RPKI Certificate
Location:                 ./rsync/rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/KAzCD_UHrGj6MtMo8tGjYoVEfX8.cer (download)

Subject key identifier:   28:0C:C2:0F:F5:07:AC:68:FA:32:D3:28:F2:D1:A3:62:85:44:7D:7F
Authority key identifier: 74:01:65:A8:0D:10:71:97:0A:BC:09:C0:2B:71:C1:AC:7C:1D:6E:0E
Manifest:                 rpki.apnic.net/member_repository/A9157F58/DFB27DACF0A011E7BC7E8D5FC4F9AE02/KAzCD_UHrGj6MtMo8tGjYoVEfX8.mft
CA Repository:            rpki.apnic.net/member_repository/A9157F58/DFB27DACF0A011E7BC7E8D5FC4F9AE02/
Notification URL:         https://rrdp.apnic.net/notification.xml
Subject Public Key Info:  
Subordinate resources:
    until: 2022-12-30T00:00:00Z
    Resources:
    1: IP: 137.219.0.0/16

--
$ openssl x509 -text -inform DER -in ./rsync/rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/KAzCD_UHrGj6MtMo8tGjYoVEfX8.cer
Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 15759 (0x3d8f)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A90DC5BE/serialNumber=740165A80D1071970ABC09C02B71C1AC7C1D6E0E
        Validity
            Not Before: Oct 14 14:14:03 2021 GMT
            Not After : Dec 30 00:00:00 2022 GMT
        Subject: CN=A9157F58/serialNumber=280CC20FF507AC68FA32D328F2D1A36285447D7F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:37:27:11:4e:ff:ca:01:02:2f:fc:aa:67:76:
                    c7:2f:a5:6a:4f:40:fb:65:7f:7a:a7:bd:65:bf:99:
                    54:31:03:de:34:18:c2:ed:55:30:cf:5a:63:f0:3f:
                    62:8a:04:71:e8:80:ff:84:3a:95:46:52:38:18:34:
                    35:4e:c5:06:f9:6f:40:fb:5e:c9:a5:5a:a7:93:4c:
                    23:ad:8c:a3:47:c1:0e:f6:a0:f2:6a:1d:04:fb:f0:
                    40:95:cc:d5:8e:92:3f:15:19:f8:3a:41:8a:28:ce:
                    16:76:a0:bf:ca:f2:b8:1a:41:f4:9e:23:fb:22:fb:
                    10:f1:80:49:0f:d8:a7:2e:2c:97:54:e1:4a:0a:6f:
                    2f:d5:1e:5a:62:d7:1c:2d:bf:35:81:31:e8:9e:fd:
                    e6:03:b5:64:c2:dd:b4:a7:73:25:1f:0d:81:27:2e:
                    53:22:40:29:dc:94:b4:96:cb:11:34:a3:6b:79:71:
                    88:05:8e:81:1b:ee:da:38:8b:1b:a1:36:45:28:c6:
                    bb:1e:1e:ce:d9:2e:69:e3:b8:b4:51:e2:b5:5f:43:
                    d5:95:c6:a6:1a:69:06:de:f2:3f:e6:fd:d8:03:d2:
                    b1:0f:e3:aa:5b:31:61:bb:45:84:de:ad:e1:af:32:
                    3a:e6:20:0d:4a:1e:38:08:d7:31:16:68:e7:d6:ec:
                    16:d7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier: 
                28:0C:C2:0F:F5:07:AC:68:FA:32:D3:28:F2:D1:A3:62:85:44:7D:7F
            X509v3 Authority Key Identifier: 
                keyid:74:01:65:A8:0D:10:71:97:0A:BC:09:C0:2B:71:C1:AC:7C:1D:6E:0E

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points: 

                Full Name:
                  URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl

            Authority Information Access: 
                CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access: 
                CA Repository - URI:rsync://rpki.apnic.net/member_repository/A9157F58/DFB27DACF0A011E7BC7E8D5FC4F9AE02/
                RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A9157F58/DFB27DACF0A011E7BC7E8D5FC4F9AE02/KAzCD_UHrGj6MtMo8tGjYoVEfX8.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  137.219.0.0/16

    Signature Algorithm: sha256WithRSAEncryption
         51:22:7f:15:4b:f1:79:ca:a9:b4:53:c3:2c:fe:49:52:97:e9:
         2f:ee:89:ef:c1:39:00:2d:d8:89:b1:df:53:b8:f3:a0:64:d4:
         0f:0e:29:ea:39:ec:ec:4e:59:c2:f1:8f:d7:b4:a7:cd:19:f5:
         63:6c:e7:75:80:04:db:76:e8:e1:d8:a4:dd:1a:cb:6f:0d:03:
         55:43:14:ee:a9:f7:f5:f6:e8:4c:e1:14:eb:e7:ac:f2:a0:12:
         5a:71:bb:d1:27:e0:85:c4:09:5b:df:02:c9:1a:5e:6a:45:ba:
         20:ed:97:97:f1:be:1d:58:b4:85:c8:50:5d:e8:b6:00:b7:36:
         fd:3e:4e:08:47:00:97:46:a3:b4:7d:1e:c0:5e:29:c5:07:1c:
         eb:a9:cc:4b:2f:67:6c:7a:7e:b9:2f:1a:95:5d:99:35:f9:d2:
         f6:99:b5:16:46:b2:c6:1e:34:f0:d5:ff:a7:16:26:6a:0f:1c:
         59:9d:32:75:80:1a:31:9d:07:25:48:b0:06:01:bc:f1:00:7c:
         90:af:31:59:87:1c:d0:dc:9e:33:b7:4c:d8:c6:f9:0d:e4:fc:
         29:ef:a8:f1:15:c8:21:f8:35:1e:0e:86:63:cf:98:0f:ee:7e:
         a6:b4:1f:30:89:b5:a2:34:d8:1e:6a:3e:f4:85:6c:67:53:2a:
         87:c2:29:60
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Generated at Thu Oct 14 17:19:44 2021 by LibreSSL & rpki-client.