RPKI Certificate
Location:                 ./rsync/rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/4bkQuccxDJ9lWU_G6JifyVOzblE.cer (download)

Subject key identifier:   E1:B9:10:B9:C7:31:0C:9F:65:59:4F:C6:E8:98:9F:C9:53:B3:6E:51
Authority key identifier: 74:01:65:A8:0D:10:71:97:0A:BC:09:C0:2B:71:C1:AC:7C:1D:6E:0E
Manifest:                 rpki.apnic.net/member_repository/A9178EB0/E32C87CC50D511ECB3F8D529C4F9AE02/4bkQuccxDJ9lWU_G6JifyVOzblE.mft
CA Repository:            rpki.apnic.net/member_repository/A9178EB0/E32C87CC50D511ECB3F8D529C4F9AE02/
Notification URL:         https://rrdp.apnic.net/notification.xml
Subject Public Key Info:  
Subordinate resources:
    until: 2023-01-31T00:00:00Z
    Resources:
    1: IP: 52.128.224.0/19
    2: IP: 148.66.0.0/19
    3: IP: 216.118.224.0/19

--
$ openssl x509 -text -inform DER -in ./rsync/rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/4bkQuccxDJ9lWU_G6JifyVOzblE.cer
Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 16025 (0x3e99)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A90DC5BE/serialNumber=740165A80D1071970ABC09C02B71C1AC7C1D6E0E
        Validity
            Not Before: Nov 29 05:33:40 2021 GMT
            Not After : Jan 31 00:00:00 2023 GMT
        Subject: CN=A9178EB0/serialNumber=E1B910B9C7310C9F65594FC6E8989FC953B36E51
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:98:0d:be:da:a7:ca:34:17:78:2e:e2:5d:88:
                    22:15:d0:24:1a:ff:8b:b3:6c:f6:ae:2c:d4:8e:e4:
                    1f:89:d7:cc:ad:34:e3:f8:f4:0d:d2:ff:57:68:0a:
                    41:44:cf:2b:f1:82:24:48:41:58:bc:45:39:6c:00:
                    4a:17:36:74:70:fa:37:23:55:22:3d:57:84:3a:f6:
                    3c:2e:05:88:42:e6:2a:de:49:8c:44:48:ef:38:13:
                    bf:70:cc:97:29:dd:0b:eb:4b:8d:50:94:cd:51:23:
                    c1:7c:5a:d1:be:cb:1f:30:bd:e4:3b:a2:bc:80:2d:
                    1f:49:cb:f6:bd:42:d9:d0:00:f7:8a:d3:38:9e:c7:
                    70:46:2c:42:48:ab:cf:49:8d:18:ad:bc:9b:17:57:
                    ef:c4:bb:f2:96:ee:0e:df:ba:f7:47:a2:f0:d8:94:
                    e0:ef:33:7f:b3:f6:9f:b1:8f:2d:b9:c4:9c:f5:7b:
                    ae:2e:48:90:d9:bf:4b:05:34:4e:8e:68:5d:17:ba:
                    1c:67:32:a5:7e:d5:27:f3:bc:f9:0e:c4:82:fd:c6:
                    ce:e4:b5:3e:c7:ec:25:1a:50:9c:0d:45:ac:cd:07:
                    de:7e:e2:2b:80:7a:19:d5:ee:7e:3e:9e:59:06:c3:
                    18:a8:49:47:1e:d1:49:22:42:38:ca:91:e0:c6:57:
                    e2:eb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier: 
                E1:B9:10:B9:C7:31:0C:9F:65:59:4F:C6:E8:98:9F:C9:53:B3:6E:51
            X509v3 Authority Key Identifier: 
                keyid:74:01:65:A8:0D:10:71:97:0A:BC:09:C0:2B:71:C1:AC:7C:1D:6E:0E

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points: 

                Full Name:
                  URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl

            Authority Information Access: 
                CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access: 
                CA Repository - URI:rsync://rpki.apnic.net/member_repository/A9178EB0/E32C87CC50D511ECB3F8D529C4F9AE02/
                RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A9178EB0/E32C87CC50D511ECB3F8D529C4F9AE02/4bkQuccxDJ9lWU_G6JifyVOzblE.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  52.128.224.0/19
                  148.66.0.0/19
                  216.118.224.0/19

    Signature Algorithm: sha256WithRSAEncryption
         5a:fc:ba:e9:fd:a7:75:3a:80:7f:26:84:56:89:05:0c:c0:67:
         2b:06:f7:eb:79:b1:59:60:02:df:57:56:48:ea:de:18:ce:ba:
         a8:c2:a7:7a:1b:3d:4f:45:37:7e:f3:29:f1:b7:1b:e1:c9:19:
         e0:c9:46:11:45:76:b5:46:2d:16:2a:75:2a:6c:15:37:ba:db:
         25:88:30:26:48:25:db:76:32:36:15:53:2f:ca:af:0a:9b:70:
         0b:e2:ad:1a:a6:ff:4a:fc:9c:b0:0a:36:bf:35:bc:87:34:4f:
         7e:25:95:83:84:2e:de:0d:25:9e:eb:27:dc:80:89:bf:79:f4:
         d8:64:c7:9f:aa:b8:4c:90:4c:04:63:09:90:ab:0d:10:63:c1:
         ea:2f:1f:62:d0:3f:f6:51:ce:4f:0a:89:cc:41:1b:84:ca:1a:
         d0:04:b5:be:51:19:8f:0d:42:5b:02:9b:8d:19:89:65:d3:9e:
         01:73:4b:b8:f7:4e:c1:2f:c0:84:1d:49:89:fc:d6:7c:ee:a9:
         2c:6f:bb:d3:b5:f6:ec:5f:aa:b1:27:29:bd:07:ce:77:be:98:
         3c:b3:44:72:ca:c0:37:51:61:af:53:7f:02:63:0c:72:11:1a:
         49:99:60:8b:35:18:07:1b:fb:02:dc:e4:6c:3b:66:0b:d6:e3:
         b1:8d:fc:ff
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Generated at Mon Nov 29 07:02:57 2021 by LibreSSL & rpki-client.