RPKI Certificate
Location:                 rsync/rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/_zNBly3YofaHHt6Gmjod2SUorrY.cer (download)

Subject key identifier:   FF:33:41:97:2D:D8:A1:F6:87:1E:DE:86:9A:3A:1D:D9:25:28:AE:B6
Authority key identifier: 0C:FC:E7:78:57:FC:F0:1F:39:D9:9A:62:B4:AA:62:E6:15:9E:76:F8
Manifest:                 rpki.apnic.net/member_repository/A917E678/BEB333FA225111EAB2CB8469C4F9AE02/_zNBly3YofaHHt6Gmjod2SUorrY.mft
CA Repository:            rpki.apnic.net/member_repository/A917E678/BEB333FA225111EAB2CB8469C4F9AE02/
Notification URL:         https://rrdp.apnic.net/notification.xml
Subordinate resources:
    1: IP: 87.119.0.0/18
    2: IP: 94.74.64.0/18

--
$ openssl x509 -text -inform DER -in rsync/rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/_zNBly3YofaHHt6Gmjod2SUorrY.cer
Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 13742 (0x35ae)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A90DC5BE/serialNumber=0CFCE77857FCF01F39D99A62B4AA62E6159E76F8
        Validity
            Not Before: Aug 23 02:40:26 2021 GMT
            Not After : Sep 30 00:00:00 2022 GMT
        Subject: CN=A917E678/serialNumber=FF3341972DD8A1F6871EDE869A3A1DD92528AEB6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:db:8c:19:c1:b3:f4:d2:c2:a3:be:76:a9:ec:f4:
                    28:81:bf:ea:bf:f1:74:92:44:3d:79:5a:ee:83:48:
                    03:c9:e6:9c:6d:f1:47:03:6d:ef:1c:56:c6:53:e8:
                    5f:fd:b5:de:ce:9b:1a:00:f5:3f:f1:16:87:45:89:
                    c0:31:ee:78:43:49:62:6f:93:77:24:c4:c0:8d:f4:
                    4d:50:cb:d4:ee:b7:d6:b7:7c:e3:4c:39:f3:a6:71:
                    5d:76:25:e9:36:29:85:a0:b7:05:8a:f6:2f:f5:14:
                    44:ff:80:2e:16:6b:ee:17:89:52:63:ee:2c:85:20:
                    c3:76:da:db:7c:47:b3:e1:00:9e:d3:b2:52:de:39:
                    e3:50:c4:87:9c:03:10:5a:73:2e:c4:74:a4:7b:ff:
                    af:cc:c3:e1:7d:fc:50:a2:7b:7d:95:65:7e:57:5b:
                    12:1f:e2:2a:78:50:fd:a3:92:1b:8f:de:e0:6c:3d:
                    f3:47:96:81:b6:68:79:8f:07:1d:49:49:d5:71:4d:
                    7d:5c:a0:0b:3b:56:72:c3:30:26:76:b2:30:5a:f6:
                    bc:41:09:fc:c2:6c:00:eb:30:8e:ba:9c:a7:2d:01:
                    4e:8b:25:58:58:47:81:57:6e:42:57:b6:c2:d6:39:
                    c5:ff:18:65:4a:c1:4d:dc:33:c8:36:c3:db:5b:cb:
                    c1:23
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier: 
                FF:33:41:97:2D:D8:A1:F6:87:1E:DE:86:9A:3A:1D:D9:25:28:AE:B6
            X509v3 Authority Key Identifier: 
                keyid:0C:FC:E7:78:57:FC:F0:1F:39:D9:9A:62:B4:AA:62:E6:15:9E:76:F8

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points: 

                Full Name:
                  URI:rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.crl

            Authority Information Access: 
                CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DPzneFf88B852ZpitKpi5hWedvg.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access: 
                CA Repository - URI:rsync://rpki.apnic.net/member_repository/A917E678/BEB333FA225111EAB2CB8469C4F9AE02/
                RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A917E678/BEB333FA225111EAB2CB8469C4F9AE02/_zNBly3YofaHHt6Gmjod2SUorrY.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  87.119.0.0/18
                  94.74.64.0/18

    Signature Algorithm: sha256WithRSAEncryption
         22:93:48:68:f7:1e:2a:3f:c0:ea:4b:92:87:a1:9d:62:b7:9d:
         fe:23:d4:b9:90:8b:2f:a0:b4:aa:c2:74:ff:22:3f:01:14:ff:
         be:a6:1d:e5:9c:07:30:08:66:9f:d0:80:5c:ac:1f:aa:5c:b7:
         3f:ef:04:ea:8b:0b:14:e3:41:04:e7:a7:7f:51:06:74:c7:09:
         33:de:4f:cf:2f:0b:06:27:6a:25:52:80:a7:96:49:f6:3d:3a:
         fa:08:7a:da:48:c1:05:17:3f:8a:bb:b2:72:92:01:73:e7:48:
         db:07:0b:e1:42:b9:9c:04:04:05:61:32:77:ea:0f:6c:0b:bf:
         91:f2:19:fb:f6:21:12:17:96:d7:3b:cc:cc:1d:db:68:07:a4:
         af:cd:ef:9d:8c:d3:1b:cb:21:e7:e5:36:b0:8a:c9:e5:f7:e3:
         77:49:24:19:0f:cc:10:60:3d:0a:cf:1d:a9:15:14:4a:8d:53:
         09:ee:88:89:19:04:9a:3e:2b:f3:ff:a0:e8:23:50:31:a3:15:
         2f:6b:a1:71:c7:60:ce:3c:ba:a8:99:c3:ea:7c:6f:70:a9:6f:
         1e:f2:3c:f7:11:f9:3d:ae:1a:2b:aa:79:ba:71:8f:af:0e:dd:
         f9:4b:a8:a4:56:6b:fe:40:8d:c1:5a:ad:21:5d:ba:17:80:09:
         87:3c:26:d1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Generated at Sun Sep 26 12:49:54 2021 by LibreSSL & rpki-client.