RPKI Certificate
Location:                 ./rsync/rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/VEEdkHDiDJ_8_8QU_QkyC_Oatug.cer (download)

Subject key identifier:   54:41:1D:90:70:E2:0C:9F:FC:FF:C4:14:FD:09:32:0B:F3:9A:B6:E8
Authority key identifier: 74:01:65:A8:0D:10:71:97:0A:BC:09:C0:2B:71:C1:AC:7C:1D:6E:0E
Manifest:                 rpki.apnic.net/member_repository/A914C33A/FEC77C9A073611E8AB7DCB4AC4F9AE02/VEEdkHDiDJ_8_8QU_QkyC_Oatug.mft
CA Repository:            rpki.apnic.net/member_repository/A914C33A/FEC77C9A073611E8AB7DCB4AC4F9AE02/
Notification URL:         https://rrdp.apnic.net/notification.xml
Subordinate resources:
    1: IP: 69.94.32.0/20
    2: IP: 69.94.80.0/20
    3: IP: 209.212.192.0/19

--
$ openssl x509 -text -inform DER -in ./rsync/rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/VEEdkHDiDJ_8_8QU_QkyC_Oatug.cer
Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 15682 (0x3d42)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A90DC5BE/serialNumber=740165A80D1071970ABC09C02B71C1AC7C1D6E0E
        Validity
            Not Before: Oct  1 13:47:50 2021 GMT
            Not After : Dec  1 00:00:00 2022 GMT
        Subject: CN=A914C33A/serialNumber=54411D9070E20C9FFCFFC414FD09320BF39AB6E8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d6:2e:f7:c2:90:97:36:99:3f:93:e3:2f:7d:70:
                    be:32:f8:11:95:1f:a6:9e:3f:2d:a5:0c:cd:ec:9a:
                    54:bb:34:b4:d9:c8:9c:1c:42:34:9a:a9:e1:eb:b7:
                    2b:a7:70:3e:6a:8a:d8:17:44:f3:6e:04:53:85:22:
                    f0:f8:20:59:7c:08:5f:f3:2c:a3:e0:d0:83:97:2e:
                    a5:e0:1d:09:28:02:bf:ad:01:1b:68:45:14:a7:7c:
                    42:78:48:2a:5f:24:68:61:29:84:9a:d1:25:1d:36:
                    bc:bc:68:53:aa:6e:d3:a8:ce:96:ad:bd:0f:bf:b0:
                    5f:48:7f:34:ca:34:4a:2a:db:26:2e:6f:7b:68:6e:
                    9e:a0:06:86:c5:7e:75:fc:0c:b6:ac:0c:ac:a0:72:
                    74:b7:31:dc:d9:fc:18:8f:ee:fa:34:9c:b2:55:c0:
                    f5:f2:6a:ad:b7:3c:e6:1e:5b:ea:f3:e1:f1:de:d1:
                    10:1f:0b:dc:26:e0:fb:1a:30:a1:f6:44:3d:37:60:
                    57:fc:c9:91:e7:60:7b:34:dd:e9:a2:dc:a7:a6:5b:
                    e2:50:b4:55:c9:a0:78:8c:2b:a7:d4:e0:e8:68:ce:
                    63:ae:4d:ab:ae:5d:21:7d:4f:17:bd:1e:96:5c:df:
                    0e:5d:82:3d:07:9b:f0:01:c7:ae:d7:9a:7c:b7:f0:
                    4d:4f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier: 
                54:41:1D:90:70:E2:0C:9F:FC:FF:C4:14:FD:09:32:0B:F3:9A:B6:E8
            X509v3 Authority Key Identifier: 
                keyid:74:01:65:A8:0D:10:71:97:0A:BC:09:C0:2B:71:C1:AC:7C:1D:6E:0E

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points: 

                Full Name:
                  URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl

            Authority Information Access: 
                CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access: 
                CA Repository - URI:rsync://rpki.apnic.net/member_repository/A914C33A/FEC77C9A073611E8AB7DCB4AC4F9AE02/
                RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A914C33A/FEC77C9A073611E8AB7DCB4AC4F9AE02/VEEdkHDiDJ_8_8QU_QkyC_Oatug.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  69.94.32.0/20
                  69.94.80.0/20
                  209.212.192.0/19

    Signature Algorithm: sha256WithRSAEncryption
         bd:cf:62:77:c7:be:59:98:46:1e:79:c2:23:c7:d9:ea:e4:13:
         d3:93:1b:ad:78:d8:2e:d6:b8:68:4a:1a:b5:e6:a1:1f:36:ea:
         bd:f9:b3:9f:34:a8:db:90:3f:ff:97:31:13:d5:cd:a9:c4:10:
         77:fc:4f:7f:52:bc:67:e9:96:21:5a:6c:fb:fa:46:7a:28:d4:
         8d:56:e3:4c:37:37:10:07:ab:6f:bc:cf:62:d6:6d:27:f4:e0:
         2c:ac:1c:7e:64:f2:68:7f:f0:85:84:df:83:a6:29:bf:0f:48:
         88:ca:bf:e4:0c:99:75:da:5e:99:c0:c8:03:38:3a:b3:55:8b:
         bc:2b:63:fc:0f:2c:bd:f6:68:20:07:a0:58:75:ea:de:7a:68:
         18:27:20:17:b8:89:3f:bd:0b:b5:11:aa:9c:33:e1:77:55:5b:
         02:e5:9c:fc:f7:7b:c5:34:db:3c:4f:8a:df:84:54:6f:4b:3b:
         17:4f:11:e3:1d:f7:01:00:b9:d9:7b:cd:b1:3e:97:35:fb:d9:
         85:43:f0:d6:75:a1:11:d7:4b:a8:5a:52:a0:9e:44:2b:6e:c8:
         a7:a4:35:59:fa:1d:71:41:fd:d9:27:59:84:ce:d0:66:cb:38:
         9b:bd:4d:06:10:d6:da:01:8d:38:e5:24:df:e8:42:7e:57:54:
         0d:7e:b2:c7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Generated at Fri Oct 1 17:09:11 2021 by LibreSSL & rpki-client.