$ rpki-client -vvvf rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/p8GCywxW7MaNdJGikUFEtHdPdzI.cer File: p8GCywxW7MaNdJGikUFEtHdPdzI.cer (raw, json) Hash identifier: FyCU7bGcZQJUKEKUld4auIcIg83BgiKqwpxdmy83ufk= Subject key identifier: A7:C1:82:CB:0C:56:EC:C6:8D:74:91:A2:91:41:44:B4:77:4F:77:32 Authority key identifier: 0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F Certificate issuer: /CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F Certificate serial: 02E0F1 Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer CRL Distribution Point: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl Manifest: rsync://rpki.apnic.net/member_repository/A9133C64/A6DEF1EEB30B11ED9E84DF19C4F9AE02/p8GCywxW7MaNdJGikUFEtHdPdzI.mft caRepository: rsync://rpki.apnic.net/member_repository/A9133C64/A6DEF1EEB30B11ED9E84DF19C4F9AE02/ Notify URL: https://rrdp.apnic.net/notification.xml Certificate not before: Wed 28 Oct 2026 12:37:07 +0000 Certificate not after: Thu 30 Dec 2027 00:00:00 +0000 Subordinate resources: IP: 203.19.224.0/23 Validation: OK Signature path: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 22 Nov 2026 08:15:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 188657 (0x2e0f1) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A90DC5BE, serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F Validity Not Before: Oct 28 12:37:07 2026 GMT Not After : Dec 30 00:00:00 2027 GMT Subject: CN=A9133C64, serialNumber=A7C182CB0C56ECC68D7491A2914144B4774F7732 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:da:f0:e6:fc:03:ca:4f:a5:4e:31:7b:7e:c7:6e: c3:8a:b3:ce:49:fd:0a:70:95:08:06:d6:f9:0a:44: c7:85:a5:e4:21:95:25:b1:32:d3:94:29:78:72:e0: 7c:dc:94:81:3a:e6:24:cf:b7:3e:ee:10:95:6c:a4: 5f:7b:65:36:cd:8f:18:c6:9d:f2:47:bf:c7:49:5f: 58:d4:2d:7b:ba:63:13:3b:fc:a9:62:ae:96:2b:e2: c0:ed:d8:11:78:99:c6:ad:59:a6:07:12:18:5c:c8: 43:84:c5:87:5d:00:8e:dc:a9:89:ea:c8:76:6b:59: 38:38:6b:1e:68:54:18:0f:6a:db:94:dc:4d:59:ee: 22:60:34:4e:9c:b3:11:96:2f:63:28:af:b4:e1:58: 5c:60:82:31:07:80:59:73:b5:98:aa:f5:73:c5:1c: 79:92:b2:1e:5d:9a:c2:b3:f9:2f:04:5f:5f:e9:77: c8:40:9c:a6:9d:74:f3:79:0d:e2:06:70:a6:e8:1c: 9f:df:f4:ba:de:ab:dc:7a:a8:bf:a4:ef:30:bf:43: a2:fd:93:b1:78:de:ef:fd:fb:18:cd:b8:9c:18:c4: 3d:fc:10:3d:ef:99:b4:ca:73:88:5a:de:c5:07:38: fa:2e:9a:46:12:03:35:91:77:b0:c9:9f:36:45:0e: 32:65 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A7:C1:82:CB:0C:56:EC:C6:8D:74:91:A2:91:41:44:B4:77:4F:77:32 X509v3 Authority Key Identifier: keyid:0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: CA Repository - URI:rsync://rpki.apnic.net/member_repository/A9133C64/A6DEF1EEB30B11ED9E84DF19C4F9AE02/ RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A9133C64/A6DEF1EEB30B11ED9E84DF19C4F9AE02/p8GCywxW7MaNdJGikUFEtHdPdzI.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 203.19.224.0/23 Signature Algorithm: sha256WithRSAEncryption 6c:05:7d:aa:ba:ca:89:1c:ae:25:ee:35:f9:48:61:e2:35:1e: 33:fe:01:f8:57:cc:f5:af:fb:d6:79:81:22:41:73:c8:46:56: 37:a4:c4:4f:d2:5f:d3:d8:bb:c0:b3:2e:da:b8:de:2b:6e:99: ed:2c:85:26:d2:42:60:c3:d6:d5:d4:2e:e7:ff:3f:a6:29:17: b7:93:46:aa:ad:64:54:fb:84:98:43:e5:d2:3d:d0:51:04:30: 8b:41:15:f6:24:c0:6e:e0:53:39:af:7b:56:71:bb:75:c9:cd: 38:38:90:32:ab:7c:32:1d:06:15:84:6e:00:86:af:1f:32:fc: 76:cf:b7:40:a6:08:92:7e:38:48:be:ba:ce:80:69:87:39:1f: 1f:7e:ec:8b:32:86:30:22:09:3e:f7:79:f1:e8:34:d9:96:fe: 94:31:1b:ad:b3:37:d4:4d:88:20:e3:06:b2:1b:d0:df:21:7c: 9a:5c:ab:2f:09:7f:34:3a:a3:f2:5d:5c:41:2f:6e:8d:89:f3: cf:a2:dc:17:13:4a:24:4b:c6:57:f9:b7:bd:96:3c:a1:a7:4b: 4d:92:9a:9d:3c:b0:73:f0:42:04:d5:32:ac:4f:f5:93:fb:03: d5:4d:62:c9:36:9c:df:78:2e:ae:f1:57:1c:8e:9b:9f:b4:11: 5a:4b:9a:92 -----BEGIN CERTIFICATE----- MIIF/jCCBOagAwIBAgIDAuDxMA0GCSqGSIb3DQEBCwUAMEYxETAPBgNVBAMTCEE5 MERDNUJFMTEwLwYDVQQFEygwRTY1QTRGNUZEMzZCNUJENjhFQjNDOTIzNDA4OTc4 QzkwN0FBNzlGMB4XDTI2MTAyODEyMzcwN1oXDTI3MTIzMDAwMDAwMFowRjERMA8G A1UEAxMIQTkxMzNDNjQxMTAvBgNVBAUTKEE3QzE4MkNCMEM1NkVDQzY4RDc0OTFB MjkxNDE0NEI0Nzc0Rjc3MzIwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDa8Ob8A8pPpU4xe37HbsOKs85J/QpwlQgG1vkKRMeFpeQhlSWxMtOUKXhy4Hzc lIE65iTPtz7uEJVspF97ZTbNjxjGnfJHv8dJX1jULXu6YxM7/KlirpYr4sDt2BF4 mcatWaYHEhhcyEOExYddAI7cqYnqyHZrWTg4ax5oVBgPatuU3E1Z7iJgNE6csxGW L2Mor7ThWFxggjEHgFlztZiq9XPFHHmSsh5dmsKz+S8EX1/pd8hAnKaddPN5DeIG cKboHJ/f9Lreq9x6qL+k7zC/Q6L9k7F43u/9+xjNuJwYxD38ED3vmbTKc4ha3sUH OPoumkYSAzWRd7DJnzZFDjJlAgMBAAGjggLzMIIC7zAdBgNVHQ4EFgQUp8GCywxW 7MaNdJGikUFEtHdPdzIwHwYDVR0jBBgwFoAUDmWk9f02tb1o6zySNAiXjJB6p58w DgYDVR0PAQH/BAQDAgEGMA8GA1UdEwEB/wQFMAMBAf8wcwYDVR0fBGwwajBooGag ZIZicnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2 NjExRTJCQjQ2OEY3QzcyRkQxRkYyL0RtV2s5ZjAydGIxbzZ6eVNOQWlYakpCNnA1 OC5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvOTgwNjUyRTBCNzdFMTFFN0E5NkEzOTUyMUE0 RjRGQjQvRG1XazlmMDJ0YjFvNnp5U05BaVhqSkI2cDU4LmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwggEoBggrBgEFBQcBCwSCARowggEWMF8GCCsGAQUF BzAFhlNyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5 MTMzQzY0L0E2REVGMUVFQjMwQjExRUQ5RTg0REYxOUM0RjlBRTAyLzB+BggrBgEF BQcwCoZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9B OTEzM0M2NC9BNkRFRjFFRUIzMEIxMUVEOUU4NERGMTlDNEY5QUUwMi9wOEdDeXd4 VzdNYU5kSkdpa1VGRXRIZFBkekkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3Jy ZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8EEDAO MAwEAgABMAYDBAHLE+AwDQYJKoZIhvcNAQELBQADggEBAGwFfaq6yokcriXuNflI YeI1HjP+AfhXzPWv+9Z5gSJBc8hGVjekxE/SX9PYu8CzLtq43itume0shSbSQmDD 1tXULuf/P6YpF7eTRqqtZFT7hJhD5dI90FEEMItBFfYkwG7gUzmve1Zxu3XJzTg4 kDKrfDIdBhWEbgCGrx8y/HbPt0CmCJJ+OEi+us6AaYc5Hx9+7IsyhjAiCT73efHo NNmW/pQxG62zN9RNiCDjBrIb0N8hfJpcqy8JfzQ6o/JdXEEvbo2J88+i3BcTSiRL xlf5t72WPKGnS02Smp08sHPwQgTVMqxP9ZP7A9VNYsk2nN94Lq7xVxyOm5+0EVpL mpI= -----END CERTIFICATE-----Generated at Sun Nov 15 12:25:48 2026 by rpki-client