RPKI Certificate
Location:                 ./rsync/rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/No88k4tgFBJSGjqBkAmXj8_pHn4.cer (download)

Subject key identifier:   36:8F:3C:93:8B:60:14:12:52:1A:3A:81:90:09:97:8F:CF:E9:1E:7E
Authority key identifier: 74:01:65:A8:0D:10:71:97:0A:BC:09:C0:2B:71:C1:AC:7C:1D:6E:0E
Manifest:                 rpki.apnic.net/member_repository/A916B18B/F98B5F0C21F911E896C1DD23C4F9AE02/No88k4tgFBJSGjqBkAmXj8_pHn4.mft
CA Repository:            rpki.apnic.net/member_repository/A916B18B/F98B5F0C21F911E896C1DD23C4F9AE02/
Notification URL:         https://rrdp.apnic.net/notification.xml
Subject Public Key Info:  
Subordinate resources:
    until: 2023-01-31T00:00:00Z
    Resources:
    1: IP: 136.158.0.0/17
    2: IP: 136.239.128.0/17
    3: IP: 139.135.128.0/17
    4: IP: 143.44.128.0/17
    5: IP: 152.32.64.0/18
    6: IP: 161.49.0.0 -- 161.49.187.255
    7: IP: 161.49.192.0 -- 161.49.231.255
    8: IP: 204.145.0.0/24
    9: IP: 204.145.2.0 -- 204.145.7.255
    10: IP: 206.201.0.0/20
    11: IP: 208.71.224.0/21

--
$ openssl x509 -text -inform DER -in ./rsync/rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/No88k4tgFBJSGjqBkAmXj8_pHn4.cer
Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 16084 (0x3ed4)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A90DC5BE/serialNumber=740165A80D1071970ABC09C02B71C1AC7C1D6E0E
        Validity
            Not Before: Dec  8 02:27:57 2021 GMT
            Not After : Jan 31 00:00:00 2023 GMT
        Subject: CN=A916B18B/serialNumber=368F3C938B601412521A3A819009978FCFE91E7E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e1:57:44:70:9d:4d:eb:6f:28:4c:ae:a0:16:ba:
                    fe:b4:01:b2:8c:d8:d8:0b:33:b3:dc:a3:de:17:17:
                    bf:a5:cd:b9:96:5f:5e:a2:0f:4a:cc:6a:4a:71:de:
                    53:59:a7:d9:37:1b:89:5d:75:71:5a:8d:9e:ff:d3:
                    79:53:c4:30:a2:0a:15:2f:59:2a:99:0c:9d:eb:bd:
                    a8:86:8b:d8:d0:ab:15:2a:87:b3:1b:7c:3b:fb:99:
                    d8:68:97:74:44:fa:b1:9c:19:fc:d5:96:79:44:b9:
                    c2:cb:f7:9b:8f:61:63:24:21:6f:25:48:5c:f2:a1:
                    5f:36:11:d1:81:4b:7b:aa:21:1c:35:e6:3a:88:8d:
                    3d:7d:e9:ab:3e:bf:ba:b6:a1:e8:bb:d5:5c:fb:80:
                    ce:74:e9:ee:69:5e:1e:b8:84:fa:06:da:64:60:2a:
                    a3:f3:69:4c:5c:61:87:5f:6b:9c:2b:ee:d6:65:22:
                    80:7c:49:28:61:9b:81:79:c3:db:50:34:25:92:e8:
                    0e:4c:d0:8b:50:0d:b4:99:3d:2c:05:be:bd:40:a0:
                    9f:56:c7:07:41:44:73:94:4a:66:6b:2f:9d:39:12:
                    c6:84:86:96:ba:9a:3a:27:0b:59:2b:9e:ee:0a:dd:
                    95:2e:d2:71:20:6a:87:6e:4b:38:f6:21:61:6c:0f:
                    9f:a7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier: 
                36:8F:3C:93:8B:60:14:12:52:1A:3A:81:90:09:97:8F:CF:E9:1E:7E
            X509v3 Authority Key Identifier: 
                keyid:74:01:65:A8:0D:10:71:97:0A:BC:09:C0:2B:71:C1:AC:7C:1D:6E:0E

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points: 

                Full Name:
                  URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl

            Authority Information Access: 
                CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access: 
                CA Repository - URI:rsync://rpki.apnic.net/member_repository/A916B18B/F98B5F0C21F911E896C1DD23C4F9AE02/
                RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A916B18B/F98B5F0C21F911E896C1DD23C4F9AE02/No88k4tgFBJSGjqBkAmXj8_pHn4.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  136.158.0.0/17
                  136.239.128.0/17
                  139.135.128.0/17
                  143.44.128.0/17
                  152.32.64.0/18
                  161.49.0.0-161.49.187.255
                  161.49.192.0-161.49.231.255
                  204.145.0.0/24
                  204.145.2.0-204.145.7.255
                  206.201.0.0/20
                  208.71.224.0/21

    Signature Algorithm: sha256WithRSAEncryption
         4a:a0:98:03:47:d8:d1:f8:5c:68:62:90:c8:8d:ff:9a:60:55:
         f2:bc:47:d0:c6:63:00:5a:f5:ed:81:13:80:82:45:5c:95:06:
         63:d8:8e:ae:21:29:f6:0c:9d:ce:73:75:2b:37:cb:82:06:c1:
         bf:1f:96:41:bf:86:79:cc:d2:a7:00:d7:92:b5:11:42:ee:1c:
         63:04:1b:c9:2a:11:ff:da:53:39:fb:7f:ee:68:95:6b:80:8f:
         6a:4e:f4:74:26:dd:1a:43:8f:4e:54:b2:85:2b:1b:4a:f2:96:
         07:2b:e7:39:45:65:3a:94:0f:6d:6e:51:be:0b:cf:6e:5a:56:
         3b:97:c3:e3:31:00:da:62:79:49:48:1e:da:97:b7:ec:db:1b:
         df:e0:13:a2:5c:1f:2e:f8:dc:e1:e2:dd:23:86:77:a3:2e:f2:
         d5:75:f4:31:00:aa:33:6f:1b:5f:27:1f:3b:14:61:bf:ac:f0:
         43:fc:e4:5a:b1:be:9b:82:00:07:49:10:8d:6b:79:97:cb:d6:
         73:2b:ec:7a:b6:d8:9b:e5:bd:d5:68:4a:2d:da:82:8a:b9:73:
         ec:43:9f:d5:dc:34:cb:db:e7:7d:2c:9a:d7:7a:17:5c:4d:02:
         1e:ca:d0:6e:e9:05:21:b9:bd:f4:6f:5f:8d:6f:1b:d2:cc:2a:
         a8:69:84:6a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Generated at Wed Dec 8 04:24:50 2021 by LibreSSL & rpki-client.