$ rpki-client -vvvf rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/T0X6adnl9VCE3ckiiVJ2pkAjnBw.cer File: T0X6adnl9VCE3ckiiVJ2pkAjnBw.cer (raw, json) Hash identifier: /7HjyvKmlanDpJGyigQ6EhqLZQO7A9Lvc7ypmInVKgI= Subject key identifier: 4F:45:FA:69:D9:E5:F5:50:84:DD:C9:22:89:52:76:A6:40:23:9C:1C Authority key identifier: 74:01:65:A8:0D:10:71:97:0A:BC:09:C0:2B:71:C1:AC:7C:1D:6E:0E Certificate issuer: /CN=A90DC5BE/serialNumber=740165A80D1071970ABC09C02B71C1AC7C1D6E0E Certificate serial: 8473 Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer CRL Distribution Point: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl Manifest: rsync://rpki.apnic.net/member_repository/A9190818/753C3018909D11EF9717F650C4F9AE02/T0X6adnl9VCE3ckiiVJ2pkAjnBw.mft caRepository: rsync://rpki.apnic.net/member_repository/A9190818/753C3018909D11EF9717F650C4F9AE02/ Notify URL: https://rrdp.apnic.net/notification.xml Certificate not before: Mon 02 Nov 2026 14:11:46 +0000 Certificate not after: Mon 31 Jan 2028 00:00:00 +0000 Subordinate resources: IP: 160.191.40.0/23 Validation: OK Signature path: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 21 Nov 2026 14:50:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 33907 (0x8473) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A90DC5BE, serialNumber=740165A80D1071970ABC09C02B71C1AC7C1D6E0E Validity Not Before: Nov 2 14:11:46 2026 GMT Not After : Jan 31 00:00:00 2028 GMT Subject: CN=A9190818, serialNumber=4F45FA69D9E5F55084DDC922895276A640239C1C Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:0d:58:87:ef:13:fd:f4:72:1c:6b:b7:0f:89: 1a:51:24:69:5e:a1:c4:8d:fc:4c:1f:5b:8e:fc:fa: 6e:da:1f:a2:de:31:58:ce:03:a5:12:d5:9c:d7:32: e5:23:92:d9:be:b4:1a:14:a4:bd:92:d4:74:a5:f5: 6b:c3:69:6f:56:a3:c5:5c:3a:91:b5:f8:c2:9b:ee: cf:04:f1:48:25:9a:8a:0f:7d:47:fb:f3:4c:3e:6e: 58:fd:22:34:dc:01:65:4c:35:f8:a4:67:e0:a2:8f: 1f:e6:2c:df:b2:9c:54:8e:05:be:53:70:f0:0a:5b: 9a:08:ea:50:e5:27:e7:a3:40:e9:c6:9e:b0:5f:93: a8:e4:01:fe:cb:dd:9e:09:ce:3c:cb:b9:96:4d:15: ec:ea:ff:6e:e5:35:d1:dd:43:e4:ba:93:9a:1a:93: 94:24:fe:ca:05:15:b4:f6:20:5e:c7:73:e3:22:b4: ed:e5:a9:40:79:fe:07:3d:64:73:d9:14:05:8f:74: 39:a9:f6:59:75:4a:9a:da:de:08:61:55:b7:16:80: 73:b4:c8:19:ab:1c:41:51:12:7f:b4:3c:69:df:a8: 61:56:af:1d:c1:f7:57:05:30:e3:35:a6:b5:26:14: b5:14:90:b6:52:04:94:c2:a3:9d:b4:7d:e4:21:7f: 4d:b3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4F:45:FA:69:D9:E5:F5:50:84:DD:C9:22:89:52:76:A6:40:23:9C:1C X509v3 Authority Key Identifier: keyid:74:01:65:A8:0D:10:71:97:0A:BC:09:C0:2B:71:C1:AC:7C:1D:6E:0E X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: CA Repository - URI:rsync://rpki.apnic.net/member_repository/A9190818/753C3018909D11EF9717F650C4F9AE02/ RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A9190818/753C3018909D11EF9717F650C4F9AE02/T0X6adnl9VCE3ckiiVJ2pkAjnBw.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 160.191.40.0/23 Signature Algorithm: sha256WithRSAEncryption 2e:37:90:18:86:6e:50:f8:a8:50:12:92:70:65:bc:77:19:39: 5f:f8:2d:33:5a:6b:d2:65:4e:f2:fd:3b:29:6f:84:a7:aa:e1: 3f:4e:bb:c8:25:16:1a:4e:b9:aa:22:3e:02:62:3a:98:bd:e3: 34:53:c0:d8:7e:d1:e7:5f:84:c2:8c:a7:1f:b5:ad:f2:23:80: 66:49:bd:04:e4:a6:66:3a:c9:46:27:0e:a6:f0:56:63:4b:7f: 9d:4a:f1:68:50:f5:85:32:37:30:58:30:9d:ea:3a:ee:d9:be: 18:4c:dd:21:d9:41:3d:8e:ab:09:70:e4:ee:0f:59:d8:6a:2b: aa:33:4d:5d:90:d8:08:e4:b5:11:65:f1:94:ce:ae:f1:4d:cd: 22:60:e0:4b:10:31:66:ae:0b:03:2b:3a:a3:fc:57:9c:a6:b4: d7:9e:b5:96:9c:08:f3:70:ca:d2:35:60:6f:8e:30:f2:61:56: 5a:b2:c0:23:0d:b2:c0:3f:27:e6:5c:22:0d:99:78:3b:e7:62: ea:f6:83:d7:44:bf:50:83:b2:4f:3a:f8:5b:08:ce:63:d3:92: 30:d0:b8:ef:56:01:b1:06:32:a9:c3:e7:3a:07:2a:93:60:f7: ef:fd:00:4d:35:72:e5:7a:6b:5c:31:2c:d2:8e:0a:7d:1a:1d: 34:a3:50:90 -----BEGIN CERTIFICATE----- MIIF/jCCBOagAwIBAgIDAIRzMA0GCSqGSIb3DQEBCwUAMEYxETAPBgNVBAMTCEE5 MERDNUJFMTEwLwYDVQQFEyg3NDAxNjVBODBEMTA3MTk3MEFCQzA5QzAyQjcxQzFB QzdDMUQ2RTBFMB4XDTI2MTEwMjE0MTE0NloXDTI4MDEzMTAwMDAwMFowRjERMA8G A1UEAxMIQTkxOTA4MTgxMTAvBgNVBAUTKDRGNDVGQTY5RDlFNUY1NTA4NEREQzky Mjg5NTI3NkE2NDAyMzlDMUMwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDADViH7xP99HIca7cPiRpRJGleocSN/EwfW478+m7aH6LeMVjOA6US1ZzXMuUj ktm+tBoUpL2S1HSl9WvDaW9Wo8VcOpG1+MKb7s8E8UglmooPfUf780w+blj9IjTc AWVMNfikZ+Cijx/mLN+ynFSOBb5TcPAKW5oI6lDlJ+ejQOnGnrBfk6jkAf7L3Z4J zjzLuZZNFezq/27lNdHdQ+S6k5oak5Qk/soFFbT2IF7Hc+MitO3lqUB5/gc9ZHPZ FAWPdDmp9ll1Spra3ghhVbcWgHO0yBmrHEFREn+0PGnfqGFWrx3B91cFMOM1prUm FLUUkLZSBJTCo520feQhf02zAgMBAAGjggLzMIIC7zAdBgNVHQ4EFgQUT0X6adnl 9VCE3ckiiVJ2pkAjnBwwHwYDVR0jBBgwFoAUdAFlqA0QcZcKvAnAK3HBrHwdbg4w DgYDVR0PAQH/BAQDAgEGMA8GA1UdEwEB/wQFMAMBAf8wcwYDVR0fBGwwajBooGag ZIZicnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2 NjExRTI4QUM4ODM3QzcyRkQxRkYyL2RBRmxxQTBRY1pjS3ZBbkFLM0hCckh3ZGJn NC5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvOTgwNjUyRTBCNzdFMTFFN0E5NkEzOTUyMUE0 RjRGQjQvZEFGbHFBMFFjWmNLdkFuQUszSEJySHdkYmc0LmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwggEoBggrBgEFBQcBCwSCARowggEWMF8GCCsGAQUF BzAFhlNyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5 MTkwODE4Lzc1M0MzMDE4OTA5RDExRUY5NzE3RjY1MEM0RjlBRTAyLzB+BggrBgEF BQcwCoZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9B OTE5MDgxOC83NTNDMzAxODkwOUQxMUVGOTcxN0Y2NTBDNEY5QUUwMi9UMFg2YWRu bDlWQ0UzY2tpaVZKMnBrQWpuQncubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3Jy ZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8EEDAO MAwEAgABMAYDBAGgvygwDQYJKoZIhvcNAQELBQADggEBAC43kBiGblD4qFASknBl vHcZOV/4LTNaa9JlTvL9OylvhKeq4T9Ou8glFhpOuaoiPgJiOpi94zRTwNh+0edf hMKMpx+1rfIjgGZJvQTkpmY6yUYnDqbwVmNLf51K8WhQ9YUyNzBYMJ3qOu7ZvhhM 3SHZQT2Oqwlw5O4PWdhqK6ozTV2Q2AjktRFl8ZTOrvFNzSJg4EsQMWauCwMrOqP8 V5ymtNeetZacCPNwytI1YG+OMPJhVlqywCMNssA/J+ZcIg2ZeDvnYur2g9dEv1CD sk86+FsIzmPTkjDQuO9WAbEGMqnD5zoHKpNg9+/9AE01cuV6a1wxLNKOCn0aHTSj UJA= -----END CERTIFICATE-----Generated at Sat Nov 14 20:54:24 2026 by rpki-client