RPKI Certificate
Location:                 ./rsync/rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/X-7enTglQ_BRUn-lM9R6kXB35jI.cer (download)

Subject key identifier:   5F:EE:DE:9D:38:25:43:F0:51:52:7F:A5:33:D4:7A:91:70:77:E6:32
Authority key identifier: 74:01:65:A8:0D:10:71:97:0A:BC:09:C0:2B:71:C1:AC:7C:1D:6E:0E
Manifest:                 rpki.apnic.net/member_repository/A91EA198/AD629222B52511E6AF6C895EC4F9AE02/X-7enTglQ_BRUn-lM9R6kXB35jI.mft
CA Repository:            rpki.apnic.net/member_repository/A91EA198/AD629222B52511E6AF6C895EC4F9AE02/
Notification URL:         https://rrdp.apnic.net/notification.xml
Subject Public Key Info:  
Subordinate resources:
    until: 2023-03-02T00:00:00Z
    Resources:
    1: IP: 8.128.0.0/10
    2: IP: 8.208.0.0/12
    3: IP: 149.129.0.0/16
    4: IP: 161.117.0.0/16
    5: IP: 170.33.0.0/16

--
$ openssl x509 -text -inform DER -in ./rsync/rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/X-7enTglQ_BRUn-lM9R6kXB35jI.cer
Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 16099 (0x3ee3)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A90DC5BE/serialNumber=740165A80D1071970ABC09C02B71C1AC7C1D6E0E
        Validity
            Not Before: Dec 10 04:51:55 2021 GMT
            Not After : Mar  2 00:00:00 2023 GMT
        Subject: CN=A91EA198/serialNumber=5FEEDE9D382543F051527FA533D47A917077E632
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:df:d2:20:67:2f:24:f5:70:bd:cd:f9:ca:95:94:
                    24:7a:40:ad:6f:e2:3f:3b:6d:19:9e:fa:e7:c8:65:
                    04:ca:08:ea:d7:42:57:dc:ea:6b:eb:b5:05:4c:58:
                    42:c9:fd:3a:43:d6:f7:75:62:d7:ff:1f:4f:a2:49:
                    a0:5b:8f:f0:69:4a:f8:39:25:1c:18:db:f6:51:d0:
                    d3:cb:19:7b:b4:af:51:9f:cf:bf:4f:52:84:5c:f2:
                    f5:57:38:6e:e4:d8:cb:29:b1:c5:38:d0:35:69:a8:
                    28:f3:91:b4:de:82:54:af:ac:70:ff:53:5c:ce:e8:
                    2f:25:cb:e8:87:17:8d:40:11:1d:40:47:eb:26:8d:
                    ad:ea:0e:a2:52:13:ea:73:69:e3:be:10:31:a2:54:
                    a4:21:5b:39:be:4e:a9:cb:d8:1e:8d:d3:ae:1b:65:
                    9c:2f:b3:4a:81:a2:eb:11:5e:be:42:9d:8f:d1:04:
                    dc:85:f9:5e:4a:13:23:ac:2e:ce:19:1d:29:d9:09:
                    54:8f:72:33:00:b5:18:42:26:71:9e:f9:0a:73:b8:
                    a1:5a:b2:8f:a0:94:ab:96:f9:e8:bf:da:b9:2d:76:
                    66:04:c7:60:23:dc:d7:16:1e:2b:4c:33:5e:a0:a5:
                    67:b5:e6:48:21:15:63:4c:6c:5c:3e:38:1c:49:78:
                    16:b1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier: 
                5F:EE:DE:9D:38:25:43:F0:51:52:7F:A5:33:D4:7A:91:70:77:E6:32
            X509v3 Authority Key Identifier: 
                keyid:74:01:65:A8:0D:10:71:97:0A:BC:09:C0:2B:71:C1:AC:7C:1D:6E:0E

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points: 

                Full Name:
                  URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl

            Authority Information Access: 
                CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access: 
                CA Repository - URI:rsync://rpki.apnic.net/member_repository/A91EA198/AD629222B52511E6AF6C895EC4F9AE02/
                RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A91EA198/AD629222B52511E6AF6C895EC4F9AE02/X-7enTglQ_BRUn-lM9R6kXB35jI.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  8.128.0.0/10
                  8.208.0.0/12
                  149.129.0.0/16
                  161.117.0.0/16
                  170.33.0.0/16

    Signature Algorithm: sha256WithRSAEncryption
         5f:7d:e9:b3:b0:2e:65:b1:87:5c:0f:28:b2:d1:a0:28:ad:cb:
         b8:d5:49:4f:d6:1b:97:16:99:eb:25:77:91:b2:14:21:4f:97:
         c0:f0:b6:62:e5:0a:f7:97:09:80:d1:f1:ba:ad:12:67:34:98:
         76:d3:67:68:d4:66:c2:ca:82:2c:e8:0e:f2:97:d9:58:47:fd:
         30:6b:9c:f2:f1:8f:e2:f9:09:c7:d5:e5:dd:f4:41:66:98:33:
         44:0c:f8:49:71:4f:e4:9f:3e:05:a9:f7:49:be:da:7a:7b:c2:
         a5:08:26:d3:ca:a8:42:92:72:6c:f8:7b:a1:3e:46:c5:ec:fd:
         fa:03:07:b4:8e:57:38:99:73:0d:81:cb:93:fc:01:f6:73:fd:
         11:51:01:7f:f1:39:90:06:98:ae:bc:9a:00:60:12:d0:d5:75:
         1a:d7:40:6b:31:d7:61:c9:5a:33:4e:fd:07:a1:ee:a0:45:c6:
         c3:43:af:7e:b5:f4:c0:7d:62:d1:2c:e6:12:cd:cb:e7:47:0a:
         4a:72:f9:36:0d:11:32:93:6f:93:fa:ac:2d:e0:c7:3a:a6:bc:
         58:b6:4b:ff:21:7a:0c:97:09:29:48:1b:11:12:7a:5c:1b:46:
         11:79:8b:7b:54:7a:c1:70:98:4a:69:7c:e9:9b:b1:79:8d:57:
         3a:3d:4e:df
-----BEGIN CERTIFICATE-----
MIIGEDCCBPigAwIBAgICPuMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkw
REM1QkUxMTAvBgNVBAUTKDc0MDE2NUE4MEQxMDcxOTcwQUJDMDlDMDJCNzFDMUFD
N0MxRDZFMEUwHhcNMjExMjEwMDQ1MTU1WhcNMjMwMzAyMDAwMDAwWjBGMREwDwYD
VQQDEwhBOTFFQTE5ODExMC8GA1UEBRMoNUZFRURFOUQzODI1NDNGMDUxNTI3RkE1
MzNENDdBOTE3MDc3RTYzMjCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEB
AN/SIGcvJPVwvc35ypWUJHpArW/iPzttGZ7658hlBMoI6tdCV9zqa+u1BUxYQsn9
OkPW93Vi1/8fT6JJoFuP8GlK+DklHBjb9lHQ08sZe7SvUZ/Pv09ShFzy9Vc4buTY
yymxxTjQNWmoKPORtN6CVK+scP9TXM7oLyXL6IcXjUARHUBH6yaNreoOolIT6nNp
474QMaJUpCFbOb5OqcvYHo3TrhtlnC+zSoGi6xFevkKdj9EE3IX5XkoTI6wuzhkd
KdkJVI9yMwC1GEImcZ75CnO4oVqyj6CUq5b56L/auS12ZgTHYCPc1xYeK0wzXqCl
Z7XmSCEVY0xsXD44HEl4FrECAwEAAaOCAwYwggMCMB0GA1UdDgQWBBRf7t6dOCVD
8FFSf6Uz1HqRcHfmMjAfBgNVHSMEGDAWgBR0AWWoDRBxlwq8CcArccGsfB1uDjAO
BgNVHQ8BAf8EBAMCAQYwDwYDVR0TAQH/BAUwAwEB/zBzBgNVHR8EbDBqMGigZqBk
hmJyc3luYzovL3Jwa2kuYXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRGMjAxRDY2
MTFFMjhBQzg4MzdDNzJGRDFGRjIvZEFGbHFBMFFjWmNLdkFuQUszSEJySHdkYmc0
LmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5h
cG5pYy5uZXQvcmVwb3NpdG9yeS85ODA2NTJFMEI3N0UxMUU3QTk2QTM5NTIxQTRG
NEZCNC9kQUZscUEwUWNaY0t2QW5BSzNIQnJId2RiZzQuY2VyMEoGA1UdIAEB/wRA
MD4wPAYIKwYBBQUHDgIwMDAuBggrBgEFBQcCARYiaHR0cHM6Ly93d3cuYXBuaWMu
bmV0L1JQS0kvQ1BTLnBkZjCCASgGCCsGAQUFBwELBIIBGjCCARYwXwYIKwYBBQUH
MAWGU3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
RUExOTgvQUQ2MjkyMjJCNTI1MTFFNkFGNkM4OTVFQzRGOUFFMDIvMH4GCCsGAQUF
BzAKhnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5
MUVBMTk4L0FENjI5MjIyQjUyNTExRTZBRjZDODk1RUM0RjlBRTAyL1gtN2VuVGds
UV9CUlVuLWxNOVI2a1hCMzVqSS5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJk
cC5hcG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAyBggrBgEFBQcBBwEB/wQjMCEw
HwQCAAEwGQMDBgiAAwMECNADAwCVgQMDAKF1AwMAqiEwDQYJKoZIhvcNAQELBQAD
ggEBAF996bOwLmWxh1wPKLLRoCity7jVSU/WG5cWmesld5GyFCFPl8DwtmLlCveX
CYDR8bqtEmc0mHbTZ2jUZsLKgizoDvKX2VhH/TBrnPLxj+L5CcfV5d30QWaYM0QM
+ElxT+SfPgWp90m+2np7wqUIJtPKqEKScmz4e6E+RsXs/foDB7SOVziZcw2By5P8
AfZz/RFRAX/xOZAGmK68mgBgEtDVdRrXQGsx12HJWjNO/Qeh7qBFxsNDr3619MB9
YtEs5hLNy+dHCkpy+TYNETKTb5P6rC3gxzqmvFi2S/8hegyXCSlIGxESelwbRhF5
i3tUesFwmEppfOmbsXmNVzo9Tt8=
-----END CERTIFICATE-----

Generated at Mon Dec 13 14:47:58 2021 by LibreSSL & rpki-client.