$ rpki-client -vvvf rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5sRskdEtWFoSsFVpYh3uGtP4kI4.cer File: 5sRskdEtWFoSsFVpYh3uGtP4kI4.cer (raw, json) Hash identifier: /TdxAC9j6bhGlPcdIJvLtI2A9zGHdFDVFk8pB/th2MY= Subject key identifier: E6:C4:6C:91:D1:2D:58:5A:12:B0:55:69:62:1D:EE:1A:D3:F8:90:8E Authority key identifier: 0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F Certificate issuer: /CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F Certificate serial: 02E582 Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer CRL Distribution Point: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl Manifest: rsync://rpki.apnic.net/member_repository/A917A362/7CBA4C4C726E11EE9FE35061C4F9AE02/5sRskdEtWFoSsFVpYh3uGtP4kI4.mft caRepository: rsync://rpki.apnic.net/member_repository/A917A362/7CBA4C4C726E11EE9FE35061C4F9AE02/ Notify URL: https://rrdp.apnic.net/notification.xml Certificate not before: Fri 06 Nov 2026 13:10:37 +0000 Certificate not after: Thu 30 Dec 2027 00:00:00 +0000 Subordinate resources: IP: 103.130.12.0/22 IP: 2403:ae40::/32 Validation: OK Signature path: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 22 Nov 2026 17:14:55 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 189826 (0x2e582) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A90DC5BE, serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F Validity Not Before: Nov 6 13:10:37 2026 GMT Not After : Dec 30 00:00:00 2027 GMT Subject: CN=A917A362, serialNumber=E6C46C91D12D585A12B05569621DEE1AD3F8908E Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:e4:8e:43:d3:3a:62:d4:f1:a7:bd:08:59:d4: d7:53:01:9a:cc:80:d5:c2:76:ad:11:1e:62:22:ab: 4f:2d:ba:a0:f7:06:93:be:31:32:f1:41:d7:58:6f: 34:14:7e:62:42:65:d6:93:28:26:16:e6:ea:53:0f: c9:81:31:98:00:3a:9a:e4:a0:1c:7f:8f:13:85:9d: 7d:15:ff:83:ab:25:4a:7f:07:28:a5:9c:38:23:aa: 42:01:e4:93:b9:64:f2:c3:24:71:66:3e:2b:a4:ce: 07:39:58:54:76:82:1f:de:67:6c:b6:b7:87:d0:fc: 8b:b0:f5:19:88:18:ff:0c:0d:3d:b1:d2:22:b6:8e: fb:8a:dc:4c:c1:03:d7:39:39:aa:1a:a1:4a:f7:30: 19:6c:e6:0a:78:c7:04:8a:bc:62:56:bf:31:5d:e5: bd:9c:90:94:f3:5a:04:ac:ce:88:e2:b1:64:3c:74: 01:9e:7a:ef:d8:fc:92:23:80:23:05:65:09:cc:1e: ab:0a:1f:54:3f:e1:89:02:3c:f2:2e:f7:8a:f7:1b: 64:b5:82:b6:f0:24:75:e7:13:a9:f2:0c:16:4f:0f: 24:e2:a8:3d:67:0e:59:2b:f5:61:64:79:50:de:9d: 1d:3c:aa:21:cc:f5:9d:45:54:43:af:71:c3:96:49: b4:91 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E6:C4:6C:91:D1:2D:58:5A:12:B0:55:69:62:1D:EE:1A:D3:F8:90:8E X509v3 Authority Key Identifier: keyid:0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: CA Repository - URI:rsync://rpki.apnic.net/member_repository/A917A362/7CBA4C4C726E11EE9FE35061C4F9AE02/ RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A917A362/7CBA4C4C726E11EE9FE35061C4F9AE02/5sRskdEtWFoSsFVpYh3uGtP4kI4.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 103.130.12.0/22 IPv6: 2403:ae40::/32 Signature Algorithm: sha256WithRSAEncryption b9:db:cb:07:14:87:8b:d5:49:3e:85:19:53:40:e7:8a:1f:cc: b7:5b:f3:9c:b7:83:4d:49:d5:1d:95:cd:66:82:5e:74:f4:93: a8:37:a7:77:82:49:49:c5:10:0f:84:93:f2:94:d7:a5:f1:6a: 4c:f1:89:4b:f2:ad:d2:5c:5f:71:9c:5b:ac:1d:f5:41:83:a1: db:8f:85:57:83:c5:47:8d:7c:c8:5f:e8:0f:f5:f1:e9:60:46: bd:03:81:37:e1:b0:5c:1e:12:8a:53:56:47:de:7d:6e:2b:d0: 9f:f5:a8:03:e1:de:4e:ec:24:83:f2:f4:88:01:42:6e:13:6d: 2c:0a:aa:da:e0:2a:31:9e:82:ba:31:bd:21:58:f0:fc:f6:6a: 46:b0:21:5f:58:aa:c7:31:e4:e0:e8:09:15:35:80:d0:dd:84: ff:1f:3e:c9:f4:32:a9:af:ab:97:34:8a:a1:0e:9c:62:82:91: 5f:2a:85:f5:32:1a:52:b4:a8:ae:6a:56:95:6b:62:0e:a8:ee: 5e:2c:ab:89:05:5c:72:b7:b2:eb:fb:f2:1d:19:e0:c6:ec:30: d4:ff:f7:03:05:0f:b9:13:4e:fd:ba:46:3a:f1:42:39:68:70: 73:51:78:cc:d0:d5:4e:e5:0c:b1:5d:9d:9c:d7:b9:b6:5f:da: 23:17:ac:e2 -----BEGIN CERTIFICATE----- MIIGDTCCBPWgAwIBAgIDAuWCMA0GCSqGSIb3DQEBCwUAMEYxETAPBgNVBAMTCEE5 MERDNUJFMTEwLwYDVQQFEygwRTY1QTRGNUZEMzZCNUJENjhFQjNDOTIzNDA4OTc4 QzkwN0FBNzlGMB4XDTI2MTEwNjEzMTAzN1oXDTI3MTIzMDAwMDAwMFowRjERMA8G A1UEAxMIQTkxN0EzNjIxMTAvBgNVBAUTKEU2QzQ2QzkxRDEyRDU4NUExMkIwNTU2 OTYyMURFRTFBRDNGODkwOEUwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQC/5I5D0zpi1PGnvQhZ1NdTAZrMgNXCdq0RHmIiq08tuqD3BpO+MTLxQddYbzQU fmJCZdaTKCYW5upTD8mBMZgAOprkoBx/jxOFnX0V/4OrJUp/ByilnDgjqkIB5JO5 ZPLDJHFmPiukzgc5WFR2gh/eZ2y2t4fQ/Iuw9RmIGP8MDT2x0iK2jvuK3EzBA9c5 OaoaoUr3MBls5gp4xwSKvGJWvzFd5b2ckJTzWgSszojisWQ8dAGeeu/Y/JIjgCMF ZQnMHqsKH1Q/4YkCPPIu94r3G2S1grbwJHXnE6nyDBZPDyTiqD1nDlkr9WFkeVDe nR08qiHM9Z1FVEOvccOWSbSRAgMBAAGjggMCMIIC/jAdBgNVHQ4EFgQU5sRskdEt WFoSsFVpYh3uGtP4kI4wHwYDVR0jBBgwFoAUDmWk9f02tb1o6zySNAiXjJB6p58w DgYDVR0PAQH/BAQDAgEGMA8GA1UdEwEB/wQFMAMBAf8wcwYDVR0fBGwwajBooGag ZIZicnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2 NjExRTJCQjQ2OEY3QzcyRkQxRkYyL0RtV2s5ZjAydGIxbzZ6eVNOQWlYakpCNnA1 OC5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvOTgwNjUyRTBCNzdFMTFFN0E5NkEzOTUyMUE0 RjRGQjQvRG1XazlmMDJ0YjFvNnp5U05BaVhqSkI2cDU4LmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwggEoBggrBgEFBQcBCwSCARowggEWMF8GCCsGAQUF BzAFhlNyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5 MTdBMzYyLzdDQkE0QzRDNzI2RTExRUU5RkUzNTA2MUM0RjlBRTAyLzB+BggrBgEF BQcwCoZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9B OTE3QTM2Mi83Q0JBNEM0QzcyNkUxMUVFOUZFMzUwNjFDNEY5QUUwMi81c1Jza2RF dFdGb1NzRlZwWWgzdUd0UDRrSTQubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3Jy ZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwLgYIKwYBBQUHAQcBAf8EHzAd MAwEAgABMAYDBAJnggwwDQQCAAIwBwMFACQDrkAwDQYJKoZIhvcNAQELBQADggEB ALnbywcUh4vVST6FGVNA54ofzLdb85y3g01J1R2VzWaCXnT0k6g3p3eCSUnFEA+E k/KU16XxakzxiUvyrdJcX3GcW6wd9UGDoduPhVeDxUeNfMhf6A/18elgRr0DgTfh sFweEopTVkfefW4r0J/1qAPh3k7sJIPy9IgBQm4TbSwKqtrgKjGegroxvSFY8Pz2 akawIV9Yqscx5ODoCRU1gNDdhP8fPsn0Mqmvq5c0iqEOnGKCkV8qhfUyGlK0qK5q VpVrYg6o7l4sq4kFXHK3suv78h0Z4MbsMNT/9wMFD7kTTv26RjrxQjlocHNReMzQ 1U7lDLFdnZzXubZf2iMXrOI= -----END CERTIFICATE-----Generated at Sun Nov 15 21:19:46 2026 by rpki-client