RPKI Certificate
Location:                 rsync/rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/2MHMikY6MVDL7AhlTmF4ANZuU-k.cer (download)

Subject key identifier:   D8:C1:CC:8A:46:3A:31:50:CB:EC:08:65:4E:61:78:00:D6:6E:53:E9
Authority key identifier: 74:01:65:A8:0D:10:71:97:0A:BC:09:C0:2B:71:C1:AC:7C:1D:6E:0E
Manifest:                 rpki.apnic.net/member_repository/A91F89C1/0A3F269C808611EBB4C6D116C4F9AE02/2MHMikY6MVDL7AhlTmF4ANZuU-k.mft
CA Repository:            rpki.apnic.net/member_repository/A91F89C1/0A3F269C808611EBB4C6D116C4F9AE02/
Notification URL:         https://rrdp.apnic.net/notification.xml
Subordinate resources:
    1: IP: 155.205.0.0/16
    2: IP: 198.51.211.0/24

--
$ openssl x509 -text -inform DER -in rsync/rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/2MHMikY6MVDL7AhlTmF4ANZuU-k.cer
Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 15249 (0x3b91)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A90DC5BE/serialNumber=740165A80D1071970ABC09C02B71C1AC7C1D6E0E
        Validity
            Not Before: Jul 14 05:45:21 2021 GMT
            Not After : Sep 30 00:00:00 2022 GMT
        Subject: CN=A91F89C1/serialNumber=D8C1CC8A463A3150CBEC08654E617800D66E53E9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:bf:11:90:2c:e7:f3:63:55:df:ce:c5:a4:13:
                    de:36:27:3c:c8:a3:35:8c:f6:f2:b2:ba:4d:a0:94:
                    a9:31:79:92:2e:71:f7:01:41:be:15:2b:09:4f:89:
                    b9:90:d1:51:10:06:74:6f:9c:81:7e:5f:87:2a:e9:
                    13:61:ee:12:34:53:71:76:ac:82:32:6c:19:59:c5:
                    8b:df:02:a2:f5:b5:68:81:f3:37:b9:14:b1:ab:00:
                    51:38:61:e1:cb:c8:54:a5:19:b3:e9:e5:1d:78:8b:
                    e2:66:0e:d4:a5:c7:1b:5b:91:6c:72:b3:df:3e:62:
                    9d:78:07:b6:8d:5b:ae:4f:3b:d4:0a:b3:da:77:02:
                    8b:f2:ca:51:aa:49:a7:cc:5b:90:90:11:aa:2d:51:
                    1a:9b:ec:3f:d9:8a:ef:9c:e7:84:cf:4e:2e:7c:c2:
                    e8:50:2d:62:9e:ce:c1:c4:d4:a6:5f:0a:c1:03:4b:
                    f3:a3:83:0a:a7:33:7b:2e:6b:95:1f:7c:f1:0b:92:
                    a8:37:08:02:c6:e4:dd:95:c4:3f:e7:1d:78:3a:13:
                    48:9e:29:f5:c5:38:1f:4c:65:4b:ac:30:2f:36:bf:
                    95:b7:ef:69:52:22:29:eb:b0:05:2d:f5:1a:d7:8e:
                    ca:80:aa:cd:92:37:13:0e:0a:53:10:86:bf:96:df:
                    2c:29
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier: 
                D8:C1:CC:8A:46:3A:31:50:CB:EC:08:65:4E:61:78:00:D6:6E:53:E9
            X509v3 Authority Key Identifier: 
                keyid:74:01:65:A8:0D:10:71:97:0A:BC:09:C0:2B:71:C1:AC:7C:1D:6E:0E

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points: 

                Full Name:
                  URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl

            Authority Information Access: 
                CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access: 
                CA Repository - URI:rsync://rpki.apnic.net/member_repository/A91F89C1/0A3F269C808611EBB4C6D116C4F9AE02/
                RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A91F89C1/0A3F269C808611EBB4C6D116C4F9AE02/2MHMikY6MVDL7AhlTmF4ANZuU-k.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  155.205.0.0/16
                  198.51.211.0/24

    Signature Algorithm: sha256WithRSAEncryption
         91:a3:a7:5c:34:ab:16:fa:78:90:8d:0c:5d:69:52:b8:f2:03:
         e4:bc:95:98:0f:98:29:a6:13:f7:99:6e:b9:d3:9a:2d:ea:2d:
         f7:91:62:50:a6:90:bb:e2:2f:c9:c1:8b:1c:0e:4b:b9:f0:e1:
         f1:d9:4d:57:7c:32:e9:7a:c7:60:f3:9b:a1:ce:2d:3d:16:32:
         cf:03:73:f9:25:80:ad:c2:c7:00:0e:09:65:cc:a4:90:6a:40:
         51:72:c4:c7:33:5d:0f:fe:55:a3:4d:c1:ab:4b:85:2a:2d:27:
         16:d9:c3:fa:f8:d6:93:e4:f7:cb:2c:6c:6b:75:a6:bf:a8:be:
         b7:d2:87:03:f9:fa:d1:8d:36:ed:b1:ad:25:03:2f:19:b5:a0:
         50:d0:39:44:6e:06:a5:ac:0c:a0:25:d6:7c:c1:b7:99:d8:6d:
         62:df:d2:dd:57:bb:89:7b:c4:ce:28:8b:fe:ef:df:e2:69:db:
         e4:9b:1c:43:70:7a:c9:1f:4a:70:a8:61:77:75:f4:12:f3:5c:
         31:c1:72:04:5f:a3:74:7e:71:37:c3:42:c9:b3:c5:dc:dc:95:
         d9:79:b3:81:ac:ca:b1:0f:a3:b4:54:35:03:65:76:e5:63:b6:
         d0:1e:07:d6:2f:c6:9c:d5:fb:22:96:2a:89:77:8f:62:8a:9d:
         fd:64:e4:7f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Generated at Sun Sep 26 12:49:57 2021 by LibreSSL & rpki-client.