$ rpki-client -vvf rpki.sub.apnic.net/repository/A9150E4D0000/0/642DD3E1A122CEA10AEF0AC9BBC8285DD0A7C7B5.cer File: 642DD3E1A122CEA10AEF0AC9BBC8285DD0A7C7B5.cer (raw, json) Hash identifier: 9ADax0XuqW3UR69NWM8AzGdrhcGmG5VgruNgeRopCQk= Subject key identifier: 64:2D:D3:E1:A1:22:CE:A1:0A:EF:0A:C9:BB:C8:28:5D:D0:A7:C7:B5 Authority key identifier: 47:FB:DC:E2:CB:6F:2C:6E:43:78:C5:68:82:C3:D2:46:D7:6E:50:45 Certificate issuer: /CN=A9150E4D0000/serialNumber=47FBDCE2CB6F2C6E4378C56882C3D246D76E5045 Certificate serial: 222942B1A25B55F352D51B67AFE0AF283B9D8A6B Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/R_vc4stvLG5DeMVogsPSRtduUEU.cer Manifest: rsync://rsync.paas.rpki.ripe.net/repository/ebf04c7c-f82d-471d-85ad-98c65de1c912/5/642DD3E1A122CEA10AEF0AC9BBC8285DD0A7C7B5.mft caRepository: rsync://rsync.paas.rpki.ripe.net/repository/ebf04c7c-f82d-471d-85ad-98c65de1c912/5/ Notify URL: https://rrdp.paas.rpki.ripe.net/notification.xml Certificate not before: Fri 26 Jun 2026 22:52:54 +0000 Certificate not after: Fri 25 Jun 2027 22:57:54 +0000 Subordinate resources: IP: 2401:2060:c000::/36 Validation: OK Signature path: rsync://rpki.sub.apnic.net/repository/A9150E4D0000/0/47FBDCE2CB6F2C6E4378C56882C3D246D76E5045.crl rsync://rpki.sub.apnic.net/repository/A9150E4D0000/0/47FBDCE2CB6F2C6E4378C56882C3D246D76E5045.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/R_vc4stvLG5DeMVogsPSRtduUEU.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 15 Jul 2026 21:50:35 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 22:29:42:b1:a2:5b:55:f3:52:d5:1b:67:af:e0:af:28:3b:9d:8a:6b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9150E4D0000, serialNumber=47FBDCE2CB6F2C6E4378C56882C3D246D76E5045 Validity Not Before: Jun 26 22:52:54 2026 GMT Not After : Jun 25 22:57:54 2027 GMT Subject: CN=642DD3E1A122CEA10AEF0AC9BBC8285DD0A7C7B5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d3:44:73:59:42:52:c2:db:40:f7:db:88:a2:7f: aa:62:cd:29:96:45:d7:e7:a8:f8:37:5e:6a:3c:ff: f0:da:ee:e8:f4:ac:5f:41:c8:75:c5:6e:10:39:b7: 77:8f:f1:45:c8:e4:d0:cb:8c:ea:35:27:e5:ac:07: e5:c9:a3:38:5e:9e:40:59:31:a3:72:9e:a0:2d:81: fc:d9:e8:75:a8:e5:0d:c7:57:7e:cd:77:b4:cf:a5: 3b:41:b9:34:d1:1d:8a:23:d3:f6:89:6c:00:c8:71: 36:89:51:bd:77:c2:5f:a7:c3:8b:80:21:cd:90:a3: e2:f4:f0:c7:2f:af:e3:42:18:02:ad:d7:74:b9:d0: 4d:7c:b3:f0:d2:b6:34:18:aa:70:f4:a3:95:4b:91: c3:1b:38:bd:26:af:5a:0a:17:de:9e:6f:9f:c7:ad: b9:08:8b:98:2a:fb:c5:9c:2a:fe:59:fa:1e:9b:fc: cd:70:02:13:c6:60:53:93:5f:db:48:09:f8:e4:3e: c4:c0:52:ca:31:2f:93:5b:a7:e3:26:08:48:f0:9d: 69:f5:9f:a4:9c:e5:42:be:5f:84:5e:a8:72:92:65: 11:de:60:5e:b4:3e:dd:d9:09:60:1e:f6:24:0a:29: f0:bc:64:ee:7d:b0:30:de:43:cb:97:84:dc:3d:d1: e3:ed Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: 64:2D:D3:E1:A1:22:CE:A1:0A:EF:0A:C9:BB:C8:28:5D:D0:A7:C7:B5 X509v3 Authority Key Identifier: keyid:47:FB:DC:E2:CB:6F:2C:6E:43:78:C5:68:82:C3:D2:46:D7:6E:50:45 X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.sub.apnic.net/repository/A9150E4D0000/0/47FBDCE2CB6F2C6E4378C56882C3D246D76E5045.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/R_vc4stvLG5DeMVogsPSRtduUEU.cer Subject Information Access: CA Repository - URI:rsync://rsync.paas.rpki.ripe.net/repository/ebf04c7c-f82d-471d-85ad-98c65de1c912/5/ RPKI Manifest - URI:rsync://rsync.paas.rpki.ripe.net/repository/ebf04c7c-f82d-471d-85ad-98c65de1c912/5/642DD3E1A122CEA10AEF0AC9BBC8285DD0A7C7B5.mft RPKI Notify - URI:https://rrdp.paas.rpki.ripe.net/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2401:2060:c000::/36 Signature Algorithm: sha256WithRSAEncryption ac:2b:e4:bd:67:90:d1:12:41:96:20:7c:83:94:de:ca:7d:46: 65:0a:e1:e2:d8:50:40:15:41:21:03:e8:42:36:10:1a:a0:ac: 16:74:e2:ce:d2:b1:db:11:57:d9:4c:75:65:b7:09:19:e6:76: 3b:a9:ec:a2:7f:6e:f4:a5:8e:9a:ce:cd:57:93:98:29:0c:5d: 1a:58:22:09:17:20:ac:96:44:58:f9:b1:bf:d2:ac:b1:d1:6c: c7:dc:16:e7:42:cc:a2:64:9e:92:72:1d:07:25:ef:cd:c5:8a: bc:c3:42:9d:4c:a1:22:df:11:1a:0e:2a:b9:63:ed:d5:84:dd: 1b:b9:b5:65:57:0c:46:3a:33:e5:83:23:73:bf:1b:21:48:5d: 0d:a4:fc:dd:5e:af:b8:06:7d:d4:d4:d8:9a:7a:fa:78:1d:65: 2e:7f:15:4b:f2:85:99:dc:b9:79:f7:35:c2:48:4a:87:69:57: 30:4a:67:5b:21:d0:2a:43:27:f1:69:79:7f:5c:7e:1d:36:2c: fc:49:ea:93:b9:56:d6:f4:d6:7e:d2:3d:19:59:c8:98:cf:55: 56:89:4a:c3:7a:4d:f2:46:18:45:bf:93:84:46:0f:06:df:c9: 3b:5c:08:90:93:6f:eb:97:19:0c:6a:df:f2:51:87:25:04:79: 69:4a:3f:f8 -----BEGIN CERTIFICATE----- MIIF5jCCBM6gAwIBAgIUIilCsaJbVfNS1Rtnr+CvKDudimswDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxNTBFNEQwMDAwMTEwLwYDVQQFEyg0N0ZCRENFMkNC NkYyQzZFNDM3OEM1Njg4MkMzRDI0NkQ3NkU1MDQ1MB4XDTI2MDYyNjIyNTI1NFoX DTI3MDYyNTIyNTc1NFowMzExMC8GA1UEAxMoNjQyREQzRTFBMTIyQ0VBMTBBRUYw QUM5QkJDODI4NUREMEE3QzdCNTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBANNEc1lCUsLbQPfbiKJ/qmLNKZZF1+eo+Ddeajz/8Nru6PSsX0HIdcVuEDm3 d4/xRcjk0MuM6jUn5awH5cmjOF6eQFkxo3KeoC2B/NnodajlDcdXfs13tM+lO0G5 NNEdiiPT9olsAMhxNolRvXfCX6fDi4AhzZCj4vTwxy+v40IYAq3XdLnQTXyz8NK2 NBiqcPSjlUuRwxs4vSavWgoX3p5vn8etuQiLmCr7xZwq/ln6Hpv8zXACE8ZgU5Nf 20gJ+OQ+xMBSyjEvk1un4yYISPCdafWfpJzlQr5fhF6ocpJlEd5gXrQ+3dkJYB72 JAop8Lxk7n2wMN5Dy5eE3D3R4+0CAwEAAaOCAtkwggLVMA8GA1UdEwEB/wQFMAMB Af8wHQYDVR0OBBYEFGQt0+GhIs6hCu8KybvIKF3Qp8e1MB8GA1UdIwQYMBaAFEf7 3OLLbyxuQ3jFaILD0kbXblBFMA4GA1UdDwEB/wQEAwIBBjByBgNVHR8EazBpMGeg ZaBjhmFyc3luYzovL3Jwa2kuc3ViLmFwbmljLm5ldC9yZXBvc2l0b3J5L0E5MTUw RTREMDAwMC8wLzQ3RkJEQ0UyQ0I2RjJDNkU0Mzc4QzU2ODgyQzNEMjQ2RDc2RTUw NDUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1JfdmM0c3R2TEc1RGVNVm9nc1BTUnRkdVVFVS5jZXIwggE/BggrBgEF BQcBCwSCATEwggEtMF8GCCsGAQUFBzAFhlNyc3luYzovL3JzeW5jLnBhYXMucnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L2ViZjA0YzdjLWY4MmQtNDcxZC04NWFkLTk4 YzY1ZGUxYzkxMi81LzCBiwYIKwYBBQUHMAqGf3JzeW5jOi8vcnN5bmMucGFhcy5y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvZWJmMDRjN2MtZjgyZC00NzFkLTg1YWQt OThjNjVkZTFjOTEyLzUvNjQyREQzRTFBMTIyQ0VBMTBBRUYwQUM5QkJDODI4NURE MEE3QzdCNS5tZnQwPAYIKwYBBQUHMA2GMGh0dHBzOi8vcnJkcC5wYWFzLnJwa2ku cmlwZS5uZXQvbm90aWZpY2F0aW9uLnhtbDAYBgNVHSABAf8EDjAMMAoGCCsGAQUF Bw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAOBAIAAjAIAwYEJAEgYMAwDQYJKoZIhvcN AQELBQADggEBAKwr5L1nkNESQZYgfIOU3sp9RmUK4eLYUEAVQSED6EI2EBqgrBZ0 4s7SsdsRV9lMdWW3CRnmdjup7KJ/bvSljprOzVeTmCkMXRpYIgkXIKyWRFj5sb/S rLHRbMfcFudCzKJknpJyHQcl783FirzDQp1MoSLfERoOKrlj7dWE3Ru5tWVXDEY6 M+WDI3O/GyFIXQ2k/N1er7gGfdTU2Jp6+ngdZS5/FUvyhZncuXn3NcJISodpVzBK Z1sh0CpDJ/FpeX9cfh02LPxJ6pO5Vtb01n7SPRlZyJjPVVaJSsN6TfJGGEW/k4RG DwbfyTtcCJCTb+uXGQxq3/JRhyUEeWlKP/g= -----END CERTIFICATE-----Generated at Wed Jul 15 15:31:36 2026 by rpki-client