$ rpki-client -vvvf rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PRU2P7Cm9KjRqKXJn6O05ZMfi3w.cer File: PRU2P7Cm9KjRqKXJn6O05ZMfi3w.cer (raw, json) Hash identifier: ljBKeyX3DD8xamMrtEjcDI7n75qdXk0cFUcrUSnEz4c= Subject key identifier: 3D:15:36:3F:B0:A6:F4:A8:D1:A8:A5:C9:9F:A3:B4:E5:93:1F:8B:7C Authority key identifier: 0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F Certificate issuer: /CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F Certificate serial: 02E580 Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer CRL Distribution Point: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl Manifest: rsync://rpki.apnic.net/member_repository/A917535F/2E28C85E275A11F08EFF6B76C4F9AE02/PRU2P7Cm9KjRqKXJn6O05ZMfi3w.mft caRepository: rsync://rpki.apnic.net/member_repository/A917535F/2E28C85E275A11F08EFF6B76C4F9AE02/ Notify URL: https://rrdp.apnic.net/notification.xml Certificate not before: Fri 06 Nov 2026 13:07:45 +0000 Certificate not after: Mon 31 Jan 2028 00:00:00 +0000 Subordinate resources: IP: 203.99.148.0/23 Validation: OK Signature path: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 22 Nov 2026 17:14:55 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 189824 (0x2e580) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A90DC5BE, serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F Validity Not Before: Nov 6 13:07:45 2026 GMT Not After : Jan 31 00:00:00 2028 GMT Subject: CN=A917535F, serialNumber=3D15363FB0A6F4A8D1A8A5C99FA3B4E5931F8B7C Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:38:3e:7e:49:b4:38:be:15:9f:e5:a3:84:46: e0:5c:d8:d6:0b:cd:2b:b4:7e:05:9a:8d:cd:1c:71: 11:c6:92:76:04:3c:43:50:50:be:20:29:d4:2c:5b: 87:42:35:05:1e:c4:18:e3:46:6d:3c:33:1d:87:2a: ff:aa:a2:e3:81:ed:dd:90:3f:4d:22:03:6d:93:49: 7e:d6:53:a3:b1:11:31:3d:08:0b:94:56:e4:2e:21: 28:ec:18:36:3d:ef:40:33:fd:76:3b:96:42:74:d3: c5:ee:7f:41:b5:88:cf:40:a0:cc:04:ff:f2:04:0d: c8:44:48:33:40:ce:21:53:5b:fd:e5:a9:a0:37:84: dc:b9:53:34:a8:fe:ea:0d:c4:18:3d:34:0d:01:73: c8:3e:48:8c:4f:b1:ee:89:13:ed:5b:83:c0:16:3f: fd:85:0b:5b:93:0e:25:17:be:ef:f4:b3:c5:90:51: d0:fc:ab:17:43:f7:a1:26:18:ba:29:17:c3:d4:1b: 89:ae:fb:11:c2:da:d5:5c:93:9a:70:d0:db:17:1c: 52:52:28:60:2e:27:a4:47:53:43:92:0c:4f:22:cf: 97:0e:cf:1a:fb:ca:71:6a:67:22:3a:04:4f:d1:8a: e9:b0:e5:c3:f1:e4:fa:7a:6c:be:05:15:25:37:60: d7:5f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3D:15:36:3F:B0:A6:F4:A8:D1:A8:A5:C9:9F:A3:B4:E5:93:1F:8B:7C X509v3 Authority Key Identifier: keyid:0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: CA Repository - URI:rsync://rpki.apnic.net/member_repository/A917535F/2E28C85E275A11F08EFF6B76C4F9AE02/ RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A917535F/2E28C85E275A11F08EFF6B76C4F9AE02/PRU2P7Cm9KjRqKXJn6O05ZMfi3w.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 203.99.148.0/23 Signature Algorithm: sha256WithRSAEncryption 4e:0f:4a:50:27:d5:27:d1:27:7e:ae:7e:69:10:6c:19:8f:04: b5:c1:26:f0:6a:b7:4c:3b:28:fb:d2:47:cc:c3:cb:d3:17:c9: 17:09:4a:1c:35:06:d6:bd:05:ef:f9:89:2a:0e:59:ab:70:ce: e0:7d:26:d4:1b:98:06:0a:7a:b5:ae:39:93:31:76:84:f4:93: e8:d2:8f:a4:b7:a1:e5:d5:da:fe:a0:b4:ec:47:ae:68:2a:af: 70:81:37:eb:6c:02:bf:32:28:4c:88:e8:bd:9c:3e:d4:f1:a2: 79:2f:46:84:d3:a0:47:41:fb:b6:8e:4d:9f:de:1a:f1:f7:1d: d3:bf:16:f9:28:25:72:e6:d2:2c:33:19:46:eb:e8:91:90:3e: a4:26:49:69:42:f3:4f:d0:5b:05:24:8a:dc:a5:f3:ae:cd:f6: 1b:ce:78:b3:0e:04:da:ce:d8:11:f3:31:f7:69:12:29:a9:6d: 56:2c:9f:d5:a8:3e:fd:b4:2a:a1:4a:60:88:55:b3:0e:ec:c4: c5:78:59:89:9f:6a:0e:1a:a0:00:9e:7c:25:b7:5a:10:b5:f7: 8b:d8:ed:9e:9d:82:f3:3c:b5:65:7f:8f:8f:b0:83:e8:d9:f0: 76:fc:39:88:6d:7a:88:47:a2:7e:12:65:49:77:a4:33:a7:f4: 83:02:d7:57 -----BEGIN CERTIFICATE----- MIIF/jCCBOagAwIBAgIDAuWAMA0GCSqGSIb3DQEBCwUAMEYxETAPBgNVBAMTCEE5 MERDNUJFMTEwLwYDVQQFEygwRTY1QTRGNUZEMzZCNUJENjhFQjNDOTIzNDA4OTc4 QzkwN0FBNzlGMB4XDTI2MTEwNjEzMDc0NVoXDTI4MDEzMTAwMDAwMFowRjERMA8G A1UEAxMIQTkxNzUzNUYxMTAvBgNVBAUTKDNEMTUzNjNGQjBBNkY0QThEMUE4QTVD OTlGQTNCNEU1OTMxRjhCN0MwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQC0OD5+SbQ4vhWf5aOERuBc2NYLzSu0fgWajc0ccRHGknYEPENQUL4gKdQsW4dC NQUexBjjRm08Mx2HKv+qouOB7d2QP00iA22TSX7WU6OxETE9CAuUVuQuISjsGDY9 70Az/XY7lkJ008Xuf0G1iM9AoMwE//IEDchESDNAziFTW/3lqaA3hNy5UzSo/uoN xBg9NA0Bc8g+SIxPse6JE+1bg8AWP/2FC1uTDiUXvu/0s8WQUdD8qxdD96EmGLop F8PUG4mu+xHC2tVck5pw0NsXHFJSKGAuJ6RHU0OSDE8iz5cOzxr7ynFqZyI6BE/R iumw5cPx5Pp6bL4FFSU3YNdfAgMBAAGjggLzMIIC7zAdBgNVHQ4EFgQUPRU2P7Cm 9KjRqKXJn6O05ZMfi3wwHwYDVR0jBBgwFoAUDmWk9f02tb1o6zySNAiXjJB6p58w DgYDVR0PAQH/BAQDAgEGMA8GA1UdEwEB/wQFMAMBAf8wcwYDVR0fBGwwajBooGag ZIZicnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2 NjExRTJCQjQ2OEY3QzcyRkQxRkYyL0RtV2s5ZjAydGIxbzZ6eVNOQWlYakpCNnA1 OC5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvOTgwNjUyRTBCNzdFMTFFN0E5NkEzOTUyMUE0 RjRGQjQvRG1XazlmMDJ0YjFvNnp5U05BaVhqSkI2cDU4LmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwggEoBggrBgEFBQcBCwSCARowggEWMF8GCCsGAQUF BzAFhlNyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5 MTc1MzVGLzJFMjhDODVFMjc1QTExRjA4RUZGNkI3NkM0RjlBRTAyLzB+BggrBgEF BQcwCoZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9B OTE3NTM1Ri8yRTI4Qzg1RTI3NUExMUYwOEVGRjZCNzZDNEY5QUUwMi9QUlUyUDdD bTlLalJxS1hKbjZPMDVaTWZpM3cubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3Jy ZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8EEDAO MAwEAgABMAYDBAHLY5QwDQYJKoZIhvcNAQELBQADggEBAE4PSlAn1SfRJ36ufmkQ bBmPBLXBJvBqt0w7KPvSR8zDy9MXyRcJShw1Bta9Be/5iSoOWatwzuB9JtQbmAYK erWuOZMxdoT0k+jSj6S3oeXV2v6gtOxHrmgqr3CBN+tsAr8yKEyI6L2cPtTxonkv RoTToEdB+7aOTZ/eGvH3HdO/FvkoJXLm0iwzGUbr6JGQPqQmSWlC80/QWwUkityl 867N9hvOeLMOBNrO2BHzMfdpEimpbVYsn9WoPv20KqFKYIhVsw7sxMV4WYmfag4a oACefCW3WhC194vY7Z6dgvM8tWV/j4+wg+jZ8Hb8OYhteohHon4SZUl3pDOn9IMC 11c= -----END CERTIFICATE-----Generated at Sun Nov 15 21:03:06 2026 by rpki-client