RPKI Certificate
Location:                 ./rsync/rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/fLCdL6Lz8JFKl-WU-Av3sePjTmE.cer (download)

Subject key identifier:   7C:B0:9D:2F:A2:F3:F0:91:4A:97:E5:94:F8:0B:F7:B1:E3:E3:4E:61
Authority key identifier: 74:01:65:A8:0D:10:71:97:0A:BC:09:C0:2B:71:C1:AC:7C:1D:6E:0E
Manifest:                 rpki.apnic.net/member_repository/A91FBECF/B8F59F20183C11EBB945EC0BC4F9AE02/fLCdL6Lz8JFKl-WU-Av3sePjTmE.mft
CA Repository:            rpki.apnic.net/member_repository/A91FBECF/B8F59F20183C11EBB945EC0BC4F9AE02/
Notification URL:         https://rrdp.apnic.net/notification.xml
Subject Public Key Info:  
Subordinate resources:
    until: 2023-03-02T00:00:00Z
    Resources:
    1: IP: 146.88.88.0/21
    2: IP: 159.117.40.0/21
    3: IP: 159.117.96.0/21

--
$ openssl x509 -text -inform DER -in ./rsync/rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/fLCdL6Lz8JFKl-WU-Av3sePjTmE.cer
Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 16073 (0x3ec9)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A90DC5BE/serialNumber=740165A80D1071970ABC09C02B71C1AC7C1D6E0E
        Validity
            Not Before: Dec  6 06:19:28 2021 GMT
            Not After : Mar  2 00:00:00 2023 GMT
        Subject: CN=A91FBECF/serialNumber=7CB09D2FA2F3F0914A97E594F80BF7B1E3E34E61
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:85:bf:a4:04:c6:8c:68:70:62:99:b8:61:17:
                    2b:d1:4e:79:e3:86:f5:3a:1e:b2:6d:b7:d9:3e:ba:
                    69:1a:f2:4a:8d:36:f9:a2:b1:3f:aa:ed:d2:db:96:
                    22:78:79:c4:38:4a:c0:63:ce:13:d6:01:5f:49:e7:
                    ba:8d:df:42:94:8d:74:16:31:f7:96:50:05:4b:8a:
                    10:65:ad:21:b5:76:9a:38:4f:e8:f7:7c:b4:2f:bc:
                    63:56:98:d6:8c:0b:c5:21:27:41:77:cc:0e:58:13:
                    0f:cd:ff:df:c8:73:2b:e5:0b:0e:29:08:63:ea:a6:
                    a7:87:24:32:15:37:2c:2b:7b:bb:b6:0e:58:e0:a5:
                    27:5c:1e:b8:67:dd:c8:3c:2f:3d:a7:04:07:97:22:
                    32:8b:2b:1b:72:f1:3e:8e:67:ac:e0:9d:9c:70:2e:
                    ec:b9:46:8f:2e:ce:f0:1c:ef:0a:d0:87:df:82:e0:
                    15:68:44:d3:c8:9b:8b:78:8e:4b:a9:e3:3e:74:b1:
                    a4:04:0c:1d:22:5a:a7:50:36:09:53:75:1b:c6:53:
                    ae:ba:67:3e:50:f7:c1:f1:67:94:ab:ac:f9:b6:60:
                    a1:64:58:15:ed:7e:39:f3:cd:f9:cf:80:68:f8:ac:
                    77:4c:83:9b:00:aa:61:04:70:5d:a1:9b:ca:7e:61:
                    24:5b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier: 
                7C:B0:9D:2F:A2:F3:F0:91:4A:97:E5:94:F8:0B:F7:B1:E3:E3:4E:61
            X509v3 Authority Key Identifier: 
                keyid:74:01:65:A8:0D:10:71:97:0A:BC:09:C0:2B:71:C1:AC:7C:1D:6E:0E

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points: 

                Full Name:
                  URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl

            Authority Information Access: 
                CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access: 
                CA Repository - URI:rsync://rpki.apnic.net/member_repository/A91FBECF/B8F59F20183C11EBB945EC0BC4F9AE02/
                RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A91FBECF/B8F59F20183C11EBB945EC0BC4F9AE02/fLCdL6Lz8JFKl-WU-Av3sePjTmE.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  146.88.88.0/21
                  159.117.40.0/21
                  159.117.96.0/21

    Signature Algorithm: sha256WithRSAEncryption
         2b:35:a0:5c:be:77:a5:aa:7c:07:0b:f2:ee:48:68:10:f2:d1:
         c8:03:a8:c4:dd:de:55:af:61:61:de:5f:b4:82:4c:98:04:90:
         fe:14:68:8a:14:ca:c9:50:85:c2:9f:3c:de:01:47:f9:ca:30:
         56:74:42:4c:f6:7a:02:53:e2:f7:c5:5e:8d:2a:e7:59:be:35:
         ff:84:10:7c:6a:42:45:f3:b6:3e:31:64:5a:8c:1c:54:fe:7a:
         1b:ae:67:91:dc:b8:1f:da:6f:ac:0c:b2:f7:a9:e6:3d:84:0d:
         72:83:42:be:94:36:e9:46:02:d1:c9:42:8b:f4:d6:46:9c:48:
         69:72:ce:2b:b6:90:be:a6:52:06:f7:4d:67:5a:22:0a:17:94:
         7f:ad:91:90:0e:0c:c6:1c:22:4c:c9:3c:75:bb:06:a4:54:cc:
         1c:8d:5f:43:b5:fa:ad:fa:ad:ac:a0:dc:a4:d6:f7:56:73:59:
         db:35:a6:b1:9c:b5:72:04:1d:09:cc:b4:69:b0:0e:be:d9:e0:
         3f:d5:ee:dd:37:5e:da:f0:21:91:29:04:5b:d2:e5:88:12:83:
         c3:43:9e:4b:bd:92:e1:d1:3b:12:62:5e:fe:9b:93:d6:cf:89:
         16:40:07:72:2f:4c:ba:db:40:db:db:14:48:f7:05:9c:dc:a0:
         67:b4:c2:4a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Generated at Mon Dec 6 07:56:30 2021 by LibreSSL & rpki-client.