RPKI Certificate
Location:                 ./rsync/rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/6TgxzNk_PMtWLVCvOD6f2mT3lDo.cer (download)

Subject key identifier:   E9:38:31:CC:D9:3F:3C:CB:56:2D:50:AF:38:3E:9F:DA:64:F7:94:3A
Authority key identifier: 74:01:65:A8:0D:10:71:97:0A:BC:09:C0:2B:71:C1:AC:7C:1D:6E:0E
Manifest:                 rpki.apnic.net/member_repository/A91AC0D1/EB450A1EA75A11E9A2A3B64EC4F9AE02/6TgxzNk_PMtWLVCvOD6f2mT3lDo.mft
CA Repository:            rpki.apnic.net/member_repository/A91AC0D1/EB450A1EA75A11E9A2A3B64EC4F9AE02/
Notification URL:         https://rrdp.apnic.net/notification.xml
Subject Public Key Info:  
Subordinate resources:
    until: 2023-01-31T00:00:00Z
    Resources:
    1: IP: 128.184.0.0/16
    2: IP: 139.132.0.0/16

--
$ openssl x509 -text -inform DER -in ./rsync/rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/6TgxzNk_PMtWLVCvOD6f2mT3lDo.cer
Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 15871 (0x3dff)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A90DC5BE/serialNumber=740165A80D1071970ABC09C02B71C1AC7C1D6E0E
        Validity
            Not Before: Nov  2 04:16:03 2021 GMT
            Not After : Jan 31 00:00:00 2023 GMT
        Subject: CN=A91AC0D1/serialNumber=E93831CCD93F3CCB562D50AF383E9FDA64F7943A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d8:c9:32:70:c2:6b:98:e5:51:e1:c7:a6:c4:1c:
                    f8:fd:9b:47:d3:ad:93:9a:44:72:2a:b7:3f:1d:ba:
                    a8:e4:0a:38:14:a8:dd:70:40:b3:16:50:dd:91:d0:
                    1d:b7:d9:22:21:db:7e:c8:65:6a:15:0d:c0:bc:7f:
                    ff:9a:22:9e:47:27:b6:d6:46:af:04:de:cb:60:e2:
                    d0:a4:6e:9d:30:05:29:c5:49:05:51:ee:34:f0:c9:
                    22:1d:87:b8:08:95:8d:1d:f7:c8:15:d8:9a:53:ae:
                    6a:ad:1d:bc:eb:ae:04:e4:65:69:89:d5:d2:28:2f:
                    f5:9d:ee:2d:a8:5f:0c:41:e9:d6:7e:7b:e2:3d:ef:
                    5a:d7:7a:54:61:f7:ac:49:48:18:b2:39:a9:c3:e5:
                    08:9d:78:d2:e9:48:93:26:53:60:7a:d2:df:ad:10:
                    02:8a:d1:40:ca:7e:94:03:69:93:b4:f6:ae:dd:f6:
                    e6:81:10:69:3c:46:8b:7c:1e:bf:31:df:66:02:a3:
                    e9:15:a2:f5:46:de:42:ba:33:82:85:40:ac:75:5f:
                    10:24:83:b4:c4:26:4b:44:de:c5:9d:b4:07:63:38:
                    94:9b:5a:23:74:6e:46:23:ba:17:28:83:8a:8e:bd:
                    72:6a:29:cf:9b:ec:ec:38:e8:d7:65:f6:d2:53:33:
                    72:ad
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier: 
                E9:38:31:CC:D9:3F:3C:CB:56:2D:50:AF:38:3E:9F:DA:64:F7:94:3A
            X509v3 Authority Key Identifier: 
                keyid:74:01:65:A8:0D:10:71:97:0A:BC:09:C0:2B:71:C1:AC:7C:1D:6E:0E

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points: 

                Full Name:
                  URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl

            Authority Information Access: 
                CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access: 
                CA Repository - URI:rsync://rpki.apnic.net/member_repository/A91AC0D1/EB450A1EA75A11E9A2A3B64EC4F9AE02/
                RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A91AC0D1/EB450A1EA75A11E9A2A3B64EC4F9AE02/6TgxzNk_PMtWLVCvOD6f2mT3lDo.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  128.184.0.0/16
                  139.132.0.0/16

    Signature Algorithm: sha256WithRSAEncryption
         8d:53:b0:c2:99:fe:42:cf:2d:ad:6f:18:b0:bc:f2:52:0e:2f:
         e7:fb:3a:b0:57:8f:aa:12:ad:20:a8:4b:92:b1:37:49:cc:ce:
         ab:2b:2e:1e:7f:1f:bb:36:3c:1f:5b:77:56:53:db:e5:1c:e7:
         32:2c:72:f7:15:ae:81:77:1d:57:a0:1d:01:36:86:dd:04:f9:
         ea:c1:11:2a:15:c4:d5:fd:53:c1:3f:5e:b6:bf:10:7f:06:54:
         8e:43:b7:96:5d:1e:77:60:58:e7:a9:73:be:89:1b:2d:3b:7f:
         ac:62:ec:9c:88:e9:99:15:cd:6e:16:f3:62:fb:07:f1:92:03:
         98:35:ad:52:3d:65:0b:62:06:6e:da:a8:0d:a3:78:d8:bc:5d:
         e0:02:69:61:e0:cb:4b:d1:f0:5a:6d:1c:08:12:73:51:c7:32:
         72:29:10:db:c7:e5:3e:12:43:39:89:cd:3e:ba:2f:61:89:52:
         a1:ba:49:8c:4f:7f:5b:3d:a1:52:f1:ba:63:35:ca:25:68:24:
         b6:5a:15:b2:d5:80:0d:80:1b:26:ec:44:3a:ca:6c:24:9e:1f:
         de:62:d0:4d:7e:4c:be:34:5d:b4:f7:d4:ca:c8:cc:2f:e4:88:
         fe:1a:9b:08:5a:4b:e9:85:f7:76:42:1f:a6:d6:b6:17:6b:ca:
         01:8e:84:74
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Generated at Tue Nov 2 06:12:41 2021 by LibreSSL & rpki-client.