RPKI Certificate
Location:                 rsync/rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ERAxDg-ARncD2Ed_s-4l8diIjp4.cer (download)

Subject key identifier:   11:10:31:0E:0F:80:46:77:03:D8:47:7F:B3:EE:25:F1:D8:88:8E:9E
Authority key identifier: 74:01:65:A8:0D:10:71:97:0A:BC:09:C0:2B:71:C1:AC:7C:1D:6E:0E
Manifest:                 rpki.apnic.net/member_repository/A91EA958/FDEFD7364BD611E5A7CA3033C4F9AE02/ERAxDg-ARncD2Ed_s-4l8diIjp4.mft
CA Repository:            rpki.apnic.net/member_repository/A91EA958/FDEFD7364BD611E5A7CA3033C4F9AE02/
Notification URL:         https://rrdp.apnic.net/notification.xml
Subordinate resources:
    1: IP: 96.9.64.0/19
    2: IP: 136.228.128.0/19

--
$ openssl x509 -text -inform DER -in rsync/rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ERAxDg-ARncD2Ed_s-4l8diIjp4.cer
Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 15176 (0x3b48)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A90DC5BE/serialNumber=740165A80D1071970ABC09C02B71C1AC7C1D6E0E
        Validity
            Not Before: Jul  1 15:21:34 2021 GMT
            Not After : Sep 30 00:00:00 2022 GMT
        Subject: CN=A91EA958/serialNumber=1110310E0F80467703D8477FB3EE25F1D8888E9E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:da:98:a6:de:b0:27:03:fd:f6:22:50:aa:08:9c:
                    0f:a2:67:b6:dc:ea:80:3a:d4:33:8c:da:6f:e4:e6:
                    15:4f:72:1d:7f:e2:45:ca:c2:8e:cd:32:2a:86:a3:
                    28:b6:50:44:05:27:c3:3a:7b:c5:44:02:f0:86:14:
                    5a:17:7f:75:9e:66:09:4a:f9:1d:a9:51:39:05:77:
                    94:03:e4:9e:b3:c2:e7:38:db:fe:fe:36:44:36:12:
                    06:94:12:e7:90:c3:60:b1:40:9c:44:cc:7d:71:4f:
                    bf:83:d3:03:c2:63:99:fe:10:ec:2c:7a:c1:ea:bc:
                    04:6e:53:94:47:d4:3a:b6:18:87:ff:5a:7e:c8:c4:
                    42:38:49:3d:26:21:87:ed:98:41:64:36:8c:44:47:
                    f2:ca:06:70:4c:90:6f:39:b4:0d:ce:4a:2d:01:6b:
                    54:1e:ce:02:d7:fb:00:a1:48:3d:1f:e2:41:03:2b:
                    61:ec:16:9c:3c:9f:55:ab:a3:ad:05:95:8c:95:cc:
                    20:eb:a5:f3:0d:35:18:e6:42:bb:e8:64:2a:74:e1:
                    bd:85:2c:06:25:b5:cf:78:21:05:88:da:61:ec:02:
                    67:59:f0:76:d8:23:18:c3:a9:1c:ef:34:7b:cf:54:
                    5a:1c:a5:67:35:b2:b2:0b:d6:8b:1f:14:99:4b:f5:
                    17:0f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier: 
                11:10:31:0E:0F:80:46:77:03:D8:47:7F:B3:EE:25:F1:D8:88:8E:9E
            X509v3 Authority Key Identifier: 
                keyid:74:01:65:A8:0D:10:71:97:0A:BC:09:C0:2B:71:C1:AC:7C:1D:6E:0E

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points: 

                Full Name:
                  URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl

            Authority Information Access: 
                CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access: 
                CA Repository - URI:rsync://rpki.apnic.net/member_repository/A91EA958/FDEFD7364BD611E5A7CA3033C4F9AE02/
                RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A91EA958/FDEFD7364BD611E5A7CA3033C4F9AE02/ERAxDg-ARncD2Ed_s-4l8diIjp4.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  96.9.64.0/19
                  136.228.128.0/19

    Signature Algorithm: sha256WithRSAEncryption
         3e:8b:32:78:3c:b7:59:8e:ec:14:b4:91:bf:8b:39:77:20:bd:
         85:96:b6:0e:3a:5f:9d:c0:98:95:bc:ef:7b:89:64:f8:c9:5b:
         8b:80:44:7c:8a:06:b8:33:74:b4:42:d2:8b:9b:dd:52:b1:7f:
         d4:8a:63:5a:80:6e:c7:35:cb:25:89:7e:aa:83:8b:f9:c4:f1:
         ec:d4:39:36:f8:5f:4f:70:42:21:7f:29:e1:ea:df:4b:ef:e0:
         b9:2a:08:87:2b:2c:09:32:a2:e2:7b:0d:ab:68:f5:1f:72:b3:
         af:63:a0:d2:09:da:fa:ff:45:b8:62:89:69:13:ce:cc:5d:71:
         42:9f:62:68:66:82:65:05:ed:6c:32:6d:4f:e9:61:ac:53:bc:
         39:92:f2:4b:b7:9a:95:98:09:fb:93:c9:24:3a:cf:07:c3:c9:
         f9:21:29:e9:a2:12:d1:59:ff:69:2d:dc:50:61:3b:46:8f:ea:
         36:21:63:95:43:29:29:c6:91:b6:96:ab:72:93:9f:a0:ef:79:
         05:62:07:8c:e6:28:25:a1:ee:92:63:c6:2e:c3:52:a8:43:ed:
         ba:e6:16:bc:8b:ff:2d:c8:b5:a8:92:6d:dc:3c:7c:97:d7:40:
         2e:ae:62:d5:1f:ae:4c:a0:66:30:0f:17:fb:03:63:f0:95:18:
         93:c8:84:03
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Generated at Sun Sep 26 12:49:58 2021 by LibreSSL & rpki-client.