RPKI Certificate
Location:                 ./rsync/rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/JnQ7Hk4OkKGbJAwJNpecojdojfI.cer (download)

Subject key identifier:   26:74:3B:1E:4E:0E:90:A1:9B:24:0C:09:36:97:9C:A2:37:68:8D:F2
Authority key identifier: 74:01:65:A8:0D:10:71:97:0A:BC:09:C0:2B:71:C1:AC:7C:1D:6E:0E
Manifest:                 rpki.apnic.net/member_repository/A9144F59/44A6FF6400CB11E8BEB1EF10C4F9AE02/JnQ7Hk4OkKGbJAwJNpecojdojfI.mft
CA Repository:            rpki.apnic.net/member_repository/A9144F59/44A6FF6400CB11E8BEB1EF10C4F9AE02/
Notification URL:         https://rrdp.apnic.net/notification.xml
Subject Public Key Info:  
Subordinate resources:
    until: 2023-01-31T00:00:00Z
    Resources:
    1: IP: 146.88.64.0/20
    2: IP: 155.137.64.0/18
    3: IP: 209.141.0.0/20

--
$ openssl x509 -text -inform DER -in ./rsync/rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/JnQ7Hk4OkKGbJAwJNpecojdojfI.cer
Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 16027 (0x3e9b)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A90DC5BE/serialNumber=740165A80D1071970ABC09C02B71C1AC7C1D6E0E
        Validity
            Not Before: Nov 29 05:45:34 2021 GMT
            Not After : Jan 31 00:00:00 2023 GMT
        Subject: CN=A9144F59/serialNumber=26743B1E4E0E90A19B240C0936979CA237688DF2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:ac:50:ac:fa:29:4b:08:3c:59:ba:f3:9d:e0:
                    74:32:12:b7:b6:f4:95:3c:6f:87:79:93:24:60:d2:
                    e3:3b:32:38:f0:c0:51:d3:dc:71:1d:59:a9:22:67:
                    ac:2f:1f:17:34:31:2d:76:2f:5a:5e:77:55:a8:25:
                    a4:b3:dd:cb:96:d0:48:68:83:96:29:21:fc:5a:ce:
                    7c:7d:0e:2e:2d:75:0a:3e:27:0b:25:63:06:b8:ae:
                    48:7f:05:83:1b:c9:eb:e6:d2:b1:d1:05:7b:d7:bc:
                    71:71:c6:cd:17:f5:59:10:06:84:35:26:73:48:f9:
                    c4:3a:73:74:c6:5a:00:f9:79:27:c8:26:49:f0:a8:
                    8c:3d:43:26:46:92:9c:1a:2e:af:ad:9d:31:05:11:
                    ad:6a:f0:96:a9:93:11:8b:eb:83:8a:7d:a8:93:ab:
                    3d:e0:97:6a:7d:43:8a:c3:62:21:38:80:ec:52:b1:
                    b6:1e:6b:3e:77:ed:e3:79:1a:d8:0e:3f:a1:b4:46:
                    83:61:a2:a7:86:ec:83:27:fa:80:27:64:03:1a:fb:
                    70:47:19:22:e3:67:ae:bb:c1:8e:6f:e5:3e:91:72:
                    84:12:67:b2:1d:e0:94:28:05:1c:5a:b4:d7:8e:dd:
                    7f:de:b7:f3:18:4a:10:8b:4b:98:fc:4e:df:a7:71:
                    51:55
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier: 
                26:74:3B:1E:4E:0E:90:A1:9B:24:0C:09:36:97:9C:A2:37:68:8D:F2
            X509v3 Authority Key Identifier: 
                keyid:74:01:65:A8:0D:10:71:97:0A:BC:09:C0:2B:71:C1:AC:7C:1D:6E:0E

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points: 

                Full Name:
                  URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl

            Authority Information Access: 
                CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access: 
                CA Repository - URI:rsync://rpki.apnic.net/member_repository/A9144F59/44A6FF6400CB11E8BEB1EF10C4F9AE02/
                RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A9144F59/44A6FF6400CB11E8BEB1EF10C4F9AE02/JnQ7Hk4OkKGbJAwJNpecojdojfI.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  146.88.64.0/20
                  155.137.64.0/18
                  209.141.0.0/20

    Signature Algorithm: sha256WithRSAEncryption
         1f:11:64:71:14:f5:37:b9:20:4c:75:df:64:c1:ec:1d:bc:7e:
         4f:7f:44:eb:ca:57:68:61:85:c5:b4:89:b3:e1:d2:54:8c:5b:
         80:92:9d:98:dd:69:84:11:0e:a7:d1:a5:b2:f8:42:39:e4:c4:
         35:0d:71:d9:47:07:28:e1:73:ab:8c:0a:7b:db:3c:83:c9:d5:
         c4:34:14:23:bf:f5:1b:a6:ca:ec:a2:3f:c5:c2:f5:3b:9a:f4:
         38:82:e5:8c:b1:e0:f0:2c:ad:41:e5:8f:a0:87:5f:23:ef:71:
         b6:fc:b1:6e:75:5f:fc:23:a0:5c:f6:63:c0:1d:a7:49:ca:d2:
         20:e7:6e:98:00:81:1a:38:52:21:be:66:3f:49:9c:b6:50:df:
         2e:30:e1:70:ac:90:b1:0b:07:69:b9:9f:c1:4a:ed:73:97:d3:
         65:7e:3a:cc:b1:53:c7:91:82:06:c9:c2:96:19:2e:ed:87:98:
         94:72:89:6c:b0:77:fe:cd:98:1c:d4:d4:f5:9b:34:f3:60:c6:
         65:e3:b0:1a:38:d5:ac:71:ff:2b:03:ff:8f:34:7e:f6:87:9c:
         a5:1d:bc:37:a0:d7:b2:22:eb:9a:7c:c6:d3:85:66:f9:ba:05:
         2f:41:35:df:4c:c4:42:f8:c5:f5:2e:c7:71:d6:27:4d:4d:51:
         e0:25:9f:00
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Generated at Mon Nov 29 08:41:59 2021 by LibreSSL & rpki-client.