This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

Certificate

$ rpki-client -vvf rpki.sub.apnic.net/repository/A9150E4D0000/0/DD8984A82671DD60AA7980ACF2402EF6DA98721C.cer
File:                     DD8984A82671DD60AA7980ACF2402EF6DA98721C.cer (raw, json)
Hash identifier:          ffBGHZNa0/zu9DtnY2XbTiKsF4UkeXAs1v9jbG4kO1Y=
Subject key identifier:   DD:89:84:A8:26:71:DD:60:AA:79:80:AC:F2:40:2E:F6:DA:98:72:1C
Authority key identifier: 47:FB:DC:E2:CB:6F:2C:6E:43:78:C5:68:82:C3:D2:46:D7:6E:50:45
Certificate issuer:       /CN=A9150E4D0000/serialNumber=47FBDCE2CB6F2C6E4378C56882C3D246D76E5045
Certificate serial:       68CB1FECE2170E67BB51826134327D21A5694398
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/R_vc4stvLG5DeMVogsPSRtduUEU.cer
Manifest:                 rsync://krill.sy5.nsw.au.infininet.com.au/repo/BGP-Exchange/2/DD8984A82671DD60AA7980ACF2402EF6DA98721C.mft
caRepository:             rsync://krill.sy5.nsw.au.infininet.com.au/repo/BGP-Exchange/2/
Notify URL:               https://krill.sy5.nsw.au.infininet.com.au/rrdp/notification.xml
Certificate not before:   Sun 21 Dec 2025 20:53:00 +0000
Certificate not after:    Sun 20 Dec 2026 20:58:00 +0000
Subordinate resources:    AS: 24381
                          IP: 2401:2060:b000::/36
Validation:               OK
Signature path:           rsync://rpki.sub.apnic.net/repository/A9150E4D0000/0/47FBDCE2CB6F2C6E4378C56882C3D246D76E5045.crl
                          rsync://rpki.sub.apnic.net/repository/A9150E4D0000/0/47FBDCE2CB6F2C6E4378C56882C3D246D76E5045.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/R_vc4stvLG5DeMVogsPSRtduUEU.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 26 Jan 2026 10:10:23 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            68:cb:1f:ec:e2:17:0e:67:bb:51:82:61:34:32:7d:21:a5:69:43:98
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9150E4D0000, serialNumber=47FBDCE2CB6F2C6E4378C56882C3D246D76E5045
        Validity
            Not Before: Dec 21 20:53:00 2025 GMT
            Not After : Dec 20 20:58:00 2026 GMT
        Subject: CN=DD8984A82671DD60AA7980ACF2402EF6DA98721C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:79:2d:73:fc:b7:12:1b:02:6b:ae:49:4d:0c:
                    8b:04:bf:10:f2:db:d3:f6:dc:07:fc:b0:b8:38:7f:
                    8d:f4:dd:90:27:03:97:62:2b:d4:7e:13:8b:c6:3a:
                    ce:ed:e6:53:ec:bc:3b:7f:cc:4d:16:88:2a:c2:1a:
                    96:eb:b3:95:bf:eb:98:ae:44:d8:47:79:74:ca:c4:
                    c9:2b:28:35:e6:ae:81:a6:f2:25:74:8a:f1:55:09:
                    15:d8:b9:f3:e7:a7:c9:1d:75:42:9e:14:4c:e1:b1:
                    9b:c6:cc:12:ae:e0:91:f6:9b:15:cd:e2:9e:6c:a6:
                    5c:1a:b6:d7:ca:81:59:15:29:8b:b9:01:2c:6f:37:
                    99:1b:10:09:40:98:25:91:2c:86:1b:3f:4a:64:84:
                    1d:f5:97:a3:6d:c4:39:bc:7a:09:74:cb:18:a2:65:
                    7b:7a:72:20:b5:20:6d:70:61:cb:f8:43:71:1e:6c:
                    2a:2f:5e:41:78:11:d7:b7:9b:b7:d0:f0:eb:7a:f3:
                    af:03:44:27:95:1e:f0:0e:4b:fa:00:77:54:eb:cc:
                    48:5d:67:f6:bc:bb:7e:67:85:e5:b1:21:44:f3:2b:
                    66:35:b4:ad:71:05:15:26:c9:71:ae:63:12:e9:09:
                    7a:34:2f:c4:82:d7:8f:d5:17:8f:d8:d9:10:56:15:
                    38:69
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                DD:89:84:A8:26:71:DD:60:AA:79:80:AC:F2:40:2E:F6:DA:98:72:1C
            X509v3 Authority Key Identifier:
                keyid:47:FB:DC:E2:CB:6F:2C:6E:43:78:C5:68:82:C3:D2:46:D7:6E:50:45

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.sub.apnic.net/repository/A9150E4D0000/0/47FBDCE2CB6F2C6E4378C56882C3D246D76E5045.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/R_vc4stvLG5DeMVogsPSRtduUEU.cer

            Subject Information Access:
                CA Repository - URI:rsync://krill.sy5.nsw.au.infininet.com.au/repo/BGP-Exchange/2/
                RPKI Manifest - URI:rsync://krill.sy5.nsw.au.infininet.com.au/repo/BGP-Exchange/2/DD8984A82671DD60AA7980ACF2402EF6DA98721C.mft
                RPKI Notify - URI:https://krill.sy5.nsw.au.infininet.com.au/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2401:2060:b000::/36

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  24381

    Signature Algorithm: sha256WithRSAEncryption
         bd:27:a5:5d:85:73:b1:91:7e:78:4a:fe:8a:54:14:ca:45:db:
         0f:b9:11:40:97:93:67:e0:ab:d2:9c:8e:5a:1c:7b:53:a8:c0:
         6c:91:16:60:01:46:73:a9:a7:83:8e:39:cc:96:bc:e7:b5:d8:
         aa:ff:c4:f8:9c:7e:75:1b:88:18:2e:11:5e:06:aa:ce:f4:85:
         83:fa:72:a8:5a:6d:13:35:81:2c:f2:1a:5a:58:91:f4:e7:6f:
         4d:68:7e:7a:d5:91:14:70:a1:59:8a:51:cf:67:9b:03:d1:cf:
         ff:04:92:70:af:ff:ff:d8:22:a7:b9:33:bf:c0:b5:0f:33:49:
         36:34:5e:53:e3:99:df:49:0d:09:7c:ee:13:f4:12:c0:25:07:
         ee:d8:b4:c2:ab:6d:37:8f:d4:d9:67:05:ed:b3:6d:69:52:e4:
         75:39:1f:93:d3:fa:80:88:55:e5:1b:60:81:6d:34:e1:60:ee:
         a6:9e:82:69:b3:ff:66:6c:be:a5:ad:3c:ee:80:cc:08:ae:01:
         53:80:40:64:ad:f6:d0:7a:06:10:b4:ef:4c:38:a7:c7:f0:26:
         a4:39:8f:91:74:44:12:80:49:ed:68:0c:c3:0a:81:05:e9:9f:
         83:71:af:fd:95:2e:be:37:28:6b:80:f1:d8:7a:16:8d:13:e8:
         5d:24:26:7b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----