$ rpki-client -vvvf rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3obmXuoeCzDk_Y2SRYft9XI9UH0.cer File: 3obmXuoeCzDk_Y2SRYft9XI9UH0.cer (raw, json) Hash identifier: bR3vZSEL+cq+FCPHXWkpHhU4kELkJo7xJW8N/AD/O9s= Subject key identifier: DE:86:E6:5E:EA:1E:0B:30:E4:FD:8D:92:45:87:ED:F5:72:3D:50:7D Authority key identifier: 0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F Certificate issuer: /CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F Certificate serial: 02E5C7 Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer CRL Distribution Point: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl Manifest: rsync://rpki.apnic.net/member_repository/A91E00A5/A6483A3C7ABB11EF9379AE52C4F9AE02/3obmXuoeCzDk_Y2SRYft9XI9UH0.mft caRepository: rsync://rpki.apnic.net/member_repository/A91E00A5/A6483A3C7ABB11EF9379AE52C4F9AE02/ Notify URL: https://rrdp.apnic.net/notification.xml Certificate not before: Mon 09 Nov 2026 04:35:20 +0000 Certificate not after: Mon 31 Jan 2028 00:00:00 +0000 Subordinate resources: IP: 203.62.205.0/24 Validation: OK Signature path: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 22 Nov 2026 17:14:55 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 189895 (0x2e5c7) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A90DC5BE, serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F Validity Not Before: Nov 9 04:35:20 2026 GMT Not After : Jan 31 00:00:00 2028 GMT Subject: CN=A91E00A5, serialNumber=DE86E65EEA1E0B30E4FD8D924587EDF5723D507D Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cc:bd:fa:54:89:5d:7e:f8:2f:9d:88:3f:41:eb: 00:52:22:fd:12:fb:dc:59:8a:ea:92:f5:85:e2:38: b0:de:16:90:83:27:77:61:4c:43:b0:00:ed:29:36: 54:00:a9:07:88:b8:b8:d8:a4:fa:d0:d1:7b:54:86: c2:c6:02:63:db:ae:dc:b4:3c:af:c1:03:65:dc:4d: 05:a1:0f:07:83:57:ac:08:15:7b:86:c8:f6:22:0f: 4b:98:3e:a3:36:29:5e:bb:fb:78:d3:f7:9c:8b:5d: 8a:7e:12:cb:1b:4b:a7:6b:48:b8:80:cb:73:d7:39: 9f:05:11:b7:9b:3e:47:93:38:0c:7b:d5:90:ad:0c: 31:76:55:41:91:59:ea:d1:f3:c9:a8:39:17:9a:dc: f2:65:81:ab:02:5b:27:2c:a1:4c:8e:d3:38:de:b1: a0:06:1d:df:0a:54:e2:a4:ef:34:33:b7:b7:f2:c6: 0a:0b:fa:08:61:41:90:24:d6:3b:25:17:93:a9:bb: 34:5f:71:e1:7d:97:e8:41:36:84:4b:db:22:cf:e4: 5b:05:a2:40:32:72:40:19:6c:49:04:91:8c:53:bd: a1:da:ef:31:80:a6:d9:6d:76:a6:a6:80:60:49:ad: d9:12:7f:ab:47:86:ee:2a:e9:6b:8c:e5:7f:20:9f: d3:d3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DE:86:E6:5E:EA:1E:0B:30:E4:FD:8D:92:45:87:ED:F5:72:3D:50:7D X509v3 Authority Key Identifier: keyid:0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: CA Repository - URI:rsync://rpki.apnic.net/member_repository/A91E00A5/A6483A3C7ABB11EF9379AE52C4F9AE02/ RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A91E00A5/A6483A3C7ABB11EF9379AE52C4F9AE02/3obmXuoeCzDk_Y2SRYft9XI9UH0.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 203.62.205.0/24 Signature Algorithm: sha256WithRSAEncryption 23:d0:84:58:1b:6d:4c:9b:e3:b3:b6:1a:4c:c5:1e:28:f5:c6: 9a:51:eb:42:fe:65:45:6c:f9:ed:7f:ca:5c:2f:7f:40:1a:30: db:5f:70:69:05:8e:cc:1c:2c:24:00:90:69:44:1b:bf:22:0b: 75:e7:a5:cd:25:c0:b0:f7:81:46:68:88:cc:8f:26:17:3c:3e: e9:42:f6:be:94:3c:0b:24:45:21:b5:1a:f5:b3:a0:08:bd:d2: ad:d2:ff:e4:88:fb:bd:c5:f6:a2:f8:50:5b:cd:86:23:9a:10: f2:91:bd:fb:55:bd:10:30:57:49:aa:c6:15:df:52:ec:f2:e0: ce:ff:ce:8b:52:f5:5c:2b:cc:72:f9:94:d7:5d:e8:99:01:47: c4:60:27:10:42:1b:02:e1:42:19:7f:c5:64:6f:32:fb:b4:c3: b5:8d:da:bd:6a:d1:d3:0d:bc:e3:96:ae:52:78:65:ba:a1:1f: 2e:8c:24:16:d5:9b:37:11:bb:2c:ab:e3:50:3b:9c:e5:5c:81: 56:71:4e:68:97:99:15:86:a3:68:d1:cc:8d:75:e0:83:9e:67: d4:7c:df:95:b3:19:e4:78:d8:42:93:dc:a1:07:98:b5:ee:45: 69:b0:53:f2:49:99:3c:27:84:f0:0f:c9:15:67:44:d6:59:60: 76:10:28:ab -----BEGIN CERTIFICATE----- MIIF/jCCBOagAwIBAgIDAuXHMA0GCSqGSIb3DQEBCwUAMEYxETAPBgNVBAMTCEE5 MERDNUJFMTEwLwYDVQQFEygwRTY1QTRGNUZEMzZCNUJENjhFQjNDOTIzNDA4OTc4 QzkwN0FBNzlGMB4XDTI2MTEwOTA0MzUyMFoXDTI4MDEzMTAwMDAwMFowRjERMA8G A1UEAxMIQTkxRTAwQTUxMTAvBgNVBAUTKERFODZFNjVFRUExRTBCMzBFNEZEOEQ5 MjQ1ODdFREY1NzIzRDUwN0QwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDMvfpUiV1++C+diD9B6wBSIv0S+9xZiuqS9YXiOLDeFpCDJ3dhTEOwAO0pNlQA qQeIuLjYpPrQ0XtUhsLGAmPbrty0PK/BA2XcTQWhDweDV6wIFXuGyPYiD0uYPqM2 KV67+3jT95yLXYp+EssbS6drSLiAy3PXOZ8FEbebPkeTOAx71ZCtDDF2VUGRWerR 88moORea3PJlgasCWycsoUyO0zjesaAGHd8KVOKk7zQzt7fyxgoL+ghhQZAk1jsl F5OpuzRfceF9l+hBNoRL2yLP5FsFokAyckAZbEkEkYxTvaHa7zGAptltdqamgGBJ rdkSf6tHhu4q6WuM5X8gn9PTAgMBAAGjggLzMIIC7zAdBgNVHQ4EFgQU3obmXuoe CzDk/Y2SRYft9XI9UH0wHwYDVR0jBBgwFoAUDmWk9f02tb1o6zySNAiXjJB6p58w DgYDVR0PAQH/BAQDAgEGMA8GA1UdEwEB/wQFMAMBAf8wcwYDVR0fBGwwajBooGag ZIZicnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2 NjExRTJCQjQ2OEY3QzcyRkQxRkYyL0RtV2s5ZjAydGIxbzZ6eVNOQWlYakpCNnA1 OC5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvOTgwNjUyRTBCNzdFMTFFN0E5NkEzOTUyMUE0 RjRGQjQvRG1XazlmMDJ0YjFvNnp5U05BaVhqSkI2cDU4LmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwggEoBggrBgEFBQcBCwSCARowggEWMF8GCCsGAQUF BzAFhlNyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5 MUUwMEE1L0E2NDgzQTNDN0FCQjExRUY5Mzc5QUU1MkM0RjlBRTAyLzB+BggrBgEF BQcwCoZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9B OTFFMDBBNS9BNjQ4M0EzQzdBQkIxMUVGOTM3OUFFNTJDNEY5QUUwMi8zb2JtWHVv ZUN6RGtfWTJTUllmdDlYSTlVSDAubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3Jy ZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8EEDAO MAwEAgABMAYDBADLPs0wDQYJKoZIhvcNAQELBQADggEBACPQhFgbbUyb47O2GkzF Hij1xppR60L+ZUVs+e1/ylwvf0AaMNtfcGkFjswcLCQAkGlEG78iC3Xnpc0lwLD3 gUZoiMyPJhc8PulC9r6UPAskRSG1GvWzoAi90q3S/+SI+73F9qL4UFvNhiOaEPKR vftVvRAwV0mqxhXfUuzy4M7/zotS9VwrzHL5lNdd6JkBR8RgJxBCGwLhQhl/xWRv Mvu0w7WN2r1q0dMNvOOWrlJ4ZbqhHy6MJBbVmzcRuyyr41A7nOVcgVZxTmiXmRWG o2jRzI114IOeZ9R835WzGeR42EKT3KEHmLXuRWmwU/JJmTwnhPAPyRVnRNZZYHYQ KKs= -----END CERTIFICATE-----Generated at Sun Nov 15 21:49:48 2026 by rpki-client