$ rpki-client -vvvf rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/PuJvukvjWd6uUAeS6_940ArLdgw.cer File: PuJvukvjWd6uUAeS6_940ArLdgw.cer (raw, json) Hash identifier: SxsIMV5OUGiOD5AHyxg/MWxStx4kx+YUYegmqI/4ppE= Subject key identifier: 3E:E2:6F:BA:4B:E3:59:DE:AE:50:07:92:EB:FF:78:D0:0A:CB:76:0C Authority key identifier: 74:01:65:A8:0D:10:71:97:0A:BC:09:C0:2B:71:C1:AC:7C:1D:6E:0E Certificate issuer: /CN=A90DC5BE/serialNumber=740165A80D1071970ABC09C02B71C1AC7C1D6E0E Certificate serial: 8467 Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer CRL Distribution Point: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl Manifest: rsync://rpki.apnic.net/member_repository/A91596C4/F3DDEEDE833011EC8FF39383C4F9AE02/PuJvukvjWd6uUAeS6_940ArLdgw.mft caRepository: rsync://rpki.apnic.net/member_repository/A91596C4/F3DDEEDE833011EC8FF39383C4F9AE02/ Notify URL: https://rrdp.apnic.net/notification.xml Certificate not before: Mon 02 Nov 2026 13:27:28 +0000 Certificate not after: Mon 01 Mar 2027 00:00:00 +0000 Subordinate resources: IP: 149.234.189.0/24 Validation: OK Signature path: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 22 Nov 2026 14:50:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 33895 (0x8467) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A90DC5BE, serialNumber=740165A80D1071970ABC09C02B71C1AC7C1D6E0E Validity Not Before: Nov 2 13:27:28 2026 GMT Not After : Mar 1 00:00:00 2027 GMT Subject: CN=A91596C4, serialNumber=3EE26FBA4BE359DEAE500792EBFF78D00ACB760C Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:9f:9e:15:9b:6a:54:87:ec:3e:05:48:c7:91: 41:28:54:65:d1:5e:0c:94:8b:c0:90:a1:23:49:88: 47:0e:dc:25:80:a7:4b:b6:bb:99:87:b7:b8:b2:ae: 8f:76:7e:39:49:f0:e6:d2:d4:28:d8:86:27:cd:8a: 25:3c:f9:21:b3:25:6c:f0:56:bc:e8:aa:77:90:f5: 26:b0:f1:62:62:44:be:96:6d:be:c1:9b:07:22:11: 8c:36:5f:b2:0e:e5:77:b3:df:f1:33:36:d9:d8:b6: 68:e7:62:b8:bb:80:07:f7:bc:be:91:06:fe:d9:eb: a3:26:f9:88:4c:9f:14:7c:14:22:d1:d3:78:e9:c4: 28:f1:46:21:5b:a5:96:62:82:4c:5a:0b:4a:cf:d8: b7:ba:f8:f0:be:af:e4:93:78:29:1f:72:cc:81:47: 32:6f:3f:d3:09:7b:23:e0:51:0b:bf:dc:c5:75:a3: f1:83:87:b8:c6:61:ce:be:04:3d:81:a1:fe:2e:69: 94:a2:fe:e4:43:b9:da:ee:f2:fb:76:77:dc:cc:f4: 40:c5:ad:c2:29:86:dc:3c:04:9c:7f:88:07:83:6d: 23:cb:41:3a:55:85:9c:b0:cb:d1:b4:c5:b7:c4:b4: c9:ac:99:a3:ac:f7:ba:e7:f1:b4:7e:34:1d:8c:c1: 89:2b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3E:E2:6F:BA:4B:E3:59:DE:AE:50:07:92:EB:FF:78:D0:0A:CB:76:0C X509v3 Authority Key Identifier: keyid:74:01:65:A8:0D:10:71:97:0A:BC:09:C0:2B:71:C1:AC:7C:1D:6E:0E X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: CA Repository - URI:rsync://rpki.apnic.net/member_repository/A91596C4/F3DDEEDE833011EC8FF39383C4F9AE02/ RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A91596C4/F3DDEEDE833011EC8FF39383C4F9AE02/PuJvukvjWd6uUAeS6_940ArLdgw.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 149.234.189.0/24 Signature Algorithm: sha256WithRSAEncryption af:95:1b:3b:eb:04:2e:60:ce:bd:a5:5f:ee:a7:a8:90:c9:6b: 7f:84:d2:5d:c1:4b:ce:65:5b:94:a7:a2:3a:85:fc:53:57:f3: 99:47:90:5e:89:04:e2:6d:f7:38:ce:e4:07:6f:18:76:27:62: ec:b2:52:ad:a4:55:5a:d4:a1:a5:4a:ac:ab:25:76:9e:23:30: d8:72:d0:a0:7c:04:50:36:da:49:14:bc:d5:52:75:8e:b6:a7: 50:db:0a:6f:fe:ae:28:25:63:c4:bc:d2:2c:44:d1:5d:72:f6: 90:5c:7c:19:03:76:1f:31:14:da:1f:d0:b8:54:d1:99:71:98: 42:34:98:bd:5c:e5:bd:1d:46:ba:ef:52:15:85:01:30:5a:7a: 62:5b:8b:8f:4f:d8:83:19:76:ae:4d:38:c8:0f:f3:4e:99:74: 41:4f:c3:4d:a2:25:d2:5c:05:84:a3:b6:c1:4d:e8:ad:39:50: 96:55:b0:ed:ec:54:7e:ab:31:ae:ad:de:d3:71:f0:1f:c1:34: b0:e1:dd:37:1d:16:31:1b:e1:e0:7a:3d:1f:49:3b:35:d3:1c: 00:84:e2:9f:6f:26:b9:58:68:3a:bc:28:cc:1d:42:3d:90:3d: 91:b3:d5:79:3e:a1:46:50:6d:31:1a:d0:66:da:d5:ee:ca:f5: 95:41:20:c8 -----BEGIN CERTIFICATE----- MIIF/jCCBOagAwIBAgIDAIRnMA0GCSqGSIb3DQEBCwUAMEYxETAPBgNVBAMTCEE5 MERDNUJFMTEwLwYDVQQFEyg3NDAxNjVBODBEMTA3MTk3MEFCQzA5QzAyQjcxQzFB QzdDMUQ2RTBFMB4XDTI2MTEwMjEzMjcyOFoXDTI3MDMwMTAwMDAwMFowRjERMA8G A1UEAxMIQTkxNTk2QzQxMTAvBgNVBAUTKDNFRTI2RkJBNEJFMzU5REVBRTUwMDc5 MkVCRkY3OEQwMEFDQjc2MEMwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDHn54Vm2pUh+w+BUjHkUEoVGXRXgyUi8CQoSNJiEcO3CWAp0u2u5mHt7iyro92 fjlJ8ObS1CjYhifNiiU8+SGzJWzwVrzoqneQ9Saw8WJiRL6Wbb7BmwciEYw2X7IO 5Xez3/EzNtnYtmjnYri7gAf3vL6RBv7Z66Mm+YhMnxR8FCLR03jpxCjxRiFbpZZi gkxaC0rP2Le6+PC+r+STeCkfcsyBRzJvP9MJeyPgUQu/3MV1o/GDh7jGYc6+BD2B of4uaZSi/uRDudru8vt2d9zM9EDFrcIphtw8BJx/iAeDbSPLQTpVhZywy9G0xbfE tMmsmaOs97rn8bR+NB2MwYkrAgMBAAGjggLzMIIC7zAdBgNVHQ4EFgQUPuJvukvj Wd6uUAeS6/940ArLdgwwHwYDVR0jBBgwFoAUdAFlqA0QcZcKvAnAK3HBrHwdbg4w DgYDVR0PAQH/BAQDAgEGMA8GA1UdEwEB/wQFMAMBAf8wcwYDVR0fBGwwajBooGag ZIZicnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2 NjExRTI4QUM4ODM3QzcyRkQxRkYyL2RBRmxxQTBRY1pjS3ZBbkFLM0hCckh3ZGJn NC5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvOTgwNjUyRTBCNzdFMTFFN0E5NkEzOTUyMUE0 RjRGQjQvZEFGbHFBMFFjWmNLdkFuQUszSEJySHdkYmc0LmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwggEoBggrBgEFBQcBCwSCARowggEWMF8GCCsGAQUF BzAFhlNyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5 MTU5NkM0L0YzRERFRURFODMzMDExRUM4RkYzOTM4M0M0RjlBRTAyLzB+BggrBgEF BQcwCoZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9B OTE1OTZDNC9GM0RERUVERTgzMzAxMUVDOEZGMzkzODNDNEY5QUUwMi9QdUp2dWt2 aldkNnVVQWVTNl85NDBBckxkZ3cubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3Jy ZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8EEDAO MAwEAgABMAYDBACV6r0wDQYJKoZIhvcNAQELBQADggEBAK+VGzvrBC5gzr2lX+6n qJDJa3+E0l3BS85lW5SnojqF/FNX85lHkF6JBOJt9zjO5AdvGHYnYuyyUq2kVVrU oaVKrKsldp4jMNhy0KB8BFA22kkUvNVSdY62p1DbCm/+riglY8S80ixE0V1y9pBc fBkDdh8xFNof0LhU0ZlxmEI0mL1c5b0dRrrvUhWFATBaemJbi49P2IMZdq5NOMgP 806ZdEFPw02iJdJcBYSjtsFN6K05UJZVsO3sVH6rMa6t3tNx8B/BNLDh3TcdFjEb 4eB6PR9JOzXTHACE4p9vJrlYaDq8KMwdQj2QPZGz1Xk+oUZQbTEa0Gba1e7K9ZVB IMg= -----END CERTIFICATE-----Generated at Sun Nov 15 18:30:13 2026 by rpki-client