RPKI Certificate
Location:                 ./rsync/rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/IYqKoFAmewgF4_3IqTm_j7ywAQE.cer (download)

Subject key identifier:   21:8A:8A:A0:50:26:7B:08:05:E3:FD:C8:A9:39:BF:8F:BC:B0:01:01
Authority key identifier: 74:01:65:A8:0D:10:71:97:0A:BC:09:C0:2B:71:C1:AC:7C:1D:6E:0E
Manifest:                 rpki.apnic.net/member_repository/A91406AA/8658E46686C111EBBAB3184BC4F9AE02/IYqKoFAmewgF4_3IqTm_j7ywAQE.mft
CA Repository:            rpki.apnic.net/member_repository/A91406AA/8658E46686C111EBBAB3184BC4F9AE02/
Notification URL:         https://rrdp.apnic.net/notification.xml
Subject Public Key Info:  
Subordinate resources:
    until: 2022-12-01T00:00:00Z
    Resources:
    1: IP: 151.210.128.0/17
    2: IP: 165.84.0.0/19
    3: IP: 165.84.48.0/20

--
$ openssl x509 -text -inform DER -in ./rsync/rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/IYqKoFAmewgF4_3IqTm_j7ywAQE.cer
Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 15767 (0x3d97)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A90DC5BE/serialNumber=740165A80D1071970ABC09C02B71C1AC7C1D6E0E
        Validity
            Not Before: Oct 15 13:36:04 2021 GMT
            Not After : Dec  1 00:00:00 2022 GMT
        Subject: CN=A91406AA/serialNumber=218A8AA050267B0805E3FDC8A939BF8FBCB00101
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:14:3c:01:24:4c:6c:c3:3f:14:c2:40:bc:f9:
                    2c:58:79:c1:04:06:8b:59:7c:c3:4c:c8:36:96:22:
                    8f:fc:a0:35:21:b9:80:3d:9b:14:51:8b:e8:30:0b:
                    e4:29:12:c5:d7:27:0f:c4:2e:94:8b:1a:b9:6a:02:
                    9c:a3:6d:79:00:52:81:ee:84:2c:0c:19:c6:36:54:
                    ac:18:6d:e2:eb:03:d6:a3:48:87:71:4e:f7:f6:23:
                    23:65:6a:96:4e:3e:3c:49:01:8b:83:df:c0:ea:c4:
                    d2:f4:2e:ca:43:8c:2d:64:b3:13:20:97:65:4c:84:
                    36:fc:d6:1f:30:0f:b9:b9:a8:95:26:68:61:19:7c:
                    6d:ce:ad:09:bd:f2:82:78:3a:44:e6:e1:18:02:b9:
                    69:63:13:55:26:fe:af:6e:81:ed:e2:bb:88:d3:0c:
                    b8:f7:07:4a:e9:eb:d4:f6:00:89:04:3a:80:16:fa:
                    6e:b9:b3:30:f5:4f:b6:2d:ee:13:cf:73:1b:67:12:
                    ae:7b:b9:ac:43:10:de:52:45:7b:38:79:c0:62:12:
                    4b:04:3b:0d:80:c3:e3:9c:a6:f6:ca:6c:75:df:be:
                    c9:f6:4b:80:f2:9d:cc:de:2b:9d:59:bb:d0:a9:a0:
                    ed:d4:df:c8:5f:42:4e:51:60:2d:88:30:26:40:9b:
                    2d:fd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier: 
                21:8A:8A:A0:50:26:7B:08:05:E3:FD:C8:A9:39:BF:8F:BC:B0:01:01
            X509v3 Authority Key Identifier: 
                keyid:74:01:65:A8:0D:10:71:97:0A:BC:09:C0:2B:71:C1:AC:7C:1D:6E:0E

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points: 

                Full Name:
                  URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl

            Authority Information Access: 
                CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access: 
                CA Repository - URI:rsync://rpki.apnic.net/member_repository/A91406AA/8658E46686C111EBBAB3184BC4F9AE02/
                RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A91406AA/8658E46686C111EBBAB3184BC4F9AE02/IYqKoFAmewgF4_3IqTm_j7ywAQE.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  151.210.128.0/17
                  165.84.0.0/19
                  165.84.48.0/20

    Signature Algorithm: sha256WithRSAEncryption
         7a:9e:de:62:2d:41:31:df:28:75:eb:0e:70:25:85:6d:53:59:
         8b:2a:04:e3:a4:9a:58:73:12:69:e4:4d:ac:96:2f:78:1b:5b:
         1d:29:1c:fa:dc:6a:49:0a:0d:3e:38:34:28:c1:7b:fa:8e:c8:
         8b:f0:3a:07:ee:15:80:1f:3b:cf:bd:35:9e:24:7b:4a:e7:78:
         7a:9e:12:45:c0:08:70:1d:13:c8:4f:ac:f2:fe:0d:6f:38:9c:
         86:2a:b9:31:48:ef:9d:e5:c1:1c:f0:e3:3e:40:1d:ce:3c:c1:
         94:19:92:b8:02:a1:1c:74:4a:a4:d9:60:3d:59:ce:04:54:3c:
         67:e7:bb:ac:e4:59:9d:99:48:8a:dd:fd:cb:74:23:20:b2:d0:
         42:59:e5:5b:aa:75:58:03:d4:41:4c:0a:11:c2:74:ca:42:a0:
         ff:eb:25:3d:f0:e7:a4:e7:2d:4b:51:7c:90:ea:9a:0a:42:9c:
         5a:43:e1:5a:eb:98:e4:14:53:7d:c9:48:8d:ab:fe:7c:53:9c:
         18:9a:02:0c:ba:ab:2b:9d:d8:2d:d5:c5:97:fb:9f:0c:d6:68:
         a6:a3:43:44:0f:f7:d1:51:c2:e5:e6:58:f5:4b:39:cc:24:4a:
         bf:89:f7:5a:ca:d6:70:ce:09:f5:11:3f:05:08:90:93:8a:43:
         c7:9d:f4:e0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Generated at Fri Oct 15 15:56:35 2021 by LibreSSL & rpki-client.