RPKI Certificate
Location:                 ./rsync/rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/DqGarmkA4IY_Ye34Klvl0CVu64g.cer (download)

Subject key identifier:   0E:A1:9A:AE:69:00:E0:86:3F:61:ED:F8:2A:5B:E5:D0:25:6E:EB:88
Authority key identifier: 74:01:65:A8:0D:10:71:97:0A:BC:09:C0:2B:71:C1:AC:7C:1D:6E:0E
Manifest:                 rpki.apnic.net/member_repository/A9113F6F/5A2C1AEC62B811ECA3CD2D6AC4F9AE02/DqGarmkA4IY_Ye34Klvl0CVu64g.mft
CA Repository:            rpki.apnic.net/member_repository/A9113F6F/5A2C1AEC62B811ECA3CD2D6AC4F9AE02/
Notification URL:         https://rrdp.apnic.net/notification.xml
Subject Public Key Info:  
Subordinate resources:
    until: 2022-12-01T00:00:00Z
    Resources:
    1: IP: 161.139.0.0/16

--
$ openssl x509 -text -inform DER -in ./rsync/rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/DqGarmkA4IY_Ye34Klvl0CVu64g.cer
Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 16158 (0x3f1e)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A90DC5BE/serialNumber=740165A80D1071970ABC09C02B71C1AC7C1D6E0E
        Validity
            Not Before: Dec 21 23:47:34 2021 GMT
            Not After : Dec  1 00:00:00 2022 GMT
        Subject: CN=A9113F6F/serialNumber=0EA19AAE6900E0863F61EDF82A5BE5D0256EEB88
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:05:3e:eb:53:ee:ba:8e:32:88:e4:37:2b:d3:
                    6a:40:a5:cc:08:6d:2e:ed:19:19:03:ba:6c:f1:d1:
                    f3:f5:a0:04:b0:e9:4c:96:6c:18:4f:86:dd:2f:23:
                    68:55:76:75:d7:b0:78:21:4b:93:ad:63:25:6b:b6:
                    e7:f6:86:5c:fb:d9:68:11:b4:04:f6:61:a9:1c:1e:
                    11:19:b1:f8:85:a8:b8:f4:5f:d8:0d:93:5e:63:91:
                    94:5a:5c:80:62:ab:eb:8e:cc:b6:ca:7a:25:4f:63:
                    bc:30:9b:b9:e3:70:76:9c:8d:a8:62:32:d6:64:6c:
                    3b:d7:ce:54:e3:6e:76:95:24:0e:57:fd:db:14:81:
                    df:7c:e6:d5:7f:e2:c6:79:35:fe:40:d7:fd:f3:f0:
                    db:84:4b:28:67:81:03:0d:84:cb:62:33:d0:75:45:
                    88:27:c6:19:88:9f:5f:e1:81:1a:36:6b:aa:10:ea:
                    3e:af:00:73:05:da:05:20:09:b0:a5:aa:1f:98:b6:
                    53:7e:00:22:85:73:6f:f0:d7:81:95:d4:3c:ab:21:
                    0d:4b:47:46:8f:17:88:33:72:56:c1:92:9b:2f:e5:
                    4d:76:53:64:1f:08:dc:bd:c6:d6:00:3a:ac:9e:58:
                    1b:6a:56:34:10:24:5a:d0:5a:c8:88:d7:ae:7c:c4:
                    7c:a1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier: 
                0E:A1:9A:AE:69:00:E0:86:3F:61:ED:F8:2A:5B:E5:D0:25:6E:EB:88
            X509v3 Authority Key Identifier: 
                keyid:74:01:65:A8:0D:10:71:97:0A:BC:09:C0:2B:71:C1:AC:7C:1D:6E:0E

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points: 

                Full Name:
                  URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl

            Authority Information Access: 
                CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access: 
                CA Repository - URI:rsync://rpki.apnic.net/member_repository/A9113F6F/5A2C1AEC62B811ECA3CD2D6AC4F9AE02/
                RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A9113F6F/5A2C1AEC62B811ECA3CD2D6AC4F9AE02/DqGarmkA4IY_Ye34Klvl0CVu64g.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  161.139.0.0/16

    Signature Algorithm: sha256WithRSAEncryption
         7d:74:7d:d6:1d:37:30:6a:17:35:6b:2f:0b:47:bf:3c:6b:fd:
         41:3a:50:94:46:fe:f3:27:b8:11:f1:83:a4:2d:73:ab:57:8f:
         88:2e:94:e8:39:cd:95:87:d1:69:64:dd:07:a3:6c:a7:37:e1:
         0f:b2:55:a1:8f:82:42:62:50:23:45:0d:8c:ec:07:37:a1:35:
         26:4f:ae:08:c6:2d:07:c2:b3:1d:cc:d7:9d:d0:66:96:54:cb:
         72:7b:ea:e5:ae:87:7d:23:14:2d:e8:54:85:ee:01:2c:b7:b7:
         a7:86:a0:2f:97:0d:f3:2f:70:f1:6c:3f:ad:61:e5:8c:c4:b4:
         15:57:7c:2b:d4:80:a6:84:19:3c:85:d4:9f:42:23:18:7d:8a:
         ae:7a:af:b1:4c:06:01:da:77:42:64:3b:df:fb:7f:97:04:4e:
         e2:39:a0:cc:53:4a:a1:98:cd:1d:bf:40:07:9f:6b:d9:da:7d:
         49:88:7a:33:a9:d4:33:a4:1f:43:90:c0:8b:3e:d9:ff:f8:9e:
         4b:4b:88:37:91:84:9b:49:55:4f:9d:6e:ee:a2:c8:2d:05:ce:
         ef:84:dc:9e:0d:15:d8:65:07:9a:e0:a1:b4:09:0a:b3:bc:af:
         78:62:c3:cf:39:a7:bf:dc:47:57:f7:c3:ad:75:6c:46:ad:46:
         d2:cb:81:46
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Generated at Wed Dec 22 01:04:56 2021 by LibreSSL & rpki-client.