RPKI Certificate
Location:                 ./rsync/rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/LhWWOMt5D3lFFyLlKs602oBfi5c.cer (download)

Subject key identifier:   2E:15:96:38:CB:79:0F:79:45:17:22:E5:2A:CE:B4:DA:80:5F:8B:97
Authority key identifier: 0C:FC:E7:78:57:FC:F0:1F:39:D9:9A:62:B4:AA:62:E6:15:9E:76:F8
Manifest:                 rpki.apnic.net/member_repository/A91A1E13/0FA5F0D0866B11EB9BFD4F32C4F9AE02/LhWWOMt5D3lFFyLlKs602oBfi5c.mft
CA Repository:            rpki.apnic.net/member_repository/A91A1E13/0FA5F0D0866B11EB9BFD4F32C4F9AE02/
Notification URL:         https://rrdp.apnic.net/notification.xml
Subject Public Key Info:  
Subordinate resources:
    until: 2023-01-31T00:00:00Z
    Resources:
    1: IP: 193.82.160.0/19
    2: IP: 193.114.32.0 -- 193.114.95.255
    3: IP: 193.114.192.0 -- 193.115.31.255
    4: IP: 193.117.96.0/19
    5: IP: 193.118.0.0/19
    6: IP: 193.118.64.0/19
    7: IP: 193.119.128.0/17
    8: IP: 194.193.64.0/19
    9: IP: 194.193.224.0/19
    10: IP: 194.223.96.0/19

--
$ openssl x509 -text -inform DER -in ./rsync/rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/LhWWOMt5D3lFFyLlKs602oBfi5c.cer
Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 14200 (0x3778)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A90DC5BE/serialNumber=0CFCE77857FCF01F39D99A62B4AA62E6159E76F8
        Validity
            Not Before: Dec  1 04:20:09 2021 GMT
            Not After : Jan 31 00:00:00 2023 GMT
        Subject: CN=A91A1E13/serialNumber=2E159638CB790F79451722E52ACEB4DA805F8B97
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:e9:3e:e8:d3:0c:cb:25:80:ab:aa:f9:b0:57:
                    78:61:db:c8:ad:03:f6:8b:cc:84:70:f4:cc:96:4f:
                    be:86:4f:da:d5:12:0e:72:2c:4c:bf:5a:76:30:2d:
                    61:4b:ca:e3:32:0d:88:a4:c1:0c:98:72:31:ac:fb:
                    59:c0:4c:19:a6:d4:d0:2c:4e:30:ca:89:85:20:d0:
                    a6:6c:e8:d1:f7:93:e3:45:b1:d0:e1:fd:8f:89:42:
                    30:03:3f:50:13:70:61:aa:74:59:14:ac:2a:13:81:
                    1d:1e:c8:4e:fe:05:08:0f:a2:87:1a:65:a5:b0:3d:
                    06:8c:d5:03:74:c7:c3:0c:7b:92:3b:9d:26:38:48:
                    20:7c:80:12:20:a1:dc:9c:7e:66:b1:87:db:7f:cd:
                    66:57:01:0a:f9:8b:31:52:ff:d0:d1:61:b8:92:5a:
                    b6:ea:cb:d4:53:fc:ca:50:5f:01:f9:47:15:11:7f:
                    e8:33:35:3d:62:50:6e:27:eb:f6:6d:be:7c:68:5a:
                    db:ba:27:ea:b4:3b:74:ca:67:5a:66:b3:e2:8d:c6:
                    99:9a:64:ab:bb:3d:bd:c1:77:6f:c2:8e:ad:77:9a:
                    ec:52:c9:bd:90:3f:68:50:6f:21:32:e2:d2:c2:e0:
                    c2:b2:a6:09:89:6b:62:39:bb:f5:ff:25:b1:62:56:
                    93:0b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier: 
                2E:15:96:38:CB:79:0F:79:45:17:22:E5:2A:CE:B4:DA:80:5F:8B:97
            X509v3 Authority Key Identifier: 
                keyid:0C:FC:E7:78:57:FC:F0:1F:39:D9:9A:62:B4:AA:62:E6:15:9E:76:F8

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points: 

                Full Name:
                  URI:rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.crl

            Authority Information Access: 
                CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DPzneFf88B852ZpitKpi5hWedvg.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access: 
                CA Repository - URI:rsync://rpki.apnic.net/member_repository/A91A1E13/0FA5F0D0866B11EB9BFD4F32C4F9AE02/
                RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A91A1E13/0FA5F0D0866B11EB9BFD4F32C4F9AE02/LhWWOMt5D3lFFyLlKs602oBfi5c.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  193.82.160.0/19
                  193.114.32.0-193.114.95.255
                  193.114.192.0-193.115.31.255
                  193.117.96.0/19
                  193.118.0.0/19
                  193.118.64.0/19
                  193.119.128.0/17
                  194.193.64.0/19
                  194.193.224.0/19
                  194.223.96.0/19

    Signature Algorithm: sha256WithRSAEncryption
         64:38:af:81:42:84:76:89:56:d8:1c:c3:3d:82:39:10:0e:29:
         4f:c7:64:0f:5c:c7:34:57:63:96:77:3f:0f:28:82:09:d3:c6:
         49:82:a9:e8:73:0e:d2:1a:ef:23:02:84:ce:58:7c:2a:5e:13:
         38:e3:d5:54:8e:2c:ae:b8:a9:4d:0b:01:2d:69:85:b6:3a:96:
         56:38:a6:39:e3:01:fb:83:02:8b:57:a9:31:8b:47:21:84:ae:
         6e:5e:57:1e:b4:59:21:22:52:d6:31:08:03:26:e0:ed:41:04:
         75:4b:1f:9b:a8:f6:41:00:ff:d8:f0:12:dc:a2:e8:41:2c:67:
         0a:8a:72:55:73:4f:68:91:8b:91:96:8c:00:4b:be:cd:ae:b7:
         c1:cc:41:d3:92:da:3d:29:f6:9b:f7:f7:ad:87:48:70:c9:8a:
         98:00:93:39:e9:91:a5:62:ba:fb:a0:a6:d6:e6:fb:3e:28:2a:
         28:d5:11:4a:9b:ba:bf:a9:13:dd:60:05:b1:fb:8e:58:3c:74:
         48:b0:90:c1:12:35:f5:69:27:a1:87:5f:4f:6e:bb:f8:2d:bd:
         8d:67:8e:54:65:30:21:94:e9:6b:51:c6:47:95:eb:b9:cd:a5:
         04:16:68:ff:99:2a:59:64:7c:7e:8a:84:04:84:4f:73:89:e3:
         2f:4d:e3:51
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Generated at Wed Dec 1 06:25:01 2021 by LibreSSL & rpki-client.