RPKI Certificate
Location:                 rsync/rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/CC8e6S_qY3P9odWuxG4vLYrorIc.cer (download)

Subject key identifier:   08:2F:1E:E9:2F:EA:63:73:FD:A1:D5:AE:C4:6E:2F:2D:8A:E8:AC:87
Authority key identifier: 74:01:65:A8:0D:10:71:97:0A:BC:09:C0:2B:71:C1:AC:7C:1D:6E:0E
Manifest:                 rpki.apnic.net/member_repository/A919F0DA/FC61E0081D6711E28C1828A408B02CD2/CC8e6S_qY3P9odWuxG4vLYrorIc.mft
CA Repository:            rpki.apnic.net/member_repository/A919F0DA/FC61E0081D6711E28C1828A408B02CD2/
Notification URL:         https://rrdp.apnic.net/notification.xml
Subordinate resources:
    1: IP: 164.100.0.0/16

--
$ openssl x509 -text -inform DER -in rsync/rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/CC8e6S_qY3P9odWuxG4vLYrorIc.cer
Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 15533 (0x3cad)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A90DC5BE/serialNumber=740165A80D1071970ABC09C02B71C1AC7C1D6E0E
        Validity
            Not Before: Sep  1 02:15:39 2021 GMT
            Not After : Aug 31 00:00:00 2022 GMT
        Subject: CN=A919F0DA/serialNumber=082F1EE92FEA6373FDA1D5AEC46E2F2D8AE8AC87
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:65:9a:08:7b:d3:75:be:2a:a3:48:ac:8f:45:
                    1d:3f:76:7f:ad:75:27:53:a2:88:fc:db:17:29:9c:
                    2a:31:e0:25:6a:d8:94:27:d3:b2:eb:4f:80:b1:27:
                    18:0a:82:d2:b1:66:db:c2:d7:a9:27:cf:a6:ea:58:
                    7a:07:b3:ce:1f:9e:a4:fc:0b:4d:5f:ee:7a:b9:7c:
                    7f:d8:fb:f5:31:f6:98:52:14:5f:c2:80:04:e0:a3:
                    9d:2a:87:1b:fa:68:90:63:d0:c1:9c:15:92:3a:9d:
                    95:59:4c:7a:49:cf:97:3a:d7:fa:a7:66:56:8f:09:
                    1c:60:37:17:b9:72:f7:1c:8a:bc:0a:a6:51:e3:fe:
                    cb:a4:cf:bc:ab:db:3e:06:6f:f7:29:3f:ae:e9:2c:
                    f0:a8:2c:e5:13:8d:00:4c:25:3a:50:b8:70:f7:45:
                    b0:6b:3a:7c:50:c8:4e:3f:42:d0:61:43:d9:9f:39:
                    6a:03:a3:8b:01:fc:36:47:eb:0f:85:b3:ff:ee:a6:
                    42:72:f4:6b:cc:dd:e2:17:98:e0:fa:f3:32:fa:a0:
                    c7:9b:1b:bf:94:07:8b:23:4d:7b:dd:31:6a:73:5f:
                    e6:a4:1a:68:63:ab:d0:ce:48:11:5a:9d:6a:cb:ec:
                    6b:10:93:89:e9:0c:35:d2:b9:f3:95:b1:8d:c4:7e:
                    5c:35
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier: 
                08:2F:1E:E9:2F:EA:63:73:FD:A1:D5:AE:C4:6E:2F:2D:8A:E8:AC:87
            X509v3 Authority Key Identifier: 
                keyid:74:01:65:A8:0D:10:71:97:0A:BC:09:C0:2B:71:C1:AC:7C:1D:6E:0E

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points: 

                Full Name:
                  URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl

            Authority Information Access: 
                CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access: 
                CA Repository - URI:rsync://rpki.apnic.net/member_repository/A919F0DA/FC61E0081D6711E28C1828A408B02CD2/
                RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A919F0DA/FC61E0081D6711E28C1828A408B02CD2/CC8e6S_qY3P9odWuxG4vLYrorIc.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  164.100.0.0/16

    Signature Algorithm: sha256WithRSAEncryption
         22:69:66:3a:c2:ed:5b:b4:34:a6:67:d2:c7:ec:66:0c:c1:be:
         5e:ab:5d:95:7c:52:52:88:9e:b5:98:1f:1c:08:62:86:e2:01:
         cf:5d:04:fa:33:af:e5:49:be:d0:d1:5d:7d:f1:1a:6c:05:71:
         51:cd:1d:ec:ee:04:73:f4:68:78:cf:52:3a:43:40:53:33:08:
         8e:ed:5b:ad:cb:fa:7d:d5:50:75:ef:7b:60:11:ff:2f:d9:d7:
         5e:a3:d6:a3:83:f8:49:a2:a7:88:05:7b:ff:28:69:4f:57:8d:
         2b:45:2a:a8:83:b1:26:c6:43:e4:35:ff:b8:5c:30:61:b1:73:
         40:e1:e5:98:4e:9a:a7:a5:4c:47:11:b5:ae:46:57:82:31:27:
         7d:9f:36:7d:a5:e7:b7:4c:ff:d0:8f:f6:aa:6d:8f:cf:27:61:
         6a:70:77:a1:08:c3:4d:c3:b5:38:a0:97:8d:a5:b9:3e:15:0d:
         8f:7e:dc:20:a3:ea:5e:29:bf:7b:f7:c3:45:ff:40:52:a2:85:
         72:15:fb:f7:15:e9:68:04:e7:ed:87:ec:94:5b:0d:d8:28:65:
         a5:62:38:12:4a:3c:1f:96:a1:e1:d9:cb:97:5d:82:9c:6a:8b:
         84:e2:84:4d:00:30:ad:ef:7d:db:d1:90:04:ed:65:62:38:91:
         40:61:de:36
-----BEGIN CERTIFICATE-----
MIIF/DCCBOSgAwIBAgICPK0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkw
REM1QkUxMTAvBgNVBAUTKDc0MDE2NUE4MEQxMDcxOTcwQUJDMDlDMDJCNzFDMUFD
N0MxRDZFMEUwHhcNMjEwOTAxMDIxNTM5WhcNMjIwODMxMDAwMDAwWjBGMREwDwYD
VQQDEwhBOTE5RjBEQTExMC8GA1UEBRMoMDgyRjFFRTkyRkVBNjM3M0ZEQTFENUFF
QzQ2RTJGMkQ4QUU4QUM4NzCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEB
AKllmgh703W+KqNIrI9FHT92f611J1OiiPzbFymcKjHgJWrYlCfTsutPgLEnGAqC
0rFm28LXqSfPpupYegezzh+epPwLTV/uerl8f9j79TH2mFIUX8KABOCjnSqHG/po
kGPQwZwVkjqdlVlMeknPlzrX+qdmVo8JHGA3F7ly9xyKvAqmUeP+y6TPvKvbPgZv
9yk/ruks8Kgs5RONAEwlOlC4cPdFsGs6fFDITj9C0GFD2Z85agOjiwH8NkfrD4Wz
/+6mQnL0a8zd4heY4PrzMvqgx5sbv5QHiyNNe90xanNf5qQaaGOr0M5IEVqdasvs
axCTiekMNdK585WxjcR+XDUCAwEAAaOCAvIwggLuMB0GA1UdDgQWBBQILx7pL+pj
c/2h1a7Ebi8tiuishzAfBgNVHSMEGDAWgBR0AWWoDRBxlwq8CcArccGsfB1uDjAO
BgNVHQ8BAf8EBAMCAQYwDwYDVR0TAQH/BAUwAwEB/zBzBgNVHR8EbDBqMGigZqBk
hmJyc3luYzovL3Jwa2kuYXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRGMjAxRDY2
MTFFMjhBQzg4MzdDNzJGRDFGRjIvZEFGbHFBMFFjWmNLdkFuQUszSEJySHdkYmc0
LmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5h
cG5pYy5uZXQvcmVwb3NpdG9yeS85ODA2NTJFMEI3N0UxMUU3QTk2QTM5NTIxQTRG
NEZCNC9kQUZscUEwUWNaY0t2QW5BSzNIQnJId2RiZzQuY2VyMEoGA1UdIAEB/wRA
MD4wPAYIKwYBBQUHDgIwMDAuBggrBgEFBQcCARYiaHR0cHM6Ly93d3cuYXBuaWMu
bmV0L1JQS0kvQ1BTLnBkZjCCASgGCCsGAQUFBwELBIIBGjCCARYwXwYIKwYBBQUH
MAWGU3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
OUYwREEvRkM2MUUwMDgxRDY3MTFFMjhDMTgyOEE0MDhCMDJDRDIvMH4GCCsGAQUF
BzAKhnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5
MTlGMERBL0ZDNjFFMDA4MUQ2NzExRTI4QzE4MjhBNDA4QjAyQ0QyL0NDOGU2U19x
WTNQOW9kV3V4RzR2TFlyb3JJYy5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJk
cC5hcG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAeBggrBgEFBQcBBwEB/wQPMA0w
CwQCAAEwBQMDAKRkMA0GCSqGSIb3DQEBCwUAA4IBAQAiaWY6wu1btDSmZ9LH7GYM
wb5eq12VfFJSiJ61mB8cCGKG4gHPXQT6M6/lSb7Q0V198RpsBXFRzR3s7gRz9Gh4
z1I6Q0BTMwiO7Vuty/p91VB173tgEf8v2ddeo9ajg/hJoqeIBXv/KGlPV40rRSqo
g7EmxkPkNf+4XDBhsXNA4eWYTpqnpUxHEbWuRleCMSd9nzZ9pee3TP/Qj/aqbY/P
J2FqcHehCMNNw7U4oJeNpbk+FQ2Pftwgo+peKb9798NF/0BSooVyFfv3FeloBOft
h+yUWw3YKGWlYjgSSjwflqHh2cuXXYKcaouE4oRNADCt733b0ZAE7WViOJFAYd42
-----END CERTIFICATE-----

Generated at Sun Sep 26 12:49:58 2021 by LibreSSL & rpki-client.