$ rpki-client -vvvf rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PgP9FZgAmbW_UCHpC-H0p34Ax5w.cer File: PgP9FZgAmbW_UCHpC-H0p34Ax5w.cer (raw, json) Hash identifier: zRKwNtpgfGBPB1rPD33ZueLUemgoSC9igOzwGfQw5tU= Subject key identifier: 3E:03:FD:15:98:00:99:B5:BF:50:21:E9:0B:E1:F4:A7:7E:00:C7:9C Authority key identifier: 0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F Certificate issuer: /CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F Certificate serial: 02DBC6 Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer CRL Distribution Point: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl Manifest: rsync://rpki.apnic.net/member_repository/A91538E7/BF404A5A026711EB8E1C301AC4F9AE02/PgP9FZgAmbW_UCHpC-H0p34Ax5w.mft caRepository: rsync://rpki.apnic.net/member_repository/A91538E7/BF404A5A026711EB8E1C301AC4F9AE02/ Notify URL: https://rrdp.apnic.net/notification.xml Certificate not before: Sun 04 Oct 2026 12:54:41 +0000 Certificate not after: Thu 30 Dec 2027 00:00:00 +0000 Subordinate resources: AS: 140698 Validation: OK Signature path: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 22 Nov 2026 17:14:55 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 187334 (0x2dbc6) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A90DC5BE, serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F Validity Not Before: Oct 4 12:54:41 2026 GMT Not After : Dec 30 00:00:00 2027 GMT Subject: CN=A91538E7, serialNumber=3E03FD15980099B5BF5021E90BE1F4A77E00C79C Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e7:4d:71:21:72:59:c8:e9:57:7c:fd:1a:67:cb: 59:5d:71:96:36:c9:51:7d:1b:a6:16:17:84:e9:18: 3b:06:0a:59:c0:27:93:b8:00:f1:cd:08:3b:68:da: 2e:67:28:3d:89:db:a2:c1:e4:f0:42:7d:e4:86:3b: 95:4e:b5:9b:0b:e4:1a:f2:de:23:8b:3e:fa:74:93: 63:56:2a:bd:5c:4f:09:01:17:1a:e1:a0:0e:dc:0d: 74:88:f4:77:9e:cd:99:f9:0f:e1:4e:e7:d7:c5:fb: f5:9d:d3:cd:a3:79:fb:45:65:d4:34:79:bc:af:30: 5f:dd:54:44:79:c9:6d:3d:9c:a8:ae:de:e9:8c:12: 28:88:c3:e7:eb:e5:54:3d:3a:4a:06:fe:6a:93:b1: 6d:7c:40:6c:a6:33:5a:8c:4b:28:70:66:03:1d:d9: 19:7a:10:e5:61:80:ac:0f:5e:9a:1e:2a:c8:ea:68: 39:7f:53:3d:09:a9:19:e4:9c:72:8b:3c:52:95:d3: e5:25:ae:f0:45:0e:73:ee:95:ff:f1:fd:04:ee:d7: 05:26:c0:53:32:35:62:b8:09:5e:a9:2e:ec:4a:b9: 30:37:b6:36:5f:6b:6a:9f:84:ba:73:ea:b6:8e:2b: e2:65:82:d5:3b:e7:dd:8a:12:e7:41:f5:af:0b:3c: 3f:f3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3E:03:FD:15:98:00:99:B5:BF:50:21:E9:0B:E1:F4:A7:7E:00:C7:9C X509v3 Authority Key Identifier: keyid:0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: CA Repository - URI:rsync://rpki.apnic.net/member_repository/A91538E7/BF404A5A026711EB8E1C301AC4F9AE02/ RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A91538E7/BF404A5A026711EB8E1C301AC4F9AE02/PgP9FZgAmbW_UCHpC-H0p34Ax5w.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: 140698 Signature Algorithm: sha256WithRSAEncryption 93:d8:65:5e:4c:db:b3:22:fe:2d:4c:8f:ec:ed:2c:bb:59:8c: a8:2b:e8:9f:db:de:0a:c3:04:f3:b2:c7:55:27:49:c3:bf:7c: 71:09:3e:8a:b5:94:8b:dc:19:10:6c:9a:db:94:1d:57:af:f5: f1:f6:d9:01:b2:67:8f:b7:84:c7:e4:45:dc:ee:a2:ef:7b:d9: 46:32:9c:5f:77:f5:f4:d2:cf:72:1d:c3:dd:33:c8:66:56:f3: 75:3d:cd:46:fd:d0:46:a5:38:a0:d2:0f:ba:a7:cf:1f:34:48: 96:de:f4:81:3b:d9:aa:63:8d:24:58:ec:aa:7b:91:d8:f8:37: 38:10:af:84:3e:c6:55:6f:97:1f:9e:45:e8:62:0d:6e:d9:92: a1:cc:df:28:59:8a:6e:45:ef:6f:10:04:e6:39:9a:2a:e8:ad: a8:fa:50:42:56:db:a1:5b:ad:db:1a:36:91:a5:e5:ea:1e:ae: ab:39:73:1d:59:60:35:bf:66:b1:6b:d9:b4:2e:fc:b1:9d:45: c4:fe:1c:a2:94:2c:0b:d9:62:8c:df:23:10:1d:9c:1a:76:11: c2:c3:bf:e0:6f:b6:1d:22:78:89:ea:b8:23:e2:d0:84:fd:7c: 24:01:71:66:b2:4f:1f:94:37:15:f7:db:04:cc:82:90:db:c7: 69:43:13:b2 -----BEGIN CERTIFICATE----- MIIF+TCCBOGgAwIBAgIDAtvGMA0GCSqGSIb3DQEBCwUAMEYxETAPBgNVBAMTCEE5 MERDNUJFMTEwLwYDVQQFEygwRTY1QTRGNUZEMzZCNUJENjhFQjNDOTIzNDA4OTc4 QzkwN0FBNzlGMB4XDTI2MTAwNDEyNTQ0MVoXDTI3MTIzMDAwMDAwMFowRjERMA8G A1UEAxMIQTkxNTM4RTcxMTAvBgNVBAUTKDNFMDNGRDE1OTgwMDk5QjVCRjUwMjFF OTBCRTFGNEE3N0UwMEM3OUMwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDnTXEhclnI6Vd8/Rpny1ldcZY2yVF9G6YWF4TpGDsGClnAJ5O4APHNCDto2i5n KD2J26LB5PBCfeSGO5VOtZsL5Bry3iOLPvp0k2NWKr1cTwkBFxrhoA7cDXSI9Hee zZn5D+FO59fF+/Wd082jeftFZdQ0ebyvMF/dVER5yW09nKiu3umMEiiIw+fr5VQ9 OkoG/mqTsW18QGymM1qMSyhwZgMd2Rl6EOVhgKwPXpoeKsjqaDl/Uz0JqRnknHKL PFKV0+UlrvBFDnPulf/x/QTu1wUmwFMyNWK4CV6pLuxKuTA3tjZfa2qfhLpz6raO K+JlgtU7592KEudB9a8LPD/zAgMBAAGjggLuMIIC6jAdBgNVHQ4EFgQUPgP9FZgA mbW/UCHpC+H0p34Ax5wwHwYDVR0jBBgwFoAUDmWk9f02tb1o6zySNAiXjJB6p58w DgYDVR0PAQH/BAQDAgEGMA8GA1UdEwEB/wQFMAMBAf8wcwYDVR0fBGwwajBooGag ZIZicnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2 NjExRTJCQjQ2OEY3QzcyRkQxRkYyL0RtV2s5ZjAydGIxbzZ6eVNOQWlYakpCNnA1 OC5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvOTgwNjUyRTBCNzdFMTFFN0E5NkEzOTUyMUE0 RjRGQjQvRG1XazlmMDJ0YjFvNnp5U05BaVhqSkI2cDU4LmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwggEoBggrBgEFBQcBCwSCARowggEWMF8GCCsGAQUF BzAFhlNyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5 MTUzOEU3L0JGNDA0QTVBMDI2NzExRUI4RTFDMzAxQUM0RjlBRTAyLzB+BggrBgEF BQcwCoZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9B OTE1MzhFNy9CRjQwNEE1QTAyNjcxMUVCOEUxQzMwMUFDNEY5QUUwMi9QZ1A5Rlpn QW1iV19VQ0hwQy1IMHAzNEF4NXcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3Jy ZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwGgYIKwYBBQUHAQgBAf8ECzAJ oAcwBQIDAiWaMA0GCSqGSIb3DQEBCwUAA4IBAQCT2GVeTNuzIv4tTI/s7Sy7WYyo K+if294KwwTzssdVJ0nDv3xxCT6KtZSL3BkQbJrblB1Xr/Xx9tkBsmePt4TH5EXc 7qLve9lGMpxfd/X00s9yHcPdM8hmVvN1Pc1G/dBGpTig0g+6p88fNEiW3vSBO9mq Y40kWOyqe5HY+Dc4EK+EPsZVb5cfnkXoYg1u2ZKhzN8oWYpuRe9vEATmOZoq6K2o +lBCVtuhW63bGjaRpeXqHq6rOXMdWWA1v2axa9m0LvyxnUXE/hyilCwL2WKM3yMQ HZwadhHCw7/gb7YdIniJ6rgj4tCE/XwkAXFmsk8flDcV99sEzIKQ28dpQxOy -----END CERTIFICATE-----Generated at Sun Nov 15 21:54:27 2026 by rpki-client