RPKI Certificate
Location:                 ./rsync/rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/556bUhJjfjPKXcthdpCc4ZYhumQ.cer (download)

Subject key identifier:   E7:9E:9B:52:12:63:7E:33:CA:5D:CB:61:76:90:9C:E1:96:21:BA:64
Authority key identifier: 0C:FC:E7:78:57:FC:F0:1F:39:D9:9A:62:B4:AA:62:E6:15:9E:76:F8
Manifest:                 rpki.apnic.net/member_repository/A919C47E/1E753650594E11ECA0629256C4F9AE02/556bUhJjfjPKXcthdpCc4ZYhumQ.mft
CA Repository:            rpki.apnic.net/member_repository/A919C47E/1E753650594E11ECA0629256C4F9AE02/
Notification URL:         https://rrdp.apnic.net/notification.xml
Subject Public Key Info:  
Subordinate resources:
    until: 2022-12-01T00:00:00Z
    Resources:
    1: IP: 91.208.208.0/24
    2: IP: 91.208.228.0/24
    3: IP: 91.208.230.0/24
    4: IP: 91.208.233.0/24

--
$ openssl x509 -text -inform DER -in ./rsync/rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/556bUhJjfjPKXcthdpCc4ZYhumQ.cer
Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 14237 (0x379d)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A90DC5BE/serialNumber=0CFCE77857FCF01F39D99A62B4AA62E6159E76F8
        Validity
            Not Before: Dec 10 00:14:27 2021 GMT
            Not After : Dec  1 00:00:00 2022 GMT
        Subject: CN=A919C47E/serialNumber=E79E9B5212637E33CA5DCB6176909CE19621BA64
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:bc:93:e4:82:41:e9:95:2c:5c:68:fb:48:d4:
                    d0:a2:e5:67:87:dd:25:93:16:40:ac:ee:5f:cd:bb:
                    13:d4:d6:2a:7d:28:8d:a2:61:d7:8c:0e:f6:6c:5d:
                    f3:61:6d:c2:97:5a:e4:59:54:aa:27:64:c2:ed:23:
                    2c:7e:bf:75:c2:b5:be:a2:8c:1f:f3:cb:a2:5a:8c:
                    db:5a:d2:08:6c:53:1c:da:a2:1a:be:6d:16:37:04:
                    bf:f7:42:bf:04:f8:fa:4b:09:56:7b:22:4e:a9:85:
                    8f:51:e2:ba:9d:6a:36:52:58:ed:7b:5f:96:b5:41:
                    60:a8:f3:2f:7b:94:d5:f2:01:0c:16:a5:c0:fd:6d:
                    2c:3e:23:1a:e3:c4:87:5a:2a:b5:75:5f:71:9e:0b:
                    73:26:22:30:ad:0f:ba:99:da:f5:71:70:1a:98:17:
                    47:70:55:28:d6:5f:20:44:92:a8:78:7e:db:7c:1c:
                    f0:2c:01:27:4d:bb:3e:28:d3:00:91:72:c6:75:50:
                    75:63:ad:fd:ca:a3:57:3e:cc:b2:4f:b9:47:9e:15:
                    da:db:eb:16:a3:3c:e1:98:2b:c6:57:38:64:66:87:
                    8a:58:7e:3f:9a:f9:f7:ad:a5:c8:a2:b5:be:38:56:
                    b8:3e:9d:39:e1:78:55:fc:8e:be:da:d7:34:6a:09:
                    25:09
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier: 
                E7:9E:9B:52:12:63:7E:33:CA:5D:CB:61:76:90:9C:E1:96:21:BA:64
            X509v3 Authority Key Identifier: 
                keyid:0C:FC:E7:78:57:FC:F0:1F:39:D9:9A:62:B4:AA:62:E6:15:9E:76:F8

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points: 

                Full Name:
                  URI:rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.crl

            Authority Information Access: 
                CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DPzneFf88B852ZpitKpi5hWedvg.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access: 
                CA Repository - URI:rsync://rpki.apnic.net/member_repository/A919C47E/1E753650594E11ECA0629256C4F9AE02/
                RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A919C47E/1E753650594E11ECA0629256C4F9AE02/556bUhJjfjPKXcthdpCc4ZYhumQ.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  91.208.208.0/24
                  91.208.228.0/24
                  91.208.230.0/24
                  91.208.233.0/24

    Signature Algorithm: sha256WithRSAEncryption
         61:f3:c4:81:0e:2a:93:e1:68:a2:3c:09:02:26:c3:0b:a3:bc:
         42:3c:54:31:58:04:82:67:b7:a0:e1:5a:c8:4a:2c:54:41:b5:
         69:f3:e0:57:a1:9f:ba:38:42:09:16:11:21:d6:d2:e0:29:a2:
         a5:26:90:b6:c2:ea:09:44:09:4c:f1:5c:cd:ae:3e:00:a7:a0:
         85:17:2c:2e:3f:05:d2:cb:8d:5d:f3:89:46:17:7d:46:25:be:
         b2:c8:9b:9a:90:76:37:46:a9:2a:d9:62:c9:55:62:44:8a:4b:
         df:b5:8c:7f:17:cf:93:d1:55:77:95:d5:83:f8:b6:99:39:7a:
         88:a9:4c:66:f3:53:b3:5a:97:ea:99:bf:cd:81:21:cb:b0:fa:
         bb:3e:a3:af:a5:30:f1:2d:67:82:06:36:46:f2:d8:41:11:f8:
         be:e1:a9:31:66:53:d5:be:bf:a9:a6:d9:a8:8f:9e:a3:7a:70:
         a9:fe:76:3a:8a:d6:31:59:d5:8e:6d:61:c2:4b:53:e8:5e:00:
         84:2c:c6:d1:f1:c2:e0:a9:7f:31:5b:99:75:11:e4:35:88:30:
         eb:75:e6:8d:91:9b:9d:b9:8e:f1:4d:69:60:68:5a:6e:47:39:
         db:4d:9c:2b:42:a5:c4:23:0c:8f:a0:21:22:59:41:68:d8:29:
         b1:7d:12:d0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Generated at Mon Dec 13 14:47:58 2021 by LibreSSL & rpki-client.