RPKI Certificate
Location:                 rsync/rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/DFpUKh6bP7XI5JaG6-vPwFDM5KU.cer (download)

Subject key identifier:   0C:5A:54:2A:1E:9B:3F:B5:C8:E4:96:86:EB:EB:CF:C0:50:CC:E4:A5
Authority key identifier: 74:01:65:A8:0D:10:71:97:0A:BC:09:C0:2B:71:C1:AC:7C:1D:6E:0E
Manifest:                 rpki.apnic.net/member_repository/A918495F/78D5D896DFEC11E7A27A2213C4F9AE02/DFpUKh6bP7XI5JaG6-vPwFDM5KU.mft
CA Repository:            rpki.apnic.net/member_repository/A918495F/78D5D896DFEC11E7A27A2213C4F9AE02/
Notification URL:         https://rrdp.apnic.net/notification.xml
Subordinate resources:
    1: IP: 168.70.0.0/16

--
$ openssl x509 -text -inform DER -in rsync/rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/DFpUKh6bP7XI5JaG6-vPwFDM5KU.cer
Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 15084 (0x3aec)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A90DC5BE/serialNumber=740165A80D1071970ABC09C02B71C1AC7C1D6E0E
        Validity
            Not Before: Jun 16 05:26:50 2021 GMT
            Not After : Jul 30 00:00:00 2022 GMT
        Subject: CN=A918495F/serialNumber=0C5A542A1E9B3FB5C8E49686EBEBCFC050CCE4A5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d8:b1:43:af:54:39:e4:a9:e5:a4:64:03:ee:4c:
                    c2:d5:09:6a:23:3f:83:97:7a:31:4e:d9:49:01:bb:
                    bd:c7:22:a7:b0:02:e2:22:55:97:d1:96:5a:11:4c:
                    34:d3:4a:0c:4f:3b:7d:81:7c:57:2b:3c:c6:39:8d:
                    f2:0e:74:3f:b4:6c:53:70:83:02:b6:9d:63:a3:05:
                    54:75:82:09:33:6c:d5:ac:bf:8d:f8:b8:40:10:44:
                    d0:5c:c4:16:7c:bc:12:1f:9c:08:06:32:a7:00:09:
                    40:47:de:80:a8:37:26:29:dc:8c:d3:09:61:87:e4:
                    67:82:cb:6d:67:ee:e9:49:df:30:8d:2b:ee:e3:21:
                    e7:67:fb:ce:39:56:75:71:aa:af:fd:9c:8b:58:6c:
                    20:4f:1f:c7:ee:77:a6:93:68:22:56:ea:bf:8e:4b:
                    ae:ee:f3:27:31:fe:a8:d5:80:68:6a:a1:4a:66:a0:
                    26:2b:89:8c:a3:cd:b9:28:b6:47:8c:ff:55:25:f4:
                    2f:57:bc:da:59:55:2b:a9:aa:0e:f9:9d:68:d7:99:
                    e4:ef:ed:49:fd:55:10:d5:79:03:2e:7c:fb:0e:df:
                    cf:f8:84:08:11:cd:d1:09:14:2e:56:85:d3:67:cf:
                    62:b4:c5:60:29:57:f8:da:ab:6c:1a:84:31:d4:96:
                    de:f5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier: 
                0C:5A:54:2A:1E:9B:3F:B5:C8:E4:96:86:EB:EB:CF:C0:50:CC:E4:A5
            X509v3 Authority Key Identifier: 
                keyid:74:01:65:A8:0D:10:71:97:0A:BC:09:C0:2B:71:C1:AC:7C:1D:6E:0E

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points: 

                Full Name:
                  URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl

            Authority Information Access: 
                CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access: 
                CA Repository - URI:rsync://rpki.apnic.net/member_repository/A918495F/78D5D896DFEC11E7A27A2213C4F9AE02/
                RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A918495F/78D5D896DFEC11E7A27A2213C4F9AE02/DFpUKh6bP7XI5JaG6-vPwFDM5KU.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  168.70.0.0/16

    Signature Algorithm: sha256WithRSAEncryption
         50:f0:c0:5a:e2:e2:71:03:d1:37:e2:ac:26:d2:b8:9c:dd:18:
         b4:33:f8:e4:35:bb:c3:91:20:0f:25:82:2a:f2:99:69:e1:e2:
         65:74:d0:e9:47:01:e6:88:07:ab:fd:b2:aa:cb:2b:e4:29:cd:
         2c:24:c8:bc:ac:76:e6:7a:40:ac:ec:87:07:c4:8c:c3:d8:e5:
         b8:c3:f6:64:42:47:08:b5:b0:87:03:38:f8:51:d9:80:57:b2:
         0b:1e:06:b5:e6:31:87:b3:db:e6:cf:26:21:fc:30:b5:65:76:
         5a:d5:9a:d1:43:5d:88:08:e5:7a:70:de:7b:2d:43:b4:d7:b0:
         92:69:af:fb:4a:05:ac:62:5e:01:48:b1:2b:40:e1:61:12:00:
         81:be:ed:5f:be:70:ac:79:25:b1:22:0f:e0:a2:ef:5b:36:ac:
         44:fd:69:56:9b:05:5c:59:e6:13:ff:f1:e5:70:6e:cf:63:a5:
         1e:41:8d:a6:6e:bb:0e:0f:63:9c:d3:cd:32:e4:82:1e:6b:49:
         2c:71:70:62:68:1e:e1:a5:c2:9b:ef:83:28:70:86:80:45:88:
         0c:a8:fd:db:b6:54:40:89:0c:53:af:70:a7:00:25:0d:3c:53:
         a5:87:11:5f:3c:c4:69:c6:ba:21:f2:e7:e1:a0:93:b1:e8:51:
         d9:15:43:6c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Generated at Sun Sep 26 12:49:58 2021 by LibreSSL & rpki-client.