RPKI Certificate
Location:                 rsync/rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/kXkVGVyXGrRB_d7eb_PNNy51TLU.cer (download)

Subject key identifier:   91:79:15:19:5C:97:1A:B4:41:FD:DE:DE:6F:F3:CD:37:2E:75:4C:B5
Authority key identifier: 0C:FC:E7:78:57:FC:F0:1F:39:D9:9A:62:B4:AA:62:E6:15:9E:76:F8
Manifest:                 rpki.apnic.net/member_repository/A91795CA/63473756980611EBA87E2765C4F9AE02/kXkVGVyXGrRB_d7eb_PNNy51TLU.mft
CA Repository:            rpki.apnic.net/member_repository/A91795CA/63473756980611EBA87E2765C4F9AE02/
Notification URL:         https://rrdp.apnic.net/notification.xml
Subordinate resources:
    1: IP: 194.233.64.0/19

--
$ openssl x509 -text -inform DER -in rsync/rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/kXkVGVyXGrRB_d7eb_PNNy51TLU.cer
Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 13132 (0x334c)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A90DC5BE/serialNumber=0CFCE77857FCF01F39D99A62B4AA62E6159E76F8
        Validity
            Not Before: Apr  8 01:04:44 2021 GMT
            Not After : Jul  1 00:00:00 2022 GMT
        Subject: CN=A91795CA/serialNumber=917915195C971AB441FDDEDE6FF3CD372E754CB5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:de:56:6f:2b:48:0f:84:d8:d6:18:6e:bd:24:
                    36:1b:39:7d:08:5c:83:6e:35:b5:e8:aa:bd:b3:da:
                    ec:89:77:80:7c:86:99:65:6c:8d:2e:3f:0d:d6:35:
                    86:5a:6b:21:fb:bd:d7:d1:9b:19:c2:a4:4f:e8:20:
                    5e:10:ad:7d:b6:0b:91:bc:c7:d4:54:22:f7:58:5e:
                    61:9e:20:f4:78:dc:56:a6:3f:78:a0:32:08:d7:7c:
                    2b:d0:f4:5b:d8:ba:01:ce:de:b2:2f:a9:6b:a3:92:
                    8a:8c:7a:c1:af:c9:6e:bb:81:86:cb:13:06:f4:7e:
                    2f:b1:6d:06:37:0a:b2:8a:24:b4:41:f0:11:ff:d2:
                    16:da:96:8d:84:63:4e:ec:f8:f1:10:72:0c:81:09:
                    24:9b:b1:b2:24:6a:b5:64:a0:29:0b:e6:b6:53:23:
                    5e:01:ff:3a:0b:a7:4e:1c:69:75:3d:45:e5:ab:14:
                    59:df:1d:33:08:e7:da:97:ea:9c:f2:bb:ba:b2:9f:
                    b2:e0:7a:15:59:d6:9b:e2:de:7f:bf:43:49:06:3e:
                    6f:c5:d2:b5:1f:48:fa:10:da:99:90:f8:45:f3:e4:
                    9a:c7:ce:82:9b:e0:03:97:62:1d:ef:34:56:cf:c7:
                    09:26:1e:30:46:91:3c:1e:0a:c9:6c:ce:ef:a0:30:
                    55:cb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier: 
                91:79:15:19:5C:97:1A:B4:41:FD:DE:DE:6F:F3:CD:37:2E:75:4C:B5
            X509v3 Authority Key Identifier: 
                keyid:0C:FC:E7:78:57:FC:F0:1F:39:D9:9A:62:B4:AA:62:E6:15:9E:76:F8

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points: 

                Full Name:
                  URI:rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.crl

            Authority Information Access: 
                CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DPzneFf88B852ZpitKpi5hWedvg.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access: 
                CA Repository - URI:rsync://rpki.apnic.net/member_repository/A91795CA/63473756980611EBA87E2765C4F9AE02/
                RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A91795CA/63473756980611EBA87E2765C4F9AE02/kXkVGVyXGrRB_d7eb_PNNy51TLU.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  194.233.64.0/19

    Signature Algorithm: sha256WithRSAEncryption
         b7:7f:fa:54:19:ea:bc:f4:11:16:6e:1e:ef:17:8e:e0:e2:2c:
         cd:60:5d:1d:1b:91:17:ca:eb:37:42:85:52:9c:cf:fc:56:a7:
         46:c1:3b:7c:5b:85:aa:d1:81:0c:bf:87:6c:24:46:a7:ca:f3:
         c9:8d:46:fa:48:bc:bd:df:41:83:b3:d7:1d:1f:27:66:fe:c4:
         8b:86:b2:ac:31:85:9c:1d:bb:8d:f8:7d:4e:00:31:39:d4:c7:
         db:2b:67:d8:63:2c:af:66:ad:43:3d:9c:5c:9b:fa:f4:57:35:
         18:4a:b1:31:99:47:3b:d6:ba:f4:be:84:1a:c6:87:8c:99:93:
         ff:0c:e1:b0:9a:6c:c4:0c:a9:55:76:c1:12:23:f5:07:6f:75:
         7b:5c:16:68:90:bc:3d:79:f1:e0:41:32:17:08:0e:6f:c7:f7:
         51:c3:5a:67:ae:2a:66:2a:84:91:8f:55:7f:a7:42:33:be:15:
         76:0a:e2:3a:8d:6b:1e:24:ac:45:01:4d:04:6f:c9:5c:f2:87:
         aa:d9:b7:22:83:c1:9d:61:31:1d:ce:fc:51:66:d0:7b:04:81:
         fa:25:9b:3c:f3:97:dc:aa:47:6c:e3:86:88:a2:ad:d0:6d:53:
         76:7b:32:38:60:32:41:cf:83:a3:58:b7:3b:df:23:fb:76:41:
         48:e7:7d:bb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Generated at Sun Sep 26 12:49:55 2021 by LibreSSL & rpki-client.