RPKI Certificate
Location:                 ./rsync/rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/0pm8o5yZPbgNETe5mbIhhGrPVWs.cer (download)

Subject key identifier:   D2:99:BC:A3:9C:99:3D:B8:0D:11:37:B9:99:B2:21:84:6A:CF:55:6B
Authority key identifier: 74:01:65:A8:0D:10:71:97:0A:BC:09:C0:2B:71:C1:AC:7C:1D:6E:0E
Manifest:                 rpki.apnic.net/member_repository/A9115C2E/9527E6B4268E11EC8ED0BA6EC4F9AE02/0pm8o5yZPbgNETe5mbIhhGrPVWs.mft
CA Repository:            rpki.apnic.net/member_repository/A9115C2E/9527E6B4268E11EC8ED0BA6EC4F9AE02/
Notification URL:         https://rrdp.apnic.net/notification.xml
Subordinate resources:
    1: IP: 64.246.80.0/20

--
$ openssl x509 -text -inform DER -in ./rsync/rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/0pm8o5yZPbgNETe5mbIhhGrPVWs.cer
Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 15712 (0x3d60)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A90DC5BE/serialNumber=740165A80D1071970ABC09C02B71C1AC7C1D6E0E
        Validity
            Not Before: Oct  6 10:17:25 2021 GMT
            Not After : May  1 00:00:00 2022 GMT
        Subject: CN=A9115C2E/serialNumber=D299BCA39C993DB80D1137B999B221846ACF556B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:c3:fc:e6:68:45:1f:47:b3:46:9b:06:ec:75:
                    e0:5f:d1:9c:b2:fd:04:c5:13:e8:d6:c4:ea:83:30:
                    1e:f7:78:4e:80:64:04:24:b1:45:f0:8f:34:7a:8f:
                    07:71:3c:94:87:9d:3c:cc:ca:2e:b7:b7:fb:44:72:
                    49:4d:66:e4:02:3a:81:f8:b5:70:8c:c5:0a:e6:1c:
                    c5:07:d1:ec:7a:d5:66:9d:2c:e0:3e:6e:6f:42:53:
                    f1:35:3e:23:2e:80:f4:8b:eb:56:94:a2:28:93:23:
                    a8:4d:99:73:c2:4b:d5:96:ff:5d:c4:36:db:4e:f7:
                    f1:ce:c8:43:79:fc:2b:6e:3a:08:32:bd:b5:78:cc:
                    ce:a1:eb:9e:11:ad:af:40:90:cd:20:9e:c8:32:6a:
                    a4:30:fa:a1:f3:58:22:f3:14:4e:ea:2e:ec:72:be:
                    69:bd:58:67:3b:29:67:ff:d8:a2:51:3b:c8:3c:03:
                    1a:ae:40:76:0c:75:be:2e:e4:30:a4:30:25:17:09:
                    3a:62:81:23:42:6d:f3:11:59:78:1f:d1:bf:c5:5d:
                    61:7f:d5:4e:db:a2:9d:da:46:0e:a4:38:17:84:1c:
                    e9:b6:95:d8:0f:c5:4f:81:6e:66:e8:22:6d:ea:bb:
                    51:60:92:f2:8e:48:18:83:3c:91:13:90:db:bc:85:
                    1b:17
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier: 
                D2:99:BC:A3:9C:99:3D:B8:0D:11:37:B9:99:B2:21:84:6A:CF:55:6B
            X509v3 Authority Key Identifier: 
                keyid:74:01:65:A8:0D:10:71:97:0A:BC:09:C0:2B:71:C1:AC:7C:1D:6E:0E

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points: 

                Full Name:
                  URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl

            Authority Information Access: 
                CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access: 
                CA Repository - URI:rsync://rpki.apnic.net/member_repository/A9115C2E/9527E6B4268E11EC8ED0BA6EC4F9AE02/
                RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A9115C2E/9527E6B4268E11EC8ED0BA6EC4F9AE02/0pm8o5yZPbgNETe5mbIhhGrPVWs.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  64.246.80.0/20

    Signature Algorithm: sha256WithRSAEncryption
         90:ff:90:85:3e:73:3a:4c:de:f1:6e:bb:81:b6:1e:ce:32:5e:
         32:7e:9c:62:f5:d1:53:57:9f:dd:37:1e:da:a0:31:d4:8b:3b:
         3c:55:1f:50:96:3a:31:ac:72:83:14:1f:08:a1:08:bb:61:cf:
         a1:88:42:45:b2:de:db:12:0a:43:bc:0e:1e:38:5c:35:63:41:
         bc:80:80:90:9e:0b:86:64:da:f4:72:d8:81:d3:44:a9:e1:10:
         8e:4c:fe:d6:21:ed:9b:46:0e:5d:41:16:32:86:80:da:d9:67:
         ea:ac:7e:9f:7f:9f:5c:36:63:02:c1:f1:82:6e:4c:29:e8:48:
         53:16:48:38:0b:b1:1a:5f:e9:c7:ea:8a:54:6b:2f:0f:85:ca:
         5f:93:5c:aa:f2:db:2f:5a:ee:32:a4:14:3d:bd:e5:f4:55:d6:
         b5:e2:87:d1:65:86:80:01:56:29:ea:13:d5:0f:1b:ce:40:4e:
         7f:f6:5e:66:b0:ea:87:04:23:24:87:92:3d:fb:23:91:2d:da:
         d2:eb:da:04:b0:dd:31:85:2c:a7:30:e1:70:82:b0:15:a2:f1:
         57:d8:71:79:50:92:e7:21:15:c7:b7:41:8d:e5:2d:c4:45:b3:
         33:a1:1b:0c:ea:f0:00:ca:71:4b:83:d6:b7:c8:43:bb:48:a2:
         78:59:bb:fe
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Generated at Wed Oct 6 13:00:37 2021 by LibreSSL & rpki-client.