$ rpki-client -vvvf rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ecf8XRpe7wspjgByMmq3Noa9_ng.cer File: ecf8XRpe7wspjgByMmq3Noa9_ng.cer (raw, json) Hash identifier: gqIlniXrBFySfph9KYY0CqU86HsfegZOBAyRkjhfSYE= Subject key identifier: 79:C7:FC:5D:1A:5E:EF:0B:29:8E:00:72:32:6A:B7:36:86:BD:FE:78 Authority key identifier: 0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F Certificate issuer: /CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F Certificate serial: 02E4D8 Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer CRL Distribution Point: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl Manifest: rsync://rpki.apnic.net/member_repository/A9123918/8EE71486B6C411EFB10EDE58C4F9AE02/ecf8XRpe7wspjgByMmq3Noa9_ng.mft caRepository: rsync://rpki.apnic.net/member_repository/A9123918/8EE71486B6C411EFB10EDE58C4F9AE02/ Notify URL: https://rrdp.apnic.net/notification.xml Certificate not before: Wed 04 Nov 2026 12:30:39 +0000 Certificate not after: Mon 31 Jan 2028 00:00:00 +0000 Subordinate resources: IP: 103.20.240.0/23 IP: 2001:df1:6540::/48 Validation: OK Signature path: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 22 Nov 2026 04:26:03 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 189656 (0x2e4d8) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A90DC5BE, serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F Validity Not Before: Nov 4 12:30:39 2026 GMT Not After : Jan 31 00:00:00 2028 GMT Subject: CN=A9123918, serialNumber=79C7FC5D1A5EEF0B298E0072326AB73686BDFE78 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d0:a7:c4:f4:ff:b4:6d:99:75:58:6e:ea:ef:ba: b8:f7:42:06:55:98:1b:62:ae:df:37:67:31:9c:46: b8:16:2e:c5:6b:fa:11:38:c8:05:91:2d:8b:4c:5e: 00:e8:22:1a:35:93:36:3f:4b:25:12:9d:f3:4d:db: 99:db:cd:25:7a:93:76:7e:cf:94:ee:79:9d:7e:4d: d7:b8:da:2d:3a:f1:77:ae:f8:67:ac:84:42:dc:a2: 47:fd:dc:a3:b3:27:30:df:34:73:fc:2f:52:40:8b: 55:b3:01:fc:6f:14:c5:37:38:78:d1:3d:c9:e8:3c: 3f:26:79:bd:42:4d:35:27:91:cd:65:ed:22:c1:b5: ed:2c:e4:00:45:8e:ff:76:46:40:86:d3:df:54:3f: e6:44:2d:f9:8c:e1:c5:af:6d:a4:89:03:42:14:b7: a4:8b:85:2f:b4:12:71:a1:46:2b:fd:ee:fa:96:5a: 14:72:c5:4a:bc:5c:4e:42:2b:d9:1a:03:9e:53:80: e7:2d:d9:37:63:5f:e8:eb:1a:f1:82:6c:66:f5:4a: e5:f1:cd:88:72:60:d7:0f:0b:d5:43:06:30:44:70: c5:31:49:3a:19:94:60:b1:08:c7:cc:07:3a:7b:10: 97:5a:03:53:f0:58:25:23:9c:76:70:be:1a:1b:ad: 51:cb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 79:C7:FC:5D:1A:5E:EF:0B:29:8E:00:72:32:6A:B7:36:86:BD:FE:78 X509v3 Authority Key Identifier: keyid:0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: CA Repository - URI:rsync://rpki.apnic.net/member_repository/A9123918/8EE71486B6C411EFB10EDE58C4F9AE02/ RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A9123918/8EE71486B6C411EFB10EDE58C4F9AE02/ecf8XRpe7wspjgByMmq3Noa9_ng.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 103.20.240.0/23 IPv6: 2001:df1:6540::/48 Signature Algorithm: sha256WithRSAEncryption 07:8a:bc:7a:b3:6c:f8:f0:ab:4e:03:5b:ee:25:1f:aa:3a:c7: 08:bd:2c:62:ad:58:f9:a6:e1:ad:c7:40:a2:57:27:4c:53:2f: 14:5c:2c:aa:60:f1:0c:b6:95:4a:71:b6:d0:58:f3:b6:24:b5: 44:e8:5c:dc:9e:7c:4d:6b:75:73:8a:9c:e5:e9:21:b3:a5:35: 8c:15:b8:bf:25:ff:b2:37:c8:39:7a:22:fa:52:9a:0d:8d:6b: 67:0a:a5:53:73:d0:75:9e:84:0f:70:45:e8:7d:2a:e2:6f:10: be:08:8f:44:0c:d5:ae:69:78:9b:dd:d5:06:f6:ef:8a:a8:0a: c4:3c:6d:d0:1b:cf:d4:49:b1:ff:32:68:48:0c:a5:73:80:f4: a9:b3:1c:2e:0f:5b:03:57:d3:09:d2:20:85:2d:5a:49:9c:ab: f0:d9:c9:29:44:fe:e4:de:0c:a7:03:53:ae:20:50:5d:dd:86: 97:67:02:ef:5d:ed:de:2b:09:b4:05:5d:57:7b:2f:b3:ef:b7: 07:66:aa:34:df:3d:58:bb:d9:f9:88:0e:fb:ed:1c:4f:19:f6: df:55:0b:c2:6a:87:7a:99:7f:c0:da:18:1d:53:14:42:7c:c2: 76:b5:00:33:27:7a:1a:71:cb:c4:bb:96:25:52:de:54:62:be: a9:81:09:6c -----BEGIN CERTIFICATE----- MIIGDzCCBPegAwIBAgIDAuTYMA0GCSqGSIb3DQEBCwUAMEYxETAPBgNVBAMTCEE5 MERDNUJFMTEwLwYDVQQFEygwRTY1QTRGNUZEMzZCNUJENjhFQjNDOTIzNDA4OTc4 QzkwN0FBNzlGMB4XDTI2MTEwNDEyMzAzOVoXDTI4MDEzMTAwMDAwMFowRjERMA8G A1UEAxMIQTkxMjM5MTgxMTAvBgNVBAUTKDc5QzdGQzVEMUE1RUVGMEIyOThFMDA3 MjMyNkFCNzM2ODZCREZFNzgwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDQp8T0/7RtmXVYburvurj3QgZVmBtirt83ZzGcRrgWLsVr+hE4yAWRLYtMXgDo Iho1kzY/SyUSnfNN25nbzSV6k3Z+z5TueZ1+Tde42i068Xeu+GeshELcokf93KOz JzDfNHP8L1JAi1WzAfxvFMU3OHjRPcnoPD8meb1CTTUnkc1l7SLBte0s5ABFjv92 RkCG099UP+ZELfmM4cWvbaSJA0IUt6SLhS+0EnGhRiv97vqWWhRyxUq8XE5CK9ka A55TgOct2TdjX+jrGvGCbGb1SuXxzYhyYNcPC9VDBjBEcMUxSToZlGCxCMfMBzp7 EJdaA1PwWCUjnHZwvhobrVHLAgMBAAGjggMEMIIDADAdBgNVHQ4EFgQUecf8XRpe 7wspjgByMmq3Noa9/ngwHwYDVR0jBBgwFoAUDmWk9f02tb1o6zySNAiXjJB6p58w DgYDVR0PAQH/BAQDAgEGMA8GA1UdEwEB/wQFMAMBAf8wcwYDVR0fBGwwajBooGag ZIZicnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2 NjExRTJCQjQ2OEY3QzcyRkQxRkYyL0RtV2s5ZjAydGIxbzZ6eVNOQWlYakpCNnA1 OC5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvOTgwNjUyRTBCNzdFMTFFN0E5NkEzOTUyMUE0 RjRGQjQvRG1XazlmMDJ0YjFvNnp5U05BaVhqSkI2cDU4LmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwggEoBggrBgEFBQcBCwSCARowggEWMF8GCCsGAQUF BzAFhlNyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5 MTIzOTE4LzhFRTcxNDg2QjZDNDExRUZCMTBFREU1OEM0RjlBRTAyLzB+BggrBgEF BQcwCoZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9B OTEyMzkxOC84RUU3MTQ4NkI2QzQxMUVGQjEwRURFNThDNEY5QUUwMi9lY2Y4WFJw ZTd3c3BqZ0J5TW1xM05vYTlfbmcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3Jy ZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwMAYIKwYBBQUHAQcBAf8EITAf MAwEAgABMAYDBAFnFPAwDwQCAAIwCQMHACABDfFlQDANBgkqhkiG9w0BAQsFAAOC AQEAB4q8erNs+PCrTgNb7iUfqjrHCL0sYq1Y+abhrcdAolcnTFMvFFwsqmDxDLaV SnG20FjztiS1ROhc3J58TWt1c4qc5ekhs6U1jBW4vyX/sjfIOXoi+lKaDY1rZwql U3PQdZ6ED3BF6H0q4m8QvgiPRAzVrml4m93VBvbviqgKxDxt0BvP1Emx/zJoSAyl c4D0qbMcLg9bA1fTCdIghS1aSZyr8NnJKUT+5N4MpwNTriBQXd2Gl2cC713t3isJ tAVdV3svs++3B2aqNN89WLvZ+YgO++0cTxn231ULwmqHepl/wNoYHVMUQnzCdrUA Myd6GnHLxLuWJVLeVGK+qYEJbA== -----END CERTIFICATE-----Generated at Sun Nov 15 08:06:06 2026 by rpki-client