$ rpki-client -vvvf rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/fHyggZUNrvx8VLjERpi0jo18abg.cer File: fHyggZUNrvx8VLjERpi0jo18abg.cer (raw, json) Hash identifier: yBxGHLaJnU9TsteiN8BgRb2r9wi+MtFApfAeYMXqe80= Subject key identifier: 7C:7C:A0:81:95:0D:AE:FC:7C:54:B8:C4:46:98:B4:8E:8D:7C:69:B8 Authority key identifier: 74:01:65:A8:0D:10:71:97:0A:BC:09:C0:2B:71:C1:AC:7C:1D:6E:0E Certificate issuer: /CN=A90DC5BE/serialNumber=740165A80D1071970ABC09C02B71C1AC7C1D6E0E Certificate serial: 8421 Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer CRL Distribution Point: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl Manifest: rsync://rpki.apnic.net/member_repository/A9136DD6/D362A1CA3B3711E9A038AB2AC4F9AE02/fHyggZUNrvx8VLjERpi0jo18abg.mft caRepository: rsync://rpki.apnic.net/member_repository/A9136DD6/D362A1CA3B3711E9A038AB2AC4F9AE02/ Notify URL: https://rrdp.apnic.net/notification.xml Certificate not before: Thu 29 Oct 2026 12:40:41 +0000 Certificate not after: Mon 31 Jan 2028 00:00:00 +0000 Subordinate resources: IP: 64.45.0.0/18 IP: 129.126.0.0/16 Validation: OK Signature path: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 22 Nov 2026 14:50:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 33825 (0x8421) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A90DC5BE, serialNumber=740165A80D1071970ABC09C02B71C1AC7C1D6E0E Validity Not Before: Oct 29 12:40:41 2026 GMT Not After : Jan 31 00:00:00 2028 GMT Subject: CN=A9136DD6, serialNumber=7C7CA081950DAEFC7C54B8C44698B48E8D7C69B8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d0:bd:82:cc:8a:29:ce:26:54:bd:53:5e:6d:79: 2c:37:d1:ff:fd:cc:f5:90:15:fe:a7:dc:fb:84:a1: 5f:a5:da:a3:3e:a9:5e:2a:57:0f:5e:6f:d8:fe:85: 0c:a7:6a:5c:07:08:56:c3:3f:9b:9d:f8:97:f6:75: a9:84:62:a0:d6:86:36:37:49:53:08:81:92:8f:65: b4:90:61:25:8f:77:92:ff:30:f5:f8:9d:4e:79:fd: 4b:24:57:f8:47:9e:b5:0c:be:9c:d3:f1:3b:3a:aa: 55:95:13:ea:e3:71:ce:73:6e:22:bb:c2:35:2c:6b: 1a:01:55:63:41:31:88:a4:1d:17:63:3e:e6:2e:c3: 6b:51:05:be:38:95:98:6f:a1:6a:3b:f7:b0:33:01: da:26:c2:b5:12:a7:5f:9c:d3:ef:30:bb:10:0c:44: b0:35:8c:fc:fa:42:5c:da:fe:6f:c1:b0:4e:46:5b: 72:b6:0c:20:c6:50:15:a6:3c:12:7b:d2:9d:1e:92: d2:75:5b:ea:7f:b5:d6:a9:fc:e4:8c:bf:79:c2:8b: 77:b3:e7:e5:0f:9c:e3:37:ae:78:54:08:10:b6:00: d2:a5:3c:4e:70:e6:ea:0e:02:f0:a4:5a:0d:49:38: 38:66:dc:a8:9b:4a:b0:e4:f6:94:8d:0e:99:38:77: 02:5b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7C:7C:A0:81:95:0D:AE:FC:7C:54:B8:C4:46:98:B4:8E:8D:7C:69:B8 X509v3 Authority Key Identifier: keyid:74:01:65:A8:0D:10:71:97:0A:BC:09:C0:2B:71:C1:AC:7C:1D:6E:0E X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: CA Repository - URI:rsync://rpki.apnic.net/member_repository/A9136DD6/D362A1CA3B3711E9A038AB2AC4F9AE02/ RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A9136DD6/D362A1CA3B3711E9A038AB2AC4F9AE02/fHyggZUNrvx8VLjERpi0jo18abg.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 64.45.0.0/18 129.126.0.0/16 Signature Algorithm: sha256WithRSAEncryption 76:b7:5c:2b:9b:08:24:2c:9e:56:14:9f:5e:ea:ac:15:d8:ef: 79:ff:25:69:fa:3f:58:98:93:d7:59:0c:5c:2f:ac:26:85:6f: 43:6f:06:dc:58:c6:f5:00:22:b9:43:c8:ea:57:72:77:e2:80: 2c:7b:a9:3c:39:87:ff:ff:2b:fa:11:33:15:b0:9c:48:89:a8: a5:79:ed:58:77:a2:4c:42:a1:75:59:47:1a:5d:09:68:bf:9b: 03:27:88:ed:e2:d6:3e:75:0d:2c:28:d9:de:eb:55:05:bf:85: 01:b9:10:c5:aa:cd:90:b9:d6:ba:24:57:d3:35:3b:d6:96:6d: f0:78:6d:3b:4d:e6:27:5a:9b:4f:54:6c:f9:03:3b:d1:82:80: 78:ad:37:58:ee:a8:c8:ae:4c:74:a9:26:4c:73:8c:80:e7:e7: d5:c6:15:de:9f:d4:60:fe:bb:c2:9d:da:d1:c7:ab:67:12:a9: 39:18:f2:45:19:46:fb:b4:fc:49:50:f8:14:a3:92:f9:4b:ac: 87:be:42:b3:6d:17:91:bf:24:72:eb:db:38:f0:0f:e1:4e:81: 99:6b:27:89:85:e3:5a:16:96:b5:12:26:f8:64:72:96:94:49: ad:87:d0:15:aa:4a:e6:c8:dd:c7:ba:1f:9f:78:7c:2c:55:7a: a0:6e:c8:12 -----BEGIN CERTIFICATE----- MIIGAzCCBOugAwIBAgIDAIQhMA0GCSqGSIb3DQEBCwUAMEYxETAPBgNVBAMTCEE5 MERDNUJFMTEwLwYDVQQFEyg3NDAxNjVBODBEMTA3MTk3MEFCQzA5QzAyQjcxQzFB QzdDMUQ2RTBFMB4XDTI2MTAyOTEyNDA0MVoXDTI4MDEzMTAwMDAwMFowRjERMA8G A1UEAxMIQTkxMzZERDYxMTAvBgNVBAUTKDdDN0NBMDgxOTUwREFFRkM3QzU0QjhD NDQ2OThCNDhFOEQ3QzY5QjgwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDQvYLMiinOJlS9U15teSw30f/9zPWQFf6n3PuEoV+l2qM+qV4qVw9eb9j+hQyn alwHCFbDP5ud+Jf2damEYqDWhjY3SVMIgZKPZbSQYSWPd5L/MPX4nU55/UskV/hH nrUMvpzT8Ts6qlWVE+rjcc5zbiK7wjUsaxoBVWNBMYikHRdjPuYuw2tRBb44lZhv oWo797AzAdomwrUSp1+c0+8wuxAMRLA1jPz6Qlza/m/BsE5GW3K2DCDGUBWmPBJ7 0p0ektJ1W+p/tdap/OSMv3nCi3ez5+UPnOM3rnhUCBC2ANKlPE5w5uoOAvCkWg1J ODhm3KibSrDk9pSNDpk4dwJbAgMBAAGjggL4MIIC9DAdBgNVHQ4EFgQUfHyggZUN rvx8VLjERpi0jo18abgwHwYDVR0jBBgwFoAUdAFlqA0QcZcKvAnAK3HBrHwdbg4w DgYDVR0PAQH/BAQDAgEGMA8GA1UdEwEB/wQFMAMBAf8wcwYDVR0fBGwwajBooGag ZIZicnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2 NjExRTI4QUM4ODM3QzcyRkQxRkYyL2RBRmxxQTBRY1pjS3ZBbkFLM0hCckh3ZGJn NC5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvOTgwNjUyRTBCNzdFMTFFN0E5NkEzOTUyMUE0 RjRGQjQvZEFGbHFBMFFjWmNLdkFuQUszSEJySHdkYmc0LmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwggEoBggrBgEFBQcBCwSCARowggEWMF8GCCsGAQUF BzAFhlNyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5 MTM2REQ2L0QzNjJBMUNBM0IzNzExRTlBMDM4QUIyQUM0RjlBRTAyLzB+BggrBgEF BQcwCoZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9B OTEzNkRENi9EMzYyQTFDQTNCMzcxMUU5QTAzOEFCMkFDNEY5QUUwMi9mSHlnZ1pV TnJ2eDhWTGpFUnBpMGpvMThhYmcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3Jy ZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwJAYIKwYBBQUHAQcBAf8EFTAT MBEEAgABMAsDBAZALQADAwCBfjANBgkqhkiG9w0BAQsFAAOCAQEAdrdcK5sIJCye VhSfXuqsFdjvef8lafo/WJiT11kMXC+sJoVvQ28G3FjG9QAiuUPI6ldyd+KALHup PDmH//8r+hEzFbCcSImopXntWHeiTEKhdVlHGl0JaL+bAyeI7eLWPnUNLCjZ3utV Bb+FAbkQxarNkLnWuiRX0zU71pZt8HhtO03mJ1qbT1Rs+QM70YKAeK03WO6oyK5M dKkmTHOMgOfn1cYV3p/UYP67wp3a0cerZxKpORjyRRlG+7T8SVD4FKOS+Uush75C s20Xkb8kcuvbOPAP4U6BmWsniYXjWhaWtRIm+GRylpRJrYfQFapK5sjdx7ofn3h8 LFV6oG7IEg== -----END CERTIFICATE-----Generated at Sun Nov 15 21:51:55 2026 by rpki-client