$ rpki-client -vvvf rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/vShmMlc2GvKb0hjT4Qz78352Kaw.cer File: vShmMlc2GvKb0hjT4Qz78352Kaw.cer (raw, json) Hash identifier: B9WCbBtI45bB5V6WMb/15xIFDJYQzHIVTugKykd4Ep8= Subject key identifier: BD:28:66:32:57:36:1A:F2:9B:D2:18:D3:E1:0C:FB:F3:7E:76:29:AC Authority key identifier: 0C:FC:E7:78:57:FC:F0:1F:39:D9:9A:62:B4:AA:62:E6:15:9E:76:F8 Certificate issuer: /CN=A90DC5BE/serialNumber=0CFCE77857FCF01F39D99A62B4AA62E6159E76F8 Certificate serial: 5603 Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DPzneFf88B852ZpitKpi5hWedvg.cer CRL Distribution Point: rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.crl Manifest: rsync://rpki.apnic.net/member_repository/A918D3DF/3CFFCA94CDB711F192B14700F865CEF9/vShmMlc2GvKb0hjT4Qz78352Kaw.mft caRepository: rsync://rpki.apnic.net/member_repository/A918D3DF/3CFFCA94CDB711F192B14700F865CEF9/ Notify URL: https://rrdp.apnic.net/notification.xml Certificate not before: Thu 22 Oct 2026 01:23:54 +0000 Certificate not after: Sat 01 May 2027 00:00:00 +0000 Subordinate resources: IP: 151.158.20.0/23 Validation: OK Signature path: rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.crl rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DPzneFf88B852ZpitKpi5hWedvg.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 21 Nov 2026 14:50:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 22019 (0x5603) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A90DC5BE, serialNumber=0CFCE77857FCF01F39D99A62B4AA62E6159E76F8 Validity Not Before: Oct 22 01:23:54 2026 GMT Not After : May 1 00:00:00 2027 GMT Subject: CN=A918D3DF, serialNumber=BD28663257361AF29BD218D3E10CFBF37E7629AC Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dd:ce:66:1d:68:36:4d:0f:ad:3a:1c:b0:9a:7e: 39:e8:b3:f5:1b:fe:28:65:75:bd:56:16:53:dc:59: a5:c1:d0:9d:e4:c2:fe:9f:a4:f1:41:35:ec:16:e0: 86:9e:a8:c1:72:a1:95:88:cc:3d:4a:f4:dd:04:88: 4d:78:7d:79:d5:a2:84:ed:15:9b:5c:b1:db:04:70: aa:42:c1:a4:69:bc:1a:f9:b2:47:e4:d6:a1:d9:a4: f6:df:97:4d:80:c7:d8:1f:73:42:d3:b1:20:a5:1b: c4:72:a7:d0:78:e8:78:03:63:77:0e:25:89:f2:b3: 50:f8:3b:e6:c7:9e:94:0f:10:ab:bb:62:5e:08:ff: 7b:ef:26:8e:59:17:74:2c:8e:57:d8:fd:d0:8e:5a: 88:da:18:cb:66:86:13:7a:b5:ce:13:18:3c:9c:92: 64:0d:38:64:bb:5c:1b:88:f7:af:fa:98:fb:54:ee: ca:19:26:79:69:16:97:67:39:ee:9f:65:2a:a1:09: 26:04:34:39:8c:e4:a2:18:96:14:d3:a0:30:98:4b: af:fa:d7:b5:7a:6e:d6:26:45:68:53:e9:1c:95:f5: 49:1a:41:20:f6:21:19:b7:1f:04:a1:07:cf:cc:67: 2a:9d:41:f5:7e:1e:f5:4b:1f:7e:36:41:71:88:05: 16:29 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BD:28:66:32:57:36:1A:F2:9B:D2:18:D3:E1:0C:FB:F3:7E:76:29:AC X509v3 Authority Key Identifier: keyid:0C:FC:E7:78:57:FC:F0:1F:39:D9:9A:62:B4:AA:62:E6:15:9E:76:F8 X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DPzneFf88B852ZpitKpi5hWedvg.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: CA Repository - URI:rsync://rpki.apnic.net/member_repository/A918D3DF/3CFFCA94CDB711F192B14700F865CEF9/ RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A918D3DF/3CFFCA94CDB711F192B14700F865CEF9/vShmMlc2GvKb0hjT4Qz78352Kaw.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 151.158.20.0/23 Signature Algorithm: sha256WithRSAEncryption 96:b6:99:51:66:42:16:60:9e:38:ec:78:67:c6:e9:74:0d:de: 10:1d:e9:43:91:f2:dc:4a:22:ae:07:df:7e:25:eb:97:00:a4: ae:c7:f0:5d:5a:d6:eb:bf:51:d7:9a:58:84:3f:a9:59:03:da: 53:0f:08:69:46:82:de:b9:08:c1:37:01:89:15:99:21:da:54: 79:5a:7f:db:07:b6:c9:9a:91:4f:12:ac:3a:50:1b:d0:cc:64: 73:71:d1:fb:4a:4c:28:25:fd:3f:72:2b:0c:29:67:72:37:c4: f1:98:22:7a:9c:ec:b0:de:28:94:a8:5c:21:7b:a3:c2:87:7f: 8a:81:b3:34:b7:a4:b5:00:fe:c0:c4:78:f4:4d:f8:ee:02:3f: ab:12:fe:38:d5:ec:03:dc:f1:10:41:e1:ea:24:ef:ee:08:b8: 3f:ba:27:98:50:cd:6f:95:a6:2c:90:9f:e6:5b:d4:74:8d:6a: 04:75:b1:27:54:7d:da:55:4b:49:73:3d:e0:dd:c5:08:7d:14: c8:ba:c8:a3:b3:a8:6f:15:09:3c:49:10:bf:78:6d:89:02:a2: 90:00:fc:e8:47:9c:d2:53:c9:12:e0:07:96:68:8e:e2:37:31: 3f:51:2b:90:a4:2f:bd:4f:07:b1:65:68:4e:9f:f0:05:19:b8: 20:b9:44:fe -----BEGIN CERTIFICATE----- MIIF/TCCBOWgAwIBAgICVgMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkw REM1QkUxMTAvBgNVBAUTKDBDRkNFNzc4NTdGQ0YwMUYzOUQ5OUE2MkI0QUE2MkU2 MTU5RTc2RjgwHhcNMjYxMDIyMDEyMzU0WhcNMjcwNTAxMDAwMDAwWjBGMREwDwYD VQQDEwhBOTE4RDNERjExMC8GA1UEBRMoQkQyODY2MzI1NzM2MUFGMjlCRDIxOEQz RTEwQ0ZCRjM3RTc2MjlBQzCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEB AN3OZh1oNk0PrTocsJp+Oeiz9Rv+KGV1vVYWU9xZpcHQneTC/p+k8UE17Bbghp6o wXKhlYjMPUr03QSITXh9edWihO0Vm1yx2wRwqkLBpGm8GvmyR+TWodmk9t+XTYDH 2B9zQtOxIKUbxHKn0HjoeANjdw4lifKzUPg75seelA8Qq7tiXgj/e+8mjlkXdCyO V9j90I5aiNoYy2aGE3q1zhMYPJySZA04ZLtcG4j3r/qY+1TuyhkmeWkWl2c57p9l KqEJJgQ0OYzkohiWFNOgMJhLr/rXtXpu1iZFaFPpHJX1SRpBIPYhGbcfBKEHz8xn Kp1B9X4e9UsffjZBcYgFFikCAwEAAaOCAvMwggLvMB0GA1UdDgQWBBS9KGYyVzYa 8pvSGNPhDPvzfnYprDAfBgNVHSMEGDAWgBQM/Od4V/zwHznZmmK0qmLmFZ52+DAO BgNVHQ8BAf8EBAMCAQYwDwYDVR0TAQH/BAUwAwEB/zBzBgNVHR8EbDBqMGigZqBk hmJyc3luYzovL3Jwa2kuYXBuaWMubmV0L3JlcG9zaXRvcnkvQjMyMkE1RjQxRDY2 MTFFMkEzRjI3RjdDNzJGRDFGRjIvRFB6bmVGZjg4Qjg1MlpwaXRLcGk1aFdlZHZn LmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5h cG5pYy5uZXQvcmVwb3NpdG9yeS85ODA2NTJFMEI3N0UxMUU3QTk2QTM5NTIxQTRG NEZCNC9EUHpuZUZmODhCODUyWnBpdEtwaTVoV2VkdmcuY2VyMEoGA1UdIAEB/wRA MD4wPAYIKwYBBQUHDgIwMDAuBggrBgEFBQcCARYiaHR0cHM6Ly93d3cuYXBuaWMu bmV0L1JQS0kvQ1BTLnBkZjCCASgGCCsGAQUFBwELBIIBGjCCARYwXwYIKwYBBQUH MAWGU3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx OEQzREYvM0NGRkNBOTRDREI3MTFGMTkyQjE0NzAwRjg2NUNFRjkvMH4GCCsGAQUF BzAKhnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5 MThEM0RGLzNDRkZDQTk0Q0RCNzExRjE5MkIxNDcwMEY4NjVDRUY5L3ZTaG1NbGMy R3ZLYjBoalQ0UXo3ODM1Mkthdy5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJk cC5hcG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAfBggrBgEFBQcBBwEB/wQQMA4w DAQCAAEwBgMEAZeeFDANBgkqhkiG9w0BAQsFAAOCAQEAlraZUWZCFmCeOOx4Z8bp dA3eEB3pQ5Hy3EoirgfffiXrlwCkrsfwXVrW679R15pYhD+pWQPaUw8IaUaC3rkI wTcBiRWZIdpUeVp/2we2yZqRTxKsOlAb0Mxkc3HR+0pMKCX9P3IrDClncjfE8Zgi epzssN4olKhcIXujwod/ioGzNLektQD+wMR49E347gI/qxL+ONXsA9zxEEHh6iTv 7gi4P7onmFDNb5WmLJCf5lvUdI1qBHWxJ1R92lVLSXM94N3FCH0UyLrIo7OobxUJ PEkQv3htiQKikAD86Eec0lPJEuAHlmiO4jcxP1ErkKQvvU8HsWVoTp/wBRm4ILlE /g== -----END CERTIFICATE-----Generated at Sun Nov 15 00:23:12 2026 by rpki-client