RPKI Certificate
Location:                 rsync/rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/48M322aHKgqTXJ1VXltt01MHLHQ.cer (download)

Subject key identifier:   E3:C3:37:DB:66:87:2A:0A:93:5C:9D:55:5E:5B:6D:D3:53:07:2C:74
Authority key identifier: 74:01:65:A8:0D:10:71:97:0A:BC:09:C0:2B:71:C1:AC:7C:1D:6E:0E
Manifest:                 rpki.apnic.net/member_repository/A912B0A3/6E2FFEDE03B711EB97FBE568C4F9AE02/48M322aHKgqTXJ1VXltt01MHLHQ.mft
CA Repository:            rpki.apnic.net/member_repository/A912B0A3/6E2FFEDE03B711EB97FBE568C4F9AE02/
Notification URL:         https://rrdp.apnic.net/notification.xml
Subordinate resources:
    1: IP: 192.83.231.0/24

--
$ openssl x509 -text -inform DER -in rsync/rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/48M322aHKgqTXJ1VXltt01MHLHQ.cer
Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 14825 (0x39e9)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A90DC5BE/serialNumber=740165A80D1071970ABC09C02B71C1AC7C1D6E0E
        Validity
            Not Before: Apr 30 11:48:14 2021 GMT
            Not After : Jul  1 00:00:00 2022 GMT
        Subject: CN=A912B0A3/serialNumber=E3C337DB66872A0A935C9D555E5B6DD353072C74
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e0:b3:b5:c0:3f:7c:de:df:4d:2a:d6:dc:7c:af:
                    1e:2d:94:13:b1:75:02:38:76:84:60:30:d9:ad:46:
                    43:27:75:04:b7:fa:d8:0e:e9:d6:20:b5:0d:ca:72:
                    e0:d0:9f:00:2c:42:2d:72:6d:9d:cb:91:6f:b0:56:
                    54:ef:02:c7:23:0f:0e:e7:18:c9:3e:da:ca:28:92:
                    72:be:3f:42:89:c1:93:9b:0e:ce:44:d7:a4:cd:2e:
                    3e:fd:37:01:60:3f:ee:8f:59:47:b0:03:60:05:6d:
                    49:4a:f9:01:cc:2b:87:61:b9:51:65:45:a6:15:68:
                    a6:c2:47:e0:9a:40:3c:45:7b:85:17:1e:ac:3f:74:
                    3c:a4:23:06:61:dc:de:2a:2a:39:55:59:ca:a6:39:
                    29:db:98:b6:93:e1:0b:ff:c2:ce:c7:60:57:8d:1b:
                    34:cc:ed:1f:2d:b9:f9:25:11:20:b5:bc:92:0e:11:
                    2b:3c:fc:55:0c:ba:69:47:f5:b0:90:9f:c9:e2:19:
                    4f:ea:14:de:75:42:27:2f:89:82:12:fd:ec:a0:14:
                    92:6a:54:71:47:64:78:8e:c8:41:b4:ca:89:56:d7:
                    cf:f2:ef:b8:41:53:da:4e:7d:98:68:df:25:6e:17:
                    f4:93:49:72:dc:24:cd:a9:3d:23:d9:72:36:45:73:
                    21:a5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier: 
                E3:C3:37:DB:66:87:2A:0A:93:5C:9D:55:5E:5B:6D:D3:53:07:2C:74
            X509v3 Authority Key Identifier: 
                keyid:74:01:65:A8:0D:10:71:97:0A:BC:09:C0:2B:71:C1:AC:7C:1D:6E:0E

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points: 

                Full Name:
                  URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl

            Authority Information Access: 
                CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access: 
                CA Repository - URI:rsync://rpki.apnic.net/member_repository/A912B0A3/6E2FFEDE03B711EB97FBE568C4F9AE02/
                RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A912B0A3/6E2FFEDE03B711EB97FBE568C4F9AE02/48M322aHKgqTXJ1VXltt01MHLHQ.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.83.231.0/24

    Signature Algorithm: sha256WithRSAEncryption
         0a:3c:b4:1b:a5:e2:4f:ab:43:6f:ff:37:cf:e9:3b:67:88:59:
         96:0e:d1:67:c1:ff:97:0a:2a:2d:dd:49:dd:f3:ac:79:89:b6:
         e1:c1:8e:a7:e3:d3:e2:0e:d4:d5:ab:f9:28:57:70:89:7a:1e:
         01:69:da:88:6e:94:1d:df:f9:6d:e7:39:eb:e7:0c:7e:8e:f2:
         f3:af:8e:53:32:90:7f:6f:9f:b3:10:95:c4:a0:b2:a7:36:f3:
         41:fb:fd:66:de:ac:61:73:89:68:59:ff:f7:2b:49:0a:51:c8:
         aa:20:4d:d9:a4:48:a2:c6:14:08:1c:4e:60:77:04:0d:f7:d8:
         e6:59:94:9e:d4:d4:28:a2:fe:8f:e9:9d:7f:67:5a:78:f8:a8:
         51:22:3c:72:c5:8a:e3:1b:83:ce:9c:3d:8a:e7:b0:81:c7:aa:
         e7:8a:66:bf:59:26:3a:d3:4f:1e:0b:37:8b:d8:f6:83:fc:5e:
         d6:2e:f4:c7:f0:ab:fb:c2:0f:da:8a:69:2e:70:86:c6:75:fd:
         a3:e0:87:0a:82:88:de:b8:10:7f:69:ae:fa:70:51:f7:cf:24:
         c2:8e:f3:2e:22:d4:29:82:df:4c:8c:5d:e6:52:af:0f:62:97:
         00:5d:3b:1f:44:03:f3:59:04:f1:1a:59:d4:fd:63:16:48:11:
         4e:1e:4b:73
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Generated at Sun Sep 26 12:49:57 2021 by LibreSSL & rpki-client.