This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CafSJ-42Ii7Z87lAjZjs-Q3mre0.cer File: CafSJ-42Ii7Z87lAjZjs-Q3mre0.cer (raw, json) Hash identifier: lAJSDvmb/qw7qLrTrnNfiUVBZZJVFl2tbIJCQnYYsJI= Subject key identifier: 09:A7:D2:27:EE:36:22:2E:D9:F3:B9:40:8D:98:EC:F9:0D:E6:AD:ED Authority key identifier: 0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F Certificate issuer: /CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F Certificate serial: 027DEF Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer Manifest: rsync://rpki.apnic.net/member_repository/A919968F/9BCDA228483611ECB4202957C4F9AE02/CafSJ-42Ii7Z87lAjZjs-Q3mre0.mft caRepository: rsync://rpki.apnic.net/member_repository/A919968F/9BCDA228483611ECB4202957C4F9AE02/ Notify URL: https://rrdp.apnic.net/notification.xml Certificate not before: Sat 13 Dec 2025 13:44:20 +0000 Certificate not after: Tue 02 Mar 2027 00:00:00 +0000 Subordinate resources: AS: 149010 IP: 103.176.58.0/23 IP: 2001:df0:940::/48 Validation: OK Signature path: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 27 Dec 2025 20:42:10 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 163311 (0x27def) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A90DC5BE, serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F Validity Not Before: Dec 13 13:44:20 2025 GMT Not After : Mar 2 00:00:00 2027 GMT Subject: CN=A919968F, serialNumber=09A7D227EE36222ED9F3B9408D98ECF90DE6ADED Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:6b:e9:bc:bd:8e:34:31:a0:44:4b:a3:ee:8d: 93:e6:84:e4:34:4c:c6:d7:21:01:2b:ac:9a:f0:d2: 30:6a:14:33:5c:17:c3:f5:5b:ce:89:1a:2c:45:fe: 04:ae:66:f8:ee:8e:89:cd:14:ec:38:b7:be:46:2a: dd:85:c2:0c:8d:fc:33:8a:54:e0:89:d1:48:6b:4d: dd:3b:e3:c7:5b:08:4e:c6:d0:d7:f8:8e:b1:58:1b: ce:eb:9f:b7:e4:be:12:cd:52:0b:12:16:08:be:0e: 95:d8:42:6e:a6:a8:aa:6d:78:e1:73:89:77:9e:18: d4:6d:0d:c4:68:f8:ea:e2:4d:6d:e0:1b:c0:2e:0e: dd:e2:a6:b4:8e:44:85:f6:f2:7a:5c:6d:f2:a6:48: b2:47:eb:2f:cb:79:28:9e:52:3a:5e:71:34:d4:33: 35:83:de:16:69:47:b7:81:dc:8d:bd:4f:8d:67:ef: 2d:7a:1c:13:7b:58:8c:81:73:54:45:55:fc:06:d0: d4:5a:10:54:b9:f4:82:da:0a:2e:3a:95:ca:25:99: bf:b5:47:6f:be:e0:f1:fc:de:84:10:69:75:16:c9: 11:65:f1:63:c3:c9:12:7a:6f:56:08:f8:dc:42:1c: 1d:36:a0:f6:c4:86:d7:4b:7a:74:7b:f7:a5:f1:d6: 56:a3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 09:A7:D2:27:EE:36:22:2E:D9:F3:B9:40:8D:98:EC:F9:0D:E6:AD:ED X509v3 Authority Key Identifier: keyid:0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: CA Repository - URI:rsync://rpki.apnic.net/member_repository/A919968F/9BCDA228483611ECB4202957C4F9AE02/ RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A919968F/9BCDA228483611ECB4202957C4F9AE02/CafSJ-42Ii7Z87lAjZjs-Q3mre0.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: 149010 sbgp-ipAddrBlock: critical IPv4: 103.176.58.0/23 IPv6: 2001:df0:940::/48 Signature Algorithm: sha256WithRSAEncryption b6:e8:ca:f5:9e:6c:51:87:c9:cc:41:bb:56:f8:41:dd:32:c4: fb:80:94:32:2a:4f:4f:71:56:65:b1:35:eb:02:03:f4:e8:a2: 0a:1f:f6:2c:ad:66:0e:51:3b:d2:fb:17:fa:a7:ae:62:3e:4c: 2c:95:22:d2:b0:3b:0a:4c:71:2f:7b:56:6e:f8:db:ac:b2:cc: 56:01:ac:44:19:4a:e9:3c:06:b8:de:3a:a3:5b:76:f6:ac:aa: 1b:6a:e0:a8:c7:73:18:30:14:1a:9d:7c:10:6f:a6:3e:20:50: 96:0d:0a:a0:b3:53:cc:3e:87:f2:12:db:94:97:95:9e:87:2b: 78:a7:cf:66:08:fc:f4:c9:33:6b:99:c4:c8:c7:7d:c8:9b:10: 54:cd:b3:18:8d:59:d5:d2:b2:5b:c4:63:ca:3f:a5:01:2c:a6: af:f3:a8:db:bd:93:1c:3a:17:ea:08:09:16:f1:16:53:fe:13: d1:d1:78:d6:90:91:f5:db:b9:fa:38:b3:a4:32:48:ad:98:c6: f6:a7:8b:62:bc:8b:ed:85:03:16:1b:bb:54:7e:cc:8b:34:58: 43:79:95:ab:d5:55:84:56:fe:87:87:70:19:ce:bb:26:45:1a: 1e:0f:0a:5d:67:13:99:b9:d7:00:f6:5e:3a:ee:4d:bc:8a:41: f3:47:08:31 -----BEGIN CERTIFICATE----- MIIGKzCCBROgAwIBAgIDAn3vMA0GCSqGSIb3DQEBCwUAMEYxETAPBgNVBAMTCEE5 MERDNUJFMTEwLwYDVQQFEygwRTY1QTRGNUZEMzZCNUJENjhFQjNDOTIzNDA4OTc4 QzkwN0FBNzlGMB4XDTI1MTIxMzEzNDQyMFoXDTI3MDMwMjAwMDAwMFowRjERMA8G A1UEAxMIQTkxOTk2OEYxMTAvBgNVBAUTKDA5QTdEMjI3RUUzNjIyMkVEOUYzQjk0 MDhEOThFQ0Y5MERFNkFERUQwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQCua+m8vY40MaBES6PujZPmhOQ0TMbXIQErrJrw0jBqFDNcF8P1W86JGixF/gSu ZvjujonNFOw4t75GKt2FwgyN/DOKVOCJ0UhrTd0748dbCE7G0Nf4jrFYG87rn7fk vhLNUgsSFgi+DpXYQm6mqKpteOFziXeeGNRtDcRo+OriTW3gG8AuDt3iprSORIX2 8npcbfKmSLJH6y/LeSieUjpecTTUMzWD3hZpR7eB3I29T41n7y16HBN7WIyBc1RF VfwG0NRaEFS59ILaCi46lcolmb+1R2++4PH83oQQaXUWyRFl8WPDyRJ6b1YI+NxC HB02oPbEhtdLenR796Xx1lajAgMBAAGjggMgMIIDHDAdBgNVHQ4EFgQUCafSJ+42 Ii7Z87lAjZjs+Q3mre0wHwYDVR0jBBgwFoAUDmWk9f02tb1o6zySNAiXjJB6p58w DgYDVR0PAQH/BAQDAgEGMA8GA1UdEwEB/wQFMAMBAf8wcwYDVR0fBGwwajBooGag ZIZicnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2 NjExRTJCQjQ2OEY3QzcyRkQxRkYyL0RtV2s5ZjAydGIxbzZ6eVNOQWlYakpCNnA1 OC5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvOTgwNjUyRTBCNzdFMTFFN0E5NkEzOTUyMUE0 RjRGQjQvRG1XazlmMDJ0YjFvNnp5U05BaVhqSkI2cDU4LmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwggEoBggrBgEFBQcBCwSCARowggEWMF8GCCsGAQUF BzAFhlNyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5 MTk5NjhGLzlCQ0RBMjI4NDgzNjExRUNCNDIwMjk1N0M0RjlBRTAyLzB+BggrBgEF BQcwCoZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9B OTE5OTY4Ri85QkNEQTIyODQ4MzYxMUVDQjQyMDI5NTdDNEY5QUUwMi9DYWZTSi00 MklpN1o4N2xBalpqcy1RM21yZTAubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3Jy ZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwGgYIKwYBBQUHAQgBAf8ECzAJ oAcwBQIDAkYSMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIAATAGAwQBZ7A6MA8EAgAC MAkDBwAgAQ3wCUAwDQYJKoZIhvcNAQELBQADggEBALboyvWebFGHycxBu1b4Qd0y xPuAlDIqT09xVmWxNesCA/Toogof9iytZg5RO9L7F/qnrmI+TCyVItKwOwpMcS97 Vm7426yyzFYBrEQZSuk8BrjeOqNbdvasqhtq4KjHcxgwFBqdfBBvpj4gUJYNCqCz U8w+h/IS25SXlZ6HK3inz2YI/PTJM2uZxMjHfcibEFTNsxiNWdXSslvEY8o/pQEs pq/zqNu9kxw6F+oICRbxFlP+E9HReNaQkfXbufo4s6QySK2Yxvani2K8i+2FAxYb u1R+zIs0WEN5lavVVYRW/oeHcBnOuyZFGh4PCl1nE5m51wD2XjruTbyKQfNHCDE= -----END CERTIFICATE-----Generated at Sat Dec 20 22:47:31 2025 by rpki-client