$ rpki-client -vvvf rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cXbf60XVUhUlm50_AkmWiKqECBk.cer File: cXbf60XVUhUlm50_AkmWiKqECBk.cer (raw, json) Hash identifier: XkHeoWejmOYqEfJlm6p0Z70cOUoCV2LNq5gMbhxB4tM= Subject key identifier: 71:76:DF:EB:45:D5:52:15:25:9B:9D:3F:02:49:96:88:AA:84:08:19 Authority key identifier: 0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F Certificate issuer: /CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F Certificate serial: 02E0E3 Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer CRL Distribution Point: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl Manifest: rsync://rpki.apnic.net/member_repository/A91C49BA/E1A459E4D29811F1A3260239F765CEF9/cXbf60XVUhUlm50_AkmWiKqECBk.mft caRepository: rsync://rpki.apnic.net/member_repository/A91C49BA/E1A459E4D29811F1A3260239F765CEF9/ Notify URL: https://rrdp.apnic.net/notification.xml Certificate not before: Wed 28 Oct 2026 06:29:12 +0000 Certificate not after: Tue 02 Mar 2027 00:00:00 +0000 Subordinate resources: IP: 2001:df7:c6c0::/48 Validation: OK Signature path: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 22 Nov 2026 14:50:18 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 188643 (0x2e0e3) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A90DC5BE, serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F Validity Not Before: Oct 28 06:29:12 2026 GMT Not After : Mar 2 00:00:00 2027 GMT Subject: CN=A91C49BA, serialNumber=7176DFEB45D55215259B9D3F02499688AA840819 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:20:51:c7:01:2f:75:b4:d6:b7:d7:f4:88:ed: b5:02:2b:52:b8:c2:bf:79:f3:75:25:e2:b6:56:ee: c2:ba:3d:58:6a:4f:03:87:ec:f7:04:79:27:f0:88: ae:50:1f:0b:07:7e:a1:80:d6:e7:19:9a:50:2a:12: e5:30:34:87:3b:a6:37:2f:1f:34:55:f9:4b:66:bb: 9f:0c:e5:d0:de:5c:ec:35:fc:28:e8:4b:9b:2e:ad: 1a:a8:08:da:0f:d3:74:50:d5:05:91:8b:a1:ca:51: 37:ee:a5:b2:54:1f:d1:d4:c0:95:28:1e:95:e4:fb: 1c:76:cd:96:48:9a:19:d9:e9:ba:65:7e:6a:e5:ae: b2:67:59:d7:b7:1a:25:8f:f4:e7:40:59:55:64:68: d9:76:62:30:58:c3:cc:62:d7:79:ca:86:70:8b:43: 99:eb:55:35:aa:ba:00:74:14:a1:26:2e:70:3b:27: a9:4c:d4:27:8c:ac:1e:d2:4d:37:4b:7a:67:03:d8: 6c:92:22:96:75:d1:41:4b:13:74:23:17:7e:c7:f8: e4:84:95:27:fe:0c:f9:9c:40:1e:df:7b:ef:f9:70: 40:68:5e:f6:c4:16:a6:77:34:1a:ea:d1:82:69:81: 88:6b:dc:cb:85:ab:41:94:48:97:e0:b1:c0:84:d4: a4:fb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 71:76:DF:EB:45:D5:52:15:25:9B:9D:3F:02:49:96:88:AA:84:08:19 X509v3 Authority Key Identifier: keyid:0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: CA Repository - URI:rsync://rpki.apnic.net/member_repository/A91C49BA/E1A459E4D29811F1A3260239F765CEF9/ RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A91C49BA/E1A459E4D29811F1A3260239F765CEF9/cXbf60XVUhUlm50_AkmWiKqECBk.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv6: 2001:df7:c6c0::/48 Signature Algorithm: sha256WithRSAEncryption a3:ff:b2:4d:42:61:73:1d:ba:ea:d9:10:b5:a9:59:ac:33:9a: a2:a2:7d:65:15:33:83:3a:5a:d9:3a:56:b4:e2:52:ea:d6:8d: 79:e2:46:26:7b:6b:13:10:78:7c:f1:f8:6e:79:e7:e5:fd:2a: 13:dc:18:45:45:67:f7:6f:f9:a7:64:8a:07:ef:84:53:78:a9: 51:b3:4f:76:e3:2b:eb:89:83:94:fd:e4:b0:04:51:fd:f5:8e: ed:d3:73:e4:f8:50:bd:65:d4:10:ed:c0:9b:a5:d9:64:0a:c2: 11:41:3f:f3:93:11:59:22:07:60:9c:24:11:6d:32:30:00:dd: 88:32:01:64:fb:b9:3f:31:23:e5:b5:e9:75:65:51:6e:22:04: 0c:a4:a9:fa:3d:f5:d0:66:5c:3f:b0:96:da:b7:47:91:fb:af: 62:7e:9e:4f:f0:c0:79:42:6f:38:73:52:1e:38:ed:54:34:be: c0:f8:b7:c2:10:33:d6:09:a2:bc:b9:24:a4:c6:dd:2c:93:f2: 8b:1d:8a:89:d7:99:7c:7e:1d:41:b9:12:27:37:2a:53:5f:25: 2d:e5:df:83:dd:bd:c4:5f:a6:30:3c:26:54:1d:18:5f:00:54: 8c:4c:c1:53:88:82:8c:da:ca:ab:f5:b2:ce:0f:2b:46:61:8f: 61:41:7e:7e -----BEGIN CERTIFICATE----- MIIGATCCBOmgAwIBAgIDAuDjMA0GCSqGSIb3DQEBCwUAMEYxETAPBgNVBAMTCEE5 MERDNUJFMTEwLwYDVQQFEygwRTY1QTRGNUZEMzZCNUJENjhFQjNDOTIzNDA4OTc4 QzkwN0FBNzlGMB4XDTI2MTAyODA2MjkxMloXDTI3MDMwMjAwMDAwMFowRjERMA8G A1UEAxMIQTkxQzQ5QkExMTAvBgNVBAUTKDcxNzZERkVCNDVENTUyMTUyNTlCOUQz RjAyNDk5Njg4QUE4NDA4MTkwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQC/IFHHAS91tNa31/SI7bUCK1K4wr9583Ul4rZW7sK6PVhqTwOH7PcEeSfwiK5Q HwsHfqGA1ucZmlAqEuUwNIc7pjcvHzRV+Utmu58M5dDeXOw1/CjoS5surRqoCNoP 03RQ1QWRi6HKUTfupbJUH9HUwJUoHpXk+xx2zZZImhnZ6bplfmrlrrJnWde3GiWP 9OdAWVVkaNl2YjBYw8xi13nKhnCLQ5nrVTWqugB0FKEmLnA7J6lM1CeMrB7STTdL emcD2GySIpZ10UFLE3QjF37H+OSElSf+DPmcQB7fe+/5cEBoXvbEFqZ3NBrq0YJp gYhr3MuFq0GUSJfgscCE1KT7AgMBAAGjggL2MIIC8jAdBgNVHQ4EFgQUcXbf60XV UhUlm50/AkmWiKqECBkwHwYDVR0jBBgwFoAUDmWk9f02tb1o6zySNAiXjJB6p58w DgYDVR0PAQH/BAQDAgEGMA8GA1UdEwEB/wQFMAMBAf8wcwYDVR0fBGwwajBooGag ZIZicnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2 NjExRTJCQjQ2OEY3QzcyRkQxRkYyL0RtV2s5ZjAydGIxbzZ6eVNOQWlYakpCNnA1 OC5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvOTgwNjUyRTBCNzdFMTFFN0E5NkEzOTUyMUE0 RjRGQjQvRG1XazlmMDJ0YjFvNnp5U05BaVhqSkI2cDU4LmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwggEoBggrBgEFBQcBCwSCARowggEWMF8GCCsGAQUF BzAFhlNyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5 MUM0OUJBL0UxQTQ1OUU0RDI5ODExRjFBMzI2MDIzOUY3NjVDRUY5LzB+BggrBgEF BQcwCoZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9B OTFDNDlCQS9FMUE0NTlFNEQyOTgxMUYxQTMyNjAyMzlGNzY1Q0VGOS9jWGJmNjBY VlVoVWxtNTBfQWttV2lLcUVDQmsubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3Jy ZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwIgYIKwYBBQUHAQcBAf8EEzAR MA8EAgACMAkDBwAgAQ33xsAwDQYJKoZIhvcNAQELBQADggEBAKP/sk1CYXMduurZ ELWpWawzmqKifWUVM4M6Wtk6VrTiUurWjXniRiZ7axMQeHzx+G555+X9KhPcGEVF Z/dv+adkigfvhFN4qVGzT3bjK+uJg5T95LAEUf31ju3Tc+T4UL1l1BDtwJul2WQK whFBP/OTEVkiB2CcJBFtMjAA3YgyAWT7uT8xI+W16XVlUW4iBAykqfo99dBmXD+w ltq3R5H7r2J+nk/wwHlCbzhzUh447VQ0vsD4t8IQM9YJory5JKTG3SyT8osdionX mXx+HUG5Eic3KlNfJS3l34PdvcRfpjA8JlQdGF8AVIxMwVOIgozayqv1ss4PK0Zh j2FBfn4= -----END CERTIFICATE-----Generated at Sun Nov 15 16:59:13 2026 by rpki-client