E6159E76F8 Validity Not Before: Nov 12 06:20:13 2026 GMT Not After : Mar 1 00:00:00 2028 GMT Subject: CN=A9110127, serialNumber=A12744B995C32AA4AC04C9E6F43E407FBB1B1A31 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:01:ae:fe:23:a5:d9:de:1a:41:eb:bb:1d:bf: 33:80:ea:cf:e0:11:50:c1:af:65:87:a6:c2:05:2e: d6:82:53:c2:e4:b5:3c:c5:20:70:c7:ce:82:2e:6c: 08:ce:6c:36:bc:38:36:38:a2:42:69:9d:db:a0:e4: 6e:2c:b7:99:4b:48:c8:cb:37:dd:d6:84:46:1b:ee: 4f:9b:f8:08:e4:9c:17:bf:fa:e6:e0:c1:67:f5:68: 19:a5:8d:66:bf:a6:e6:ee:56:25:6b:b9:de:a9:a1: 6e:01:c2:4b:e7:57:b5:1c:d2:29:77:65:c2:15:56: a9:eb:65:e1:31:d1:63:cf:5c:9c:c7:59:d9:ea:ed: 10:2f:4b:d6:e4:19:f8:28:07:59:dd:8b:ee:6a:4a: d5:19:d7:ed:ff:7c:4d:c4:8e:99:0e:c2:ce:e3:2e: 34:bc:90:c3:04:37:29:b5:fe:dd:02:77:63:59:43: 6b:ae:9e:e5:db:7f:b2:c9:46:2b:ab:30:29:a8:90: e2:49:47:d7:c8:a2:39:15:a4:36:20:23:80:94:1c: bf:26:32:2a:63:c9:22:79:b7:1d:3f:7b:7a:a7:09: 24:52:b3:6a:25:77:01:e5:84:05:d5:b5:60:bd:33: 7d:47:e9:0f:a7:d2:38:02:1d:7c:91:5f:88:3e:1d: 75:ef Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A1:27:44:B9:95:C3:2A:A4:AC:04:C9:E6:F4:3E:40:7F:BB:1B:1A:31 X509v3 Authority Key Identifier: keyid:0C:FC:E7:78:57:FC:F0:1F:39:D9:9A:62:B4:AA:62:E6:15:9E:76:F8 X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DPzneFf88B852ZpitKpi5hWedvg.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: CA Repository - URI:rsync://rpki.apnic.net/member_repository/A9110127/1C7EED4EDE6111F19E0AEE7E0B66CEF9/ RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A9110127/1C7EED4EDE6111F19E0AEE7E0B66CEF9/oSdEuZXDKqSsBMnm9D5Af7sbGjE.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 141.229.22.0/23 Signature Algorithm: sha256WithRSAEncryption 5e:70:c4:36:2a:05:94:d9:88:d8:ae:6b:16:7b:b0:8c:ff:c3: a1:2a:dd:55:75:73:16:46:b3:a5:74:28:c4:05:0a:ef:72:c8: c8:e8:df:61:1c:ba:20:1e:b5:f3:65:55:b9:54:88:de:eb:03: 00:36:32:a5:46:5e:fc:16:bf:28:e5:f0:30:9b:fa:a5:34:e2: 97:79:0e:16:4a:5f:25:d6:dd:ac:1e:9d:a0:6e:16:06:dc:62: 31:dc:1a:0a:b5:7f:60:c9:54:27:9e:81:e1:6c:06:bc:e0:1d: e6:33:63:38:3d:d5:41:1e:7d:ac:8e:cb:2b:54:06:57:ad:7d: c8:6b:c0:23:b6:5d:64:fb:3c:09:96:e9:59:17:b5:9c:e5:b8: b7:ff:71:0b:57:e6:b1:4a:71:c7:80:28:e3:8b:11:bd:e4:1f: db:0a:e5:bf:ce:e6:a6:39:b4:40:5f:e6:a9:cf:64:eb:54:9d: 8a:7e:0c:a1:5f:66:27:5b:e2:f7:10:79:77:8a:dc:34:ee:6c: 23:64:2b:b9:3a:9f:2e:84:59:1d:44:81:b2:9c:73:96:bb:27: 8c:6a:4a:86:c1:73:26:10:b1:56:46:3f:11:3f:6f:56:da:82: 03:0e:20:82:73:a9:d1:6d:20:b7:53:a7:1d:50:30:35:53:23: 28:f5:49:3c -----BEGIN CERTIFICATE----- MIIF/TCCBOWgAwIBAgICVnkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkw REM1QkUxMTAvBgNVBAUTKDBDRkNFNzc4NTdGQ0YwMUYzOUQ5OUE2MkI0QUE2MkU2 MTU5RTc2RjgwHhcNMjYxMTEyMDYyMDEzWhcNMjgwMzAxMDAwMDAwWjBGMREwDwYD VQQDEwhBOTExMDEyNzExMC8GA1UEBRMoQTEyNzQ0Qjk5NUMzMkFBNEFDMDRDOUU2 RjQzRTQwN0ZCQjFCMUEzMTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEB ALQBrv4jpdneGkHrux2/M4Dqz+ARUMGvZYemwgUu1oJTwuS1PMUgcMfOgi5sCM5s Nrw4NjiiQmmd26Dkbiy3mUtIyMs33daERhvuT5v4COScF7/65uDBZ/VoGaWNZr+m 5u5WJWu53qmhbgHCS+dXtRzSKXdlwhVWqetl4THRY89cnMdZ2ertEC9L1uQZ+CgH Wd2L7mpK1RnX7f98TcSOmQ7CzuMuNLyQwwQ3KbX+3QJ3Y1lDa66e5dt/sslGK6sw KaiQ4klH18iiORWkNiAjgJQcvyYyKmPJInm3HT97eqcJJFKzaiV3AeWEBdW1YL0z fUfpD6fSOAIdfJFfiD4dde8CAwEAAaOCAvMwggLvMB0GA1UdDgQWBBShJ0S5lcMq pKwEyeb0PkB/uxsaMTAfBgNVHSMEGDAWgBQM/Od4V/zwHznZmmK0qmLmFZ52+DAO BgNVHQ8BAf8EBAMCAQYwDwYDVR0TAQH/BAUwAwEB/zBzBgNVHR8EbDBqMGigZqBk hmJyc3luYzovL3Jwa2kuYXBuaWMubmV0L3JlcG9zaXRvcnkvQjMyMkE1RjQxRDY2 MTFFMkEzRjI3RjdDNzJGRDFGRjIvRFB6bmVGZjg4Qjg1MlpwaXRLcGk1aFdlZHZn LmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5h cG5pYy5uZXQvcmVwb3NpdG9yeS85ODA2NTJFMEI3N0UxMUU3QTk2QTM5NTIxQTRG NEZCNC9EUHpuZUZmODhCODUyWnBpdEtwaTVoV2VkdmcuY2VyMEoGA1UdIAEB/wRA MD4wPAYIKwYBBQUHDgIwMDAuBggrBgEFBQcCARYiaHR0cHM6Ly93d3cuYXBuaWMu bmV0L1JQS0kvQ1BTLnBkZjCCASgGCCsGAQUFBwELBIIBGjCCARYwXwYIKwYBBQUH MAWGU3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx MTAxMjcvMUM3RUVENEVERTYxMTFGMTlFMEFFRTdFMEI2NkNFRjkvMH4GCCsGAQUF BzAKhnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5 MTEwMTI3LzFDN0VFRDRFREU2MTExRjE5RTBBRUU3RTBCNjZDRUY5L29TZEV1WlhE S3FTc0JNbm05RDVBZjdzYkdqRS5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJk cC5hcG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAfBggrBgEFBQcBBwEB/wQQMA4w DAQCAAEwBgMEAY3lFjANBgkqhkiG9w0BAQsFAAOCAQEAXnDENioFlNmI2K5rFnuw jP/DoSrdVXVzFkazpXQoxAUK73LIyOjfYRy6IB6182VVuVSI3usDADYypUZe/Ba/ KOXwMJv6pTTil3kOFkpfJdbdrB6doG4WBtxiMdwaCrV/YMlUJ56B4WwGvOAd5jNj OD3VQR59rI7LK1QGV619yGvAI7ZdZPs8CZbpWRe1nOW4t/9xC1fmsUpxx4Ao44sR veQf2wrlv87mpjm0QF/mqc9k61Sdin4MoV9mJ1vi9xB5d4rcNO5sI2QruTqfLoRZ HUSBspxzlrsnjGpKhsFzJhCxVkY/ET9vVtqCAw4ggnOp0W0gt1OnHVAwNVMjKPVJ PA== -----END CERTIFICATE-----Generated at Sun Nov 15 01:10:46 2026 by rpki-client