$ rpki-client -vvvf rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/5C9d7yZZtef6JwN2jpSH79xZW7A.cer File: 5C9d7yZZtef6JwN2jpSH79xZW7A.cer (raw, json) Hash identifier: t6eUs6LYmLZ8NISd0qrwS+yMAddrksyVlf5uuyLBeG4= Subject key identifier: E4:2F:5D:EF:26:59:B5:E7:FA:27:03:76:8E:94:87:EF:DC:59:5B:B0 Authority key identifier: 74:01:65:A8:0D:10:71:97:0A:BC:09:C0:2B:71:C1:AC:7C:1D:6E:0E Certificate issuer: /CN=A90DC5BE/serialNumber=740165A80D1071970ABC09C02B71C1AC7C1D6E0E Certificate serial: 838A Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer CRL Distribution Point: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl Manifest: rsync://rpki.apnic.net/member_repository/A91CC4A7/FA98FB3EAB4411F0843D0657C4F9AE02/5C9d7yZZtef6JwN2jpSH79xZW7A.mft caRepository: rsync://rpki.apnic.net/member_repository/A91CC4A7/FA98FB3EAB4411F0843D0657C4F9AE02/ Notify URL: https://rrdp.apnic.net/notification.xml Certificate not before: Wed 14 Oct 2026 13:54:01 +0000 Certificate not after: Thu 30 Dec 2027 00:00:00 +0000 Subordinate resources: IP: 138.252.56.0/23 Validation: OK Signature path: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 22 Nov 2026 14:50:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 33674 (0x838a) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A90DC5BE, serialNumber=740165A80D1071970ABC09C02B71C1AC7C1D6E0E Validity Not Before: Oct 14 13:54:01 2026 GMT Not After : Dec 30 00:00:00 2027 GMT Subject: CN=A91CC4A7, serialNumber=E42F5DEF2659B5E7FA2703768E9487EFDC595BB0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d4:20:77:51:30:aa:f1:18:c6:01:45:12:56:17: 85:8b:4d:58:29:f3:25:7b:b8:64:06:a5:bd:be:e8: 68:e2:93:ef:ed:ce:f4:82:22:70:e4:8d:ef:1f:e7: 5b:11:41:b0:4a:79:e4:52:8e:72:ac:ba:42:bc:1c: cb:b2:6a:01:89:2c:1a:a1:a7:3f:48:53:b0:d7:da: 59:50:4e:12:4e:48:ab:cd:cb:d2:c4:7d:6a:57:33: 23:f6:8d:be:5f:e1:dc:7b:55:b2:08:71:9a:c3:ba: 79:9f:f5:6c:b9:50:b5:67:b2:97:0c:b7:61:65:a8: 4a:39:3b:45:75:44:3b:34:42:c4:b7:f5:48:72:32: b0:56:3b:2b:3b:6b:db:55:46:74:af:b7:83:bf:3a: 72:47:33:09:af:e0:40:35:54:16:82:05:eb:ab:26: 7f:16:39:52:0a:ce:2c:8d:fd:53:3b:9a:5d:e3:e2: ff:3e:65:34:0c:0f:7f:52:f1:d2:41:d1:a1:9a:04: db:2c:81:8e:04:78:7e:4f:23:c2:4a:90:8c:31:e0: 3c:2a:7b:ef:6b:5c:fc:e1:42:bf:ab:f2:35:40:e6: 75:86:16:e9:b9:61:9a:85:16:fc:54:03:91:7b:cf: b4:df:b5:62:cd:03:f8:c6:22:1e:ec:70:0d:3d:5c: 78:6d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E4:2F:5D:EF:26:59:B5:E7:FA:27:03:76:8E:94:87:EF:DC:59:5B:B0 X509v3 Authority Key Identifier: keyid:74:01:65:A8:0D:10:71:97:0A:BC:09:C0:2B:71:C1:AC:7C:1D:6E:0E X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: CA Repository - URI:rsync://rpki.apnic.net/member_repository/A91CC4A7/FA98FB3EAB4411F0843D0657C4F9AE02/ RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A91CC4A7/FA98FB3EAB4411F0843D0657C4F9AE02/5C9d7yZZtef6JwN2jpSH79xZW7A.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 138.252.56.0/23 Signature Algorithm: sha256WithRSAEncryption 4d:74:bf:a5:25:44:7c:ee:f4:cd:a3:4b:6d:92:15:b8:8d:7c: bd:a7:86:bd:a4:11:7b:11:20:d8:b1:33:00:ef:01:36:e7:41: 7f:64:50:d6:26:e1:17:06:bc:8c:4f:0b:27:56:b1:9d:e8:51: 93:70:5e:cd:1a:bc:7d:b8:d8:8a:fa:15:24:ba:ce:4d:cb:6b: 34:aa:90:96:94:ab:4f:7d:0f:f1:37:86:85:56:ea:c7:78:a7: da:6f:64:cb:79:6e:2b:5d:45:f7:39:36:6d:51:04:6c:a6:eb: 40:b7:37:27:c1:07:3c:81:08:35:6d:de:2c:29:a8:9b:46:ef: f5:eb:33:e0:6d:8d:06:9e:6e:4d:5e:a3:2f:b4:03:92:ba:fc: 69:53:77:c1:79:80:1a:c0:61:95:bd:66:e1:55:65:d0:ef:8c: 34:a4:ac:23:39:4b:42:06:d9:9f:e0:08:2e:60:fe:4f:cd:98: a0:17:d9:95:4a:2e:b4:64:de:c6:1a:ad:d4:f5:3e:c7:c1:e5: 4c:ca:c0:cd:a3:08:ed:a3:a5:bb:12:2f:20:da:aa:76:2c:8e: e6:69:a9:cd:0d:fa:15:c5:be:5d:13:6f:a3:bb:fa:24:0e:d4: cd:15:cb:e3:bf:70:af:2f:36:26:66:b4:6c:b4:69:fa:ea:4e: 7a:e7:1b:ac -----BEGIN CERTIFICATE----- MIIF/jCCBOagAwIBAgIDAIOKMA0GCSqGSIb3DQEBCwUAMEYxETAPBgNVBAMTCEE5 MERDNUJFMTEwLwYDVQQFEyg3NDAxNjVBODBEMTA3MTk3MEFCQzA5QzAyQjcxQzFB QzdDMUQ2RTBFMB4XDTI2MTAxNDEzNTQwMVoXDTI3MTIzMDAwMDAwMFowRjERMA8G A1UEAxMIQTkxQ0M0QTcxMTAvBgNVBAUTKEU0MkY1REVGMjY1OUI1RTdGQTI3MDM3 NjhFOTQ4N0VGREM1OTVCQjAwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDUIHdRMKrxGMYBRRJWF4WLTVgp8yV7uGQGpb2+6Gjik+/tzvSCInDkje8f51sR QbBKeeRSjnKsukK8HMuyagGJLBqhpz9IU7DX2llQThJOSKvNy9LEfWpXMyP2jb5f 4dx7VbIIcZrDunmf9Wy5ULVnspcMt2FlqEo5O0V1RDs0QsS39UhyMrBWOys7a9tV RnSvt4O/OnJHMwmv4EA1VBaCBeurJn8WOVIKziyN/VM7ml3j4v8+ZTQMD39S8dJB 0aGaBNssgY4EeH5PI8JKkIwx4Dwqe+9rXPzhQr+r8jVA5nWGFum5YZqFFvxUA5F7 z7TftWLNA/jGIh7scA09XHhtAgMBAAGjggLzMIIC7zAdBgNVHQ4EFgQU5C9d7yZZ tef6JwN2jpSH79xZW7AwHwYDVR0jBBgwFoAUdAFlqA0QcZcKvAnAK3HBrHwdbg4w DgYDVR0PAQH/BAQDAgEGMA8GA1UdEwEB/wQFMAMBAf8wcwYDVR0fBGwwajBooGag ZIZicnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2 NjExRTI4QUM4ODM3QzcyRkQxRkYyL2RBRmxxQTBRY1pjS3ZBbkFLM0hCckh3ZGJn NC5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvOTgwNjUyRTBCNzdFMTFFN0E5NkEzOTUyMUE0 RjRGQjQvZEFGbHFBMFFjWmNLdkFuQUszSEJySHdkYmc0LmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwggEoBggrBgEFBQcBCwSCARowggEWMF8GCCsGAQUF BzAFhlNyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5 MUNDNEE3L0ZBOThGQjNFQUI0NDExRjA4NDNEMDY1N0M0RjlBRTAyLzB+BggrBgEF BQcwCoZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9B OTFDQzRBNy9GQTk4RkIzRUFCNDQxMUYwODQzRDA2NTdDNEY5QUUwMi81QzlkN3la WnRlZjZKd04yanBTSDc5eFpXN0EubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3Jy ZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8EEDAO MAwEAgABMAYDBAGK/DgwDQYJKoZIhvcNAQELBQADggEBAE10v6UlRHzu9M2jS22S FbiNfL2nhr2kEXsRINixMwDvATbnQX9kUNYm4RcGvIxPCydWsZ3oUZNwXs0avH24 2Ir6FSS6zk3LazSqkJaUq099D/E3hoVW6sd4p9pvZMt5bitdRfc5Nm1RBGym60C3 NyfBBzyBCDVt3iwpqJtG7/XrM+BtjQaebk1eoy+0A5K6/GlTd8F5gBrAYZW9ZuFV ZdDvjDSkrCM5S0IG2Z/gCC5g/k/NmKAX2ZVKLrRk3sYardT1PsfB5UzKwM2jCO2j pbsSLyDaqnYsjuZpqc0N+hXFvl0Tb6O7+iQO1M0Vy+O/cK8vNiZmtGy0afrqTnrn G6w= -----END CERTIFICATE-----Generated at Sun Nov 15 17:44:29 2026 by rpki-client