RPKI Certificate
Location:                 rsync/rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/0pMTNEhYLWAcMBHLNQvPs7bzsyA.cer (download)

Subject key identifier:   D2:93:13:34:48:58:2D:60:1C:30:11:CB:35:0B:CF:B3:B6:F3:B3:20
Authority key identifier: 74:01:65:A8:0D:10:71:97:0A:BC:09:C0:2B:71:C1:AC:7C:1D:6E:0E
Manifest:                 rpki.apnic.net/member_repository/A911035A/34E9DC9A7C6611EA8089F351C4F9AE02/0pMTNEhYLWAcMBHLNQvPs7bzsyA.mft
CA Repository:            rpki.apnic.net/member_repository/A911035A/34E9DC9A7C6611EA8089F351C4F9AE02/
Notification URL:         https://rrdp.apnic.net/notification.xml
Subordinate resources:
    1: IP: 67.213.140.0/22

--
$ openssl x509 -text -inform DER -in rsync/rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/0pMTNEhYLWAcMBHLNQvPs7bzsyA.cer
Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 15011 (0x3aa3)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A90DC5BE/serialNumber=740165A80D1071970ABC09C02B71C1AC7C1D6E0E
        Validity
            Not Before: Jun  2 10:06:28 2021 GMT
            Not After : Jul 30 00:00:00 2022 GMT
        Subject: CN=A911035A/serialNumber=D293133448582D601C3011CB350BCFB3B6F3B320
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9c:bb:e6:8d:5d:7f:33:bc:74:e1:9e:32:46:48:
                    a2:53:4e:22:5b:fc:42:f6:87:a1:2b:f5:3e:72:5a:
                    02:be:98:a9:25:4c:b4:bc:72:cd:6a:e6:83:95:3b:
                    66:da:d6:b1:ec:ad:0e:a5:e8:99:41:c0:fa:5b:54:
                    48:ac:e9:a0:7f:4a:94:9e:2a:34:ab:19:39:50:b6:
                    50:29:39:01:c9:ac:cf:38:11:a5:c9:05:1d:d3:af:
                    3d:a5:ff:69:9c:1f:96:42:4c:81:ae:d6:d6:1b:9b:
                    42:0e:13:73:58:ed:23:c9:9f:41:fb:34:4f:ad:ad:
                    ee:ff:ca:47:83:09:94:81:20:96:14:20:e3:a5:3f:
                    92:48:15:9e:50:e5:f2:37:bf:3b:f1:73:b2:f4:ce:
                    e8:b9:37:4d:22:51:72:cc:a6:ed:f5:5b:5a:fc:33:
                    fb:c1:c2:9e:39:7b:df:35:d5:cc:2c:ad:54:b6:01:
                    c1:30:51:67:aa:7d:15:ba:bc:96:62:86:bc:eb:38:
                    a8:86:19:15:61:93:03:2a:e7:41:ef:0d:13:17:7d:
                    4b:d5:68:bd:d1:c8:0e:05:f3:82:f8:d5:0c:92:97:
                    ea:fd:85:43:ee:8d:9d:df:a7:6b:b9:85:1a:95:b8:
                    c9:23:52:29:5c:08:21:21:99:76:cb:93:b9:af:db:
                    a8:2f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier: 
                D2:93:13:34:48:58:2D:60:1C:30:11:CB:35:0B:CF:B3:B6:F3:B3:20
            X509v3 Authority Key Identifier: 
                keyid:74:01:65:A8:0D:10:71:97:0A:BC:09:C0:2B:71:C1:AC:7C:1D:6E:0E

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points: 

                Full Name:
                  URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl

            Authority Information Access: 
                CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access: 
                CA Repository - URI:rsync://rpki.apnic.net/member_repository/A911035A/34E9DC9A7C6611EA8089F351C4F9AE02/
                RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A911035A/34E9DC9A7C6611EA8089F351C4F9AE02/0pMTNEhYLWAcMBHLNQvPs7bzsyA.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  67.213.140.0/22

    Signature Algorithm: sha256WithRSAEncryption
         16:9a:dd:ad:5c:ba:36:b9:84:8c:0a:a6:0f:4a:90:fb:19:0b:
         78:56:16:a4:60:51:6f:0e:b1:f0:5c:4a:b1:43:7e:4c:5c:88:
         b0:8f:78:9e:db:e4:43:60:2d:6c:bd:f4:6b:db:37:f3:66:8e:
         e8:21:2a:48:55:75:3c:1d:59:0f:70:7b:9f:88:ac:c3:ba:42:
         71:f7:1c:00:f1:ec:96:7c:e7:29:db:59:76:37:d3:58:5d:53:
         20:b4:b2:7b:ea:71:ed:96:ab:c9:70:97:34:c3:ef:72:0f:97:
         c2:04:9d:fa:11:2c:83:8f:fa:6c:09:55:66:ce:66:93:bb:0a:
         17:0f:7d:1b:20:1b:1b:74:f7:84:7d:ba:33:f8:71:1e:3f:f2:
         f9:8b:89:1b:aa:d7:e3:9e:ca:63:74:ce:4b:00:aa:18:25:55:
         76:0e:04:a3:d3:93:86:e9:36:da:3d:7a:5c:f5:f2:0e:02:5d:
         b5:4a:ab:fe:53:83:b8:c9:48:be:16:02:4a:24:2f:48:47:9a:
         97:ec:5a:75:5e:eb:b6:2f:e1:d1:39:34:df:9d:c7:26:18:b0:
         09:fc:72:95:22:c2:d1:c1:a0:fd:8b:33:5d:85:ad:65:25:9d:
         c9:fe:21:a4:2c:07:f8:88:3e:d0:ff:b4:37:ea:82:f2:bb:f7:
         bc:ad:02:25
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Generated at Sun Sep 26 12:49:56 2021 by LibreSSL & rpki-client.