RPKI Certificate
Location:                 ./rsync/rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/pOlXbOhgyP9flyr1k7QFTngj5kI.cer (download)

Subject key identifier:   A4:E9:57:6C:E8:60:C8:FF:5F:97:2A:F5:93:B4:05:4E:78:23:E6:42
Authority key identifier: 0C:FC:E7:78:57:FC:F0:1F:39:D9:9A:62:B4:AA:62:E6:15:9E:76:F8
Manifest:                 rpki.apnic.net/member_repository/A9117E4D/A64FBCE0C05811E39D8A06645911EA32/pOlXbOhgyP9flyr1k7QFTngj5kI.mft
CA Repository:            rpki.apnic.net/member_repository/A9117E4D/A64FBCE0C05811E39D8A06645911EA32/
Notification URL:         https://rrdp.apnic.net/notification.xml
Subject Public Key Info:  
Subordinate resources:
    until: 2022-12-30T00:00:00Z
    Resources:
    1: IP: 193.82.224.0/19
    2: IP: 193.114.96.0 -- 193.114.159.255
    3: IP: 193.115.64.0/18
    4: IP: 193.116.64.0/18
    5: IP: 193.116.192.0/18
    6: IP: 193.119.32.0 -- 193.119.127.255
    7: IP: 194.193.32.0/19
    8: IP: 194.193.128.0 -- 194.193.223.255
    9: IP: 194.223.0.0 -- 194.223.95.255
    10: IP: 194.223.160.0/19
    11: IP: 2001:7fa:9:: -- 2001:7fa:e:ffff:ffff:ffff:ffff:ffff

--
$ openssl x509 -text -inform DER -in ./rsync/rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/pOlXbOhgyP9flyr1k7QFTngj5kI.cer
Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 14093 (0x370d)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A90DC5BE/serialNumber=0CFCE77857FCF01F39D99A62B4AA62E6159E76F8
        Validity
            Not Before: Nov  9 12:32:09 2021 GMT
            Not After : Dec 30 00:00:00 2022 GMT
        Subject: CN=A9117E4D/serialNumber=A4E9576CE860C8FF5F972AF593B4054E7823E642
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:19:df:23:45:22:85:73:c7:91:19:ab:d9:18:
                    9a:db:99:d7:55:bd:3a:18:de:ef:b0:39:00:36:e7:
                    17:97:68:ce:1d:0c:b2:c4:55:f1:5e:e7:1b:58:86:
                    c1:1f:6d:73:26:8f:66:f2:75:54:76:58:54:41:42:
                    66:50:21:d2:32:71:de:54:ca:26:c1:12:98:19:f8:
                    09:22:89:27:bc:57:78:c5:5f:c4:85:e9:d5:a3:b5:
                    2b:23:70:f7:00:78:69:46:51:fa:e2:ae:9d:71:ce:
                    e4:a2:64:e0:be:96:e8:e6:71:1f:8a:98:4f:52:f9:
                    ef:12:78:c8:1f:9c:33:52:69:4e:94:c7:73:ca:1e:
                    d7:30:f2:68:b5:2a:06:6b:4b:fd:50:cf:1b:41:f0:
                    e1:0f:23:9b:c3:a9:92:4c:1f:92:98:f3:fb:27:60:
                    36:f8:68:ea:d4:39:37:f0:67:04:01:a0:dd:d4:19:
                    a7:85:76:f7:6b:c7:b6:41:18:2d:d6:27:a1:73:14:
                    d4:fe:93:65:25:07:b3:e3:ca:9b:cc:ad:1c:67:e6:
                    bc:ea:8e:5f:6e:04:98:39:44:40:65:2e:55:55:f1:
                    50:45:6b:02:84:c4:a4:13:6d:8b:05:9e:7f:49:89:
                    6b:2c:94:3a:2a:45:6b:56:46:29:26:0a:2e:78:56:
                    56:8b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier: 
                A4:E9:57:6C:E8:60:C8:FF:5F:97:2A:F5:93:B4:05:4E:78:23:E6:42
            X509v3 Authority Key Identifier: 
                keyid:0C:FC:E7:78:57:FC:F0:1F:39:D9:9A:62:B4:AA:62:E6:15:9E:76:F8

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points: 

                Full Name:
                  URI:rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.crl

            Authority Information Access: 
                CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DPzneFf88B852ZpitKpi5hWedvg.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access: 
                CA Repository - URI:rsync://rpki.apnic.net/member_repository/A9117E4D/A64FBCE0C05811E39D8A06645911EA32/
                RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A9117E4D/A64FBCE0C05811E39D8A06645911EA32/pOlXbOhgyP9flyr1k7QFTngj5kI.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  193.82.224.0/19
                  193.114.96.0-193.114.159.255
                  193.115.64.0/18
                  193.116.64.0/18
                  193.116.192.0/18
                  193.119.32.0-193.119.127.255
                  194.193.32.0/19
                  194.193.128.0-194.193.223.255
                  194.223.0.0-194.223.95.255
                  194.223.160.0/19
                IPv6:
                  2001:7fa:9::-2001:7fa:e:ffff:ffff:ffff:ffff:ffff

    Signature Algorithm: sha256WithRSAEncryption
         7c:ba:a0:43:f3:e7:0b:68:16:f0:f8:5d:9d:d3:1c:7b:d7:f3:
         de:9f:5b:81:d8:f9:bb:2e:45:53:fb:07:cc:b1:24:d4:4f:8e:
         98:fd:d4:f8:99:f0:c5:f7:30:ac:bb:5b:6e:ba:7e:ea:14:76:
         87:4f:6a:bf:74:aa:84:b0:dc:36:73:ea:56:67:bc:3e:29:6d:
         03:53:76:30:c8:22:35:49:1c:14:66:42:69:7d:7e:c3:e0:ab:
         9e:66:d1:cc:2c:91:84:28:94:d2:4b:0c:82:ec:d5:d4:22:c6:
         2a:be:c5:b2:22:3a:da:94:5f:c2:f0:81:92:87:1f:93:47:24:
         ee:b7:0f:bf:ca:1d:b2:cf:14:ea:15:63:1f:59:3e:09:ac:ba:
         bb:a6:73:45:f0:4f:4e:ad:23:85:72:30:e5:63:39:c4:e0:fc:
         04:91:36:d8:bd:d8:97:21:41:9f:85:8a:83:f6:9d:e2:60:06:
         68:a5:82:b3:d1:65:ca:8a:13:e3:ce:a0:75:c3:d7:ad:26:e0:
         c7:9a:32:21:a2:c5:3a:99:f8:93:ee:e0:74:93:86:d1:1b:d7:
         1e:fc:fe:f8:3f:20:4b:31:ed:71:54:3d:2a:b7:1f:ec:2c:1c:
         92:87:13:ce:13:a1:75:7f:58:d2:92:2b:ba:7e:80:66:b5:f7:
         04:d1:4d:6b
-----BEGIN CERTIFICATE-----
MIIGcDCCBVigAwIBAgICNw0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkw
REM1QkUxMTAvBgNVBAUTKDBDRkNFNzc4NTdGQ0YwMUYzOUQ5OUE2MkI0QUE2MkU2
MTU5RTc2RjgwHhcNMjExMTA5MTIzMjA5WhcNMjIxMjMwMDAwMDAwWjBGMREwDwYD
VQQDEwhBOTExN0U0RDExMC8GA1UEBRMoQTRFOTU3NkNFODYwQzhGRjVGOTcyQUY1
OTNCNDA1NEU3ODIzRTY0MjCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEB
AKQZ3yNFIoVzx5EZq9kYmtuZ11W9Ohje77A5ADbnF5dozh0MssRV8V7nG1iGwR9t
cyaPZvJ1VHZYVEFCZlAh0jJx3lTKJsESmBn4CSKJJ7xXeMVfxIXp1aO1KyNw9wB4
aUZR+uKunXHO5KJk4L6W6OZxH4qYT1L57xJ4yB+cM1JpTpTHc8oe1zDyaLUqBmtL
/VDPG0Hw4Q8jm8Opkkwfkpjz+ydgNvho6tQ5N/BnBAGg3dQZp4V292vHtkEYLdYn
oXMU1P6TZSUHs+PKm8ytHGfmvOqOX24EmDlEQGUuVVXxUEVrAoTEpBNtiwWef0mJ
ayyUOipFa1ZGKSYKLnhWVosCAwEAAaOCA2YwggNiMB0GA1UdDgQWBBSk6Vds6GDI
/1+XKvWTtAVOeCPmQjAfBgNVHSMEGDAWgBQM/Od4V/zwHznZmmK0qmLmFZ52+DAO
BgNVHQ8BAf8EBAMCAQYwDwYDVR0TAQH/BAUwAwEB/zBzBgNVHR8EbDBqMGigZqBk
hmJyc3luYzovL3Jwa2kuYXBuaWMubmV0L3JlcG9zaXRvcnkvQjMyMkE1RjQxRDY2
MTFFMkEzRjI3RjdDNzJGRDFGRjIvRFB6bmVGZjg4Qjg1MlpwaXRLcGk1aFdlZHZn
LmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5h
cG5pYy5uZXQvcmVwb3NpdG9yeS85ODA2NTJFMEI3N0UxMUU3QTk2QTM5NTIxQTRG
NEZCNC9EUHpuZUZmODhCODUyWnBpdEtwaTVoV2VkdmcuY2VyMEoGA1UdIAEB/wRA
MD4wPAYIKwYBBQUHDgIwMDAuBggrBgEFBQcCARYiaHR0cHM6Ly93d3cuYXBuaWMu
bmV0L1JQS0kvQ1BTLnBkZjCCASgGCCsGAQUFBwELBIIBGjCCARYwXwYIKwYBBQUH
MAWGU3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
MTdFNEQvQTY0RkJDRTBDMDU4MTFFMzlEOEEwNjY0NTkxMUVBMzIvMH4GCCsGAQUF
BzAKhnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5
MTE3RTREL0E2NEZCQ0UwQzA1ODExRTM5RDhBMDY2NDU5MTFFQTMyL3BPbFhiT2hn
eVA5Zmx5cjFrN1FGVG5najVrSS5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJk
cC5hcG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDCBkQYIKwYBBQUHAQcBAf8EgYEw
fzBhBAIAATBbAwQFwVLgMAwDBAXBcmADBAXBcoADBAbBc0ADBAbBdEADBAbBdMAw
DAMEBcF3IAMEB8F3AAMEBcLBIDAMAwQHwsGAAwQFwsHAMAsDAwDC3wMEBcLfQAME
BcLfoDAaBAIAAjAUMBIDBwAgAQf6AAkDBwAgAQf6AA4wDQYJKoZIhvcNAQELBQAD
ggEBAHy6oEPz5wtoFvD4XZ3THHvX896fW4HY+bsuRVP7B8yxJNRPjpj91PiZ8MX3
MKy7W266fuoUdodPar90qoSw3DZz6lZnvD4pbQNTdjDIIjVJHBRmQml9fsPgq55m
0cwskYQolNJLDILs1dQixiq+xbIiOtqUX8LwgZKHH5NHJO63D7/KHbLPFOoVYx9Z
Pgmsurumc0XwT06tI4VyMOVjOcTg/ASRNti92JchQZ+FioP2neJgBmilgrPRZcqK
E+POoHXD160m4MeaMiGixTqZ+JPu4HSThtEb1x78/vg/IEsx7XFUPSq3H+wsHJKH
E84ToXV/WNKSK7p+gGa19wTRTWs=
-----END CERTIFICATE-----

Generated at Tue Nov 9 15:02:22 2021 by LibreSSL & rpki-client.