RPKI Certificate
Location:                 ./rsync/rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dOW7m208x_jCmoO9yEkrllnw7hc.cer (download)

Subject key identifier:   74:E5:BB:9B:6D:3C:C7:F8:C2:9A:83:BD:C8:49:2B:96:59:F0:EE:17
Authority key identifier: 74:01:65:A8:0D:10:71:97:0A:BC:09:C0:2B:71:C1:AC:7C:1D:6E:0E
Manifest:                 rpki.apnic.net/member_repository/A91620E0/D964B482310E11EA9C3CE72FC4F9AE02/dOW7m208x_jCmoO9yEkrllnw7hc.mft
CA Repository:            rpki.apnic.net/member_repository/A91620E0/D964B482310E11EA9C3CE72FC4F9AE02/
Notification URL:         https://rrdp.apnic.net/notification.xml
Subject Public Key Info:  
Subordinate resources:
    until: 2023-01-31T00:00:00Z
    Resources:
    1: IP: 47.8.0.0/15
    2: IP: 47.11.0.0/16
    3: IP: 47.15.0.0/16
    4: IP: 47.29.0.0 -- 47.31.255.255
    5: IP: 47.247.0.0/16
    6: IP: 130.26.0.0/16
    7: IP: 132.154.0.0/16
    8: IP: 136.232.0.0/15
    9: IP: 137.97.0.0/16
    10: IP: 139.167.0.0/16
    11: IP: 152.56.0.0/14
    12: IP: 157.32.0.0 -- 157.51.255.255
    13: IP: 169.149.0.0/16
    14: IP: 205.253.0.0/16

--
$ openssl x509 -text -inform DER -in ./rsync/rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dOW7m208x_jCmoO9yEkrllnw7hc.cer
Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 16033 (0x3ea1)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A90DC5BE/serialNumber=740165A80D1071970ABC09C02B71C1AC7C1D6E0E
        Validity
            Not Before: Nov 30 02:17:14 2021 GMT
            Not After : Jan 31 00:00:00 2023 GMT
        Subject: CN=A91620E0/serialNumber=74E5BB9B6D3CC7F8C29A83BDC8492B9659F0EE17
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e6:5e:6b:9c:d4:c7:61:15:fe:70:01:0a:ca:e2:
                    0b:05:dc:7a:84:01:33:d7:60:70:e1:23:29:0f:fb:
                    6e:d3:7c:d6:9f:ff:dd:64:92:52:11:7e:ae:6b:e1:
                    3f:5d:70:f9:3a:fb:85:60:8a:52:84:f1:ce:db:d9:
                    43:e7:bc:99:5d:16:98:1f:5e:5e:36:d3:23:fe:37:
                    fd:e7:76:d1:14:95:ca:87:eb:45:34:0d:3f:80:9a:
                    ce:32:8d:23:49:2e:ea:8e:7d:56:52:7b:30:dd:a9:
                    fa:4a:21:1d:5f:65:00:a7:c6:14:11:16:29:d7:f4:
                    50:eb:83:0a:0f:e4:d7:e5:a1:72:00:5b:f9:16:5f:
                    e7:f7:34:ce:23:5c:72:42:66:ae:60:be:0e:2f:34:
                    b3:f3:5d:20:47:95:2d:6f:7c:e5:0a:e1:c8:15:32:
                    17:5d:5e:5b:a0:cb:91:28:d6:62:d5:40:c8:6a:fd:
                    dd:27:4d:db:36:5c:09:08:87:b3:70:48:e7:cc:0a:
                    63:d1:86:d1:56:14:a1:0b:fa:5a:83:b7:87:8b:ff:
                    28:3d:68:1b:e5:8a:9b:69:e0:dc:71:49:d7:29:0d:
                    6c:db:95:40:3c:cc:2e:5d:b5:a1:99:b5:56:37:d5:
                    dc:7d:e4:31:34:af:ea:f5:50:46:25:69:04:d2:3b:
                    39:49
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier: 
                74:E5:BB:9B:6D:3C:C7:F8:C2:9A:83:BD:C8:49:2B:96:59:F0:EE:17
            X509v3 Authority Key Identifier: 
                keyid:74:01:65:A8:0D:10:71:97:0A:BC:09:C0:2B:71:C1:AC:7C:1D:6E:0E

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points: 

                Full Name:
                  URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl

            Authority Information Access: 
                CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access: 
                CA Repository - URI:rsync://rpki.apnic.net/member_repository/A91620E0/D964B482310E11EA9C3CE72FC4F9AE02/
                RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A91620E0/D964B482310E11EA9C3CE72FC4F9AE02/dOW7m208x_jCmoO9yEkrllnw7hc.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  47.8.0.0/15
                  47.11.0.0/16
                  47.15.0.0/16
                  47.29.0.0-47.31.255.255
                  47.247.0.0/16
                  130.26.0.0/16
                  132.154.0.0/16
                  136.232.0.0/15
                  137.97.0.0/16
                  139.167.0.0/16
                  152.56.0.0/14
                  157.32.0.0-157.51.255.255
                  169.149.0.0/16
                  205.253.0.0/16

    Signature Algorithm: sha256WithRSAEncryption
         93:b0:c8:e6:f2:9a:d6:73:20:fe:8d:b7:15:3f:31:dc:59:8b:
         d4:ed:5d:5b:27:35:6b:19:9b:0e:13:04:d9:3f:55:f6:90:50:
         5f:5b:d2:34:83:f6:7d:c8:08:ff:b0:d7:af:62:ac:49:77:b3:
         e5:bf:3c:45:09:bf:fb:5b:4b:72:e8:82:dc:f5:63:a6:1f:4f:
         98:6b:f7:a7:a2:8e:bf:b3:57:63:95:76:c8:1d:7d:9d:25:59:
         46:f6:6c:7b:df:d5:3b:70:f3:83:2e:b3:06:c3:8e:5b:7d:ec:
         ce:bb:66:6c:ca:75:cc:df:f2:12:21:8e:1d:aa:03:1f:5a:d2:
         e8:9b:ca:d1:b2:2c:79:af:44:a6:65:c4:b8:9f:1d:8b:33:2c:
         27:1c:38:fb:a1:ca:f9:59:d4:89:04:68:f7:43:79:86:9c:16:
         cc:82:9b:39:9d:9f:24:d5:e9:ff:9b:34:47:5f:cb:74:80:dc:
         46:e8:90:d5:b2:64:a9:1c:ec:ce:bc:71:1c:9b:2a:c4:22:e5:
         97:58:73:c7:d6:62:33:51:16:16:e1:77:e7:29:4b:98:77:c4:
         29:1b:08:c9:64:a0:cd:19:57:ce:d1:68:fa:23:5b:18:55:07:
         ce:88:5f:cd:25:79:e6:fb:c6:a3:7e:ce:43:26:eb:33:77:24:
         21:fb:80:67
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Generated at Tue Nov 30 03:32:57 2021 by LibreSSL & rpki-client.