RPKI Certificate
Location:                 rsync/rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/MgqkgQw8CaJaJnnaP64BUwYEXoQ.cer (download)

Subject key identifier:   32:0A:A4:81:0C:3C:09:A2:5A:26:79:DA:3F:AE:01:53:06:04:5E:84
Authority key identifier: 74:01:65:A8:0D:10:71:97:0A:BC:09:C0:2B:71:C1:AC:7C:1D:6E:0E
Manifest:                 rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/MgqkgQw8CaJaJnnaP64BUwYEXoQ.mft
CA Repository:            rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/
Notification URL:         https://rrdp.apnic.net/notification.xml
Subordinate resources:
    1: IP: 67.158.52.0/24
    2: IP: 142.79.224.0/19
    3: IP: 158.144.0.0/16
    4: IP: 159.117.144.0/20
    5: IP: 162.216.140.0/22
    6: IP: 164.164.0.0/16
    7: IP: 168.220.224.0/19
    8: IP: 198.217.248.0/24

--
$ openssl x509 -text -inform DER -in rsync/rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/MgqkgQw8CaJaJnnaP64BUwYEXoQ.cer
Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 14959 (0x3a6f)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A90DC5BE/serialNumber=740165A80D1071970ABC09C02B71C1AC7C1D6E0E
        Validity
            Not Before: May 25 15:18:08 2021 GMT
            Not After : Jul  1 00:00:00 2022 GMT
        Subject: CN=A918EDB2/serialNumber=320AA4810C3C09A25A2679DA3FAE015306045E84
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dd:e1:52:a6:c4:e8:df:ab:cb:4f:66:6e:7c:e3:
                    e5:76:63:86:fc:17:e5:29:9d:13:02:59:0f:67:89:
                    11:08:17:b4:f1:e3:76:86:01:6a:41:09:d5:56:d1:
                    75:78:1d:78:a7:c2:5e:37:8e:36:0a:0f:3f:05:07:
                    20:01:89:20:70:d2:d9:64:99:80:5e:65:7c:06:03:
                    0a:95:fb:26:80:84:b2:97:a3:57:9c:85:35:9e:60:
                    04:92:4e:7d:60:43:0e:76:6a:81:c7:ff:1f:2b:94:
                    2f:35:32:f4:bd:27:d8:21:5a:9a:ea:8b:de:b5:b7:
                    37:f9:95:73:38:33:59:2a:4b:b0:96:3f:9d:ff:ae:
                    b6:64:4e:33:b0:cd:cf:42:9c:b8:39:32:a9:b9:05:
                    ac:d0:14:9d:cd:4a:71:10:57:a9:6d:97:b2:2a:2b:
                    ae:26:cd:75:46:50:22:d4:11:d4:42:72:64:af:1e:
                    0c:07:88:bc:5b:bf:7b:e4:2b:05:1b:22:39:d6:6b:
                    34:71:1a:c0:05:fa:a1:3a:ba:e1:c2:ae:e2:c5:f2:
                    f8:03:af:9d:48:9e:d0:20:61:fb:f7:9e:33:e3:63:
                    52:10:66:5f:32:0f:cf:a1:b1:96:3e:2d:f5:3d:43:
                    55:bf:c2:76:36:ab:f0:0a:40:eb:d5:a8:be:61:07:
                    7c:91
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier: 
                32:0A:A4:81:0C:3C:09:A2:5A:26:79:DA:3F:AE:01:53:06:04:5E:84
            X509v3 Authority Key Identifier: 
                keyid:74:01:65:A8:0D:10:71:97:0A:BC:09:C0:2B:71:C1:AC:7C:1D:6E:0E

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points: 

                Full Name:
                  URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl

            Authority Information Access: 
                CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access: 
                CA Repository - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/
                RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/MgqkgQw8CaJaJnnaP64BUwYEXoQ.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  67.158.52.0/24
                  142.79.224.0/19
                  158.144.0.0/16
                  159.117.144.0/20
                  162.216.140.0/22
                  164.164.0.0/16
                  168.220.224.0/19
                  198.217.248.0/24

    Signature Algorithm: sha256WithRSAEncryption
         8b:10:ac:be:cd:4e:ce:61:84:ab:e4:4d:e1:3e:4b:9d:4b:a8:
         30:6d:24:8e:b6:ef:72:ab:94:c7:9d:c9:9d:75:6b:db:3c:3d:
         0c:74:a9:7c:dd:2e:41:b7:1c:47:37:36:88:4c:c6:20:fc:95:
         96:92:df:9c:5c:ae:06:07:ff:ee:df:ab:f5:cc:e2:a6:46:2d:
         35:e7:ab:3c:52:d7:b2:ae:d5:55:f9:e5:d6:38:f1:83:ae:29:
         c3:67:bf:82:1b:b5:93:c9:cb:9f:cd:9c:8b:55:8e:f6:3d:cb:
         1a:ea:55:dc:f3:5a:8b:9f:c5:06:3c:b2:99:b6:a3:b1:f8:fa:
         a0:e3:84:8a:d8:c3:0a:9b:2e:94:fd:eb:34:14:ba:cd:cb:98:
         26:6b:7e:98:e8:c2:d5:77:d8:da:22:c3:aa:0b:f8:36:0e:a3:
         44:15:57:95:e5:0f:31:a0:bb:33:8a:24:9f:4f:04:6d:5a:af:
         f9:f2:e6:6c:25:df:7c:c4:f7:34:19:3d:91:0e:3f:2d:c5:98:
         a2:60:c9:b8:be:bb:5f:5d:5b:0b:0d:36:2c:0d:85:28:ec:d1:
         25:fe:9b:09:c0:72:9d:e0:2d:44:68:fc:fd:ea:a1:69:02:2a:
         c0:a1:44:42:1a:7c:45:18:49:63:65:95:d9:0c:9a:c9:06:90:
         03:1d:68:55
-----BEGIN CERTIFICATE-----
MIIGJTCCBQ2gAwIBAgICOm8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkw
REM1QkUxMTAvBgNVBAUTKDc0MDE2NUE4MEQxMDcxOTcwQUJDMDlDMDJCNzFDMUFD
N0MxRDZFMEUwHhcNMjEwNTI1MTUxODA4WhcNMjIwNzAxMDAwMDAwWjBGMREwDwYD
VQQDEwhBOTE4RURCMjExMC8GA1UEBRMoMzIwQUE0ODEwQzNDMDlBMjVBMjY3OURB
M0ZBRTAxNTMwNjA0NUU4NDCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEB
AN3hUqbE6N+ry09mbnzj5XZjhvwX5SmdEwJZD2eJEQgXtPHjdoYBakEJ1VbRdXgd
eKfCXjeONgoPPwUHIAGJIHDS2WSZgF5lfAYDCpX7JoCEspejV5yFNZ5gBJJOfWBD
DnZqgcf/HyuULzUy9L0n2CFamuqL3rW3N/mVczgzWSpLsJY/nf+utmROM7DNz0Kc
uDkyqbkFrNAUnc1KcRBXqW2XsiorribNdUZQItQR1EJyZK8eDAeIvFu/e+QrBRsi
OdZrNHEawAX6oTq64cKu4sXy+AOvnUie0CBh+/eeM+NjUhBmXzIPz6Gxlj4t9T1D
Vb/Cdjar8ApA69WovmEHfJECAwEAAaOCAxswggMXMB0GA1UdDgQWBBQyCqSBDDwJ
olomedo/rgFTBgRehDAfBgNVHSMEGDAWgBR0AWWoDRBxlwq8CcArccGsfB1uDjAO
BgNVHQ8BAf8EBAMCAQYwDwYDVR0TAQH/BAUwAwEB/zBzBgNVHR8EbDBqMGigZqBk
hmJyc3luYzovL3Jwa2kuYXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRGMjAxRDY2
MTFFMjhBQzg4MzdDNzJGRDFGRjIvZEFGbHFBMFFjWmNLdkFuQUszSEJySHdkYmc0
LmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5h
cG5pYy5uZXQvcmVwb3NpdG9yeS85ODA2NTJFMEI3N0UxMUU3QTk2QTM5NTIxQTRG
NEZCNC9kQUZscUEwUWNaY0t2QW5BSzNIQnJId2RiZzQuY2VyMEoGA1UdIAEB/wRA
MD4wPAYIKwYBBQUHDgIwMDAuBggrBgEFBQcCARYiaHR0cHM6Ly93d3cuYXBuaWMu
bmV0L1JQS0kvQ1BTLnBkZjCCASgGCCsGAQUFBwELBIIBGjCCARYwXwYIKwYBBQUH
MAWGU3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
OEVEQjIvMUM1N0NFQUM3MEU5MTFFMkIzNkQ0QjZCMjk3OUJCMjAvMH4GCCsGAQUF
BzAKhnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5
MThFREIyLzFDNTdDRUFDNzBFOTExRTJCMzZENEI2QjI5NzlCQjIwL01ncWtnUXc4
Q2FKYUpubmFQNjRCVXdZRVhvUS5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJk
cC5hcG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDBHBggrBgEFBQcBBwEB/wQ4MDYw
NAQCAAEwLgMEAEOeNAMEBY5P4AMDAJ6QAwQEn3WQAwQCotiMAwMApKQDBAWo3OAD
BADG2fgwDQYJKoZIhvcNAQELBQADggEBAIsQrL7NTs5hhKvkTeE+S51LqDBtJI62
73KrlMedyZ11a9s8PQx0qXzdLkG3HEc3NohMxiD8lZaS35xcrgYH/+7fq/XM4qZG
LTXnqzxS17Ku1VX55dY48YOuKcNnv4IbtZPJy5/NnItVjvY9yxrqVdzzWoufxQY8
spm2o7H4+qDjhIrYwwqbLpT96zQUus3LmCZrfpjowtV32Noiw6oL+DYOo0QVV5Xl
DzGguzOKJJ9PBG1ar/ny5mwl33zE9zQZPZEOPy3FmKJgybi+u19dWwsNNiwNhSjs
0SX+mwnAcp3gLURo/P3qoWkCKsChREIafEUYSWNlldkMmskGkAMdaFU=
-----END CERTIFICATE-----

Generated at Sun Sep 26 12:50:00 2021 by LibreSSL & rpki-client.