RPKI Certificate
Location:                 rsync/rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/MZsxRPBqjysw1BIHH-EhB3T-huc.cer (download)

Subject key identifier:   31:9B:31:44:F0:6A:8F:2B:30:D4:12:07:1F:E1:21:07:74:FE:86:E7
Authority key identifier: 0C:FC:E7:78:57:FC:F0:1F:39:D9:9A:62:B4:AA:62:E6:15:9E:76:F8
Manifest:                 rpki.apnic.net/member_repository/A91971CB/010EB288808911EB8B505F20C4F9AE02/MZsxRPBqjysw1BIHH-EhB3T-huc.mft
CA Repository:            rpki.apnic.net/member_repository/A91971CB/010EB288808911EB8B505F20C4F9AE02/
Notification URL:         https://rrdp.apnic.net/notification.xml
Subordinate resources:
    1: IP: 185.207.8.0/22

--
$ openssl x509 -text -inform DER -in rsync/rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/MZsxRPBqjysw1BIHH-EhB3T-huc.cer
Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 12997 (0x32c5)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A90DC5BE/serialNumber=0CFCE77857FCF01F39D99A62B4AA62E6159E76F8
        Validity
            Not Before: Mar  9 03:39:15 2021 GMT
            Not After : Mar 31 00:00:00 2022 GMT
        Subject: CN=A91971CB/serialNumber=319B3144F06A8F2B30D412071FE1210774FE86E7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:93:69:2b:d3:0b:54:52:f7:2b:6e:93:b0:86:
                    93:2e:23:86:1a:50:9d:d8:6c:ef:25:04:a9:04:3a:
                    f7:b9:17:cb:b9:07:75:ca:e1:85:67:d0:d3:69:c0:
                    51:04:4b:ac:a1:33:2e:f3:22:b9:43:3e:8f:23:b4:
                    e2:84:05:91:9a:5d:be:4c:25:39:f5:fc:af:16:c7:
                    59:8d:97:74:f6:c2:5a:ab:9e:65:84:13:69:f0:83:
                    b0:dd:68:02:6d:41:58:52:c3:87:46:0b:99:36:9b:
                    05:9b:94:38:69:83:a4:5f:75:24:4f:e0:72:14:3d:
                    7d:bd:05:3a:b3:68:12:fc:66:9c:45:f5:4f:0b:1a:
                    66:22:0a:66:b7:77:e2:81:51:d1:fc:2e:6a:91:79:
                    ec:45:83:63:1f:3f:2d:b2:e6:56:0b:11:33:cd:d1:
                    00:73:cc:34:76:86:ea:53:63:9e:4e:0b:4c:6b:79:
                    71:ee:3a:7d:8e:6b:56:7d:1e:60:fb:b0:96:ac:23:
                    23:a7:92:a5:db:e8:42:1d:02:8a:40:b6:b8:bf:eb:
                    8d:7e:09:42:35:9f:76:c2:f0:a7:f2:43:76:3d:d7:
                    76:12:12:c2:96:47:6f:dc:c6:58:da:09:d5:61:62:
                    88:f7:40:d2:fb:e4:40:5f:a0:09:7a:f9:e1:4b:1f:
                    04:51
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier: 
                31:9B:31:44:F0:6A:8F:2B:30:D4:12:07:1F:E1:21:07:74:FE:86:E7
            X509v3 Authority Key Identifier: 
                keyid:0C:FC:E7:78:57:FC:F0:1F:39:D9:9A:62:B4:AA:62:E6:15:9E:76:F8

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points: 

                Full Name:
                  URI:rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.crl

            Authority Information Access: 
                CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DPzneFf88B852ZpitKpi5hWedvg.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access: 
                CA Repository - URI:rsync://rpki.apnic.net/member_repository/A91971CB/010EB288808911EB8B505F20C4F9AE02/
                RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A91971CB/010EB288808911EB8B505F20C4F9AE02/MZsxRPBqjysw1BIHH-EhB3T-huc.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  185.207.8.0/22

    Signature Algorithm: sha256WithRSAEncryption
         8e:1e:74:a2:7d:7a:66:28:d1:12:01:8f:2e:dc:20:81:82:b5:
         05:a7:fc:51:26:5d:fa:62:9d:ba:10:1e:7c:c8:0e:be:4c:5c:
         73:73:2b:d0:ff:5a:d0:5b:57:06:b5:97:68:05:94:96:ea:37:
         32:89:03:60:f9:fa:63:0d:a8:f0:a7:5c:20:8c:5d:cd:c9:79:
         b6:cf:b1:42:92:d8:f9:b4:11:56:f1:67:06:7d:b1:7b:34:4d:
         24:23:de:9c:1c:96:00:7a:fe:fa:27:b3:14:91:8d:f2:64:96:
         52:54:55:92:9d:65:23:e7:b7:b8:b2:4b:f6:32:38:8c:3a:ce:
         04:bf:f8:cf:a9:fe:e6:11:e2:93:32:16:03:c2:76:0a:f7:27:
         43:2b:c0:4f:05:c4:ea:9a:aa:1d:6c:1a:70:c5:0c:7d:77:da:
         c5:fa:4b:da:d8:67:d2:a1:eb:75:e6:13:02:6e:ff:fd:70:b7:
         95:8e:20:58:5f:83:f4:e6:f3:70:d3:d9:3d:cd:6c:f0:26:cf:
         ac:2e:fa:30:32:f5:a7:e7:32:13:18:75:1d:2a:39:bd:da:be:
         f2:e9:c4:c9:fe:42:4c:ec:02:e4:c4:a0:a7:1e:ef:3c:1d:29:
         f8:38:f3:7c:82:16:ff:6c:46:dd:05:59:a3:6e:1a:76:5a:fa:
         db:0d:2f:4c
-----BEGIN CERTIFICATE-----
MIIF/TCCBOWgAwIBAgICMsUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkw
REM1QkUxMTAvBgNVBAUTKDBDRkNFNzc4NTdGQ0YwMUYzOUQ5OUE2MkI0QUE2MkU2
MTU5RTc2RjgwHhcNMjEwMzA5MDMzOTE1WhcNMjIwMzMxMDAwMDAwWjBGMREwDwYD
VQQDEwhBOTE5NzFDQjExMC8GA1UEBRMoMzE5QjMxNDRGMDZBOEYyQjMwRDQxMjA3
MUZFMTIxMDc3NEZFODZFNzCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEB
AMiTaSvTC1RS9ytuk7CGky4jhhpQndhs7yUEqQQ697kXy7kHdcrhhWfQ02nAUQRL
rKEzLvMiuUM+jyO04oQFkZpdvkwlOfX8rxbHWY2XdPbCWqueZYQTafCDsN1oAm1B
WFLDh0YLmTabBZuUOGmDpF91JE/gchQ9fb0FOrNoEvxmnEX1TwsaZiIKZrd34oFR
0fwuapF57EWDYx8/LbLmVgsRM83RAHPMNHaG6lNjnk4LTGt5ce46fY5rVn0eYPuw
lqwjI6eSpdvoQh0CikC2uL/rjX4JQjWfdsLwp/JDdj3XdhISwpZHb9zGWNoJ1WFi
iPdA0vvkQF+gCXr54UsfBFECAwEAAaOCAvMwggLvMB0GA1UdDgQWBBQxmzFE8GqP
KzDUEgcf4SEHdP6G5zAfBgNVHSMEGDAWgBQM/Od4V/zwHznZmmK0qmLmFZ52+DAO
BgNVHQ8BAf8EBAMCAQYwDwYDVR0TAQH/BAUwAwEB/zBzBgNVHR8EbDBqMGigZqBk
hmJyc3luYzovL3Jwa2kuYXBuaWMubmV0L3JlcG9zaXRvcnkvQjMyMkE1RjQxRDY2
MTFFMkEzRjI3RjdDNzJGRDFGRjIvRFB6bmVGZjg4Qjg1MlpwaXRLcGk1aFdlZHZn
LmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5h
cG5pYy5uZXQvcmVwb3NpdG9yeS85ODA2NTJFMEI3N0UxMUU3QTk2QTM5NTIxQTRG
NEZCNC9EUHpuZUZmODhCODUyWnBpdEtwaTVoV2VkdmcuY2VyMEoGA1UdIAEB/wRA
MD4wPAYIKwYBBQUHDgIwMDAuBggrBgEFBQcCARYiaHR0cHM6Ly93d3cuYXBuaWMu
bmV0L1JQS0kvQ1BTLnBkZjCCASgGCCsGAQUFBwELBIIBGjCCARYwXwYIKwYBBQUH
MAWGU3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
OTcxQ0IvMDEwRUIyODg4MDg5MTFFQjhCNTA1RjIwQzRGOUFFMDIvMH4GCCsGAQUF
BzAKhnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5
MTk3MUNCLzAxMEVCMjg4ODA4OTExRUI4QjUwNUYyMEM0RjlBRTAyL01ac3hSUEJx
anlzdzFCSUhILUVoQjNULWh1Yy5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJk
cC5hcG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAfBggrBgEFBQcBBwEB/wQQMA4w
DAQCAAEwBgMEArnPCDANBgkqhkiG9w0BAQsFAAOCAQEAjh50on16ZijREgGPLtwg
gYK1Baf8USZd+mKduhAefMgOvkxcc3Mr0P9a0FtXBrWXaAWUluo3MokDYPn6Yw2o
8KdcIIxdzcl5ts+xQpLY+bQRVvFnBn2xezRNJCPenByWAHr++iezFJGN8mSWUlRV
kp1lI+e3uLJL9jI4jDrOBL/4z6n+5hHikzIWA8J2CvcnQyvATwXE6pqqHWwacMUM
fXfaxfpL2thn0qHrdeYTAm7//XC3lY4gWF+D9ObzcNPZPc1s8CbPrC76MDL1p+cy
Exh1HSo5vdq+8unEyf5CTOwC5MSgpx7vPB0p+DjzfIIW/2xG3QVZo24adlr62w0v
TA==
-----END CERTIFICATE-----

Generated at Sun Sep 26 12:49:53 2021 by LibreSSL & rpki-client.