RPKI Certificate
Location:                 ./rsync/rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/PV2GR6upu0BiXDxkPNg2fxUHgBo.cer (download)

Subject key identifier:   3D:5D:86:47:AB:A9:BB:40:62:5C:3C:64:3C:D8:36:7F:15:07:80:1A
Authority key identifier: 74:01:65:A8:0D:10:71:97:0A:BC:09:C0:2B:71:C1:AC:7C:1D:6E:0E
Manifest:                 rpki.apnic.net/member_repository/A91E0EF2/AB6B27F65EE211ECAFA64B44C4F9AE02/PV2GR6upu0BiXDxkPNg2fxUHgBo.mft
CA Repository:            rpki.apnic.net/member_repository/A91E0EF2/AB6B27F65EE211ECAFA64B44C4F9AE02/
Notification URL:         https://rrdp.apnic.net/notification.xml
Subject Public Key Info:  
Subordinate resources:
    until: 2022-05-01T00:00:00Z
    Resources:
    1: IP: 144.218.0.0/16
    2: IP: 169.201.0.0/16

--
$ openssl x509 -text -inform DER -in ./rsync/rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/PV2GR6upu0BiXDxkPNg2fxUHgBo.cer
Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 16132 (0x3f04)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A90DC5BE/serialNumber=740165A80D1071970ABC09C02B71C1AC7C1D6E0E
        Validity
            Not Before: Dec 17 02:40:25 2021 GMT
            Not After : May  1 00:00:00 2022 GMT
        Subject: CN=A91E0EF2/serialNumber=3D5D8647ABA9BB40625C3C643CD8367F1507801A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:ee:64:f9:4e:d8:e8:e3:e4:4e:84:84:69:50:
                    6c:a7:aa:a0:de:22:5c:c6:15:b9:26:cd:22:6a:3e:
                    a2:f6:33:5c:96:6c:e1:ba:e6:68:6f:5f:7f:00:f1:
                    8e:b0:3d:c0:94:36:a3:66:68:8d:47:fd:e8:36:2a:
                    39:1b:ce:5f:02:94:56:5e:47:43:8d:74:b7:e1:95:
                    75:cf:37:12:15:96:82:b1:4f:0e:8c:c9:f1:d3:f9:
                    72:ba:1f:fb:ba:67:02:c3:84:f6:75:ce:3a:8f:ee:
                    0a:67:d1:50:ac:d1:63:dc:bf:8d:42:b7:c1:8b:4c:
                    e8:37:d8:40:67:af:1d:96:13:9d:00:26:27:c7:40:
                    51:59:7a:fb:39:31:f1:a6:ad:6f:d1:8f:a8:f8:54:
                    32:7b:c3:50:b5:d4:35:ac:ac:4c:66:3c:29:f3:bb:
                    13:2a:d7:81:e6:5f:d1:02:c7:ea:64:91:3f:2a:9d:
                    15:8d:37:c5:7f:50:10:d4:1a:5f:23:ef:09:4d:1c:
                    14:68:42:2f:3a:cc:23:62:6c:d8:38:53:c2:a5:49:
                    60:32:9f:f3:93:68:69:1b:eb:ea:6a:4c:f2:5b:f1:
                    45:e3:c5:83:0f:48:b2:10:a6:7e:a3:cf:ef:d5:ad:
                    04:7c:16:a5:b5:a6:bd:06:81:4e:e1:70:61:90:57:
                    dd:09
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier: 
                3D:5D:86:47:AB:A9:BB:40:62:5C:3C:64:3C:D8:36:7F:15:07:80:1A
            X509v3 Authority Key Identifier: 
                keyid:74:01:65:A8:0D:10:71:97:0A:BC:09:C0:2B:71:C1:AC:7C:1D:6E:0E

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points: 

                Full Name:
                  URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl

            Authority Information Access: 
                CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access: 
                CA Repository - URI:rsync://rpki.apnic.net/member_repository/A91E0EF2/AB6B27F65EE211ECAFA64B44C4F9AE02/
                RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A91E0EF2/AB6B27F65EE211ECAFA64B44C4F9AE02/PV2GR6upu0BiXDxkPNg2fxUHgBo.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  144.218.0.0/16
                  169.201.0.0/16

    Signature Algorithm: sha256WithRSAEncryption
         4b:90:93:10:fe:61:b3:ec:66:63:f3:ca:ad:c6:2c:d8:a8:bc:
         62:b4:9f:38:3a:6e:25:e5:d1:92:d3:d2:42:bb:80:35:a3:92:
         33:f9:cc:68:be:b1:c4:e3:5f:83:16:47:30:bd:7b:5d:81:a0:
         55:c6:64:d9:9f:41:c8:42:09:b2:8b:c8:46:b3:1b:e8:87:52:
         dc:d9:82:24:13:ab:b7:16:f5:4d:f1:4a:78:db:d3:37:ed:c1:
         69:a1:73:a2:8e:b7:5f:bd:2f:d9:68:62:dc:5e:55:46:06:00:
         a6:51:27:6f:54:5b:b2:60:19:2e:2a:d9:33:e4:0e:6e:18:c6:
         b2:94:2e:4a:b6:df:dd:ca:3f:95:e3:62:5f:17:bf:b5:d4:21:
         a3:e6:9d:dd:13:dd:37:08:cd:14:84:a2:12:13:54:32:05:d1:
         fa:0d:a2:65:64:e7:b3:14:f4:12:5c:7c:d7:ad:87:f3:af:cf:
         ef:dd:79:6a:d5:81:05:a2:24:f5:3f:41:60:23:10:42:c4:db:
         f4:c7:7f:6d:5e:f2:b1:ff:1e:ba:51:3e:1e:7e:fa:15:3c:10:
         52:3a:5e:9f:90:d4:9f:ac:e4:14:2b:a5:36:96:a9:2d:3e:af:
         4b:e6:09:5a:8e:ba:9a:7d:eb:56:cb:69:b6:8f:c5:18:b6:46:
         75:59:37:3f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Generated at Fri Dec 17 04:42:36 2021 by LibreSSL & rpki-client.