$ rpki-client -vvvf rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ye1Ldnbj9aWx-Kag3X4iG2PlNKs.cer File: ye1Ldnbj9aWx-Kag3X4iG2PlNKs.cer (raw, json) Hash identifier: koMHixNbajdqEaQRK6FrB8fYHqjZWbqx8X3k7KIoKAo= Subject key identifier: C9:ED:4B:76:76:E3:F5:A5:B1:F8:A6:A0:DD:7E:22:1B:63:E5:34:AB Authority key identifier: 0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F Certificate issuer: /CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F Certificate serial: 02E69D Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer CRL Distribution Point: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl Manifest: rsync://rpki.apnic.net/member_repository/A91D2ACF/5AC62B2A73E311EA9B59436EC4F9AE02/ye1Ldnbj9aWx-Kag3X4iG2PlNKs.mft caRepository: rsync://rpki.apnic.net/member_repository/A91D2ACF/5AC62B2A73E311EA9B59436EC4F9AE02/ Notify URL: https://rrdp.apnic.net/notification.xml Certificate not before: Fri 13 Nov 2026 13:47:10 +0000 Certificate not after: Mon 31 Jan 2028 00:00:00 +0000 Subordinate resources: IP: 103.144.40.0/23 Validation: OK Signature path: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 22 Nov 2026 06:30:07 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 190109 (0x2e69d) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A90DC5BE, serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F Validity Not Before: Nov 13 13:47:10 2026 GMT Not After : Jan 31 00:00:00 2028 GMT Subject: CN=A91D2ACF, serialNumber=C9ED4B7676E3F5A5B1F8A6A0DD7E221B63E534AB Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:84:b2:ce:85:e3:55:12:6f:d3:b9:77:fd:4d: 3b:b0:8e:66:0d:55:fe:8a:b4:e0:fc:0b:99:2d:a8: 58:b4:25:28:3e:20:43:33:b8:6d:dc:6e:df:5a:9a: 90:a0:98:d2:d2:cf:94:18:ca:e9:0a:a8:0a:9f:29: ea:87:a6:a9:e9:7c:cb:a1:09:16:f4:77:8d:ee:0f: 87:72:cb:d5:87:07:85:58:85:2d:e7:57:86:02:4c: a5:f1:20:7f:3b:81:a8:8a:e4:01:cc:ef:1e:2b:a4: a6:3d:0b:f1:b9:26:97:3f:f7:3f:f9:1a:79:ca:7c: 64:21:b1:5a:4f:25:74:c5:cc:41:44:87:de:ef:5d: ca:26:0f:20:10:e8:d6:ca:5f:0e:41:c3:0a:79:28: 42:09:50:7e:2f:99:8b:df:85:71:7a:a0:fd:90:75: 4b:5a:82:df:49:cf:2a:df:a3:7d:63:41:47:82:14: 6d:b0:67:c9:91:75:98:ec:82:b5:69:b2:32:a8:2b: 80:2e:9d:c9:de:f5:ed:04:59:7b:50:c0:81:97:93: 41:2f:45:88:37:92:fd:b7:50:74:90:c6:d9:4d:ca: 59:14:35:49:00:c5:12:35:a7:8a:58:55:58:96:b9: 75:ba:2a:c0:88:a9:e1:4b:13:b3:42:0e:15:3b:85: 7d:f9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C9:ED:4B:76:76:E3:F5:A5:B1:F8:A6:A0:DD:7E:22:1B:63:E5:34:AB X509v3 Authority Key Identifier: keyid:0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: CA Repository - URI:rsync://rpki.apnic.net/member_repository/A91D2ACF/5AC62B2A73E311EA9B59436EC4F9AE02/ RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A91D2ACF/5AC62B2A73E311EA9B59436EC4F9AE02/ye1Ldnbj9aWx-Kag3X4iG2PlNKs.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 103.144.40.0/23 Signature Algorithm: sha256WithRSAEncryption 67:73:22:64:69:3e:62:a2:ab:97:01:f7:01:2d:74:13:d1:b5: eb:e6:4a:d7:26:3a:76:1a:3f:2e:c4:7e:08:b3:58:27:ec:93: 57:70:5f:ea:95:5f:b4:26:08:e8:c1:ed:78:25:9f:75:b4:33: 27:e6:3f:3f:5a:f5:57:e2:73:bd:58:c2:1d:b8:a7:a2:f9:09: e8:a7:0a:7d:84:0b:90:d7:77:c1:10:8d:c7:02:f9:e3:ba:2c: ae:b7:c6:ce:9f:01:19:7d:80:d2:f7:32:0f:94:b5:f9:63:34: 56:ce:17:9c:e6:27:3c:af:ef:19:63:e3:ed:65:75:0e:ea:ef: 11:d3:d0:c6:5b:74:67:e5:f8:91:c6:aa:39:49:1a:43:e8:64: e1:c5:31:d2:4d:e1:ce:cc:fe:e2:c5:42:bf:ff:8d:3a:96:fe: 5a:b7:b9:cf:96:9a:72:31:15:c6:74:6e:78:81:7e:7f:14:aa: 66:ee:26:3c:d7:0b:bf:ca:7b:64:23:50:68:29:31:62:57:bd: 48:03:10:2f:0d:22:27:00:43:cf:07:fc:79:95:2e:1b:66:7b: 76:67:46:63:2a:2c:f4:b7:e5:47:68:79:d6:16:63:ec:0e:6f: ff:2b:54:0a:1a:ee:7e:b0:74:7d:71:c2:4e:c0:a5:d3:8a:22: 67:8b:c8:e5 -----BEGIN CERTIFICATE----- MIIF/jCCBOagAwIBAgIDAuadMA0GCSqGSIb3DQEBCwUAMEYxETAPBgNVBAMTCEE5 MERDNUJFMTEwLwYDVQQFEygwRTY1QTRGNUZEMzZCNUJENjhFQjNDOTIzNDA4OTc4 QzkwN0FBNzlGMB4XDTI2MTExMzEzNDcxMFoXDTI4MDEzMTAwMDAwMFowRjERMA8G A1UEAxMIQTkxRDJBQ0YxMTAvBgNVBAUTKEM5RUQ0Qjc2NzZFM0Y1QTVCMUY4QTZB MEREN0UyMjFCNjNFNTM0QUIwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQC8hLLOheNVEm/TuXf9TTuwjmYNVf6KtOD8C5ktqFi0JSg+IEMzuG3cbt9ampCg mNLSz5QYyukKqAqfKeqHpqnpfMuhCRb0d43uD4dyy9WHB4VYhS3nV4YCTKXxIH87 gaiK5AHM7x4rpKY9C/G5Jpc/9z/5GnnKfGQhsVpPJXTFzEFEh97vXcomDyAQ6NbK Xw5Bwwp5KEIJUH4vmYvfhXF6oP2QdUtagt9Jzyrfo31jQUeCFG2wZ8mRdZjsgrVp sjKoK4Auncne9e0EWXtQwIGXk0EvRYg3kv23UHSQxtlNylkUNUkAxRI1p4pYVViW uXW6KsCIqeFLE7NCDhU7hX35AgMBAAGjggLzMIIC7zAdBgNVHQ4EFgQUye1Ldnbj 9aWx+Kag3X4iG2PlNKswHwYDVR0jBBgwFoAUDmWk9f02tb1o6zySNAiXjJB6p58w DgYDVR0PAQH/BAQDAgEGMA8GA1UdEwEB/wQFMAMBAf8wcwYDVR0fBGwwajBooGag ZIZicnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2 NjExRTJCQjQ2OEY3QzcyRkQxRkYyL0RtV2s5ZjAydGIxbzZ6eVNOQWlYakpCNnA1 OC5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvOTgwNjUyRTBCNzdFMTFFN0E5NkEzOTUyMUE0 RjRGQjQvRG1XazlmMDJ0YjFvNnp5U05BaVhqSkI2cDU4LmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwggEoBggrBgEFBQcBCwSCARowggEWMF8GCCsGAQUF BzAFhlNyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5 MUQyQUNGLzVBQzYyQjJBNzNFMzExRUE5QjU5NDM2RUM0RjlBRTAyLzB+BggrBgEF BQcwCoZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9B OTFEMkFDRi81QUM2MkIyQTczRTMxMUVBOUI1OTQzNkVDNEY5QUUwMi95ZTFMZG5i ajlhV3gtS2FnM1g0aUcyUGxOS3MubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3Jy ZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8EEDAO MAwEAgABMAYDBAFnkCgwDQYJKoZIhvcNAQELBQADggEBAGdzImRpPmKiq5cB9wEt dBPRtevmStcmOnYaPy7EfgizWCfsk1dwX+qVX7QmCOjB7Xgln3W0MyfmPz9a9Vfi c71Ywh24p6L5CeinCn2EC5DXd8EQjccC+eO6LK63xs6fARl9gNL3Mg+UtfljNFbO F5zmJzyv7xlj4+1ldQ7q7xHT0MZbdGfl+JHGqjlJGkPoZOHFMdJN4c7M/uLFQr// jTqW/lq3uc+WmnIxFcZ0bniBfn8UqmbuJjzXC7/Ke2QjUGgpMWJXvUgDEC8NIicA Q88H/HmVLhtme3ZnRmMqLPS35UdoedYWY+wOb/8rVAoa7n6wdH1xwk7ApdOKImeL yOU= -----END CERTIFICATE-----Generated at Sun Nov 15 09:51:13 2026 by rpki-client