RPKI Certificate
Location:                 rsync/rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/NNo5MrfdE8YNon6wm7CcYzUvSaQ.cer (download)

Subject key identifier:   34:DA:39:32:B7:DD:13:C6:0D:A2:7E:B0:9B:B0:9C:63:35:2F:49:A4
Authority key identifier: 0C:FC:E7:78:57:FC:F0:1F:39:D9:9A:62:B4:AA:62:E6:15:9E:76:F8
Manifest:                 rpki.apnic.net/member_repository/A91146F0/0A795D72023111EB81A9C73FC4F9AE02/NNo5MrfdE8YNon6wm7CcYzUvSaQ.mft
CA Repository:            rpki.apnic.net/member_repository/A91146F0/0A795D72023111EB81A9C73FC4F9AE02/
Notification URL:         https://rrdp.apnic.net/notification.xml
Subordinate resources:
    1: IP: 85.217.216.0/22

--
$ openssl x509 -text -inform DER -in rsync/rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/NNo5MrfdE8YNon6wm7CcYzUvSaQ.cer
Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 13040 (0x32f0)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A90DC5BE/serialNumber=0CFCE77857FCF01F39D99A62B4AA62E6159E76F8
        Validity
            Not Before: Mar 18 11:30:09 2021 GMT
            Not After : May 28 00:00:00 2022 GMT
        Subject: CN=A91146F0/serialNumber=34DA3932B7DD13C60DA27EB09BB09C63352F49A4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:86:de:3a:82:a1:6a:4c:ad:1c:40:00:5e:15:
                    0f:d3:92:f7:00:87:7b:d4:a9:98:0d:21:ab:0d:bd:
                    0e:15:e1:ce:5f:87:92:dd:ff:ef:cd:b7:bb:cf:3e:
                    2d:3b:b2:07:09:6f:56:1e:c9:44:c6:79:53:89:e4:
                    da:81:53:df:d3:85:8d:7b:20:21:a1:c9:c4:b3:ae:
                    3e:f3:63:3c:09:90:89:5c:ba:73:03:09:c5:ab:88:
                    6f:1c:57:16:51:c4:79:68:31:fd:f8:d6:a2:4b:0f:
                    6c:e9:74:18:55:a0:cd:ac:5f:e5:d4:e5:5e:48:71:
                    2e:1e:08:40:a4:81:ff:64:64:78:de:06:9d:6c:68:
                    76:b6:8f:4a:05:9a:57:bf:73:5d:09:56:b3:57:fe:
                    67:a5:df:75:ab:a3:ad:1d:99:d3:0f:e1:dc:d3:29:
                    98:40:00:ea:22:5e:40:79:d5:81:51:84:8e:d5:07:
                    44:5f:13:49:98:aa:28:8d:e9:79:fd:19:a2:91:9c:
                    30:0e:2e:d2:3f:f5:1f:26:06:54:ac:60:a4:28:3e:
                    a1:18:02:e1:aa:5c:45:54:ad:b2:31:b0:12:f3:ed:
                    52:59:62:14:36:fa:eb:2d:5a:48:14:9a:13:96:4d:
                    df:9c:98:0c:63:9c:9a:8a:28:c2:31:fc:d6:bf:26:
                    7e:0d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier: 
                34:DA:39:32:B7:DD:13:C6:0D:A2:7E:B0:9B:B0:9C:63:35:2F:49:A4
            X509v3 Authority Key Identifier: 
                keyid:0C:FC:E7:78:57:FC:F0:1F:39:D9:9A:62:B4:AA:62:E6:15:9E:76:F8

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points: 

                Full Name:
                  URI:rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.crl

            Authority Information Access: 
                CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DPzneFf88B852ZpitKpi5hWedvg.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access: 
                CA Repository - URI:rsync://rpki.apnic.net/member_repository/A91146F0/0A795D72023111EB81A9C73FC4F9AE02/
                RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A91146F0/0A795D72023111EB81A9C73FC4F9AE02/NNo5MrfdE8YNon6wm7CcYzUvSaQ.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  85.217.216.0/22

    Signature Algorithm: sha256WithRSAEncryption
         59:cc:ba:19:f6:73:31:a2:c8:d1:b6:87:c7:80:81:8e:2e:39:
         70:66:f8:f8:2e:fb:f0:1f:c3:f4:72:df:f2:17:8c:9b:23:bb:
         7f:bb:de:2d:a8:66:bf:a1:9b:22:29:15:14:59:b8:28:18:cf:
         a0:c5:51:ff:58:09:eb:c4:65:53:60:22:db:1e:26:4a:ae:e0:
         96:e8:97:6c:08:94:23:fc:d9:b4:3c:16:9a:f5:8f:93:67:93:
         e5:70:ea:cd:23:3f:c2:11:92:2b:a5:70:32:a4:80:5c:4c:f4:
         8c:4e:54:f8:a3:7f:75:27:3d:67:f6:ca:28:38:a5:97:dd:a4:
         99:7e:25:67:49:76:c6:d9:1d:1e:09:78:95:af:d0:cc:4d:1f:
         d5:68:23:da:a5:4e:d0:88:e2:41:13:dc:93:bc:51:ca:f0:c7:
         a4:0b:8d:ff:2e:33:c4:4e:f1:7f:ea:b4:2c:a2:87:93:da:96:
         9c:99:ec:57:0a:f6:7f:3f:d9:de:c3:43:0b:9c:21:b0:da:4f:
         09:6a:64:58:2e:dd:e4:2f:25:1d:58:e2:a8:0e:1e:12:00:bc:
         7b:eb:8a:47:34:1f:37:d9:fc:23:68:15:47:a9:f0:a3:a5:f1:
         6b:66:b4:7b:da:2e:1a:91:dc:ea:d6:2a:ce:6d:2c:97:dd:89:
         78:d3:61:16
-----BEGIN CERTIFICATE-----
MIIF/TCCBOWgAwIBAgICMvAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkw
REM1QkUxMTAvBgNVBAUTKDBDRkNFNzc4NTdGQ0YwMUYzOUQ5OUE2MkI0QUE2MkU2
MTU5RTc2RjgwHhcNMjEwMzE4MTEzMDA5WhcNMjIwNTI4MDAwMDAwWjBGMREwDwYD
VQQDEwhBOTExNDZGMDExMC8GA1UEBRMoMzREQTM5MzJCN0REMTNDNjBEQTI3RUIw
OUJCMDlDNjMzNTJGNDlBNDCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEB
AL+G3jqCoWpMrRxAAF4VD9OS9wCHe9SpmA0hqw29DhXhzl+Hkt3/7823u88+LTuy
BwlvVh7JRMZ5U4nk2oFT39OFjXsgIaHJxLOuPvNjPAmQiVy6cwMJxauIbxxXFlHE
eWgx/fjWoksPbOl0GFWgzaxf5dTlXkhxLh4IQKSB/2RkeN4GnWxodraPSgWaV79z
XQlWs1f+Z6XfdaujrR2Z0w/h3NMpmEAA6iJeQHnVgVGEjtUHRF8TSZiqKI3pef0Z
opGcMA4u0j/1HyYGVKxgpCg+oRgC4apcRVStsjGwEvPtUlliFDb66y1aSBSaE5ZN
35yYDGOcmooowjH81r8mfg0CAwEAAaOCAvMwggLvMB0GA1UdDgQWBBQ02jkyt90T
xg2ifrCbsJxjNS9JpDAfBgNVHSMEGDAWgBQM/Od4V/zwHznZmmK0qmLmFZ52+DAO
BgNVHQ8BAf8EBAMCAQYwDwYDVR0TAQH/BAUwAwEB/zBzBgNVHR8EbDBqMGigZqBk
hmJyc3luYzovL3Jwa2kuYXBuaWMubmV0L3JlcG9zaXRvcnkvQjMyMkE1RjQxRDY2
MTFFMkEzRjI3RjdDNzJGRDFGRjIvRFB6bmVGZjg4Qjg1MlpwaXRLcGk1aFdlZHZn
LmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5h
cG5pYy5uZXQvcmVwb3NpdG9yeS85ODA2NTJFMEI3N0UxMUU3QTk2QTM5NTIxQTRG
NEZCNC9EUHpuZUZmODhCODUyWnBpdEtwaTVoV2VkdmcuY2VyMEoGA1UdIAEB/wRA
MD4wPAYIKwYBBQUHDgIwMDAuBggrBgEFBQcCARYiaHR0cHM6Ly93d3cuYXBuaWMu
bmV0L1JQS0kvQ1BTLnBkZjCCASgGCCsGAQUFBwELBIIBGjCCARYwXwYIKwYBBQUH
MAWGU3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
MTQ2RjAvMEE3OTVENzIwMjMxMTFFQjgxQTlDNzNGQzRGOUFFMDIvMH4GCCsGAQUF
BzAKhnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5
MTE0NkYwLzBBNzk1RDcyMDIzMTExRUI4MUE5QzczRkM0RjlBRTAyL05ObzVNcmZk
RThZTm9uNndtN0NjWXpVdlNhUS5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJk
cC5hcG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAfBggrBgEFBQcBBwEB/wQQMA4w
DAQCAAEwBgMEAlXZ2DANBgkqhkiG9w0BAQsFAAOCAQEAWcy6GfZzMaLI0baHx4CB
ji45cGb4+C778B/D9HLf8heMmyO7f7veLahmv6GbIikVFFm4KBjPoMVR/1gJ68Rl
U2Ai2x4mSq7gluiXbAiUI/zZtDwWmvWPk2eT5XDqzSM/whGSK6VwMqSAXEz0jE5U
+KN/dSc9Z/bKKDill92kmX4lZ0l2xtkdHgl4la/QzE0f1Wgj2qVO0IjiQRPck7xR
yvDHpAuN/y4zxE7xf+q0LKKHk9qWnJnsVwr2fz/Z3sNDC5whsNpPCWpkWC7d5C8l
HVjiqA4eEgC8e+uKRzQfN9n8I2gVR6nwo6Xxa2a0e9ouGpHc6tYqzm0sl92JeNNh
Fg==
-----END CERTIFICATE-----

Generated at Sun Sep 26 12:49:53 2021 by LibreSSL & rpki-client.