RPKI Certificate
Location:                 rsync/rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/XLKYvBpwUBeAXFYfCQoNR5UOar0.cer (download)

Subject key identifier:   5C:B2:98:BC:1A:70:50:17:80:5C:56:1F:09:0A:0D:47:95:0E:6A:BD
Authority key identifier: 74:01:65:A8:0D:10:71:97:0A:BC:09:C0:2B:71:C1:AC:7C:1D:6E:0E
Manifest:                 rpki.apnic.net/member_repository/A912BFC5/3F34203E290511E593BFC626C4F9AE02/XLKYvBpwUBeAXFYfCQoNR5UOar0.mft
CA Repository:            rpki.apnic.net/member_repository/A912BFC5/3F34203E290511E593BFC626C4F9AE02/
Notification URL:         https://rrdp.apnic.net/notification.xml
Subordinate resources:
    1: IP: 198.180.142.0/24

--
$ openssl x509 -text -inform DER -in rsync/rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/XLKYvBpwUBeAXFYfCQoNR5UOar0.cer
Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 14384 (0x3830)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A90DC5BE/serialNumber=740165A80D1071970ABC09C02B71C1AC7C1D6E0E
        Validity
            Not Before: Feb  8 12:54:05 2021 GMT
            Not After : Mar 31 00:00:00 2022 GMT
        Subject: CN=A912BFC5/serialNumber=5CB298BC1A705017805C561F090A0D47950E6ABD
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:c7:92:58:31:72:e9:9e:f6:39:70:f3:8b:2c:
                    69:2a:2e:27:18:fe:93:a1:15:94:60:31:10:14:d6:
                    22:ff:d7:10:1e:16:de:38:d1:c4:dd:79:cc:0f:6d:
                    c2:74:50:1d:be:09:5b:7b:6f:ce:58:f4:56:74:32:
                    a3:f1:39:21:ae:86:81:1d:b7:d1:c3:df:26:7c:0e:
                    41:53:02:36:3d:a3:a8:6f:a0:76:21:d2:ac:36:c1:
                    ab:ce:97:47:84:44:6c:f8:ab:8a:a9:46:4e:50:38:
                    02:61:95:cf:77:8c:3e:8a:69:e2:1b:24:b5:46:17:
                    e3:4b:d7:40:03:5c:60:d7:c5:c9:56:79:e6:58:60:
                    65:fc:b5:ec:2a:08:2f:c4:de:16:7e:2a:c8:3c:bd:
                    d9:ec:b9:14:37:93:3c:03:88:e0:07:38:9a:7c:b4:
                    f6:fc:02:aa:5b:07:f7:44:7d:79:dd:0a:f0:94:d5:
                    e0:f1:36:79:7e:6f:48:82:ee:ab:31:c6:aa:64:34:
                    33:52:a8:b2:9e:77:9b:1f:14:ec:f6:d0:a2:50:be:
                    60:6f:a5:3c:91:06:47:f7:04:eb:57:1f:d4:ea:22:
                    f1:09:46:0c:06:84:27:0c:f2:fa:c8:c4:87:95:5c:
                    8c:20:84:15:83:4f:f7:17:15:b0:89:45:85:0d:1f:
                    f9:91
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier: 
                5C:B2:98:BC:1A:70:50:17:80:5C:56:1F:09:0A:0D:47:95:0E:6A:BD
            X509v3 Authority Key Identifier: 
                keyid:74:01:65:A8:0D:10:71:97:0A:BC:09:C0:2B:71:C1:AC:7C:1D:6E:0E

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points: 

                Full Name:
                  URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl

            Authority Information Access: 
                CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access: 
                CA Repository - URI:rsync://rpki.apnic.net/member_repository/A912BFC5/3F34203E290511E593BFC626C4F9AE02/
                RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A912BFC5/3F34203E290511E593BFC626C4F9AE02/XLKYvBpwUBeAXFYfCQoNR5UOar0.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  198.180.142.0/24

    Signature Algorithm: sha256WithRSAEncryption
         9d:cc:3f:ca:57:d0:f1:22:6d:d3:69:e1:2d:c8:8d:1c:f7:43:
         f4:56:72:87:7e:3a:03:72:d1:3f:d6:39:92:79:e5:64:5a:87:
         33:8f:5f:fb:b7:19:2b:a7:56:10:c3:4a:d7:90:0a:ab:a7:e1:
         97:47:ba:b0:65:11:72:4a:ac:1c:1c:d7:fe:93:7a:91:54:77:
         5d:a3:69:de:2b:af:42:df:94:16:67:07:1a:48:6e:c4:b8:41:
         7f:0f:c6:4f:a9:eb:07:50:fe:fc:a6:36:7c:4b:a7:71:9f:5b:
         27:50:69:ca:57:47:67:b3:db:62:85:be:53:7a:b7:45:5d:78:
         1f:41:90:fb:48:d6:22:77:00:2e:87:f5:5a:e4:22:77:9a:8e:
         38:2b:3a:72:1a:cf:08:e4:b6:8d:f7:cd:56:97:02:7d:bf:5f:
         70:9c:74:06:62:27:77:2f:f4:a1:a7:f4:e1:fd:92:ca:1f:be:
         b6:68:a0:93:56:f6:cc:eb:d2:8d:cf:65:b0:a5:89:44:8f:0c:
         ea:b7:b2:03:dd:76:3b:cd:6b:7a:09:83:e0:29:64:94:d8:ea:
         b1:73:c3:6d:3f:96:67:16:ba:1c:82:de:bd:56:16:ca:b8:49:
         50:f8:34:cb:a6:b6:c4:1a:9f:de:7c:e2:c4:42:ec:92:4d:ec:
         56:e9:f8:f1
-----BEGIN CERTIFICATE-----
MIIF/TCCBOWgAwIBAgICODAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkw
REM1QkUxMTAvBgNVBAUTKDc0MDE2NUE4MEQxMDcxOTcwQUJDMDlDMDJCNzFDMUFD
N0MxRDZFMEUwHhcNMjEwMjA4MTI1NDA1WhcNMjIwMzMxMDAwMDAwWjBGMREwDwYD
VQQDEwhBOTEyQkZDNTExMC8GA1UEBRMoNUNCMjk4QkMxQTcwNTAxNzgwNUM1NjFG
MDkwQTBENDc5NTBFNkFCRDCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEB
AKrHklgxcume9jlw84ssaSouJxj+k6EVlGAxEBTWIv/XEB4W3jjRxN15zA9twnRQ
Hb4JW3tvzlj0VnQyo/E5Ia6GgR230cPfJnwOQVMCNj2jqG+gdiHSrDbBq86XR4RE
bPiriqlGTlA4AmGVz3eMPopp4hsktUYX40vXQANcYNfFyVZ55lhgZfy17CoIL8Te
Fn4qyDy92ey5FDeTPAOI4Ac4mny09vwCqlsH90R9ed0K8JTV4PE2eX5vSILuqzHG
qmQ0M1Kosp53mx8U7PbQolC+YG+lPJEGR/cE61cf1Ooi8QlGDAaEJwzy+sjEh5Vc
jCCEFYNP9xcVsIlFhQ0f+ZECAwEAAaOCAvMwggLvMB0GA1UdDgQWBBRcspi8GnBQ
F4BcVh8JCg1HlQ5qvTAfBgNVHSMEGDAWgBR0AWWoDRBxlwq8CcArccGsfB1uDjAO
BgNVHQ8BAf8EBAMCAQYwDwYDVR0TAQH/BAUwAwEB/zBzBgNVHR8EbDBqMGigZqBk
hmJyc3luYzovL3Jwa2kuYXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRGMjAxRDY2
MTFFMjhBQzg4MzdDNzJGRDFGRjIvZEFGbHFBMFFjWmNLdkFuQUszSEJySHdkYmc0
LmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5h
cG5pYy5uZXQvcmVwb3NpdG9yeS85ODA2NTJFMEI3N0UxMUU3QTk2QTM5NTIxQTRG
NEZCNC9kQUZscUEwUWNaY0t2QW5BSzNIQnJId2RiZzQuY2VyMEoGA1UdIAEB/wRA
MD4wPAYIKwYBBQUHDgIwMDAuBggrBgEFBQcCARYiaHR0cHM6Ly93d3cuYXBuaWMu
bmV0L1JQS0kvQ1BTLnBkZjCCASgGCCsGAQUFBwELBIIBGjCCARYwXwYIKwYBBQUH
MAWGU3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
MkJGQzUvM0YzNDIwM0UyOTA1MTFFNTkzQkZDNjI2QzRGOUFFMDIvMH4GCCsGAQUF
BzAKhnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5
MTJCRkM1LzNGMzQyMDNFMjkwNTExRTU5M0JGQzYyNkM0RjlBRTAyL1hMS1l2QnB3
VUJlQVhGWWZDUW9OUjVVT2FyMC5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJk
cC5hcG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAfBggrBgEFBQcBBwEB/wQQMA4w
DAQCAAEwBgMEAMa0jjANBgkqhkiG9w0BAQsFAAOCAQEAncw/ylfQ8SJt02nhLciN
HPdD9FZyh346A3LRP9Y5knnlZFqHM49f+7cZK6dWEMNK15AKq6fhl0e6sGURckqs
HBzX/pN6kVR3XaNp3iuvQt+UFmcHGkhuxLhBfw/GT6nrB1D+/KY2fEuncZ9bJ1Bp
yldHZ7PbYoW+U3q3RV14H0GQ+0jWIncALof1WuQid5qOOCs6chrPCOS2jffNVpcC
fb9fcJx0BmIndy/0oaf04f2Syh++tmigk1b2zOvSjc9lsKWJRI8M6reyA912O81r
egmD4ClklNjqsXPDbT+WZxa6HILevVYWyrhJUPg0y6a2xBqf3nzixELskk3sVun4
8Q==
-----END CERTIFICATE-----

Generated at Sun Sep 26 12:50:02 2021 by LibreSSL & rpki-client.