RPKI Certificate
Location:                 ./rsync/rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/1aAlBjTfwD3Jz8q6l5UYD_BRWPw.cer (download)

Subject key identifier:   D5:A0:25:06:34:DF:C0:3D:C9:CF:CA:BA:97:95:18:0F:F0:51:58:FC
Authority key identifier: 74:01:65:A8:0D:10:71:97:0A:BC:09:C0:2B:71:C1:AC:7C:1D:6E:0E
Manifest:                 rpki.apnic.net/member_repository/A914247C/8A1C4616430A11EA858CDC76C4F9AE02/1aAlBjTfwD3Jz8q6l5UYD_BRWPw.mft
CA Repository:            rpki.apnic.net/member_repository/A914247C/8A1C4616430A11EA858CDC76C4F9AE02/
Notification URL:         https://rrdp.apnic.net/notification.xml
Subject Public Key Info:  
Subordinate resources:
    until: 2022-10-31T00:00:00Z
    Resources:
    1: IP: 131.244.0.0/15
    2: IP: 192.48.109.0 -- 192.48.110.255
    3: IP: 192.88.187.0/24

--
$ openssl x509 -text -inform DER -in ./rsync/rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/1aAlBjTfwD3Jz8q6l5UYD_BRWPw.cer
Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 15915 (0x3e2b)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A90DC5BE/serialNumber=740165A80D1071970ABC09C02B71C1AC7C1D6E0E
        Validity
            Not Before: Nov  8 06:27:25 2021 GMT
            Not After : Oct 31 00:00:00 2022 GMT
        Subject: CN=A914247C/serialNumber=D5A0250634DFC03DC9CFCABA9795180FF05158FC
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:7b:76:14:65:ea:9b:bc:23:47:6f:1a:5d:48:
                    0d:43:ef:c8:43:3d:28:50:08:a4:ff:c6:aa:ef:bc:
                    be:3a:cf:29:97:cb:29:a3:3a:5a:83:5a:27:16:66:
                    8c:bb:b8:a8:fb:a6:b7:f8:88:ba:bf:42:ad:0d:1f:
                    85:36:50:e2:1f:1f:28:41:70:38:35:5d:a0:c7:c2:
                    b4:22:21:03:7a:db:71:65:9a:99:b5:7e:8f:43:c2:
                    40:53:3b:49:8e:57:21:c3:82:2b:f3:33:06:c6:b3:
                    1b:02:e2:3c:40:65:46:76:e2:7a:97:17:60:00:a0:
                    12:d8:00:d3:03:0c:e7:d5:61:d3:fa:2e:ee:5b:b5:
                    e4:79:cb:78:e4:f7:48:30:88:72:bb:b1:7a:2c:63:
                    40:65:1a:54:18:af:f8:4e:00:6a:f2:65:07:69:75:
                    d9:b9:42:48:6f:be:13:d9:4b:a4:e8:97:78:a6:b5:
                    fc:b6:bd:80:0d:41:67:92:73:b8:f9:75:43:a8:d2:
                    45:92:25:0f:3a:b3:99:07:f0:b0:09:80:e5:18:c9:
                    81:1b:d2:34:bd:49:57:f2:30:f9:9e:d6:88:0d:4c:
                    a7:63:f0:65:f3:81:53:15:93:20:b3:0d:10:72:5b:
                    0c:c0:9d:f6:53:35:53:41:44:19:e6:1a:d9:0d:d6:
                    47:97
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier: 
                D5:A0:25:06:34:DF:C0:3D:C9:CF:CA:BA:97:95:18:0F:F0:51:58:FC
            X509v3 Authority Key Identifier: 
                keyid:74:01:65:A8:0D:10:71:97:0A:BC:09:C0:2B:71:C1:AC:7C:1D:6E:0E

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points: 

                Full Name:
                  URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl

            Authority Information Access: 
                CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access: 
                CA Repository - URI:rsync://rpki.apnic.net/member_repository/A914247C/8A1C4616430A11EA858CDC76C4F9AE02/
                RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A914247C/8A1C4616430A11EA858CDC76C4F9AE02/1aAlBjTfwD3Jz8q6l5UYD_BRWPw.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  131.244.0.0/15
                  192.48.109.0-192.48.110.255
                  192.88.187.0/24

    Signature Algorithm: sha256WithRSAEncryption
         27:ee:a8:64:2d:e7:02:46:f3:a9:03:fe:24:91:5e:37:df:b6:
         21:f2:e0:ea:95:6d:75:47:27:1c:13:a1:92:7d:78:a9:f0:1c:
         b9:12:69:d9:fb:47:0a:45:fa:d7:bc:da:a8:17:8e:34:c5:d0:
         72:99:71:e4:f8:15:61:d4:79:20:d0:2d:2d:85:bb:da:f5:ed:
         61:90:38:2f:7e:33:db:14:ac:b1:76:74:7e:0e:50:67:19:d7:
         df:d5:db:29:55:ef:8e:c9:03:90:13:e0:35:f8:d4:d8:17:1b:
         17:76:11:a1:20:9e:cf:fb:38:eb:76:22:ef:83:87:4a:11:12:
         83:ae:bb:7d:1e:4d:9f:ae:ef:a2:53:48:19:81:2b:24:e3:a8:
         b5:ee:11:30:03:8d:ff:1f:14:e0:42:a5:98:1f:03:10:4c:b3:
         fc:a8:ec:3d:2a:fd:71:74:9a:59:6f:69:74:15:d1:9c:75:7d:
         7a:6e:ab:c6:19:43:ee:4d:26:10:5b:e2:fb:ac:84:ae:a1:f0:
         88:f5:be:2a:8e:80:4a:a3:f7:8a:9e:22:70:cb:29:5f:cc:99:
         a0:0b:ff:ec:00:e0:7d:b8:d5:1f:18:fc:40:13:7d:53:5b:d3:
         b7:03:cf:0a:7d:94:ae:1d:17:95:1a:72:0c:34:21:4d:b4:8a:
         aa:72:1f:1f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Generated at Mon Nov 8 08:27:09 2021 by LibreSSL & rpki-client.