$ rpki-client -vvvf rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/4aM38HygW0sWIQSki9WFMutU39o.cer File: 4aM38HygW0sWIQSki9WFMutU39o.cer (raw, json) Hash identifier: /505iJ+GK1ou1ywyZJSvNPWpedKmxfpvd8xz/hYYwzU= Subject key identifier: E1:A3:37:F0:7C:A0:5B:4B:16:21:04:A4:8B:D5:85:32:EB:54:DF:DA Authority key identifier: 74:01:65:A8:0D:10:71:97:0A:BC:09:C0:2B:71:C1:AC:7C:1D:6E:0E Certificate issuer: /CN=A90DC5BE/serialNumber=740165A80D1071970ABC09C02B71C1AC7C1D6E0E Certificate serial: 84B3 Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer CRL Distribution Point: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl Manifest: rsync://rpki.apnic.net/member_repository/A9183A53/F2D9716AD8A411F191B1CBD297EE528E/4aM38HygW0sWIQSki9WFMutU39o.mft caRepository: rsync://rpki.apnic.net/member_repository/A9183A53/F2D9716AD8A411F191B1CBD297EE528E/ Notify URL: https://rrdp.apnic.net/notification.xml Certificate not before: Wed 04 Nov 2026 23:10:42 +0000 Certificate not after: Sun 31 Oct 2027 00:00:00 +0000 Subordinate resources: IP: 204.115.248.0/22 Validation: OK Signature path: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 22 Nov 2026 14:50:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 33971 (0x84b3) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A90DC5BE, serialNumber=740165A80D1071970ABC09C02B71C1AC7C1D6E0E Validity Not Before: Nov 4 23:10:42 2026 GMT Not After : Oct 31 00:00:00 2027 GMT Subject: CN=A9183A53, serialNumber=E1A337F07CA05B4B162104A48BD58532EB54DFDA Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:18:43:f6:e7:64:c2:51:35:ef:9d:0c:cc:d3: 9c:cb:39:a7:40:bd:15:cc:9c:6b:93:2d:be:3e:e1: 34:e3:e0:2e:15:34:96:82:87:ed:59:1d:e8:37:0a: 5b:e3:8a:ab:4f:a7:87:98:00:7b:d7:a1:f3:72:6b: a7:4e:0b:37:be:f7:12:49:55:0c:dd:6e:e5:bb:30: c7:7a:5c:1b:f3:2a:13:f9:a0:71:40:ca:9e:d8:5f: 7f:1e:8d:aa:79:31:bc:9c:4f:49:d7:b1:0c:dc:bc: 2e:94:f3:1d:2b:b4:58:5b:df:4b:88:fb:c3:90:5d: ee:f8:d1:8a:16:39:56:75:23:6c:fa:43:f7:e8:28: a3:d6:9b:71:7a:87:2e:e8:9e:8f:4f:c9:62:6e:0b: 3f:c6:b8:dd:f0:16:bb:c4:54:ed:4f:02:fb:d3:38: 99:f1:68:48:67:7a:73:f9:79:21:21:db:20:c9:81: b4:05:ba:03:a9:e3:4b:37:40:4e:f2:ff:8a:70:5c: eb:fe:7e:0c:33:af:4d:9a:99:83:52:b6:40:fe:6b: 39:36:97:af:97:08:a8:8d:f0:59:2d:19:66:e6:74: e7:9d:cd:3e:80:83:7d:f1:23:d2:69:7b:92:ef:82: 4d:e8:2b:35:16:11:7c:b3:0c:63:d0:a6:f6:e5:73: a4:2d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E1:A3:37:F0:7C:A0:5B:4B:16:21:04:A4:8B:D5:85:32:EB:54:DF:DA X509v3 Authority Key Identifier: keyid:74:01:65:A8:0D:10:71:97:0A:BC:09:C0:2B:71:C1:AC:7C:1D:6E:0E X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: CA Repository - URI:rsync://rpki.apnic.net/member_repository/A9183A53/F2D9716AD8A411F191B1CBD297EE528E/ RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A9183A53/F2D9716AD8A411F191B1CBD297EE528E/4aM38HygW0sWIQSki9WFMutU39o.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 204.115.248.0/22 Signature Algorithm: sha256WithRSAEncryption 8e:78:8f:a9:fe:7b:58:51:7b:6a:d2:99:b3:78:2e:be:a9:d9: ae:90:09:69:a8:42:d7:36:4d:0b:40:98:b7:9d:c5:e3:41:1e: f4:c8:f3:fa:56:e4:cb:9d:f5:be:7e:07:59:f2:c5:50:1f:8f: 2a:50:40:5d:03:e5:61:15:54:76:6d:48:91:ba:d4:7c:35:85: 35:33:fe:48:f7:cc:03:4a:5a:c3:86:74:ad:e4:37:f2:13:40: 76:cf:d6:de:fd:1f:ac:01:46:54:ed:d0:6f:5f:97:36:d4:72: c2:dd:2f:ac:66:95:d4:bb:ca:af:88:d5:3c:1e:ef:c7:ad:2a: 01:e6:15:a1:f7:7c:6e:7a:ad:f1:21:78:0d:9f:5b:d5:b0:bf: 8d:bd:54:87:f8:2a:e7:3e:b1:55:1f:db:3f:f9:2d:7b:3c:ca: 6d:51:e0:b8:b9:13:99:23:98:06:5a:95:e1:76:ad:d8:7e:6d: 6e:b5:a1:ed:aa:1b:33:1c:4e:4f:36:d3:c4:e8:ca:1b:14:21: 3e:8c:4a:c5:13:b4:9d:5f:33:6b:d1:cf:47:b4:c2:58:0b:d5: bc:e9:41:78:e4:8b:89:07:fc:a0:d1:67:a3:60:7a:2b:1f:ac: 33:3f:0a:11:32:0e:e5:29:6b:b1:4c:0d:7c:cd:6a:29:81:f2: 28:22:44:fd -----BEGIN CERTIFICATE----- MIIF/jCCBOagAwIBAgIDAISzMA0GCSqGSIb3DQEBCwUAMEYxETAPBgNVBAMTCEE5 MERDNUJFMTEwLwYDVQQFEyg3NDAxNjVBODBEMTA3MTk3MEFCQzA5QzAyQjcxQzFB QzdDMUQ2RTBFMB4XDTI2MTEwNDIzMTA0MloXDTI3MTAzMTAwMDAwMFowRjERMA8G A1UEAxMIQTkxODNBNTMxMTAvBgNVBAUTKEUxQTMzN0YwN0NBMDVCNEIxNjIxMDRB NDhCRDU4NTMyRUI1NERGREEwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQCyGEP252TCUTXvnQzM05zLOadAvRXMnGuTLb4+4TTj4C4VNJaCh+1ZHeg3Clvj iqtPp4eYAHvXofNya6dOCze+9xJJVQzdbuW7MMd6XBvzKhP5oHFAyp7YX38ejap5 MbycT0nXsQzcvC6U8x0rtFhb30uI+8OQXe740YoWOVZ1I2z6Q/foKKPWm3F6hy7o no9PyWJuCz/GuN3wFrvEVO1PAvvTOJnxaEhnenP5eSEh2yDJgbQFugOp40s3QE7y /4pwXOv+fgwzr02amYNStkD+azk2l6+XCKiN8FktGWbmdOedzT6Ag33xI9Jpe5Lv gk3oKzUWEXyzDGPQpvblc6QtAgMBAAGjggLzMIIC7zAdBgNVHQ4EFgQU4aM38Hyg W0sWIQSki9WFMutU39owHwYDVR0jBBgwFoAUdAFlqA0QcZcKvAnAK3HBrHwdbg4w DgYDVR0PAQH/BAQDAgEGMA8GA1UdEwEB/wQFMAMBAf8wcwYDVR0fBGwwajBooGag ZIZicnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2 NjExRTI4QUM4ODM3QzcyRkQxRkYyL2RBRmxxQTBRY1pjS3ZBbkFLM0hCckh3ZGJn NC5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvOTgwNjUyRTBCNzdFMTFFN0E5NkEzOTUyMUE0 RjRGQjQvZEFGbHFBMFFjWmNLdkFuQUszSEJySHdkYmc0LmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwggEoBggrBgEFBQcBCwSCARowggEWMF8GCCsGAQUF BzAFhlNyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5 MTgzQTUzL0YyRDk3MTZBRDhBNDExRjE5MUIxQ0JEMjk3RUU1MjhFLzB+BggrBgEF BQcwCoZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9B OTE4M0E1My9GMkQ5NzE2QUQ4QTQxMUYxOTFCMUNCRDI5N0VFNTI4RS80YU0zOEh5 Z1cwc1dJUVNraTlXRk11dFUzOW8ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3Jy ZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8EEDAO MAwEAgABMAYDBALMc/gwDQYJKoZIhvcNAQELBQADggEBAI54j6n+e1hRe2rSmbN4 Lr6p2a6QCWmoQtc2TQtAmLedxeNBHvTI8/pW5Mud9b5+B1nyxVAfjypQQF0D5WEV VHZtSJG61Hw1hTUz/kj3zANKWsOGdK3kN/ITQHbP1t79H6wBRlTt0G9flzbUcsLd L6xmldS7yq+I1Twe78etKgHmFaH3fG56rfEheA2fW9Wwv429VIf4Kuc+sVUf2z/5 LXs8ym1R4Li5E5kjmAZaleF2rdh+bW61oe2qGzMcTk8208ToyhsUIT6MSsUTtJ1f M2vRz0e0wlgL1bzpQXjki4kH/KDRZ6NgeisfrDM/ChEyDuUpa7FMDXzNaimB8igi RP0= -----END CERTIFICATE-----Generated at Sun Nov 15 21:49:27 2026 by rpki-client