$ rpki-client -vvvf rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/DC9FtsiGIjJC7Jv5OzRpf2Td9oA.cer File: DC9FtsiGIjJC7Jv5OzRpf2Td9oA.cer (raw, json) Hash identifier: xwI9/cuHeEcmzYTCfzdqp3J46tow9fRIdLLZIqEenyQ= Subject key identifier: 0C:2F:45:B6:C8:86:22:32:42:EC:9B:F9:3B:34:69:7F:64:DD:F6:80 Authority key identifier: 74:01:65:A8:0D:10:71:97:0A:BC:09:C0:2B:71:C1:AC:7C:1D:6E:0E Certificate issuer: /CN=A90DC5BE/serialNumber=740165A80D1071970ABC09C02B71C1AC7C1D6E0E Certificate serial: 8492 Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer CRL Distribution Point: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl Manifest: rsync://rpki.apnic.net/member_repository/A9193B7A/C08506927DBB11F0BC4D7761C4F9AE02/DC9FtsiGIjJC7Jv5OzRpf2Td9oA.mft caRepository: rsync://rpki.apnic.net/member_repository/A9193B7A/C08506927DBB11F0BC4D7761C4F9AE02/ Notify URL: https://rrdp.apnic.net/notification.xml Certificate not before: Tue 03 Nov 2026 13:28:32 +0000 Certificate not after: Thu 30 Dec 2027 00:00:00 +0000 Subordinate resources: IP: 65.181.114.0/23 Validation: OK Signature path: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 22 Nov 2026 04:25:46 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 33938 (0x8492) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A90DC5BE, serialNumber=740165A80D1071970ABC09C02B71C1AC7C1D6E0E Validity Not Before: Nov 3 13:28:32 2026 GMT Not After : Dec 30 00:00:00 2027 GMT Subject: CN=A9193B7A, serialNumber=0C2F45B6C886223242EC9BF93B34697F64DDF680 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:e4:ee:23:6d:f1:dd:c8:86:fe:9c:a9:f6:55: 4e:c6:de:82:7c:73:b7:3b:24:89:aa:05:3d:89:a5: d0:e7:60:ed:05:fa:16:9e:7d:99:f2:ed:97:31:8b: 9b:50:56:c9:7b:66:27:55:e1:8b:7d:81:05:b0:af: bb:25:32:5f:f1:86:d6:b7:20:e9:ba:a0:21:05:9c: c6:42:b1:d9:2d:6d:99:d2:57:bc:48:af:a2:9a:52: 13:31:95:fc:4a:6b:88:71:8c:c3:10:e1:16:3b:3f: 94:f2:1e:51:a3:28:83:3f:ed:7e:e5:53:f6:05:25: 43:6c:5f:1f:6a:34:06:1d:c6:57:f5:2e:56:88:13: c8:00:a1:19:30:ce:61:d9:9d:9b:44:d3:40:f8:1a: ca:ca:42:1a:06:e5:38:82:76:93:ff:0f:1d:46:c7: d4:b2:1e:e9:2d:3a:1c:0a:b0:2b:9b:b4:cd:7e:48: 90:d0:c5:54:34:1f:18:15:59:df:d7:e3:ff:42:e0: 95:6d:29:5d:0a:e7:c7:2f:dd:32:f1:46:ef:83:ab: 73:ce:dd:c4:74:ef:f3:17:d1:3c:f3:fa:82:76:ed: 83:aa:39:c9:44:cd:cb:b7:f1:33:8d:69:dc:f5:49: 79:5a:18:78:42:66:f6:98:c5:14:5b:02:ce:f9:24: 2d:45 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0C:2F:45:B6:C8:86:22:32:42:EC:9B:F9:3B:34:69:7F:64:DD:F6:80 X509v3 Authority Key Identifier: keyid:74:01:65:A8:0D:10:71:97:0A:BC:09:C0:2B:71:C1:AC:7C:1D:6E:0E X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: CA Repository - URI:rsync://rpki.apnic.net/member_repository/A9193B7A/C08506927DBB11F0BC4D7761C4F9AE02/ RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A9193B7A/C08506927DBB11F0BC4D7761C4F9AE02/DC9FtsiGIjJC7Jv5OzRpf2Td9oA.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 65.181.114.0/23 Signature Algorithm: sha256WithRSAEncryption 86:47:a7:cd:91:d3:1d:ee:5b:a8:2c:ff:9a:ef:47:39:3f:46: a3:9e:f2:0b:ab:65:89:6e:cf:84:3c:17:76:ef:ee:62:cd:57: 3e:6f:8f:e7:e4:a4:bd:43:10:bb:18:b6:cc:70:77:ee:ce:df: 9b:bc:57:48:99:17:97:d1:c9:32:5d:af:3d:4d:0a:dc:5e:1b: 19:cf:c3:d0:26:7f:5e:40:5a:8a:84:8c:38:95:00:ec:5b:33: 65:f6:b3:c7:95:01:3f:bc:4a:ab:cd:fe:35:d3:bf:1b:ec:f4: 9f:27:e2:1d:d5:6a:77:09:b5:00:f3:34:a7:cb:56:44:e7:18: c8:ac:07:ee:eb:3f:c1:59:79:66:fb:e7:c1:ba:5a:d3:8f:a8: 58:1d:a7:a8:b5:3e:29:23:b9:55:aa:6c:4c:75:a1:6a:5d:23: 1f:7a:9d:a8:0b:43:e7:b3:c0:78:0d:5c:fd:44:bd:1e:a2:34: 34:fe:5a:82:a8:6d:ea:33:86:11:62:3d:b7:d1:19:d2:b0:3d: db:06:51:17:db:7f:a8:a7:d9:78:f6:81:b6:b8:0e:d2:c7:ff: d5:a7:a3:1c:38:7e:81:c3:75:6d:db:d8:fe:e4:e0:da:cf:12: d6:b5:9a:a1:80:4a:6f:32:3a:1a:56:70:1a:15:5a:e6:53:50: 8a:ea:8a:50 -----BEGIN CERTIFICATE----- MIIF/jCCBOagAwIBAgIDAISSMA0GCSqGSIb3DQEBCwUAMEYxETAPBgNVBAMTCEE5 MERDNUJFMTEwLwYDVQQFEyg3NDAxNjVBODBEMTA3MTk3MEFCQzA5QzAyQjcxQzFB QzdDMUQ2RTBFMB4XDTI2MTEwMzEzMjgzMloXDTI3MTIzMDAwMDAwMFowRjERMA8G A1UEAxMIQTkxOTNCN0ExMTAvBgNVBAUTKDBDMkY0NUI2Qzg4NjIyMzI0MkVDOUJG OTNCMzQ2OTdGNjREREY2ODAwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQC65O4jbfHdyIb+nKn2VU7G3oJ8c7c7JImqBT2JpdDnYO0F+haefZny7Zcxi5tQ Vsl7ZidV4Yt9gQWwr7slMl/xhta3IOm6oCEFnMZCsdktbZnSV7xIr6KaUhMxlfxK a4hxjMMQ4RY7P5TyHlGjKIM/7X7lU/YFJUNsXx9qNAYdxlf1LlaIE8gAoRkwzmHZ nZtE00D4GsrKQhoG5TiCdpP/Dx1Gx9SyHuktOhwKsCubtM1+SJDQxVQ0HxgVWd/X 4/9C4JVtKV0K58cv3TLxRu+Dq3PO3cR07/MX0Tzz+oJ27YOqOclEzcu38TONadz1 SXlaGHhCZvaYxRRbAs75JC1FAgMBAAGjggLzMIIC7zAdBgNVHQ4EFgQUDC9FtsiG IjJC7Jv5OzRpf2Td9oAwHwYDVR0jBBgwFoAUdAFlqA0QcZcKvAnAK3HBrHwdbg4w DgYDVR0PAQH/BAQDAgEGMA8GA1UdEwEB/wQFMAMBAf8wcwYDVR0fBGwwajBooGag ZIZicnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2 NjExRTI4QUM4ODM3QzcyRkQxRkYyL2RBRmxxQTBRY1pjS3ZBbkFLM0hCckh3ZGJn NC5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvOTgwNjUyRTBCNzdFMTFFN0E5NkEzOTUyMUE0 RjRGQjQvZEFGbHFBMFFjWmNLdkFuQUszSEJySHdkYmc0LmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwggEoBggrBgEFBQcBCwSCARowggEWMF8GCCsGAQUF BzAFhlNyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5 MTkzQjdBL0MwODUwNjkyN0RCQjExRjBCQzRENzc2MUM0RjlBRTAyLzB+BggrBgEF BQcwCoZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9B OTE5M0I3QS9DMDg1MDY5MjdEQkIxMUYwQkM0RDc3NjFDNEY5QUUwMi9EQzlGdHNp R0lqSkM3SnY1T3pScGYyVGQ5b0EubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3Jy ZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8EEDAO MAwEAgABMAYDBAFBtXIwDQYJKoZIhvcNAQELBQADggEBAIZHp82R0x3uW6gs/5rv Rzk/RqOe8gurZYluz4Q8F3bv7mLNVz5vj+fkpL1DELsYtsxwd+7O35u8V0iZF5fR yTJdrz1NCtxeGxnPw9Amf15AWoqEjDiVAOxbM2X2s8eVAT+8SqvN/jXTvxvs9J8n 4h3VancJtQDzNKfLVkTnGMisB+7rP8FZeWb758G6WtOPqFgdp6i1PikjuVWqbEx1 oWpdIx96nagLQ+ezwHgNXP1EvR6iNDT+WoKobeozhhFiPbfRGdKwPdsGURfbf6in 2Xj2gba4DtLH/9Wnoxw4foHDdW3b2P7k4NrPEta1mqGASm8yOhpWcBoVWuZTUIrq ilA= -----END CERTIFICATE-----Generated at Sun Nov 15 12:37:30 2026 by rpki-client