RPKI Certificate
Location:                 rsync/rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/P7GNifrzGI3OWQ98SJB3lh-CqVc.cer (download)

Subject key identifier:   3F:B1:8D:89:FA:F3:18:8D:CE:59:0F:7C:48:90:77:96:1F:82:A9:57
Authority key identifier: 74:01:65:A8:0D:10:71:97:0A:BC:09:C0:2B:71:C1:AC:7C:1D:6E:0E
Manifest:                 rpki.apnic.net/member_repository/A9186214/B7F81958331A11E4AF2AB37CC4F9AE02/P7GNifrzGI3OWQ98SJB3lh-CqVc.mft
CA Repository:            rpki.apnic.net/member_repository/A9186214/B7F81958331A11E4AF2AB37CC4F9AE02/
Notification URL:         https://rrdp.apnic.net/notification.xml
Subordinate resources:
    1: IP: 66.96.224.0/19
    2: IP: 139.0.0.0/16
    3: IP: 139.192.0.0/14
    4: IP: 139.228.0.0/16
    5: IP: 139.255.0.0--140.0.255.255
    6: IP: 140.213.0.0/16
    7: IP: 158.140.160.0/19

--
$ openssl x509 -text -inform DER -in rsync/rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/P7GNifrzGI3OWQ98SJB3lh-CqVc.cer
Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 15313 (0x3bd1)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A90DC5BE/serialNumber=740165A80D1071970ABC09C02B71C1AC7C1D6E0E
        Validity
            Not Before: Jul 26 02:53:55 2021 GMT
            Not After : Mar  2 00:00:00 2022 GMT
        Subject: CN=A9186214/serialNumber=3FB18D89FAF3188DCE590F7C489077961F82A957
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:0d:a6:0b:51:ed:06:f7:20:2c:e7:cd:65:4e:
                    a7:4a:13:35:c0:b6:8b:22:85:70:c4:dd:8e:fb:a2:
                    3a:ed:e1:e9:d2:df:79:3e:e4:8a:5b:15:aa:99:56:
                    5b:3a:31:3d:ab:42:6d:47:8f:0e:b2:e6:e1:42:ae:
                    f0:f7:a3:f0:af:43:52:e4:e1:63:12:f8:36:ee:69:
                    61:0d:76:c7:ca:c6:40:36:e7:5a:9a:ea:94:57:cd:
                    1c:60:3e:60:cc:82:c0:1b:ea:b4:0e:c9:6e:d1:28:
                    bb:74:89:89:3f:e9:02:07:76:c4:5a:5e:9c:a2:3c:
                    9d:c6:08:19:15:14:81:d0:1c:65:56:1a:0a:99:a7:
                    b0:e5:7a:cd:99:82:d2:73:e9:14:3a:9d:9e:57:5d:
                    d3:7f:c2:39:6e:1a:11:cc:8a:0e:21:93:b3:fe:7f:
                    44:a5:81:46:b2:35:df:2c:1b:2e:f2:cc:9a:63:ec:
                    9f:c3:23:0e:07:2c:65:0e:00:a3:e1:1f:e8:33:5e:
                    46:ea:63:ad:4b:fd:19:24:3f:84:f0:52:78:30:96:
                    3f:6b:f7:21:4a:f8:5d:80:e6:8b:67:79:8d:c5:ea:
                    cd:0a:f5:52:b1:00:49:ce:43:02:64:f5:de:11:c4:
                    58:c9:0d:32:1a:f8:03:b3:d6:c1:f6:88:a8:ce:13:
                    a3:61
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier: 
                3F:B1:8D:89:FA:F3:18:8D:CE:59:0F:7C:48:90:77:96:1F:82:A9:57
            X509v3 Authority Key Identifier: 
                keyid:74:01:65:A8:0D:10:71:97:0A:BC:09:C0:2B:71:C1:AC:7C:1D:6E:0E

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points: 

                Full Name:
                  URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl

            Authority Information Access: 
                CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access: 
                CA Repository - URI:rsync://rpki.apnic.net/member_repository/A9186214/B7F81958331A11E4AF2AB37CC4F9AE02/
                RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A9186214/B7F81958331A11E4AF2AB37CC4F9AE02/P7GNifrzGI3OWQ98SJB3lh-CqVc.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  66.96.224.0/19
                  139.0.0.0/16
                  139.192.0.0/14
                  139.228.0.0/16
                  139.255.0.0-140.0.255.255
                  140.213.0.0/16
                  158.140.160.0/19

    Signature Algorithm: sha256WithRSAEncryption
         6e:e0:df:a8:0d:64:d5:3c:a6:c2:29:fd:5b:e0:67:db:cb:fa:
         cf:e1:81:c1:5a:40:d7:71:e2:b4:f1:fd:32:e5:38:61:06:5c:
         3e:e2:ca:32:02:f5:ef:bc:a9:23:1c:f7:50:49:c1:9b:ef:06:
         63:2d:6b:6a:00:5e:77:b4:1c:98:f0:07:9d:1c:a6:4f:03:67:
         cc:a9:aa:ab:bb:7a:36:74:2c:b2:5c:c0:b0:7e:17:1b:c5:7b:
         7a:bb:5e:95:ea:38:01:9b:68:dd:62:1e:45:57:8c:1b:99:b1:
         fa:d3:e6:f4:0b:c9:fb:e5:8c:d3:9b:a7:66:e0:03:b1:f3:49:
         f6:04:21:6e:ed:fc:fd:0d:bf:a0:0d:66:d2:28:db:8b:41:fa:
         a4:91:44:7b:a8:7e:af:75:ea:2c:92:0d:2f:cf:08:8c:0e:48:
         20:01:b2:9f:7e:88:3f:40:78:40:77:4b:df:43:5c:41:6b:79:
         1f:88:1c:ae:a2:7f:6a:d5:47:58:cc:70:e8:8f:0b:81:1a:88:
         4a:71:b9:15:25:96:18:4e:3e:9e:23:7c:2b:5c:55:b6:f9:26:
         be:a1:5b:7c:bb:cb:fa:ab:84:ed:be:9a:dd:bd:7b:01:31:f8:
         8d:4d:3b:c7:89:6d:b9:6e:58:1e:03:98:3c:16:1f:a9:01:9a:
         f8:70:14:ff
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Generated at Sun Sep 26 12:50:00 2021 by LibreSSL & rpki-client.