$ rpki-client -vvvf rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/oSr_scTP4RQWBnP0ZldP_2n8iOo.cer File: oSr_scTP4RQWBnP0ZldP_2n8iOo.cer (raw, json) Hash identifier: APAnJJv8eyV4nw/rc11dgn3eZ34JvAx6pg9FMl0mes0= Subject key identifier: A1:2A:FF:B1:C4:CF:E1:14:16:06:73:F4:66:57:4F:FF:69:FC:88:EA Authority key identifier: 0C:FC:E7:78:57:FC:F0:1F:39:D9:9A:62:B4:AA:62:E6:15:9E:76:F8 Certificate issuer: /CN=A90DC5BE/serialNumber=0CFCE77857FCF01F39D99A62B4AA62E6159E76F8 Certificate serial: 5662 Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DPzneFf88B852ZpitKpi5hWedvg.cer CRL Distribution Point: rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.crl Manifest: rsync://rpki.apnic.net/member_repository/A911C34D/EDE5D84ADCD911F1814682931366CEF9/oSr_scTP4RQWBnP0ZldP_2n8iOo.mft caRepository: rsync://rpki.apnic.net/member_repository/A911C34D/EDE5D84ADCD911F1814682931366CEF9/ Notify URL: https://rrdp.apnic.net/notification.xml Certificate not before: Tue 10 Nov 2026 07:40:02 +0000 Certificate not after: Wed 01 Mar 2028 00:00:00 +0000 Subordinate resources: IP: 141.229.12.0/23 Validation: OK Signature path: rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.crl rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DPzneFf88B852ZpitKpi5hWedvg.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 21 Nov 2026 14:50:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 22114 (0x5662) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A90DC5BE, serialNumber=0CFCE77857FCF01F39D99A62B4AA62E6159E76F8 Validity Not Before: Nov 10 07:40:02 2026 GMT Not After : Mar 1 00:00:00 2028 GMT Subject: CN=A911C34D, serialNumber=A12AFFB1C4CFE114160673F466574FFF69FC88EA Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d7:71:39:4b:cc:ae:23:e6:c0:81:f3:62:85:00: d5:70:8f:ba:78:4c:f0:ae:48:eb:57:ca:2e:6f:60: 03:d1:be:2c:cd:65:b8:cb:fb:46:95:f9:38:36:47: 1e:80:21:7d:a7:d3:35:8d:36:59:89:58:1c:fa:9b: 58:75:39:26:fd:3a:e6:66:0f:f2:d3:87:b8:d1:76: 1d:1e:17:bd:cc:b8:3e:f0:c1:d2:5c:a0:7e:e7:aa: ba:d5:52:05:d0:b9:7e:14:bb:81:c9:c0:2a:96:03: ab:ab:cc:29:d7:8a:74:0b:61:e5:8a:27:18:67:a0: f5:64:36:fc:29:28:ee:de:c4:47:92:f0:7a:5b:d2: bd:76:4d:c4:10:b7:0e:ea:f9:17:aa:ac:38:42:8f: 94:f9:2e:60:13:c4:7e:b2:b0:9e:95:f7:d3:97:0f: cc:dd:cd:d1:bf:53:7d:81:05:4f:28:a4:70:18:f3: 81:70:d7:bf:ba:78:c8:9f:92:1f:fc:4f:ef:ee:4b: 6c:e2:32:53:2a:f1:c5:ba:3e:50:57:50:d2:cb:d6: ba:03:18:75:5f:22:f9:30:58:58:2c:51:89:c5:4d: 51:99:03:9b:02:b3:00:c6:43:05:aa:a5:ad:74:3b: 5d:b5:a4:19:17:98:96:04:f7:37:c7:78:57:48:cf: 28:b5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A1:2A:FF:B1:C4:CF:E1:14:16:06:73:F4:66:57:4F:FF:69:FC:88:EA X509v3 Authority Key Identifier: keyid:0C:FC:E7:78:57:FC:F0:1F:39:D9:9A:62:B4:AA:62:E6:15:9E:76:F8 X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DPzneFf88B852ZpitKpi5hWedvg.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: CA Repository - URI:rsync://rpki.apnic.net/member_repository/A911C34D/EDE5D84ADCD911F1814682931366CEF9/ RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A911C34D/EDE5D84ADCD911F1814682931366CEF9/oSr_scTP4RQWBnP0ZldP_2n8iOo.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 141.229.12.0/23 Signature Algorithm: sha256WithRSAEncryption 55:8a:42:b6:67:72:83:31:b1:e2:03:b5:e4:34:fe:6f:76:33: 76:50:86:f9:7c:a4:0f:d3:86:79:ca:b0:f7:cf:a2:ae:1b:26: 12:bc:ca:61:c5:1b:6a:7d:8b:f0:a5:5e:4f:e3:ab:9e:47:0f: bd:ae:88:5b:f4:ab:a5:b7:b9:89:12:a3:e4:b5:c3:d1:a1:d2: 0c:44:a9:0a:cb:3d:76:b0:28:9d:bc:ff:4e:28:11:a5:14:13: 42:27:03:2b:8f:9e:83:83:2e:32:dc:20:d3:7d:03:d3:16:41: e1:6c:f1:5e:96:99:66:f2:8d:63:69:bd:10:b2:ea:f4:6d:02: 7a:7c:5c:64:21:b7:9a:9c:a8:7d:43:d4:e3:d7:28:7d:39:62: 0f:ee:47:dd:03:13:9a:69:e2:0e:03:ee:bc:5c:97:ce:f6:ef: 9c:74:5f:71:34:ab:5b:90:ad:34:83:a2:27:3c:5f:af:7f:13: 01:f5:ff:93:40:49:14:4a:7e:eb:f4:43:4e:75:99:29:fc:85: 61:f6:32:4d:64:df:1e:00:7e:78:46:d5:45:c7:73:6d:38:c8: 96:b1:7a:ef:68:e6:dc:8e:45:02:c4:55:59:eb:2c:01:11:ef: 8f:3e:43:30:03:e1:97:62:91:fd:75:ee:58:58:4b:3f:8b:3c: 19:4d:08:98 -----BEGIN CERTIFICATE----- MIIF/TCCBOWgAwIBAgICVmIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkw REM1QkUxMTAvBgNVBAUTKDBDRkNFNzc4NTdGQ0YwMUYzOUQ5OUE2MkI0QUE2MkU2 MTU5RTc2RjgwHhcNMjYxMTEwMDc0MDAyWhcNMjgwMzAxMDAwMDAwWjBGMREwDwYD VQQDEwhBOTExQzM0RDExMC8GA1UEBRMoQTEyQUZGQjFDNENGRTExNDE2MDY3M0Y0 NjY1NzRGRkY2OUZDODhFQTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEB ANdxOUvMriPmwIHzYoUA1XCPunhM8K5I61fKLm9gA9G+LM1luMv7RpX5ODZHHoAh fafTNY02WYlYHPqbWHU5Jv065mYP8tOHuNF2HR4Xvcy4PvDB0lygfuequtVSBdC5 fhS7gcnAKpYDq6vMKdeKdAth5YonGGeg9WQ2/Cko7t7ER5LwelvSvXZNxBC3Dur5 F6qsOEKPlPkuYBPEfrKwnpX305cPzN3N0b9TfYEFTyikcBjzgXDXv7p4yJ+SH/xP 7+5LbOIyUyrxxbo+UFdQ0svWugMYdV8i+TBYWCxRicVNUZkDmwKzAMZDBaqlrXQ7 XbWkGReYlgT3N8d4V0jPKLUCAwEAAaOCAvMwggLvMB0GA1UdDgQWBBShKv+xxM/h FBYGc/RmV0//afyI6jAfBgNVHSMEGDAWgBQM/Od4V/zwHznZmmK0qmLmFZ52+DAO BgNVHQ8BAf8EBAMCAQYwDwYDVR0TAQH/BAUwAwEB/zBzBgNVHR8EbDBqMGigZqBk hmJyc3luYzovL3Jwa2kuYXBuaWMubmV0L3JlcG9zaXRvcnkvQjMyMkE1RjQxRDY2 MTFFMkEzRjI3RjdDNzJGRDFGRjIvRFB6bmVGZjg4Qjg1MlpwaXRLcGk1aFdlZHZn LmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5h cG5pYy5uZXQvcmVwb3NpdG9yeS85ODA2NTJFMEI3N0UxMUU3QTk2QTM5NTIxQTRG NEZCNC9EUHpuZUZmODhCODUyWnBpdEtwaTVoV2VkdmcuY2VyMEoGA1UdIAEB/wRA MD4wPAYIKwYBBQUHDgIwMDAuBggrBgEFBQcCARYiaHR0cHM6Ly93d3cuYXBuaWMu bmV0L1JQS0kvQ1BTLnBkZjCCASgGCCsGAQUFBwELBIIBGjCCARYwXwYIKwYBBQUH MAWGU3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx MUMzNEQvRURFNUQ4NEFEQ0Q5MTFGMTgxNDY4MjkzMTM2NkNFRjkvMH4GCCsGAQUF BzAKhnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5 MTFDMzREL0VERTVEODRBRENEOTExRjE4MTQ2ODI5MzEzNjZDRUY5L29Tcl9zY1RQ NFJRV0JuUDBabGRQXzJuOGlPby5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJk cC5hcG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAfBggrBgEFBQcBBwEB/wQQMA4w DAQCAAEwBgMEAY3lDDANBgkqhkiG9w0BAQsFAAOCAQEAVYpCtmdygzGx4gO15DT+ b3YzdlCG+XykD9OGecqw98+irhsmErzKYcUban2L8KVeT+OrnkcPva6IW/Srpbe5 iRKj5LXD0aHSDESpCss9drAonbz/TigRpRQTQicDK4+eg4MuMtwg030D0xZB4Wzx XpaZZvKNY2m9ELLq9G0CenxcZCG3mpyofUPU49cofTliD+5H3QMTmmniDgPuvFyX zvbvnHRfcTSrW5CtNIOiJzxfr38TAfX/k0BJFEp+6/RDTnWZKfyFYfYyTWTfHgB+ eEbVRcdzbTjIlrF672jm3I5FAsRVWessARHvjz5DMAPhl2KR/XXuWFhLP4s8GU0I mA== -----END CERTIFICATE-----Generated at Sat Nov 14 22:12:41 2026 by rpki-client