RPKI Certificate
Location:                 ./rsync/rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/BUM8OuqKSXAsmoLuyV0WtVA86mA.cer (download)

Subject key identifier:   05:43:3C:3A:EA:8A:49:70:2C:9A:82:EE:C9:5D:16:B5:50:3C:EA:60
Authority key identifier: 74:01:65:A8:0D:10:71:97:0A:BC:09:C0:2B:71:C1:AC:7C:1D:6E:0E
Manifest:                 rpki.apnic.net/member_repository/A91CFFA0/150BF690D8CB11E9BAE24D21C4F9AE02/BUM8OuqKSXAsmoLuyV0WtVA86mA.mft
CA Repository:            rpki.apnic.net/member_repository/A91CFFA0/150BF690D8CB11E9BAE24D21C4F9AE02/
Notification URL:         https://rrdp.apnic.net/notification.xml
Subject Public Key Info:  
Subordinate resources:
    until: 2023-03-31T00:00:00Z
    Resources:
    1: IP: 134.159.0.0/16
    2: IP: 192.154.16.0/24
    3: IP: 192.154.24.0/23

--
$ openssl x509 -text -inform DER -in ./rsync/rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/BUM8OuqKSXAsmoLuyV0WtVA86mA.cer
Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 16329 (0x3fc9)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A90DC5BE/serialNumber=740165A80D1071970ABC09C02B71C1AC7C1D6E0E
        Validity
            Not Before: Jan 24 06:00:07 2022 GMT
            Not After : Mar 31 00:00:00 2023 GMT
        Subject: CN=A91CFFA0/serialNumber=05433C3AEA8A49702C9A82EEC95D16B5503CEA60
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:ca:96:3b:3a:77:1c:1b:d5:41:4a:99:fe:7a:
                    28:a5:ab:dd:5e:ba:20:4a:6a:59:a5:53:01:1b:9c:
                    ad:a3:41:05:d4:74:77:57:d0:db:77:a5:45:17:12:
                    a4:b7:2c:7d:97:85:59:80:1f:7a:ce:3d:52:4c:7b:
                    bc:1a:74:90:d2:06:02:1c:b0:16:44:31:69:cc:46:
                    0c:7c:39:cc:33:69:b5:9b:df:77:37:6f:ee:e1:3b:
                    e3:6c:03:d1:1f:db:dd:99:0a:ef:79:29:43:d3:30:
                    ae:04:68:db:4f:cd:f0:fd:8e:2a:ac:ea:16:ef:a7:
                    96:d6:a0:39:c4:06:bf:54:13:8b:2a:72:b6:0c:89:
                    e8:6f:4a:a4:b2:51:36:9f:4a:91:ff:b2:3d:ea:df:
                    07:f1:2c:c1:1c:1c:06:98:88:35:4f:6a:96:68:24:
                    6f:43:ad:09:4d:89:09:c0:42:58:7e:70:be:65:ee:
                    a3:2f:a4:35:a2:c2:35:47:b1:32:2f:35:dc:f3:a3:
                    a3:de:5c:db:17:59:13:58:0b:43:b6:ac:22:e1:75:
                    84:f6:49:44:ee:23:56:d3:5d:e4:7b:46:e5:12:1f:
                    35:14:7e:80:64:d7:64:f9:cf:a4:ed:58:36:11:e4:
                    f9:60:24:ef:df:53:a5:96:ca:be:19:46:62:40:f8:
                    2e:a3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier: 
                05:43:3C:3A:EA:8A:49:70:2C:9A:82:EE:C9:5D:16:B5:50:3C:EA:60
            X509v3 Authority Key Identifier: 
                keyid:74:01:65:A8:0D:10:71:97:0A:BC:09:C0:2B:71:C1:AC:7C:1D:6E:0E

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points: 

                Full Name:
                  URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl

            Authority Information Access: 
                CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access: 
                CA Repository - URI:rsync://rpki.apnic.net/member_repository/A91CFFA0/150BF690D8CB11E9BAE24D21C4F9AE02/
                RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A91CFFA0/150BF690D8CB11E9BAE24D21C4F9AE02/BUM8OuqKSXAsmoLuyV0WtVA86mA.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  134.159.0.0/16
                  192.154.16.0/24
                  192.154.24.0/23

    Signature Algorithm: sha256WithRSAEncryption
         12:5e:28:f7:62:6f:df:5b:af:27:a1:bf:9f:a6:93:14:81:2b:
         de:e8:4e:15:c2:af:cf:c7:2a:ec:5b:ed:b8:1c:da:6b:72:4a:
         42:ff:e8:09:d8:22:d6:78:21:e4:e0:9c:62:dc:9f:fd:5d:39:
         9a:a1:e6:47:90:45:a8:16:03:85:70:eb:d9:6f:d7:73:f5:25:
         9d:bc:b5:2d:16:6b:28:cf:5f:37:fc:6f:77:14:d4:b7:46:9a:
         2f:15:3a:1c:8e:82:72:fc:17:8a:f2:27:3a:79:b2:54:3a:ff:
         3c:cf:3c:47:e2:a5:80:c2:db:48:30:3c:82:0e:a0:c5:74:08:
         3c:be:12:22:f2:74:81:8e:4b:7e:1b:36:33:25:b4:de:0a:ab:
         ad:28:39:19:4c:54:86:33:8d:df:0a:54:91:54:32:e6:2c:bf:
         1f:b5:ae:37:f9:a0:3a:74:e2:12:c4:7d:90:2b:8a:cc:aa:f1:
         7c:7b:d5:2d:2e:38:47:1d:23:4f:ff:8b:87:cb:35:a4:48:c6:
         ce:c7:d1:eb:06:78:dd:ce:66:c6:b3:46:2b:66:87:af:4f:36:
         b4:5b:b2:39:a2:dd:26:3d:86:f1:a1:cc:dd:fd:81:f9:e8:19:
         90:3e:5f:5a:bc:91:4e:69:6b:18:5e:82:ad:f2:53:c0:9d:21:
         2a:5f:2a:c6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Generated at Mon Jan 24 07:44:29 2022 by LibreSSL & rpki-client.