This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bMOGDamHeDpQBVpRk5gw980cgms.cer File: bMOGDamHeDpQBVpRk5gw980cgms.cer (raw, json) Hash identifier: PaVeqT6vawWXyuS5bOZIwIf13NWVyrR1RSYX/GaPjiY= Subject key identifier: 6C:C3:86:0D:A9:87:78:3A:50:05:5A:51:93:98:30:F7:CD:1C:82:6B Authority key identifier: 0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F Certificate issuer: /CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F Certificate serial: 028903 Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer Manifest: rsync://rpki.apnic.net/member_repository/A91EA623/DD6B7528060C11ECAF675043C4F9AE02/bMOGDamHeDpQBVpRk5gw980cgms.mft caRepository: rsync://rpki.apnic.net/member_repository/A91EA623/DD6B7528060C11ECAF675043C4F9AE02/ Notify URL: https://rrdp.apnic.net/notification.xml Certificate not before: Tue 27 Jan 2026 14:32:53 +0000 Certificate not after: Wed 31 Mar 2027 00:00:00 +0000 Subordinate resources: AS: 2772 AS: 3689 -- 3693 AS: 4058 AS: 5017 -- 5018 AS: 9440 AS: 9665 IP: 202.66.0.0/17 IP: 202.66.192.0/18 IP: 202.72.0.0/19 IP: 202.73.0.0/22 IP: 202.76.0.0/17 IP: 202.80.0.0/19 IP: 202.85.248.0/21 IP: 202.88.0.0/19 IP: 202.88.96.0/19 IP: 203.85.0.0/16 IP: 210.184.0.0 -- 210.184.95.255 IP: 2403:2c00::/32 Validation: OK Signature path: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 09 Feb 2026 12:50:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 166147 (0x28903) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A90DC5BE, serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F Validity Not Before: Jan 27 14:32:53 2026 GMT Not After : Mar 31 00:00:00 2027 GMT Subject: CN=A91EA623, serialNumber=6CC3860DA987783A50055A51939830F7CD1C826B Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:a2:72:36:a9:04:73:6b:27:92:68:8e:d2:27: 97:8a:83:34:e5:40:ef:2b:48:8f:bf:e9:d0:00:84: 63:3b:bc:eb:17:5c:ae:64:a5:94:d3:fa:30:73:aa: 17:62:7b:93:18:bc:79:e7:65:d6:5a:e8:c2:0f:15: 28:5a:13:3d:7e:06:47:11:cb:b6:a3:b7:d8:d8:4e: cb:08:d0:f7:da:6a:b3:44:b9:bb:1c:a4:cb:a5:0d: 67:4b:f4:4e:37:ec:1b:4f:bc:88:a5:39:ab:6c:c9: d2:e5:61:a2:70:55:bf:6a:59:81:48:28:46:76:1a: 16:f9:81:77:39:c2:34:b6:a8:0d:25:cd:19:6e:ad: 5d:bb:52:09:70:4b:e3:e4:b2:3e:4f:89:df:18:6c: 25:17:4e:c9:8c:f7:e2:f9:5c:43:64:7a:0e:b6:70: ee:41:90:e0:87:7a:71:3f:de:55:ab:c9:d9:cd:0a: c2:cb:34:47:a8:d3:70:23:77:79:4a:52:18:9c:2f: f3:41:73:f7:9f:ed:db:2c:54:44:b1:ba:c1:da:e6: 33:f9:65:6a:84:45:e6:98:f9:e9:f4:d3:b2:c1:c8: e0:84:1f:22:46:f8:b1:e3:6f:c1:bd:51:ea:73:40: 04:63:74:a2:dc:82:a6:6f:99:f6:1c:85:d8:f8:e0: 4e:49 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6C:C3:86:0D:A9:87:78:3A:50:05:5A:51:93:98:30:F7:CD:1C:82:6B X509v3 Authority Key Identifier: keyid:0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: CA Repository - URI:rsync://rpki.apnic.net/member_repository/A91EA623/DD6B7528060C11ECAF675043C4F9AE02/ RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A91EA623/DD6B7528060C11ECAF675043C4F9AE02/bMOGDamHeDpQBVpRk5gw980cgms.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: 2772 3689-3693 4058 5017-5018 9440 9665 sbgp-ipAddrBlock: critical IPv4: 202.66.0.0/17 202.66.192.0/18 202.72.0.0/19 202.73.0.0/22 202.76.0.0/17 202.80.0.0/19 202.85.248.0/21 202.88.0.0/19 202.88.96.0/19 203.85.0.0/16 210.184.0.0-210.184.95.255 IPv6: 2403:2c00::/32 Signature Algorithm: sha256WithRSAEncryption cf:87:07:3f:de:f1:a0:5b:27:a6:b0:c9:6e:4e:e9:2e:3d:72: 8c:e8:c3:5c:77:a9:49:e2:d2:6b:95:10:82:eb:35:5c:13:b1: da:08:bd:e6:a0:fe:4e:91:2b:11:18:22:4b:8b:3f:df:2d:20: e6:aa:d3:73:f7:a4:59:1d:85:1a:68:ab:80:9e:27:ce:ce:15: f3:f8:6b:c6:b8:d8:4d:8e:e1:86:fc:70:69:13:6e:de:78:3c: c4:8c:73:4a:56:4e:97:ec:2c:84:99:89:de:9d:05:1b:f7:3f: 27:5d:2a:83:b0:a1:3f:96:87:02:4c:ef:f4:14:10:bb:64:0f: 8b:80:bb:e2:f5:36:00:97:f5:43:f4:8b:f1:73:0f:3e:5f:e2: 34:21:cf:b6:43:96:7d:f5:40:53:e6:14:72:27:db:7d:45:87: d6:d2:8f:a7:54:ec:9f:c5:92:51:6d:d0:e4:fb:a6:5d:f3:9d: d7:a0:2f:b5:e8:6a:4f:31:3f:79:52:88:38:21:92:fa:06:94: a3:ed:73:d9:f9:4a:96:ea:3d:5f:96:3e:f3:04:97:b0:12:23: 27:1f:d0:8f:55:98:b9:e4:3a:63:a0:ee:58:90:34:d3:05:23: 4f:f5:f9:2c:70:00:b1:73:9c:d4:9a:9a:a1:ba:8a:d1:18:d0: 09:ff:bb:6b -----BEGIN CERTIFICATE----- MIIGijCCBXKgAwIBAgIDAokDMA0GCSqGSIb3DQEBCwUAMEYxETAPBgNVBAMMCEE5 MERDNUJFMTEwLwYDVQQFEygwRTY1QTRGNUZEMzZCNUJENjhFQjNDOTIzNDA4OTc4 QzkwN0FBNzlGMB4XDTI2MDEyNzE0MzI1M1oXDTI3MDMzMTAwMDAwMFowRjERMA8G A1UEAwwIQTkxRUE2MjMxMTAvBgNVBAUTKDZDQzM4NjBEQTk4Nzc4M0E1MDA1NUE1 MTkzOTgzMEY3Q0QxQzgyNkIwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQC4onI2qQRzayeSaI7SJ5eKgzTlQO8rSI+/6dAAhGM7vOsXXK5kpZTT+jBzqhdi e5MYvHnnZdZa6MIPFShaEz1+BkcRy7ajt9jYTssI0PfaarNEubscpMulDWdL9E43 7BtPvIilOatsydLlYaJwVb9qWYFIKEZ2Ghb5gXc5wjS2qA0lzRlurV27UglwS+Pk sj5Pid8YbCUXTsmM9+L5XENkeg62cO5BkOCHenE/3lWrydnNCsLLNEeo03Ajd3lK UhicL/NBc/ef7dssVESxusHa5jP5ZWqEReaY+en007LByOCEHyJG+LHjb8G9Uepz QARjdKLcgqZvmfYchdj44E5JAgMBAAGjggN/MIIDezAdBgNVHQ4EFgQUbMOGDamH eDpQBVpRk5gw980cgmswHwYDVR0jBBgwFoAUDmWk9f02tb1o6zySNAiXjJB6p58w DgYDVR0PAQH/BAQDAgEGMA8GA1UdEwEB/wQFMAMBAf8wcwYDVR0fBGwwajBooGag ZIZicnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2 NjExRTJCQjQ2OEY3QzcyRkQxRkYyL0RtV2s5ZjAydGIxbzZ6eVNOQWlYakpCNnA1 OC5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvOTgwNjUyRTBCNzdFMTFFN0E5NkEzOTUyMUE0 RjRGQjQvRG1XazlmMDJ0YjFvNnp5U05BaVhqSkI2cDU4LmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwggEoBggrBgEFBQcBCwSCARowggEWMF8GCCsGAQUF BzAFhlNyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5 MUVBNjIzL0RENkI3NTI4MDYwQzExRUNBRjY3NTA0M0M0RjlBRTAyLzB+BggrBgEF BQcwCoZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9B OTFFQTYyMy9ERDZCNzUyODA2MEMxMUVDQUY2NzUwNDNDNEY5QUUwMi9iTU9HRGFt SGVEcFFCVnBSazVndzk4MGNnbXMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3Jy ZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwOQYIKwYBBQUHAQgBAf8EKjAo oCYwJAICCtQwCAICDmkCAg5tAgIP2jAIAgITmQICE5oCAiTgAgIlwTBwBggrBgEF BQcBBwEB/wRhMF8wTgQCAAEwSAMEB8pCAAMEBspCwAMEBcpIAAMEAspJAAMEB8pM AAMEBcpQAAMEA8pV+AMEBcpYAAMEBcpYYAMDAMtVMAsDAwPSuAMEBdK4QDANBAIA AjAHAwUAJAMsADANBgkqhkiG9w0BAQsFAAOCAQEAz4cHP97xoFsnprDJbk7pLj1y jOjDXHepSeLSa5UQgus1XBOx2gi95qD+TpErERgiS4s/3y0g5qrTc/ekWR2FGmir gJ4nzs4V8/hrxrjYTY7hhvxwaRNu3ng8xIxzSlZOl+wshJmJ3p0FG/c/J10qg7Ch P5aHAkzv9BQQu2QPi4C74vU2AJf1Q/SL8XMPPl/iNCHPtkOWffVAU+YUcifbfUWH 1tKPp1Tsn8WSUW3Q5PumXfOd16AvtehqTzE/eVKIOCGS+gaUo+1z2flKluo9X5Y+ 8wSXsBIjJx/Qj1WYueQ6Y6DuWJA00wUjT/X5LHAAsXOc1JqaobqK0RjQCf+7aw== -----END CERTIFICATE-----Generated at Mon Feb 2 14:43:24 2026 by rpki-client