RPKI Certificate
Location:                 ./rsync/rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/3p1kAWKR6ioW87eVag9ANbcJ5Uc.cer (download)

Subject key identifier:   DE:9D:64:01:62:91:EA:2A:16:F3:B7:95:6A:0F:40:35:B7:09:E5:47
Authority key identifier: 74:01:65:A8:0D:10:71:97:0A:BC:09:C0:2B:71:C1:AC:7C:1D:6E:0E
Manifest:                 rpki.apnic.net/member_repository/A9125475/8D9471F6290611E593BFC626C4F9AE02/3p1kAWKR6ioW87eVag9ANbcJ5Uc.mft
CA Repository:            rpki.apnic.net/member_repository/A9125475/8D9471F6290611E593BFC626C4F9AE02/
Notification URL:         https://rrdp.apnic.net/notification.xml
Subject Public Key Info:  
Subordinate resources:
    until: 2023-01-31T00:00:00Z
    Resources:
    1: IP: 134.236.0.0/16
    2: IP: 159.192.0.0/16
    3: IP: 209.15.96.0/19

--
$ openssl x509 -text -inform DER -in ./rsync/rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/3p1kAWKR6ioW87eVag9ANbcJ5Uc.cer
Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 16022 (0x3e96)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A90DC5BE/serialNumber=740165A80D1071970ABC09C02B71C1AC7C1D6E0E
        Validity
            Not Before: Nov 29 02:23:18 2021 GMT
            Not After : Jan 31 00:00:00 2023 GMT
        Subject: CN=A9125475/serialNumber=DE9D64016291EA2A16F3B7956A0F4035B709E547
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:c4:a1:2b:92:6c:2f:0e:78:d2:2a:fb:c9:ad:
                    b9:a4:79:5b:88:a5:29:ef:fe:e6:dc:c0:66:08:9f:
                    d9:aa:9d:a6:ae:70:06:06:64:96:72:d6:62:46:f8:
                    a4:e7:2e:b3:78:c3:b0:2e:8b:76:66:14:dd:97:53:
                    82:09:6a:5b:37:5b:aa:b5:81:e2:b2:49:34:ff:00:
                    5f:99:a1:11:7b:d0:ae:ef:45:55:92:f0:41:bc:46:
                    0d:4b:61:ef:3e:f1:ae:be:d0:cf:38:b2:63:27:5f:
                    10:d1:9c:8a:7a:4e:fa:23:c2:62:17:fe:e4:01:8f:
                    d2:52:1a:ec:dc:7e:f9:84:8d:bd:a6:ff:d0:66:c6:
                    03:fa:ec:b0:c0:dd:8e:10:63:bd:63:54:71:93:0d:
                    22:5a:fa:04:2e:6f:98:6a:e7:49:bb:80:02:93:de:
                    5f:9b:7c:75:8d:d0:cc:ae:a2:fa:d6:d0:2a:6d:e6:
                    d7:5f:89:c0:a8:af:d1:97:01:f3:72:f0:87:41:bb:
                    67:e0:8f:5e:62:1a:3d:2e:f3:61:46:c6:3b:1f:10:
                    a7:75:fb:53:ad:28:86:0f:41:a7:15:b9:d5:37:56:
                    f3:f2:13:e8:fc:32:1e:19:cd:b3:a4:e4:b6:6d:60:
                    03:68:7b:d0:44:b8:e2:67:8f:a7:85:c0:de:35:70:
                    b3:11
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier: 
                DE:9D:64:01:62:91:EA:2A:16:F3:B7:95:6A:0F:40:35:B7:09:E5:47
            X509v3 Authority Key Identifier: 
                keyid:74:01:65:A8:0D:10:71:97:0A:BC:09:C0:2B:71:C1:AC:7C:1D:6E:0E

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points: 

                Full Name:
                  URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl

            Authority Information Access: 
                CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access: 
                CA Repository - URI:rsync://rpki.apnic.net/member_repository/A9125475/8D9471F6290611E593BFC626C4F9AE02/
                RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A9125475/8D9471F6290611E593BFC626C4F9AE02/3p1kAWKR6ioW87eVag9ANbcJ5Uc.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  134.236.0.0/16
                  159.192.0.0/16
                  209.15.96.0/19

    Signature Algorithm: sha256WithRSAEncryption
         2a:14:33:07:88:7f:d6:c6:fa:56:f6:ac:ea:f5:1d:fa:58:27:
         5f:54:1e:3b:89:c5:e0:ec:43:2f:d8:94:91:d1:52:37:5d:2a:
         a4:3c:d4:09:94:1b:1d:28:99:43:c1:6c:63:64:40:d1:15:81:
         68:de:7f:38:b1:43:a0:32:fd:86:96:80:df:32:36:2f:c1:7a:
         39:ff:04:39:6f:70:a9:57:d5:db:ed:fc:e4:3a:5b:06:eb:be:
         f0:11:eb:ca:ac:e0:e7:8b:7b:13:e7:d6:99:e8:05:8f:fa:1e:
         a0:bd:4f:78:6d:60:8e:cb:f2:6c:d8:72:4c:ea:5c:88:00:12:
         4e:dc:c1:52:59:f8:dc:f4:9b:de:80:db:ef:f1:c6:91:27:2c:
         45:0e:f7:d8:de:c6:53:a3:69:ed:aa:61:91:75:34:4a:e5:7d:
         1f:c6:3a:7d:3c:dc:f1:91:3a:2c:ea:1c:72:b4:9f:73:4a:26:
         83:ad:31:1b:ff:90:0b:6f:a9:fd:74:98:13:a9:05:3a:b9:ca:
         e7:3a:11:4a:14:23:a5:e2:76:4a:e9:ef:ad:d1:d9:5e:4f:63:
         9a:b6:18:0b:16:64:87:da:0f:cf:e0:95:f1:03:65:4c:5d:78:
         11:f0:bb:03:78:96:3a:31:3c:c4:37:77:59:71:7e:b3:22:44:
         c8:35:ed:96
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Generated at Mon Nov 29 03:54:12 2021 by LibreSSL & rpki-client.