RPKI Certificate
Location:                 rsync/rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/Qk4KOEPz-h9Etq8u8-4RgVxLUgk.cer (download)

Subject key identifier:   42:4E:0A:38:43:F3:FA:1F:44:B6:AF:2E:F3:EE:11:81:5C:4B:52:09
Authority key identifier: 0C:FC:E7:78:57:FC:F0:1F:39:D9:9A:62:B4:AA:62:E6:15:9E:76:F8
Manifest:                 rpki.apnic.net/member_repository/A912C8AF/EE0AEECA3E8111EB9ABD920FC4F9AE02/Qk4KOEPz-h9Etq8u8-4RgVxLUgk.mft
CA Repository:            rpki.apnic.net/member_repository/A912C8AF/EE0AEECA3E8111EB9ABD920FC4F9AE02/
Notification URL:         https://rrdp.apnic.net/notification.xml
Subordinate resources:
    1: IP: 194.26.72.0/22

--
$ openssl x509 -text -inform DER -in rsync/rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/Qk4KOEPz-h9Etq8u8-4RgVxLUgk.cer
Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 13062 (0x3306)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A90DC5BE/serialNumber=0CFCE77857FCF01F39D99A62B4AA62E6159E76F8
        Validity
            Not Before: Mar 23 09:15:54 2021 GMT
            Not After : Jul  1 00:00:00 2022 GMT
        Subject: CN=A912C8AF/serialNumber=424E0A3843F3FA1F44B6AF2EF3EE11815C4B5209
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:14:9c:db:eb:3d:6d:7b:43:3b:79:45:b9:bc:
                    ae:eb:e9:cf:43:eb:cd:bc:ec:46:98:30:8b:ab:fe:
                    d1:41:0c:1a:0e:90:d5:08:10:37:e7:25:1b:7a:22:
                    fd:ba:26:20:3c:70:5f:42:3c:91:72:7e:d8:8c:51:
                    30:b8:55:27:93:37:e3:7b:a7:db:6e:e3:9e:f5:b5:
                    eb:01:de:d6:4b:da:34:36:97:6a:1b:eb:dd:98:eb:
                    fd:41:38:0b:3c:10:53:7e:02:db:cc:13:10:9c:38:
                    49:54:1c:8d:80:67:c6:a3:04:fc:51:cc:4d:30:6d:
                    15:87:18:1f:96:0a:fc:b0:32:2b:a2:80:ab:f9:fc:
                    4d:f9:b4:1b:51:8d:91:86:26:4f:ce:ae:de:9c:eb:
                    14:07:dc:02:3c:ef:52:f7:05:a3:0a:6d:3d:ff:09:
                    3a:4d:17:dc:3a:bd:00:1c:8a:74:62:a5:19:a4:1a:
                    7d:10:e9:a7:a6:0d:a1:10:9b:00:16:0b:b4:64:d4:
                    4a:17:27:47:41:30:dc:37:9a:ec:89:da:f9:e2:4f:
                    af:f0:1d:6e:ec:f9:52:5d:82:a4:c2:c2:6b:95:58:
                    c4:55:9f:7a:b7:a7:a9:72:70:3b:5e:bd:2b:16:a7:
                    7a:04:83:02:fe:06:a3:eb:30:46:ea:58:e0:f0:ad:
                    64:13
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier: 
                42:4E:0A:38:43:F3:FA:1F:44:B6:AF:2E:F3:EE:11:81:5C:4B:52:09
            X509v3 Authority Key Identifier: 
                keyid:0C:FC:E7:78:57:FC:F0:1F:39:D9:9A:62:B4:AA:62:E6:15:9E:76:F8

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points: 

                Full Name:
                  URI:rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.crl

            Authority Information Access: 
                CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DPzneFf88B852ZpitKpi5hWedvg.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access: 
                CA Repository - URI:rsync://rpki.apnic.net/member_repository/A912C8AF/EE0AEECA3E8111EB9ABD920FC4F9AE02/
                RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A912C8AF/EE0AEECA3E8111EB9ABD920FC4F9AE02/Qk4KOEPz-h9Etq8u8-4RgVxLUgk.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  194.26.72.0/22

    Signature Algorithm: sha256WithRSAEncryption
         66:35:d4:f8:3d:c5:2e:53:fc:26:5e:e4:6e:00:40:70:41:13:
         ec:68:68:29:46:22:20:fd:f5:b3:6f:95:4d:c3:52:da:5f:be:
         67:5e:53:6b:49:c0:c1:86:a0:4f:20:14:f1:f2:2b:c6:df:14:
         21:05:36:df:c8:09:46:b0:2a:f4:2e:ef:54:72:88:0e:f2:39:
         0f:30:6b:48:30:59:55:35:63:f5:fa:4e:40:e2:bb:63:15:20:
         a1:1c:78:b1:d7:a4:8d:43:f6:ae:f7:8f:e4:41:26:f9:f1:06:
         70:60:50:36:fc:b2:d0:dd:9f:f7:42:6c:d7:f0:ca:62:5d:78:
         e6:5c:d6:15:a5:0d:9a:3f:81:5a:2d:bd:2b:f6:72:22:9c:67:
         6e:47:42:e6:c7:fa:be:89:9e:b6:e0:22:83:89:ac:e0:46:45:
         d5:c0:21:27:60:c7:a0:51:29:bf:a5:e3:c2:b9:0c:f1:a5:e9:
         7c:11:4c:38:3c:8a:0b:b0:31:9f:f9:26:c2:c9:a9:a8:be:5d:
         ae:b9:9b:43:9c:0b:fe:27:64:78:c6:b9:b2:d0:73:ea:17:3f:
         6c:b6:12:73:b0:7e:44:0e:a3:6a:e0:75:63:f0:d8:e6:b7:58:
         c6:9d:cd:78:54:16:c7:d4:f8:81:6c:1c:43:76:e6:a4:b8:a3:
         4b:1d:a6:45
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Generated at Sun Sep 26 12:49:53 2021 by LibreSSL & rpki-client.