RPKI Certificate
Location:                 ./rsync/rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/PFRw6B-koZCHAh0K130zbOvipo0.cer (download)

Subject key identifier:   3C:54:70:E8:1F:A4:A1:90:87:02:1D:0A:D7:7D:33:6C:EB:E2:A6:8D
Authority key identifier: 74:01:65:A8:0D:10:71:97:0A:BC:09:C0:2B:71:C1:AC:7C:1D:6E:0E
Manifest:                 rpki.apnic.net/member_repository/A9143CB3/1516679E259D11E785D3250AC4F9AE02/PFRw6B-koZCHAh0K130zbOvipo0.mft
CA Repository:            rpki.apnic.net/member_repository/A9143CB3/1516679E259D11E785D3250AC4F9AE02/
Notification URL:         https://rrdp.apnic.net/notification.xml
Subject Public Key Info:  
Subordinate resources:
    until: 2023-01-31T00:00:00Z
    Resources:
    1: IP: 139.170.0.0/16
    2: IP: 139.208.0.0/13
    3: IP: 139.226.0.0/15
    4: IP: 140.206.0.0/15
    5: IP: 157.0.0.0/16
    6: IP: 157.18.0.0/16
    7: IP: 157.61.0.0/16
    8: IP: 157.122.0.0/16
    9: IP: 157.148.0.0/16
    10: IP: 157.156.0.0/16
    11: IP: 157.255.0.0/16

--
$ openssl x509 -text -inform DER -in ./rsync/rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/PFRw6B-koZCHAh0K130zbOvipo0.cer
Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 16224 (0x3f60)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A90DC5BE/serialNumber=740165A80D1071970ABC09C02B71C1AC7C1D6E0E
        Validity
            Not Before: Jan  4 01:34:21 2022 GMT
            Not After : Jan 31 00:00:00 2023 GMT
        Subject: CN=A9143CB3/serialNumber=3C5470E81FA4A19087021D0AD77D336CEBE2A68D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:16:3d:ca:61:c1:cb:8c:3d:5d:53:fa:9c:cd:
                    87:c9:80:be:8d:c9:27:c4:a0:a8:d1:6e:43:84:61:
                    e3:b9:b3:11:27:09:6d:6c:44:10:45:3b:3f:25:db:
                    56:84:21:a4:93:08:b5:2b:cd:9c:30:5e:5f:8a:24:
                    f5:02:f6:6d:c4:23:21:fb:ac:43:f7:6e:6f:59:22:
                    c5:26:21:19:cc:e9:ed:97:ba:de:65:df:a6:de:0e:
                    65:7d:29:c5:3f:ee:16:da:2f:66:50:ec:ac:19:0b:
                    bf:fb:79:cb:6b:33:96:d1:e0:4e:05:1f:d2:59:9b:
                    16:a5:3a:5c:02:4b:44:23:5c:53:b8:5a:6e:29:c4:
                    04:8e:03:38:b0:12:c7:5b:39:41:1b:f0:32:38:06:
                    d1:73:c8:84:ae:df:51:07:38:da:89:a1:fa:11:bc:
                    38:f6:51:0c:6a:a9:ca:6c:c8:62:04:e0:67:96:a9:
                    5b:88:04:1a:75:4f:08:5a:19:d6:c1:f2:c9:d7:43:
                    ab:40:50:15:43:43:58:91:61:d7:cd:7a:51:eb:9f:
                    eb:4c:72:de:ff:d1:dd:10:97:cb:cf:c8:62:16:a6:
                    ae:1b:bc:7d:d6:19:d8:dc:67:cc:3d:ad:46:82:ae:
                    d9:2a:0f:b9:4f:25:86:0d:78:28:3b:04:5d:62:ff:
                    44:bf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier: 
                3C:54:70:E8:1F:A4:A1:90:87:02:1D:0A:D7:7D:33:6C:EB:E2:A6:8D
            X509v3 Authority Key Identifier: 
                keyid:74:01:65:A8:0D:10:71:97:0A:BC:09:C0:2B:71:C1:AC:7C:1D:6E:0E

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points: 

                Full Name:
                  URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl

            Authority Information Access: 
                CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access: 
                CA Repository - URI:rsync://rpki.apnic.net/member_repository/A9143CB3/1516679E259D11E785D3250AC4F9AE02/
                RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A9143CB3/1516679E259D11E785D3250AC4F9AE02/PFRw6B-koZCHAh0K130zbOvipo0.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  139.170.0.0/16
                  139.208.0.0/13
                  139.226.0.0/15
                  140.206.0.0/15
                  157.0.0.0/16
                  157.18.0.0/16
                  157.61.0.0/16
                  157.122.0.0/16
                  157.148.0.0/16
                  157.156.0.0/16
                  157.255.0.0/16

    Signature Algorithm: sha256WithRSAEncryption
         21:b4:57:b1:73:13:a9:1b:ac:d4:4d:01:91:f0:44:a3:0e:c9:
         d6:64:71:b5:a3:29:72:08:f3:95:df:7c:22:4e:af:c6:ef:38:
         e3:bd:cd:d5:e4:87:86:f1:36:55:52:4a:99:64:f9:89:07:dd:
         08:e8:93:2d:54:ab:b2:da:db:26:6e:13:42:61:9e:45:e4:fc:
         7d:44:1a:f0:8e:48:ad:90:f2:1b:7f:cc:ee:6b:22:63:ae:53:
         11:b0:a5:be:28:25:68:89:8b:88:9a:b7:a9:e3:93:72:23:f5:
         01:a8:3c:a5:df:68:09:35:f4:ef:ca:c8:0b:c4:41:94:4a:d8:
         9d:68:0b:4a:9f:3a:24:f5:99:44:47:57:82:14:10:ae:53:e7:
         9e:66:b2:60:06:a5:f3:68:37:dc:6e:73:89:7b:38:a1:d1:d7:
         40:e5:8d:a0:2d:f5:e4:34:45:6f:93:75:8e:6c:c3:03:75:49:
         5f:b6:e2:f2:49:d2:07:10:76:5b:da:3e:69:1a:d3:6f:fb:c8:
         b8:85:1f:86:2c:fb:61:6d:b3:8d:db:c4:d4:fc:60:11:70:7d:
         73:5a:83:9c:2d:2d:8a:99:dd:b4:b7:8f:80:7b:f3:4e:0c:22:
         51:1d:4e:d9:49:cd:b8:f3:b2:84:f8:5b:bb:ab:dd:12:8a:61:
         55:4d:94:19
-----BEGIN CERTIFICATE-----
MIIGLjCCBRagAwIBAgICP2AwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkw
REM1QkUxMTAvBgNVBAUTKDc0MDE2NUE4MEQxMDcxOTcwQUJDMDlDMDJCNzFDMUFD
N0MxRDZFMEUwHhcNMjIwMTA0MDEzNDIxWhcNMjMwMTMxMDAwMDAwWjBGMREwDwYD
VQQDEwhBOTE0M0NCMzExMC8GA1UEBRMoM0M1NDcwRTgxRkE0QTE5MDg3MDIxRDBB
RDc3RDMzNkNFQkUyQTY4RDCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEB
AMkWPcphwcuMPV1T+pzNh8mAvo3JJ8SgqNFuQ4Rh47mzEScJbWxEEEU7PyXbVoQh
pJMItSvNnDBeX4ok9QL2bcQjIfusQ/dub1kixSYhGczp7Ze63mXfpt4OZX0pxT/u
FtovZlDsrBkLv/t5y2szltHgTgUf0lmbFqU6XAJLRCNcU7habinEBI4DOLASx1s5
QRvwMjgG0XPIhK7fUQc42omh+hG8OPZRDGqpymzIYgTgZ5apW4gEGnVPCFoZ1sHy
yddDq0BQFUNDWJFh1816Ueuf60xy3v/R3RCXy8/IYhamrhu8fdYZ2NxnzD2tRoKu
2SoPuU8lhg14KDsEXWL/RL8CAwEAAaOCAyQwggMgMB0GA1UdDgQWBBQ8VHDoH6Sh
kIcCHQrXfTNs6+KmjTAfBgNVHSMEGDAWgBR0AWWoDRBxlwq8CcArccGsfB1uDjAO
BgNVHQ8BAf8EBAMCAQYwDwYDVR0TAQH/BAUwAwEB/zBzBgNVHR8EbDBqMGigZqBk
hmJyc3luYzovL3Jwa2kuYXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRGMjAxRDY2
MTFFMjhBQzg4MzdDNzJGRDFGRjIvZEFGbHFBMFFjWmNLdkFuQUszSEJySHdkYmc0
LmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5h
cG5pYy5uZXQvcmVwb3NpdG9yeS85ODA2NTJFMEI3N0UxMUU3QTk2QTM5NTIxQTRG
NEZCNC9kQUZscUEwUWNaY0t2QW5BSzNIQnJId2RiZzQuY2VyMEoGA1UdIAEB/wRA
MD4wPAYIKwYBBQUHDgIwMDAuBggrBgEFBQcCARYiaHR0cHM6Ly93d3cuYXBuaWMu
bmV0L1JQS0kvQ1BTLnBkZjCCASgGCCsGAQUFBwELBIIBGjCCARYwXwYIKwYBBQUH
MAWGU3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
NDNDQjMvMTUxNjY3OUUyNTlEMTFFNzg1RDMyNTBBQzRGOUFFMDIvMH4GCCsGAQUF
BzAKhnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5
MTQzQ0IzLzE1MTY2NzlFMjU5RDExRTc4NUQzMjUwQUM0RjlBRTAyL1BGUnc2Qi1r
b1pDSEFoMEsxMzB6Yk92aXBvMC5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJk
cC5hcG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDBQBggrBgEFBQcBBwEB/wRBMD8w
PQQCAAEwNwMDAIuqAwMDi9ADAwGL4gMDAYzOAwMAnQADAwCdEgMDAJ09AwMAnXoD
AwCdlAMDAJ2cAwMAnf8wDQYJKoZIhvcNAQELBQADggEBACG0V7FzE6kbrNRNAZHw
RKMOydZkcbWjKXII85XffCJOr8bvOOO9zdXkh4bxNlVSSplk+YkH3Qjoky1Uq7La
2yZuE0JhnkXk/H1EGvCOSK2Q8ht/zO5rImOuUxGwpb4oJWiJi4iat6njk3Ij9QGo
PKXfaAk19O/KyAvEQZRK2J1oC0qfOiT1mURHV4IUEK5T555msmAGpfNoN9xuc4l7
OKHR10DljaAt9eQ0RW+TdY5swwN1SV+24vJJ0gcQdlvaPmka02/7yLiFH4Ys+2Ft
s43bxNT8YBFwfXNag5wtLYqZ3bS3j4B7804MIlEdTtlJzbjzsoT4W7ur3RKKYVVN
lBk=
-----END CERTIFICATE-----

Generated at Tue Jan 4 03:16:50 2022 by LibreSSL & rpki-client.