RPKI Certificate
Location:                 rsync/rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/OoMNQ_NZRP-yhgHTMzAgrDwxkkE.cer (download)

Subject key identifier:   3A:83:0D:43:F3:59:44:FF:B2:86:01:D3:33:30:20:AC:3C:31:92:41
Authority key identifier: 74:01:65:A8:0D:10:71:97:0A:BC:09:C0:2B:71:C1:AC:7C:1D:6E:0E
Manifest:                 rpki.apnic.net/member_repository/A919F0DA/FC61E0081D6711E28C1828A408B02CD2/OoMNQ_NZRP-yhgHTMzAgrDwxkkE.mft
CA Repository:            rpki.apnic.net/member_repository/A919F0DA/FC61E0081D6711E28C1828A408B02CD2/
Notification URL:         https://rrdp.apnic.net/notification.xml
Subordinate resources:
    1: IP: 164.100.0.0/16

--
$ openssl x509 -text -inform DER -in rsync/rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/OoMNQ_NZRP-yhgHTMzAgrDwxkkE.cer
Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 15531 (0x3cab)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A90DC5BE/serialNumber=740165A80D1071970ABC09C02B71C1AC7C1D6E0E
        Validity
            Not Before: Sep  1 02:15:18 2021 GMT
            Not After : Aug 31 00:00:00 2022 GMT
        Subject: CN=A919F0DA/serialNumber=3A830D43F35944FFB28601D3333020AC3C319241
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:f1:9d:74:c4:d9:3a:ee:aa:81:28:6d:e1:ec:
                    30:c9:1b:64:db:5d:f7:f2:b0:60:59:64:63:8b:7d:
                    ad:fd:e0:2f:70:5f:1b:52:32:ba:19:b4:6e:9c:5f:
                    04:8b:cb:c5:1e:30:af:79:a4:99:a6:d0:a5:41:d4:
                    68:06:ef:63:df:06:ea:40:c3:75:a6:0b:57:55:4f:
                    bc:3b:0f:92:0e:e1:44:03:16:94:62:d9:35:10:e0:
                    dd:98:a2:2f:bc:ee:50:16:b2:1d:f0:cb:79:77:e4:
                    a8:37:da:9d:24:ae:b7:0d:2f:d4:b3:20:ad:f2:d9:
                    3f:97:d4:e8:14:28:fd:6a:43:bb:8d:17:ed:54:84:
                    c7:4b:33:ef:fa:e0:b5:7e:23:c7:a6:61:5a:65:89:
                    b2:fc:59:c2:5e:c9:a9:b1:5d:c4:e7:61:3d:20:e9:
                    5a:5b:38:5c:bf:0d:e1:cb:e7:2d:2d:7c:18:78:3d:
                    bd:81:a6:bf:94:71:f9:06:4c:86:c7:f3:e3:19:dd:
                    ac:da:a8:da:d3:be:e9:fb:ea:c7:f0:82:6a:a1:8f:
                    a0:60:ae:31:2f:0d:9f:ab:73:15:66:ba:99:94:45:
                    92:b3:34:62:0b:7d:c7:b9:40:45:81:c9:78:5b:9d:
                    31:07:96:5f:ec:e1:e5:ea:fd:dc:13:6d:43:e2:9b:
                    19:81
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier: 
                3A:83:0D:43:F3:59:44:FF:B2:86:01:D3:33:30:20:AC:3C:31:92:41
            X509v3 Authority Key Identifier: 
                keyid:74:01:65:A8:0D:10:71:97:0A:BC:09:C0:2B:71:C1:AC:7C:1D:6E:0E

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points: 

                Full Name:
                  URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl

            Authority Information Access: 
                CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access: 
                CA Repository - URI:rsync://rpki.apnic.net/member_repository/A919F0DA/FC61E0081D6711E28C1828A408B02CD2/
                RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A919F0DA/FC61E0081D6711E28C1828A408B02CD2/OoMNQ_NZRP-yhgHTMzAgrDwxkkE.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  164.100.0.0/16

    Signature Algorithm: sha256WithRSAEncryption
         a7:66:0a:f0:48:bf:b3:5b:75:13:42:f3:09:f1:56:f9:01:c8:
         e1:a7:85:28:d1:31:37:ed:b1:fb:03:f8:dc:ee:56:75:75:b5:
         0a:7b:29:67:ea:57:2b:2b:f2:26:75:3a:f8:f2:54:ec:26:86:
         b1:2c:4d:a2:6f:e0:f2:a5:a3:91:fe:a8:a7:38:3a:d6:04:a6:
         4f:c9:2b:cf:95:ef:54:d2:d8:5a:5f:84:cb:37:e5:7b:52:bf:
         d2:ec:03:ef:37:45:ed:db:94:a8:6a:e4:4b:91:aa:11:59:57:
         1a:b5:09:ae:42:7a:86:c0:ac:0b:bf:e9:33:e0:b2:0f:10:fb:
         70:8c:5c:54:d8:73:8d:41:45:16:f5:9e:03:2b:f2:38:e6:5f:
         60:d1:26:0c:7a:f7:15:35:29:3e:a6:71:cc:97:91:07:a5:d7:
         d4:eb:cb:32:14:f2:f5:7d:b0:b2:a8:3c:d2:af:bb:6c:12:fa:
         da:bf:0b:fd:8c:45:da:29:06:2f:0c:ea:dc:d2:fc:42:69:ab:
         b9:1c:72:0a:9d:34:02:ce:1a:50:e6:0b:71:47:9b:d0:41:b4:
         13:1f:ee:f8:6a:1f:3d:ad:c4:88:7f:69:35:bd:b5:4a:17:4d:
         34:9b:20:df:e7:e6:75:34:64:e1:11:64:b0:0f:6e:6d:fc:d5:
         49:66:5f:46
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Generated at Sun Sep 26 12:50:00 2021 by LibreSSL & rpki-client.