RPKI Certificate
Location:                 ./rsync/rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/ey-Vzm_cJTG7yj5TwdbtG6KqNgQ.cer (download)

Subject key identifier:   7B:2F:95:CE:6F:DC:25:31:BB:CA:3E:53:C1:D6:ED:1B:A2:AA:36:04
Authority key identifier: 0C:FC:E7:78:57:FC:F0:1F:39:D9:9A:62:B4:AA:62:E6:15:9E:76:F8
Manifest:                 rpki.apnic.net/member_repository/A915E18D/70015C422AE211EBBBFC4F0AC4F9AE02/ey-Vzm_cJTG7yj5TwdbtG6KqNgQ.mft
CA Repository:            rpki.apnic.net/member_repository/A915E18D/70015C422AE211EBBBFC4F0AC4F9AE02/
Notification URL:         https://rrdp.apnic.net/notification.xml
Subject Public Key Info:  
Subordinate resources:
    until: 2022-12-30T00:00:00Z
    Resources:
    1: IP: 89.147.120.0/22
    2: IP: 176.116.127.0/24

--
$ openssl x509 -text -inform DER -in ./rsync/rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/ey-Vzm_cJTG7yj5TwdbtG6KqNgQ.cer
Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 14121 (0x3729)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A90DC5BE/serialNumber=0CFCE77857FCF01F39D99A62B4AA62E6159E76F8
        Validity
            Not Before: Nov 14 12:52:42 2021 GMT
            Not After : Dec 30 00:00:00 2022 GMT
        Subject: CN=A915E18D/serialNumber=7B2F95CE6FDC2531BBCA3E53C1D6ED1BA2AA3604
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d2:00:43:4c:c4:2d:4e:c5:64:9e:d7:f1:91:f6:
                    07:14:2f:11:39:93:c3:64:73:7f:74:18:75:87:bb:
                    1b:60:4f:e7:4c:80:bb:76:9a:1a:28:a4:0f:5b:55:
                    1c:28:dc:9f:90:2e:d2:16:e2:84:b5:ec:db:d3:dd:
                    bf:6d:0d:82:01:d0:e5:95:75:bf:ba:74:24:6a:91:
                    09:bb:ce:29:b8:a3:10:76:14:dc:ed:63:36:73:11:
                    96:dd:d1:cb:b7:7c:89:1f:b0:bc:db:99:b4:68:37:
                    15:8b:c9:f6:c1:1a:42:8a:23:f6:38:e2:f3:f0:82:
                    3a:ac:93:e6:50:88:21:39:ad:f1:17:a9:ae:0a:cd:
                    d7:22:b8:d9:07:06:9c:5e:9e:8f:e2:ae:84:9d:51:
                    b3:89:3a:61:f8:ba:1a:3a:33:9a:dc:db:45:24:46:
                    e8:bb:8f:ce:8a:77:ab:8b:b8:c0:85:33:5b:e5:be:
                    8b:8f:cc:70:ca:b6:0c:e0:86:51:54:72:d4:51:f8:
                    60:f2:5c:78:76:78:d1:ea:c1:23:e3:4b:c4:4b:4b:
                    b0:12:56:cd:61:59:94:b8:aa:9c:78:2b:8d:b7:b4:
                    7b:e5:f2:92:4c:3c:c4:a3:d0:da:91:bf:f7:25:43:
                    7a:fc:c7:12:75:e6:96:99:47:f3:03:4f:da:ca:89:
                    40:c1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier: 
                7B:2F:95:CE:6F:DC:25:31:BB:CA:3E:53:C1:D6:ED:1B:A2:AA:36:04
            X509v3 Authority Key Identifier: 
                keyid:0C:FC:E7:78:57:FC:F0:1F:39:D9:9A:62:B4:AA:62:E6:15:9E:76:F8

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points: 

                Full Name:
                  URI:rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.crl

            Authority Information Access: 
                CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DPzneFf88B852ZpitKpi5hWedvg.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access: 
                CA Repository - URI:rsync://rpki.apnic.net/member_repository/A915E18D/70015C422AE211EBBBFC4F0AC4F9AE02/
                RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A915E18D/70015C422AE211EBBBFC4F0AC4F9AE02/ey-Vzm_cJTG7yj5TwdbtG6KqNgQ.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  89.147.120.0/22
                  176.116.127.0/24

    Signature Algorithm: sha256WithRSAEncryption
         a6:dd:26:71:4c:2a:b8:d7:e7:3a:ea:a5:1d:7c:51:29:e5:f3:
         39:c9:77:d4:21:24:39:82:31:c9:6e:d4:8f:1e:ce:ef:10:c4:
         fb:3d:73:19:07:ba:1b:d8:bd:4f:21:ce:97:31:af:94:9e:19:
         5d:2b:07:e8:5f:c2:80:e5:c6:d0:a1:48:36:4b:17:7f:8a:31:
         0b:b2:a7:d9:65:d8:88:5f:21:e2:b2:d9:d4:41:37:f2:a8:df:
         49:12:59:11:a4:cb:88:c9:34:9d:fe:95:7e:45:a1:60:cf:9e:
         ae:3e:7d:ae:e0:5b:4e:b7:0f:ac:d4:e8:c5:7c:60:39:7b:2d:
         23:73:d4:c8:92:48:23:e6:2d:7f:fe:22:e9:d7:24:03:d2:e5:
         95:3b:83:25:35:6b:82:72:12:22:a3:d2:04:bf:8b:f9:9b:11:
         00:e7:d5:d6:00:30:58:59:66:ef:af:82:9f:d3:21:e0:62:e2:
         ca:6b:88:14:ea:14:6e:fd:1e:ea:56:3b:86:4c:8f:12:dd:ef:
         0a:a6:34:e0:36:ba:5b:c9:86:8c:aa:ab:93:3c:ab:94:e5:79:
         2e:d1:a4:03:a6:4c:64:20:98:32:d8:8b:c9:d6:22:1f:46:93:
         92:94:bd:b1:26:d6:f2:5c:72:c4:5a:fd:6e:07:ad:58:05:c7:
         36:6a:6d:b4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Generated at Sun Nov 14 14:39:17 2021 by LibreSSL & rpki-client.