$ rpki-client -vvvf rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CuPhc8Ou-BQkgLOCksNHAqfz8Qk.cer File: CuPhc8Ou-BQkgLOCksNHAqfz8Qk.cer (raw, json) Hash identifier: 9O3dEsLPBIuhH6NS0/7hwmRbwRsaTxE+xs7yEhz8MvQ= Subject key identifier: 0A:E3:E1:73:C3:AE:F8:14:24:80:B3:82:92:C3:47:02:A7:F3:F1:09 Authority key identifier: 0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F Certificate issuer: /CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F Certificate serial: 02DFB1 Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer CRL Distribution Point: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl Manifest: rsync://rpki.apnic.net/member_repository/A91F8D26/715C9952CDE911F184A4BC0C0866CEF9/CuPhc8Ou-BQkgLOCksNHAqfz8Qk.mft caRepository: rsync://rpki.apnic.net/member_repository/A91F8D26/715C9952CDE911F184A4BC0C0866CEF9/ Notify URL: https://rrdp.apnic.net/notification.xml Certificate not before: Thu 22 Oct 2026 07:23:17 +0000 Certificate not after: Sun 31 Oct 2027 00:00:00 +0000 Subordinate resources: AS: 137992 Validation: OK Signature path: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 22 Nov 2026 14:50:18 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 188337 (0x2dfb1) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A90DC5BE, serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F Validity Not Before: Oct 22 07:23:17 2026 GMT Not After : Oct 31 00:00:00 2027 GMT Subject: CN=A91F8D26, serialNumber=0AE3E173C3AEF8142480B38292C34702A7F3F109 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:b3:3f:29:e7:24:c6:eb:0b:70:a3:9c:e6:4b: 76:92:63:5b:ab:0d:22:ea:dc:88:be:2e:b2:f3:5d: 33:bc:d0:ff:e7:55:53:9d:fe:76:51:6c:67:a6:76: 87:13:61:f0:c4:73:45:ff:a2:80:9a:a1:17:a4:0e: d8:4b:2a:52:60:b4:76:3f:75:4f:37:54:90:ef:97: b6:2f:97:c4:24:a7:a3:31:37:61:7c:b1:0d:bc:bc: 35:a5:3a:3b:c6:b3:61:77:90:ba:75:7e:62:c0:25: 14:34:80:61:e3:cc:3c:3a:22:54:90:e1:df:2b:65: 47:31:de:69:df:5e:8c:50:b8:47:7e:20:0b:11:c5: 75:1f:d1:c2:33:aa:f3:85:11:49:69:72:97:46:5f: 5d:55:e1:99:24:7c:18:66:e1:82:f4:c4:07:f1:87: 5a:9d:c3:77:04:9a:d9:b7:08:18:76:27:b1:08:c9: f0:6e:6a:50:44:07:00:74:51:0a:39:0c:4e:01:7d: d1:21:8a:9f:d3:fa:0b:2c:4e:95:83:cf:26:3b:31: 3b:97:b1:6d:4a:69:64:f7:17:48:4a:46:51:e6:b4: cd:50:e6:63:87:d9:7b:e5:cc:77:78:f5:67:35:c1: 89:d2:86:86:e4:e6:5c:b5:1b:f3:4f:92:dd:73:b1: f0:fd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0A:E3:E1:73:C3:AE:F8:14:24:80:B3:82:92:C3:47:02:A7:F3:F1:09 X509v3 Authority Key Identifier: keyid:0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: CA Repository - URI:rsync://rpki.apnic.net/member_repository/A91F8D26/715C9952CDE911F184A4BC0C0866CEF9/ RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A91F8D26/715C9952CDE911F184A4BC0C0866CEF9/CuPhc8Ou-BQkgLOCksNHAqfz8Qk.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: 137992 Signature Algorithm: sha256WithRSAEncryption d9:46:98:53:cb:db:d3:87:d3:2c:c1:20:bb:5c:06:c7:ad:1e: 9f:82:6b:ef:f0:b7:41:69:a6:fb:8b:f5:57:65:75:66:21:6a: 02:4f:9d:a9:8f:d9:15:c3:cd:a7:6e:d6:91:08:bf:a0:bb:71: ca:47:34:b8:db:bc:5f:ac:cc:a9:5f:6e:3e:5a:74:ba:e4:53: 11:08:9c:9a:a2:49:16:43:bb:1a:ab:a1:09:39:a2:0f:fb:53: 4c:87:67:5c:50:21:b9:48:ad:2b:6f:0a:24:6a:3a:b7:f0:9d: 0b:8f:32:9b:c8:ee:04:23:10:72:4d:1b:18:3f:7c:a5:03:ba: 12:ba:5c:25:82:a9:78:5e:fc:f7:11:64:53:28:59:5a:30:f0: c0:03:33:4a:aa:02:cf:36:0b:45:d3:96:81:f2:02:cc:fa:08: 76:1f:93:00:2c:de:43:ae:0b:dc:1b:3a:15:ac:9c:8d:11:89: 47:7f:cc:f6:09:80:bf:cf:93:81:e7:64:41:58:12:f8:dc:e1: 7a:3f:97:21:f3:10:e9:91:15:52:04:9a:47:68:a0:62:e1:5c: 99:f8:01:bd:13:e4:72:11:8a:f1:14:06:80:b1:c1:0f:15:d3: 7f:a7:a4:1c:70:98:01:9d:3a:77:0f:2f:b2:b9:ca:6b:12:9a: 73:e9:1c:1b -----BEGIN CERTIFICATE----- MIIF+TCCBOGgAwIBAgIDAt+xMA0GCSqGSIb3DQEBCwUAMEYxETAPBgNVBAMTCEE5 MERDNUJFMTEwLwYDVQQFEygwRTY1QTRGNUZEMzZCNUJENjhFQjNDOTIzNDA4OTc4 QzkwN0FBNzlGMB4XDTI2MTAyMjA3MjMxN1oXDTI3MTAzMTAwMDAwMFowRjERMA8G A1UEAxMIQTkxRjhEMjYxMTAvBgNVBAUTKDBBRTNFMTczQzNBRUY4MTQyNDgwQjM4 MjkyQzM0NzAyQTdGM0YxMDkwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDIsz8p5yTG6wtwo5zmS3aSY1urDSLq3Ii+LrLzXTO80P/nVVOd/nZRbGemdocT YfDEc0X/ooCaoRekDthLKlJgtHY/dU83VJDvl7Yvl8Qkp6MxN2F8sQ28vDWlOjvG s2F3kLp1fmLAJRQ0gGHjzDw6IlSQ4d8rZUcx3mnfXoxQuEd+IAsRxXUf0cIzqvOF EUlpcpdGX11V4ZkkfBhm4YL0xAfxh1qdw3cEmtm3CBh2J7EIyfBualBEBwB0UQo5 DE4BfdEhip/T+gssTpWDzyY7MTuXsW1KaWT3F0hKRlHmtM1Q5mOH2XvlzHd49Wc1 wYnShobk5ly1G/NPkt1zsfD9AgMBAAGjggLuMIIC6jAdBgNVHQ4EFgQUCuPhc8Ou +BQkgLOCksNHAqfz8QkwHwYDVR0jBBgwFoAUDmWk9f02tb1o6zySNAiXjJB6p58w DgYDVR0PAQH/BAQDAgEGMA8GA1UdEwEB/wQFMAMBAf8wcwYDVR0fBGwwajBooGag ZIZicnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2 NjExRTJCQjQ2OEY3QzcyRkQxRkYyL0RtV2s5ZjAydGIxbzZ6eVNOQWlYakpCNnA1 OC5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvOTgwNjUyRTBCNzdFMTFFN0E5NkEzOTUyMUE0 RjRGQjQvRG1XazlmMDJ0YjFvNnp5U05BaVhqSkI2cDU4LmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwggEoBggrBgEFBQcBCwSCARowggEWMF8GCCsGAQUF BzAFhlNyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5 MUY4RDI2LzcxNUM5OTUyQ0RFOTExRjE4NEE0QkMwQzA4NjZDRUY5LzB+BggrBgEF BQcwCoZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9B OTFGOEQyNi83MTVDOTk1MkNERTkxMUYxODRBNEJDMEMwODY2Q0VGOS9DdVBoYzhP dS1CUWtnTE9Da3NOSEFxZno4UWsubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3Jy ZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwGgYIKwYBBQUHAQgBAf8ECzAJ oAcwBQIDAhsIMA0GCSqGSIb3DQEBCwUAA4IBAQDZRphTy9vTh9MswSC7XAbHrR6f gmvv8LdBaab7i/VXZXVmIWoCT52pj9kVw82nbtaRCL+gu3HKRzS427xfrMypX24+ WnS65FMRCJyaokkWQ7saq6EJOaIP+1NMh2dcUCG5SK0rbwokajq38J0LjzKbyO4E IxByTRsYP3ylA7oSulwlgql4Xvz3EWRTKFlaMPDAAzNKqgLPNgtF05aB8gLM+gh2 H5MALN5DrgvcGzoVrJyNEYlHf8z2CYC/z5OB52RBWBL43OF6P5ch8xDpkRVSBJpH aKBi4VyZ+AG9E+RyEYrxFAaAscEPFdN/p6QccJgBnTp3Dy+yucprEppz6Rwb -----END CERTIFICATE-----Generated at Sun Nov 15 18:45:34 2026 by rpki-client