RPKI Certificate
Location:                 rsync/rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/HLS_2cCnMryPSmDIaUyR-DTKvBM.cer (download)

Subject key identifier:   1C:B4:BF:D9:C0:A7:32:BC:8F:4A:60:C8:69:4C:91:F8:34:CA:BC:13
Authority key identifier: 74:01:65:A8:0D:10:71:97:0A:BC:09:C0:2B:71:C1:AC:7C:1D:6E:0E
Manifest:                 rpki.apnic.net/member_repository/A91D83D0/03116312AFBC11EAA961CB86C4F9AE02/HLS_2cCnMryPSmDIaUyR-DTKvBM.mft
CA Repository:            rpki.apnic.net/member_repository/A91D83D0/03116312AFBC11EAA961CB86C4F9AE02/
Notification URL:         https://rrdp.apnic.net/notification.xml
Subordinate resources:
    1: IP: 148.66.128.0/19

--
$ openssl x509 -text -inform DER -in rsync/rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/HLS_2cCnMryPSmDIaUyR-DTKvBM.cer
Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 14663 (0x3947)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A90DC5BE/serialNumber=740165A80D1071970ABC09C02B71C1AC7C1D6E0E
        Validity
            Not Before: Mar 30 04:42:22 2021 GMT
            Not After : May 28 00:00:00 2022 GMT
        Subject: CN=A91D83D0/serialNumber=1CB4BFD9C0A732BC8F4A60C8694C91F834CABC13
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:db:6b:4a:01:c7:8c:e7:52:e2:7a:e4:67:37:5d:
                    4a:0e:28:05:45:6f:74:c2:c8:0b:5a:6f:25:37:89:
                    f7:0e:9b:ea:7f:2f:63:91:e1:3b:3e:5b:ba:8d:f3:
                    83:a8:9f:47:8c:97:05:5c:09:16:b0:dd:bc:82:ad:
                    97:76:5d:ba:63:d5:a9:40:78:24:3e:b0:e7:e6:69:
                    9a:98:fe:0a:a5:e3:64:5f:a8:0f:a7:37:72:43:e5:
                    dc:14:ff:64:89:79:0d:86:1d:63:d8:ec:6f:92:d9:
                    12:ec:9e:1d:44:bd:82:fc:1a:15:c1:a5:49:51:33:
                    ba:18:c0:10:a4:89:37:2c:76:1f:54:2e:40:2d:59:
                    5a:2f:5e:c1:34:ec:f2:db:d1:14:52:de:36:5a:0d:
                    16:b0:b7:5d:cf:cd:04:49:b1:00:14:00:e0:6d:95:
                    72:c2:cb:70:0f:e4:29:6b:3c:bc:4f:31:dd:4b:22:
                    8e:67:0b:50:66:56:e9:b6:a2:55:97:98:56:99:0d:
                    14:97:41:89:1f:b4:18:9d:f1:c2:51:10:51:b0:95:
                    07:c9:4e:82:69:d2:b4:78:8f:af:22:bf:fa:b9:29:
                    ce:df:98:62:35:5a:9b:9f:82:fb:12:94:b6:1f:26:
                    d8:88:8a:a7:d8:c8:f7:fe:2d:62:b1:08:c7:d7:9d:
                    fd:db
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier: 
                1C:B4:BF:D9:C0:A7:32:BC:8F:4A:60:C8:69:4C:91:F8:34:CA:BC:13
            X509v3 Authority Key Identifier: 
                keyid:74:01:65:A8:0D:10:71:97:0A:BC:09:C0:2B:71:C1:AC:7C:1D:6E:0E

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points: 

                Full Name:
                  URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl

            Authority Information Access: 
                CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access: 
                CA Repository - URI:rsync://rpki.apnic.net/member_repository/A91D83D0/03116312AFBC11EAA961CB86C4F9AE02/
                RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A91D83D0/03116312AFBC11EAA961CB86C4F9AE02/HLS_2cCnMryPSmDIaUyR-DTKvBM.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  148.66.128.0/19

    Signature Algorithm: sha256WithRSAEncryption
         7f:b0:fd:f4:07:fd:0d:3a:bd:f0:db:99:39:ca:bf:f1:ab:b2:
         f5:ba:53:e1:bd:1c:a0:7b:16:df:ff:f0:52:8e:6b:18:74:e0:
         88:09:49:cd:0e:57:1b:d8:a5:d8:dc:a1:69:bf:f4:39:f4:0e:
         d6:1c:70:70:d1:47:06:79:a3:40:6f:d1:8e:e3:e0:0c:dc:50:
         17:6c:c9:42:2f:7d:c2:e6:0c:6b:1b:9e:73:18:4a:1f:ee:6a:
         71:1a:e6:09:a8:78:f3:e0:9e:11:9f:15:20:38:72:83:11:82:
         3f:00:a0:29:6b:b8:51:5d:59:c4:ae:16:b3:bf:75:16:d0:f2:
         55:45:e0:ec:9a:2f:12:40:6a:21:16:2c:3f:02:6f:11:36:27:
         57:cd:42:a7:ed:84:5e:bf:db:bc:a1:f1:7c:93:5d:b9:ae:e4:
         5d:93:54:db:68:8b:83:7f:95:e5:07:20:ac:a0:0f:f1:39:ad:
         6b:f8:8e:11:78:bf:ca:bc:ad:67:2f:97:1c:64:a8:a3:26:02:
         cd:30:9f:b5:6a:91:41:95:7c:d0:c6:69:41:64:19:f1:c3:1d:
         be:b7:94:e9:54:ef:e0:bf:1a:1c:87:04:9e:f9:66:4d:9a:f8:
         47:45:b0:a5:2a:d6:8f:0a:7c:27:8a:13:32:b4:25:25:e6:02:
         2a:10:15:1b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Generated at Sun Sep 26 12:49:59 2021 by LibreSSL & rpki-client.