$ rpki-client -vvf rpki.sub.apnic.net/repository/A9150E4D0000/0/3C63FBDA23EE1D2BFADB806544E553DDBA294ACF.cer File: 3C63FBDA23EE1D2BFADB806544E553DDBA294ACF.cer (raw, json) Hash identifier: 8onmoKxdaUxxj1P8sYqyF5yt9nVEes+Ox3xRaYWpPIM= Subject key identifier: 3C:63:FB:DA:23:EE:1D:2B:FA:DB:80:65:44:E5:53:DD:BA:29:4A:CF Authority key identifier: 11:F9:8F:3F:8D:D4:F5:5C:C7:FF:B7:A4:BA:CC:65:6E:0D:19:3D:1E Certificate issuer: /CN=A9150E4D0000/serialNumber=11F98F3F8DD4F55CC7FFB7A4BACC656E0D193D1E Certificate serial: 026BC9BB63D2102F0FD99381B2AD2B367E8E3A55 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/EfmPP43U9VzH_7ekusxlbg0ZPR4.cer Manifest: rsync://krill.syd-au.infininet.com.au/repo/BGP-Exchange/0/3C63FBDA23EE1D2BFADB806544E553DDBA294ACF.mft caRepository: rsync://krill.syd-au.infininet.com.au/repo/BGP-Exchange/0/ Notify URL: https://krill.syd-au.infininet.com.au/rrdp/notification.xml Certificate not before: Wed 04 Jun 2025 16:07:11 +0000 Certificate not after: Wed 03 Jun 2026 16:12:11 +0000 Subordinate resources: AS: 24381 IP: 2401:2060:b000::/38 Validation: OK Signature path: rsync://rpki.sub.apnic.net/repository/A9150E4D0000/0/11F98F3F8DD4F55CC7FFB7A4BACC656E0D193D1E.crl rsync://rpki.sub.apnic.net/repository/A9150E4D0000/0/11F98F3F8DD4F55CC7FFB7A4BACC656E0D193D1E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/EfmPP43U9VzH_7ekusxlbg0ZPR4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 18 Jun 2025 18:26:47 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 02:6b:c9:bb:63:d2:10:2f:0f:d9:93:81:b2:ad:2b:36:7e:8e:3a:55 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9150E4D0000, serialNumber=11F98F3F8DD4F55CC7FFB7A4BACC656E0D193D1E Validity Not Before: Jun 4 16:07:11 2025 GMT Not After : Jun 3 16:12:11 2026 GMT Subject: CN=3C63FBDA23EE1D2BFADB806544E553DDBA294ACF Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:37:4f:22:46:dc:2e:db:40:d2:09:b6:15:a8: bb:64:a7:99:09:e8:57:cc:c3:ca:84:d3:bf:36:57: 66:bb:8b:70:ee:53:6f:db:d2:b3:a5:6f:f4:bb:42: 6a:9f:06:85:e2:1d:3b:e4:7f:e5:d3:76:b2:32:0b: ad:9b:17:aa:b0:f9:31:26:29:0e:41:19:fc:6a:6b: 3e:1b:c0:c6:7e:ea:f0:75:a8:21:f0:39:a5:46:af: 01:d6:ba:8b:21:dd:57:b6:11:b0:45:68:c9:48:28: 71:8b:76:19:0e:28:6b:9a:39:23:b9:59:52:8f:c8: 60:fd:91:9d:d0:00:c7:7c:02:c8:ad:c4:5b:4d:a6: 92:4d:b1:bf:7e:63:33:81:b0:87:bb:01:7e:f4:3e: 06:ed:3e:85:0e:d8:b4:03:b1:ff:0d:ef:95:38:f1: 2e:15:e2:db:f1:c2:dc:7c:99:e3:cd:9b:03:a4:88: 5e:84:68:14:69:b1:a6:70:24:c3:b3:17:04:8d:c8: 60:ef:a5:bf:59:b5:93:7b:5f:e8:68:ff:2a:ba:17: d3:d4:e4:b4:ed:2b:09:13:40:69:b6:0c:32:20:a7: 8f:84:c5:f9:20:76:ae:d6:37:63:eb:d2:d8:3a:cd: 76:ee:7e:ae:7b:27:47:31:8b:ec:93:2b:99:a2:42: 77:83 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: 3C:63:FB:DA:23:EE:1D:2B:FA:DB:80:65:44:E5:53:DD:BA:29:4A:CF X509v3 Authority Key Identifier: keyid:11:F9:8F:3F:8D:D4:F5:5C:C7:FF:B7:A4:BA:CC:65:6E:0D:19:3D:1E X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.sub.apnic.net/repository/A9150E4D0000/0/11F98F3F8DD4F55CC7FFB7A4BACC656E0D193D1E.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/EfmPP43U9VzH_7ekusxlbg0ZPR4.cer Subject Information Access: CA Repository - URI:rsync://krill.syd-au.infininet.com.au/repo/BGP-Exchange/0/ RPKI Manifest - URI:rsync://krill.syd-au.infininet.com.au/repo/BGP-Exchange/0/3C63FBDA23EE1D2BFADB806544E553DDBA294ACF.mft RPKI Notify - URI:https://krill.syd-au.infininet.com.au/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2401:2060:b000::/38 sbgp-autonomousSysNum: critical Autonomous System Numbers: 24381 Signature Algorithm: sha256WithRSAEncryption 3d:de:5a:3e:c9:3a:df:21:6f:f2:59:cb:fd:ff:bb:4b:83:dd: c4:98:71:f2:f1:38:ba:60:06:50:43:f7:7f:21:18:e1:68:32: 12:11:13:fa:33:f0:4a:41:95:f1:82:58:b1:23:47:9f:6f:ce: 21:57:00:51:82:1e:fe:18:1b:41:4e:f0:00:7b:50:43:5c:af: 31:3b:9f:e3:29:4d:40:84:f0:24:4c:3b:32:96:55:23:70:e5: b3:80:5c:12:21:ff:98:27:49:68:a8:1f:64:0f:f0:9b:b4:d2: ea:21:1e:a6:d4:8e:c0:bf:8c:f9:46:47:36:a6:69:5f:ac:c0: 14:17:eb:b7:18:f5:26:c6:97:31:cc:02:c1:cf:3c:54:c7:39: 20:1a:55:7e:60:5d:fa:2b:5f:56:ca:38:41:6a:63:8f:d4:bf: 63:95:27:7f:19:b5:a3:34:bc:6c:33:ab:45:eb:6c:24:5b:c8: 2f:a5:e6:9a:38:fb:82:6d:9b:c5:95:b3:63:2d:9d:03:97:a7: 55:77:03:8a:f6:98:ff:63:71:bf:82:da:f9:74:60:3d:84:fc: 89:1c:1e:be:29:37:2c:b6:a2:45:9e:4b:5a:a3:33:e2:39:ce: 17:63:e3:72:19:1c:b6:49:42:45:e1:a6:21:eb:2f:11:77:c3: dc:da:cc:09 -----BEGIN CERTIFICATE----- MIIF2TCCBMGgAwIBAgIUAmvJu2PSEC8P2ZOBsq0rNn6OOlUwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxNTBFNEQwMDAwMTEwLwYDVQQFEygxMUY5OEYzRjhE RDRGNTVDQzdGRkI3QTRCQUNDNjU2RTBEMTkzRDFFMB4XDTI1MDYwNDE2MDcxMVoX DTI2MDYwMzE2MTIxMVowMzExMC8GA1UEAxMoM0M2M0ZCREEyM0VFMUQyQkZBREI4 MDY1NDRFNTUzRERCQTI5NEFDRjCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAMY3TyJG3C7bQNIJthWou2SnmQnoV8zDyoTTvzZXZruLcO5Tb9vSs6Vv9LtC ap8GheIdO+R/5dN2sjILrZsXqrD5MSYpDkEZ/GprPhvAxn7q8HWoIfA5pUavAda6 iyHdV7YRsEVoyUgocYt2GQ4oa5o5I7lZUo/IYP2RndAAx3wCyK3EW02mkk2xv35j M4Gwh7sBfvQ+Bu0+hQ7YtAOx/w3vlTjxLhXi2/HC3HyZ482bA6SIXoRoFGmxpnAk w7MXBI3IYO+lv1m1k3tf6Gj/KroX09TktO0rCRNAabYMMiCnj4TF+SB2rtY3Y+vS 2DrNdu5+rnsnRzGL7JMrmaJCd4MCAwEAAaOCAswwggLIMA8GA1UdEwEB/wQFMAMB Af8wHQYDVR0OBBYEFDxj+9oj7h0r+tuAZUTlU926KUrPMB8GA1UdIwQYMBaAFBH5 jz+N1PVcx/+3pLrMZW4NGT0eMA4GA1UdDwEB/wQEAwIBBjByBgNVHR8EazBpMGeg ZaBjhmFyc3luYzovL3Jwa2kuc3ViLmFwbmljLm5ldC9yZXBvc2l0b3J5L0E5MTUw RTREMDAwMC8wLzExRjk4RjNGOERENEY1NUNDN0ZGQjdBNEJBQ0M2NTZFMEQxOTNE MUUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0VmbVBQNDNVOVZ6SF83ZWt1c3hsYmcwWlBSNC5jZXIwggEXBggrBgEF BQcBCwSCAQkwggEFMEYGCCsGAQUFBzAFhjpyc3luYzovL2tyaWxsLnN5ZC1hdS5p bmZpbmluZXQuY29tLmF1L3JlcG8vQkdQLUV4Y2hhbmdlLzAvMHIGCCsGAQUFBzAK hmZyc3luYzovL2tyaWxsLnN5ZC1hdS5pbmZpbmluZXQuY29tLmF1L3JlcG8vQkdQ LUV4Y2hhbmdlLzAvM0M2M0ZCREEyM0VFMUQyQkZBREI4MDY1NDRFNTUzRERCQTI5 NEFDRi5tZnQwRwYIKwYBBQUHMA2GO2h0dHBzOi8va3JpbGwuc3lkLWF1LmluZmlu aW5ldC5jb20uYXUvcnJkcC9ub3RpZmljYXRpb24ueG1sMBgGA1UdIAEB/wQOMAww CgYIKwYBBQUHDgIwIQYIKwYBBQUHAQcBAf8EEjAQMA4EAgACMAgDBgIkASBgsDAZ BggrBgEFBQcBCAEB/wQKMAigBjAEAgJfPTANBgkqhkiG9w0BAQsFAAOCAQEAPd5a Psk63yFv8lnL/f+7S4PdxJhx8vE4umAGUEP3fyEY4WgyEhET+jPwSkGV8YJYsSNH n2/OIVcAUYIe/hgbQU7wAHtQQ1yvMTuf4ylNQITwJEw7MpZVI3Dls4BcEiH/mCdJ aKgfZA/wm7TS6iEeptSOwL+M+UZHNqZpX6zAFBfrtxj1JsaXMcwCwc88VMc5IBpV fmBd+itfVso4QWpjj9S/Y5Unfxm1ozS8bDOrRetsJFvIL6Xmmjj7gm2bxZWzYy2d A5enVXcDivaY/2Nxv4La+XRgPYT8iRwevik3LLaiRZ5LWqMz4jnOF2PjchkctklC ReGmIesvEXfD3NrMCQ== -----END CERTIFICATE-----Generated at Tue Jun 17 23:01:19 2025 by rpki-client