RPKI Certificate
Location:                 ./rsync/rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/K08yPFindrTnU4be6Dci4EViMsY.cer (download)

Subject key identifier:   2B:4F:32:3C:58:A7:76:B4:E7:53:86:DE:E8:37:22:E0:45:62:32:C6
Authority key identifier: 0C:FC:E7:78:57:FC:F0:1F:39:D9:9A:62:B4:AA:62:E6:15:9E:76:F8
Manifest:                 rpki.apnic.net/member_repository/A911BC62/EE95FD42B76611E986C0E514C4F9AE02/K08yPFindrTnU4be6Dci4EViMsY.mft
CA Repository:            rpki.apnic.net/member_repository/A911BC62/EE95FD42B76611E986C0E514C4F9AE02/
Notification URL:         https://rrdp.apnic.net/notification.xml
Subordinate resources:
    1: IP: 194.140.200.0/21
    2: IP: 212.104.224.0/20

--
$ openssl x509 -text -inform DER -in ./rsync/rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/K08yPFindrTnU4be6Dci4EViMsY.cer
Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 13936 (0x3670)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A90DC5BE/serialNumber=0CFCE77857FCF01F39D99A62B4AA62E6159E76F8
        Validity
            Not Before: Oct  6 12:36:48 2021 GMT
            Not After : Dec  1 00:00:00 2022 GMT
        Subject: CN=A911BC62/serialNumber=2B4F323C58A776B4E75386DEE83722E0456232C6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:c8:04:1c:40:5e:5d:9b:e3:3c:f7:f7:02:83:
                    1c:60:d7:60:41:b1:92:0b:a1:91:e5:4b:c9:02:e4:
                    d2:f4:4b:0c:53:be:ab:de:16:bc:a5:74:86:15:93:
                    46:db:eb:ef:e1:d9:81:2e:bf:57:9d:5b:fa:d4:ac:
                    80:cb:46:80:bd:28:e0:b3:9f:63:a3:e6:b1:99:4a:
                    bd:90:dd:20:44:1c:c8:d8:b7:0e:5a:6d:81:bd:5c:
                    28:ab:2f:4c:06:83:96:d7:38:e4:b2:3a:fc:4b:80:
                    c2:03:36:3f:dc:7f:5c:10:aa:6f:9c:3e:1f:e1:3a:
                    b9:6e:7b:19:0d:ca:ba:37:c6:b2:89:1e:63:3e:df:
                    fc:32:3b:ef:a8:a2:e2:54:7e:7e:49:16:06:9a:43:
                    23:2b:13:d5:fa:20:40:01:2d:a0:d6:a9:47:26:f1:
                    a8:f2:29:43:95:90:18:62:b8:1e:f9:9c:79:f8:1f:
                    c9:44:da:bf:26:96:4f:04:65:66:4e:c8:52:f2:92:
                    b7:ed:f8:95:2e:de:3a:2a:5e:dd:71:52:e8:6b:f0:
                    14:9b:6f:08:c2:66:bc:95:10:04:25:e3:0e:de:79:
                    5b:e3:27:e7:1a:bb:73:54:9a:43:88:c1:9a:2e:0c:
                    bf:12:45:c0:a3:e5:45:aa:2c:6c:de:3a:cf:ae:bd:
                    f9:ef
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier: 
                2B:4F:32:3C:58:A7:76:B4:E7:53:86:DE:E8:37:22:E0:45:62:32:C6
            X509v3 Authority Key Identifier: 
                keyid:0C:FC:E7:78:57:FC:F0:1F:39:D9:9A:62:B4:AA:62:E6:15:9E:76:F8

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points: 

                Full Name:
                  URI:rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.crl

            Authority Information Access: 
                CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DPzneFf88B852ZpitKpi5hWedvg.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access: 
                CA Repository - URI:rsync://rpki.apnic.net/member_repository/A911BC62/EE95FD42B76611E986C0E514C4F9AE02/
                RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A911BC62/EE95FD42B76611E986C0E514C4F9AE02/K08yPFindrTnU4be6Dci4EViMsY.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  194.140.200.0/21
                  212.104.224.0/20

    Signature Algorithm: sha256WithRSAEncryption
         d8:35:59:52:12:f3:9c:d3:de:26:45:ab:69:2e:44:f0:c1:de:
         99:50:d2:e8:0b:f1:ed:09:ff:99:fe:0c:bc:a0:95:89:f0:5a:
         4f:14:9e:8d:35:36:63:e4:27:b7:c1:0e:0a:5d:e1:53:9d:bb:
         64:7e:d8:97:70:c7:30:2f:98:2b:da:e8:4b:98:34:fe:6a:41:
         fa:2b:0f:65:43:6e:80:81:6d:7d:63:43:24:85:fe:03:51:2b:
         03:66:60:88:c1:cf:96:bc:c9:ca:1e:ad:7c:b8:4f:76:c3:a0:
         1b:23:6a:6f:b6:b7:66:1d:d1:74:d3:f7:8d:27:e1:e2:70:b0:
         dc:65:7c:e6:d4:9b:3b:4a:30:2d:25:ea:bb:97:e6:ae:67:3c:
         a6:19:9b:d9:f1:25:e0:9b:91:61:82:db:9e:8f:cf:10:20:23:
         91:d0:e8:d6:2f:4f:71:0c:d5:30:f4:6d:d7:bd:29:45:ad:00:
         b6:84:f0:d4:04:3d:9d:4f:23:9a:6a:06:07:d0:05:16:e7:4f:
         1c:4c:39:05:ef:c4:87:72:34:e6:b4:89:01:e5:90:8d:c1:82:
         84:6a:7f:3b:d0:91:f2:66:90:2a:1d:98:de:02:e2:56:c3:fc:
         fa:d9:bf:5e:c6:e4:b2:eb:ba:26:10:4a:74:e6:a1:be:d8:07:
         a9:69:d7:d1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Generated at Wed Oct 6 14:50:59 2021 by LibreSSL & rpki-client.