RPKI Certificate
Location:                 ./rsync/rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/PG7AmwlfpfUTYVEIpUR8rLcasaE.cer (download)

Subject key identifier:   3C:6E:C0:9B:09:5F:A5:F5:13:61:51:08:A5:44:7C:AC:B7:1A:B1:A1
Authority key identifier: 74:01:65:A8:0D:10:71:97:0A:BC:09:C0:2B:71:C1:AC:7C:1D:6E:0E
Manifest:                 rpki.apnic.net/member_repository/A917E4BA/C952AC9E52DC11EA82601B0FC4F9AE02/PG7AmwlfpfUTYVEIpUR8rLcasaE.mft
CA Repository:            rpki.apnic.net/member_repository/A917E4BA/C952AC9E52DC11EA82601B0FC4F9AE02/
Notification URL:         https://rrdp.apnic.net/notification.xml
Subject Public Key Info:  
Subordinate resources:
    until: 2023-01-31T00:00:00Z
    Resources:
    1: IP: 131.242.0.0/16
    2: IP: 147.132.0.0/16
    3: IP: 161.143.0.0/16

--
$ openssl x509 -text -inform DER -in ./rsync/rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/PG7AmwlfpfUTYVEIpUR8rLcasaE.cer
Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 16043 (0x3eab)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A90DC5BE/serialNumber=740165A80D1071970ABC09C02B71C1AC7C1D6E0E
        Validity
            Not Before: Dec  1 09:31:23 2021 GMT
            Not After : Jan 31 00:00:00 2023 GMT
        Subject: CN=A917E4BA/serialNumber=3C6EC09B095FA5F513615108A5447CACB71AB1A1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:8b:40:ac:87:b3:ff:58:20:35:96:bf:52:a7:
                    59:8b:87:9b:e9:60:d5:3d:3c:b7:68:30:60:f8:df:
                    01:79:5f:58:db:37:e7:f4:b5:3a:96:ab:b7:ac:3e:
                    c4:5a:64:64:e0:d8:44:47:0b:18:23:fc:cb:a4:a3:
                    ed:71:6e:17:0c:33:b1:32:ca:6c:b0:b6:d5:21:03:
                    2d:73:89:24:41:15:de:0f:fd:ed:7d:2a:86:5e:7e:
                    32:65:b2:1c:3e:5c:7d:60:3a:49:f1:2d:0a:85:4f:
                    72:fb:5f:22:4e:58:ed:14:eb:b8:36:7b:09:b8:04:
                    8f:0f:fc:5d:ce:ca:8a:22:b7:a8:cc:39:8a:a7:dd:
                    d3:84:7c:b0:05:c4:ad:d7:4e:06:ba:07:4c:4b:8b:
                    6d:8c:f1:b0:f3:06:6a:38:d0:21:5b:2e:d1:8a:46:
                    d0:2f:25:9b:91:3f:fa:fd:b2:72:ef:42:23:27:80:
                    23:d5:5f:c2:fe:f2:17:dc:9f:45:af:78:dd:5b:7a:
                    5d:dc:c9:f0:c5:f1:31:c3:98:da:18:7e:d6:a5:36:
                    63:57:b0:15:15:4d:9d:40:e6:4d:9a:f5:59:1f:db:
                    5a:e8:1f:29:ad:0e:52:71:96:23:0f:a4:4d:e6:2a:
                    95:1f:13:b9:2d:68:09:34:ed:8b:90:c4:87:58:97:
                    78:55
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier: 
                3C:6E:C0:9B:09:5F:A5:F5:13:61:51:08:A5:44:7C:AC:B7:1A:B1:A1
            X509v3 Authority Key Identifier: 
                keyid:74:01:65:A8:0D:10:71:97:0A:BC:09:C0:2B:71:C1:AC:7C:1D:6E:0E

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points: 

                Full Name:
                  URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl

            Authority Information Access: 
                CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access: 
                CA Repository - URI:rsync://rpki.apnic.net/member_repository/A917E4BA/C952AC9E52DC11EA82601B0FC4F9AE02/
                RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A917E4BA/C952AC9E52DC11EA82601B0FC4F9AE02/PG7AmwlfpfUTYVEIpUR8rLcasaE.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  131.242.0.0/16
                  147.132.0.0/16
                  161.143.0.0/16

    Signature Algorithm: sha256WithRSAEncryption
         0b:b2:8c:09:29:55:2e:59:39:e1:0a:49:bb:59:8e:32:69:3a:
         e5:d1:e0:9c:0b:22:98:8b:9d:04:87:49:18:39:2f:eb:b5:0b:
         43:2f:67:02:8d:2f:f8:75:30:56:da:83:55:97:7f:2b:ff:5d:
         f7:49:c1:fe:70:08:96:c1:7c:98:fe:31:2b:d8:50:c0:97:7d:
         54:e5:72:fb:83:a2:77:92:e2:99:d0:93:db:56:be:be:f7:fe:
         fd:8a:44:53:29:07:ce:c0:90:05:ef:03:94:5f:57:28:d1:95:
         f1:96:6e:a9:02:52:b3:8a:57:9d:5b:87:6d:40:50:21:d8:24:
         98:bc:4b:bc:f2:86:2c:25:ff:32:d9:a7:ec:1b:62:11:f9:f6:
         61:43:2f:60:f4:d6:98:c8:cb:da:e6:42:fd:aa:79:f5:c8:16:
         48:d8:7d:13:48:75:37:7a:66:cf:49:81:0c:31:d9:ae:7a:2b:
         40:77:eb:4a:2b:c0:26:3a:75:f2:eb:48:32:8d:a6:5e:48:3e:
         3b:50:e4:86:97:a6:4f:93:a9:1d:78:22:8c:4c:16:c8:13:05:
         4e:6c:29:5a:3e:af:7e:b0:bf:a1:bc:5e:2d:18:30:a6:89:2c:
         10:d0:21:58:3d:62:43:47:52:dc:73:e0:05:77:8f:2e:b2:39:
         f0:1a:58:0e
-----BEGIN CERTIFICATE-----
MIIGBjCCBO6gAwIBAgICPqswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkw
REM1QkUxMTAvBgNVBAUTKDc0MDE2NUE4MEQxMDcxOTcwQUJDMDlDMDJCNzFDMUFD
N0MxRDZFMEUwHhcNMjExMjAxMDkzMTIzWhcNMjMwMTMxMDAwMDAwWjBGMREwDwYD
VQQDEwhBOTE3RTRCQTExMC8GA1UEBRMoM0M2RUMwOUIwOTVGQTVGNTEzNjE1MTA4
QTU0NDdDQUNCNzFBQjFBMTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEB
ALOLQKyHs/9YIDWWv1KnWYuHm+lg1T08t2gwYPjfAXlfWNs35/S1Opart6w+xFpk
ZODYREcLGCP8y6Sj7XFuFwwzsTLKbLC21SEDLXOJJEEV3g/97X0qhl5+MmWyHD5c
fWA6SfEtCoVPcvtfIk5Y7RTruDZ7CbgEjw/8Xc7KiiK3qMw5iqfd04R8sAXErddO
BroHTEuLbYzxsPMGajjQIVsu0YpG0C8lm5E/+v2ycu9CIyeAI9Vfwv7yF9yfRa94
3Vt6XdzJ8MXxMcOY2hh+1qU2Y1ewFRVNnUDmTZr1WR/bWugfKa0OUnGWIw+kTeYq
lR8TuS1oCTTti5DEh1iXeFUCAwEAAaOCAvwwggL4MB0GA1UdDgQWBBQ8bsCbCV+l
9RNhUQilRHystxqxoTAfBgNVHSMEGDAWgBR0AWWoDRBxlwq8CcArccGsfB1uDjAO
BgNVHQ8BAf8EBAMCAQYwDwYDVR0TAQH/BAUwAwEB/zBzBgNVHR8EbDBqMGigZqBk
hmJyc3luYzovL3Jwa2kuYXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRGMjAxRDY2
MTFFMjhBQzg4MzdDNzJGRDFGRjIvZEFGbHFBMFFjWmNLdkFuQUszSEJySHdkYmc0
LmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5h
cG5pYy5uZXQvcmVwb3NpdG9yeS85ODA2NTJFMEI3N0UxMUU3QTk2QTM5NTIxQTRG
NEZCNC9kQUZscUEwUWNaY0t2QW5BSzNIQnJId2RiZzQuY2VyMEoGA1UdIAEB/wRA
MD4wPAYIKwYBBQUHDgIwMDAuBggrBgEFBQcCARYiaHR0cHM6Ly93d3cuYXBuaWMu
bmV0L1JQS0kvQ1BTLnBkZjCCASgGCCsGAQUFBwELBIIBGjCCARYwXwYIKwYBBQUH
MAWGU3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
N0U0QkEvQzk1MkFDOUU1MkRDMTFFQTgyNjAxQjBGQzRGOUFFMDIvMH4GCCsGAQUF
BzAKhnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5
MTdFNEJBL0M5NTJBQzlFNTJEQzExRUE4MjYwMUIwRkM0RjlBRTAyL1BHN0Ftd2xm
cGZVVFlWRUlwVVI4ckxjYXNhRS5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJk
cC5hcG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAoBggrBgEFBQcBBwEB/wQZMBcw
FQQCAAEwDwMDAIPyAwMAk4QDAwChjzANBgkqhkiG9w0BAQsFAAOCAQEAC7KMCSlV
Llk54QpJu1mOMmk65dHgnAsimIudBIdJGDkv67ULQy9nAo0v+HUwVtqDVZd/K/9d
90nB/nAIlsF8mP4xK9hQwJd9VOVy+4Oid5LimdCT21a+vvf+/YpEUykHzsCQBe8D
lF9XKNGV8ZZuqQJSs4pXnVuHbUBQIdgkmLxLvPKGLCX/Mtmn7BtiEfn2YUMvYPTW
mMjL2uZC/ap59cgWSNh9E0h1N3pmz0mBDDHZrnorQHfrSivAJjp18utIMo2mXkg+
O1DkhpemT5OpHXgijEwWyBMFTmwpWj6vfrC/obxeLRgwpoksENAhWD1iQ0dS3HPg
BXePLrI58BpYDg==
-----END CERTIFICATE-----

Generated at Wed Dec 1 11:09:08 2021 by LibreSSL & rpki-client.