RPKI Certificate
Location:                 rsync/rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/5z-4ho3TtGHqGmc8ejaUUjXpyq4.cer (download)

Subject key identifier:   E7:3F:B8:86:8D:D3:B4:61:EA:1A:67:3C:7A:36:94:52:35:E9:CA:AE
Authority key identifier: 74:01:65:A8:0D:10:71:97:0A:BC:09:C0:2B:71:C1:AC:7C:1D:6E:0E
Manifest:                 rpki.apnic.net/member_repository/A91FCEB1/9C14B4063A2111E79AA0D51CC4F9AE02/5z-4ho3TtGHqGmc8ejaUUjXpyq4.mft
CA Repository:            rpki.apnic.net/member_repository/A91FCEB1/9C14B4063A2111E79AA0D51CC4F9AE02/
Notification URL:         https://rrdp.apnic.net/notification.xml
Subordinate resources:
    1: IP: 192.249.42.0/23

--
$ openssl x509 -text -inform DER -in rsync/rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/5z-4ho3TtGHqGmc8ejaUUjXpyq4.cer
Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 15578 (0x3cda)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A90DC5BE/serialNumber=740165A80D1071970ABC09C02B71C1AC7C1D6E0E
        Validity
            Not Before: Sep 10 04:48:04 2021 GMT
            Not After : Dec  1 00:00:00 2022 GMT
        Subject: CN=A91FCEB1/serialNumber=E73FB8868DD3B461EA1A673C7A36945235E9CAAE
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ea:e6:89:46:c3:b5:15:5e:39:58:69:14:65:92:
                    0e:b7:51:ac:0e:3d:45:d1:85:40:46:c7:3e:b5:a0:
                    5f:43:cc:b6:d3:11:95:43:a3:39:09:6d:63:07:31:
                    b9:7b:68:95:7f:f2:4b:bb:88:11:e2:91:90:d6:2f:
                    e7:b9:8a:9a:ff:da:85:c5:0a:0c:44:93:d5:7b:4b:
                    ba:89:4e:df:5d:d1:4b:6c:f7:bd:7f:4a:74:1c:f0:
                    99:b8:ee:c6:f9:7d:82:42:6c:b2:b5:9f:91:a2:e7:
                    3e:66:5f:76:70:4b:62:1f:6e:45:bb:27:97:57:ba:
                    01:be:d8:d9:65:7f:57:c6:39:11:ef:d9:92:02:e0:
                    00:a1:b2:b5:d0:08:1c:42:36:8b:fc:71:be:db:90:
                    d8:11:fb:4f:83:c9:4d:ed:9c:7b:7d:b5:c6:e8:ff:
                    80:90:cb:d6:99:ae:8b:a2:7c:5b:cb:b2:06:0b:e0:
                    07:47:99:bd:ca:db:08:6f:b2:9a:27:ef:6b:fc:e3:
                    b0:2a:18:0e:96:0c:b3:68:30:39:de:1d:f0:57:77:
                    2f:ea:54:aa:84:8c:60:9d:31:af:e5:ec:17:8c:12:
                    87:a8:ec:92:8d:f5:d4:2d:a2:56:62:8d:65:dd:c0:
                    d0:b3:03:d0:34:95:a6:f9:3f:ff:b3:09:27:7d:e0:
                    c4:a3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier: 
                E7:3F:B8:86:8D:D3:B4:61:EA:1A:67:3C:7A:36:94:52:35:E9:CA:AE
            X509v3 Authority Key Identifier: 
                keyid:74:01:65:A8:0D:10:71:97:0A:BC:09:C0:2B:71:C1:AC:7C:1D:6E:0E

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points: 

                Full Name:
                  URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl

            Authority Information Access: 
                CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access: 
                CA Repository - URI:rsync://rpki.apnic.net/member_repository/A91FCEB1/9C14B4063A2111E79AA0D51CC4F9AE02/
                RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A91FCEB1/9C14B4063A2111E79AA0D51CC4F9AE02/5z-4ho3TtGHqGmc8ejaUUjXpyq4.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.249.42.0/23

    Signature Algorithm: sha256WithRSAEncryption
         c6:7e:03:dc:dd:6b:94:39:22:12:39:6f:1d:da:10:74:58:0c:
         62:b9:61:a7:9d:9c:ab:e2:80:bc:e0:81:c4:e6:82:5d:8f:9b:
         4c:40:84:71:19:5a:9a:75:b5:0e:2a:4c:68:58:74:8b:a0:7b:
         83:ff:81:ff:1d:76:3c:86:84:7e:5c:2b:af:9c:db:d1:4a:1d:
         c0:22:ec:80:e8:7b:19:2e:a0:df:42:bf:73:4e:82:c3:00:a8:
         4e:8f:a5:c8:4c:af:11:f6:cf:e6:8a:ec:6f:6c:9e:ea:8f:1d:
         97:cc:3e:da:7d:a0:ae:f1:e0:97:fb:de:30:fa:0e:bc:ab:79:
         cd:d0:8a:68:47:e4:f0:61:ab:a3:c8:4e:05:9c:96:15:0a:84:
         62:e2:61:04:29:91:a0:a4:a8:b3:ec:e9:9e:46:dd:cf:57:23:
         d1:74:bf:41:7a:a6:81:f4:d1:5a:d1:fc:92:04:09:5e:e1:dc:
         0c:19:3e:61:97:12:87:71:1b:7c:4f:b1:bc:fd:14:4d:b6:5a:
         cb:7f:1c:9d:9a:99:b6:9f:1c:0f:59:d7:1a:5f:b8:66:8d:44:
         38:ab:20:d2:2d:26:48:18:b2:7c:ad:2c:8c:05:62:a3:33:dd:
         6d:55:99:9d:2d:4b:9c:ce:2a:8c:cb:f4:d2:2f:e4:c1:7c:08:
         e7:c1:f9:f2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Generated at Sun Sep 26 12:49:57 2021 by LibreSSL & rpki-client.