$ rpki-client -vvvf rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/75-XzrKSdlHWT6oC452-DaO3H5U.cer File: 75-XzrKSdlHWT6oC452-DaO3H5U.cer (raw, json) Hash identifier: TVX0NgECBmVwcBrWeblGCO14IAtsj949wHSRmyb3nLE= Subject key identifier: EF:9F:97:CE:B2:92:76:51:D6:4F:AA:02:E3:9D:BE:0D:A3:B7:1F:95 Authority key identifier: 0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F Certificate issuer: /CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F Certificate serial: 02E4F3 Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer CRL Distribution Point: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl Manifest: rsync://rpki.apnic.net/member_repository/A9165588/694531F2FA8711EF83EDEC2DC4F9AE02/75-XzrKSdlHWT6oC452-DaO3H5U.mft caRepository: rsync://rpki.apnic.net/member_repository/A9165588/694531F2FA8711EF83EDEC2DC4F9AE02/ Notify URL: https://rrdp.apnic.net/notification.xml Certificate not before: Wed 04 Nov 2026 13:08:21 +0000 Certificate not after: Thu 30 Dec 2027 00:00:00 +0000 Subordinate resources: IP: 203.13.144.0/20 Validation: OK Signature path: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 21 Nov 2026 14:50:18 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 189683 (0x2e4f3) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A90DC5BE, serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F Validity Not Before: Nov 4 13:08:21 2026 GMT Not After : Dec 30 00:00:00 2027 GMT Subject: CN=A9165588, serialNumber=EF9F97CEB2927651D64FAA02E39DBE0DA3B71F95 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:b0:e3:43:b0:4a:4b:66:fe:18:b1:63:aa:d0: 7f:45:91:6a:92:7a:25:68:2f:07:38:af:71:94:ec: 0e:dc:f3:d6:5c:03:6f:dc:80:bd:48:0e:1b:87:38: 37:8e:49:f1:da:7e:cb:65:88:35:2b:88:bd:e1:0d: 97:2f:f2:eb:73:a2:a7:8f:c9:5f:7e:4d:8c:ba:8a: 0c:c6:b2:8c:89:88:be:94:18:67:41:3b:fc:d7:2c: 3c:e2:03:8a:3d:96:4f:90:d3:04:42:23:dc:dd:e7: f0:1a:f0:97:0b:e2:70:84:71:be:da:11:81:dd:2c: 83:12:b6:c7:3f:38:47:ab:eb:ef:78:6b:40:5c:c0: c0:ab:14:53:13:14:c5:6b:2b:d7:4e:d3:64:c3:0e: f2:70:f6:00:4f:fe:fe:cd:dc:a2:85:5f:80:7e:1c: 41:47:18:fd:e9:f0:17:82:a5:fa:c5:ef:77:64:d8: 64:ff:5d:06:c8:9c:15:e6:4a:65:e5:5c:84:a9:2b: 0c:74:1c:27:60:10:0c:6c:c4:91:0b:10:d0:8d:fc: 57:74:25:60:aa:31:b7:2b:20:79:96:34:0d:92:1f: 0c:49:be:a2:b8:08:c2:5a:b1:06:eb:f6:cb:a4:f7: 9f:d4:6b:ef:6d:a6:5d:9c:5c:9d:5d:2c:d4:c7:e3: e1:9d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EF:9F:97:CE:B2:92:76:51:D6:4F:AA:02:E3:9D:BE:0D:A3:B7:1F:95 X509v3 Authority Key Identifier: keyid:0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: CA Repository - URI:rsync://rpki.apnic.net/member_repository/A9165588/694531F2FA8711EF83EDEC2DC4F9AE02/ RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A9165588/694531F2FA8711EF83EDEC2DC4F9AE02/75-XzrKSdlHWT6oC452-DaO3H5U.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 203.13.144.0/20 Signature Algorithm: sha256WithRSAEncryption 53:4e:6f:13:bd:ea:0d:59:4e:27:31:e9:55:72:30:bf:ad:44: 44:60:7e:e4:42:bd:d6:55:0e:fa:18:c4:a5:6b:a0:bf:e1:4a: 96:c7:96:b9:31:08:bc:a7:5c:df:b8:df:32:56:fe:0a:02:6b: 91:c8:33:9a:88:91:a9:d8:d3:91:f7:16:64:d8:54:6e:9b:f3: f7:ea:7b:4c:b2:93:1b:6c:85:82:d7:4e:fb:5a:bc:09:28:dd: 5c:d1:69:3d:7f:63:33:e6:ec:1e:02:52:2f:cf:a4:d2:d6:ea: d9:23:5d:0d:10:8e:1f:2b:21:af:75:69:2c:07:1a:ad:14:54: 4d:09:93:f0:a7:3b:93:a9:ae:68:a9:56:bd:e9:7b:ee:6b:32: 00:e9:ba:2c:4d:46:ee:2f:95:80:b2:42:b9:65:99:5f:35:bd: 59:00:7b:61:9d:25:42:45:6a:17:d4:77:78:47:6f:8c:e1:ec: 89:60:8b:e9:b6:ed:21:24:05:ff:3d:b6:25:49:17:85:b3:99: 9a:44:34:41:f5:91:07:66:37:b2:98:cf:0e:16:a0:9f:7e:a5: d3:dd:03:1d:ae:dd:45:a2:c3:e4:24:60:d4:c2:19:bc:ab:d8: b1:03:3b:79:92:5f:7c:ea:63:01:43:79:80:f4:5d:29:27:6c: 65:2a:fb:1b -----BEGIN CERTIFICATE----- MIIF/jCCBOagAwIBAgIDAuTzMA0GCSqGSIb3DQEBCwUAMEYxETAPBgNVBAMTCEE5 MERDNUJFMTEwLwYDVQQFEygwRTY1QTRGNUZEMzZCNUJENjhFQjNDOTIzNDA4OTc4 QzkwN0FBNzlGMB4XDTI2MTEwNDEzMDgyMVoXDTI3MTIzMDAwMDAwMFowRjERMA8G A1UEAxMIQTkxNjU1ODgxMTAvBgNVBAUTKEVGOUY5N0NFQjI5Mjc2NTFENjRGQUEw MkUzOURCRTBEQTNCNzFGOTUwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQCnsONDsEpLZv4YsWOq0H9FkWqSeiVoLwc4r3GU7A7c89ZcA2/cgL1IDhuHODeO SfHafstliDUriL3hDZcv8utzoqePyV9+TYy6igzGsoyJiL6UGGdBO/zXLDziA4o9 lk+Q0wRCI9zd5/Aa8JcL4nCEcb7aEYHdLIMStsc/OEer6+94a0BcwMCrFFMTFMVr K9dO02TDDvJw9gBP/v7N3KKFX4B+HEFHGP3p8BeCpfrF73dk2GT/XQbInBXmSmXl XISpKwx0HCdgEAxsxJELENCN/Fd0JWCqMbcrIHmWNA2SHwxJvqK4CMJasQbr9suk 95/Ua+9tpl2cXJ1dLNTH4+GdAgMBAAGjggLzMIIC7zAdBgNVHQ4EFgQU75+XzrKS dlHWT6oC452+DaO3H5UwHwYDVR0jBBgwFoAUDmWk9f02tb1o6zySNAiXjJB6p58w DgYDVR0PAQH/BAQDAgEGMA8GA1UdEwEB/wQFMAMBAf8wcwYDVR0fBGwwajBooGag ZIZicnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2 NjExRTJCQjQ2OEY3QzcyRkQxRkYyL0RtV2s5ZjAydGIxbzZ6eVNOQWlYakpCNnA1 OC5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvOTgwNjUyRTBCNzdFMTFFN0E5NkEzOTUyMUE0 RjRGQjQvRG1XazlmMDJ0YjFvNnp5U05BaVhqSkI2cDU4LmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwggEoBggrBgEFBQcBCwSCARowggEWMF8GCCsGAQUF BzAFhlNyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5 MTY1NTg4LzY5NDUzMUYyRkE4NzExRUY4M0VERUMyREM0RjlBRTAyLzB+BggrBgEF BQcwCoZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9B OTE2NTU4OC82OTQ1MzFGMkZBODcxMUVGODNFREVDMkRDNEY5QUUwMi83NS1YenJL U2RsSFdUNm9DNDUyLURhTzNINVUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3Jy ZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8EEDAO MAwEAgABMAYDBATLDZAwDQYJKoZIhvcNAQELBQADggEBAFNObxO96g1ZTicx6VVy ML+tRERgfuRCvdZVDvoYxKVroL/hSpbHlrkxCLynXN+43zJW/goCa5HIM5qIkanY 05H3FmTYVG6b8/fqe0yykxtshYLXTvtavAko3VzRaT1/YzPm7B4CUi/PpNLW6tkj XQ0Qjh8rIa91aSwHGq0UVE0Jk/CnO5OprmipVr3pe+5rMgDpuixNRu4vlYCyQrll mV81vVkAe2GdJUJFahfUd3hHb4zh7Ilgi+m27SEkBf89tiVJF4WzmZpENEH1kQdm N7KYzw4WoJ9+pdPdAx2u3UWiw+QkYNTCGbyr2LEDO3mSX3zqYwFDeYD0XSknbGUq +xs= -----END CERTIFICATE-----Generated at Sat Nov 14 22:36:56 2026 by rpki-client