RPKI Certificate
Location:                 rsync/rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/Qp7OGTjMiSSxEQllyc9PlkhgIBg.cer (download)

Subject key identifier:   42:9E:CE:19:38:CC:89:24:B1:11:09:65:C9:CF:4F:96:48:60:20:18
Authority key identifier: 74:01:65:A8:0D:10:71:97:0A:BC:09:C0:2B:71:C1:AC:7C:1D:6E:0E
Manifest:                 rpki.apnic.net/member_repository/A914EAE4/5ECC15AA257511E7AC0D172AC4F9AE02/Qp7OGTjMiSSxEQllyc9PlkhgIBg.mft
CA Repository:            rpki.apnic.net/member_repository/A914EAE4/5ECC15AA257511E7AC0D172AC4F9AE02/
Notification URL:         https://rrdp.apnic.net/notification.xml
Subordinate resources:
    1: IP: 139.189.0.0/16
    2: IP: 139.200.0.0/13
    3: IP: 140.75.0.0/16
    4: IP: 140.224.0.0/16
    5: IP: 140.237.0.0/16
    6: IP: 140.240.0.0/16
    7: IP: 140.243.0.0/16
    8: IP: 140.246.0.0/16
    9: IP: 140.249.0.0--140.250.255.255
    10: IP: 140.255.0.0/16
    11: IP: 144.0.0.0/16
    12: IP: 144.7.0.0/16
    13: IP: 144.12.0.0/16
    14: IP: 144.52.0.0/16
    15: IP: 144.123.0.0/16
    16: IP: 144.255.0.0/16

--
$ openssl x509 -text -inform DER -in rsync/rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/Qp7OGTjMiSSxEQllyc9PlkhgIBg.cer
Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 15559 (0x3cc7)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A90DC5BE/serialNumber=740165A80D1071970ABC09C02B71C1AC7C1D6E0E
        Validity
            Not Before: Sep  6 13:41:38 2021 GMT
            Not After : Dec  1 00:00:00 2022 GMT
        Subject: CN=A914EAE4/serialNumber=429ECE1938CC8924B1110965C9CF4F9648602018
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:ab:2d:33:1c:8e:9a:6c:a7:33:e8:7c:74:89:
                    c8:48:7e:ab:ff:3d:8f:0d:47:86:7c:67:36:26:44:
                    35:fd:89:fa:f9:96:0f:2f:9d:c6:14:c5:a3:3c:83:
                    3d:22:0c:07:d3:6d:0a:b4:47:e8:39:64:23:5a:f1:
                    7c:9f:4f:e3:4c:7b:3a:48:cc:23:0b:4a:c4:02:86:
                    b9:dc:d1:84:7f:e6:4c:87:6e:b4:83:42:7c:e5:c7:
                    29:b0:f2:9b:5b:18:c8:f1:51:28:87:22:6d:4c:10:
                    49:bc:f4:67:7f:a9:24:fd:2f:c5:36:61:cd:b7:fb:
                    13:2a:4b:a3:0a:29:92:83:a5:65:4e:91:00:cb:6e:
                    90:13:05:42:f7:fb:07:22:2a:79:8f:b1:b3:5b:7a:
                    21:1e:38:37:44:34:ce:77:23:51:86:46:75:6a:13:
                    77:65:2e:0d:56:98:48:34:27:a9:ae:13:4d:0a:1d:
                    2f:3f:fa:78:5c:05:c5:d8:ef:28:9d:8f:fb:c3:d7:
                    ff:74:d2:f3:ea:3d:bf:72:3e:49:bf:e5:14:9b:e9:
                    08:08:aa:5f:46:5a:6c:04:13:8b:f8:6d:81:9d:2d:
                    84:b9:ef:44:2b:d2:03:44:62:85:77:96:27:84:9c:
                    78:99:01:3c:21:e8:79:0d:43:27:2f:30:4b:e7:4f:
                    ab:3b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier: 
                42:9E:CE:19:38:CC:89:24:B1:11:09:65:C9:CF:4F:96:48:60:20:18
            X509v3 Authority Key Identifier: 
                keyid:74:01:65:A8:0D:10:71:97:0A:BC:09:C0:2B:71:C1:AC:7C:1D:6E:0E

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points: 

                Full Name:
                  URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl

            Authority Information Access: 
                CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access: 
                CA Repository - URI:rsync://rpki.apnic.net/member_repository/A914EAE4/5ECC15AA257511E7AC0D172AC4F9AE02/
                RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A914EAE4/5ECC15AA257511E7AC0D172AC4F9AE02/Qp7OGTjMiSSxEQllyc9PlkhgIBg.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  139.189.0.0/16
                  139.200.0.0/13
                  140.75.0.0/16
                  140.224.0.0/16
                  140.237.0.0/16
                  140.240.0.0/16
                  140.243.0.0/16
                  140.246.0.0/16
                  140.249.0.0-140.250.255.255
                  140.255.0.0/16
                  144.0.0.0/16
                  144.7.0.0/16
                  144.12.0.0/16
                  144.52.0.0/16
                  144.123.0.0/16
                  144.255.0.0/16

    Signature Algorithm: sha256WithRSAEncryption
         5d:9b:88:d0:e5:67:2a:74:fa:88:ca:ff:38:cb:5e:5e:d3:8e:
         cd:59:67:e9:1a:75:97:92:02:2c:80:2b:63:37:db:f6:fe:f1:
         de:3e:df:67:d7:0d:66:ec:bf:5b:1c:a1:20:6f:62:28:49:2a:
         32:ba:65:d1:6e:1c:15:6f:fc:ba:ee:db:b8:92:cd:75:9e:38:
         1b:8f:08:5e:b6:62:93:88:16:a0:79:c7:6c:1a:f5:2c:75:81:
         1e:db:00:23:24:33:d5:b4:f0:09:ef:28:74:38:75:b6:d4:36:
         c8:c4:59:07:0b:3e:ea:3e:9d:a0:98:50:78:a5:2c:3a:c1:ad:
         3e:71:0f:06:d5:cd:bf:94:cb:14:16:f9:52:3d:b1:91:4d:17:
         e7:2c:01:ca:c5:96:00:1b:98:a0:e5:65:9b:57:28:cf:29:72:
         53:37:6d:50:ed:ad:6f:74:4a:c7:39:7f:8d:87:68:81:7e:50:
         97:63:5a:66:85:f4:c5:f7:d9:f2:98:59:40:0a:5b:89:14:2c:
         28:75:32:0c:73:12:a8:27:3c:8a:bc:ac:5b:a1:fb:1b:d4:83:
         4a:4e:80:0e:b4:f0:db:74:72:58:9a:e5:9f:3a:96:c4:1f:e9:
         ca:99:17:e3:bc:d3:9e:d7:f5:71:82:07:b8:d4:61:71:d2:26:
         61:6d:f0:d1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Generated at Sun Sep 26 12:50:01 2021 by LibreSSL & rpki-client.