RPKI Certificate
Location:                 ./rsync/rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/h5VMAjHKrLK-Lf21Z8dK9ey3Www.cer (download)

Subject key identifier:   87:95:4C:02:31:CA:AC:B2:BE:2D:FD:B5:67:C7:4A:F5:EC:B7:5B:0C
Authority key identifier: 74:01:65:A8:0D:10:71:97:0A:BC:09:C0:2B:71:C1:AC:7C:1D:6E:0E
Manifest:                 rpki.apnic.net/member_repository/A916BCDF/ECE0FBE6E36D11E8956F3516C4F9AE02/h5VMAjHKrLK-Lf21Z8dK9ey3Www.mft
CA Repository:            rpki.apnic.net/member_repository/A916BCDF/ECE0FBE6E36D11E8956F3516C4F9AE02/
Notification URL:         https://rrdp.apnic.net/notification.xml
Subject Public Key Info:  
Subordinate resources:
    until: 2022-12-30T00:00:00Z
    Resources:
    1: IP: 66.42.32.0/19
    2: IP: 139.180.128.0 -- 139.180.223.255
    3: IP: 158.247.192.0/18
    4: IP: 167.179.64.0/18
    5: IP: 207.148.64.0/18

--
$ openssl x509 -text -inform DER -in ./rsync/rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/h5VMAjHKrLK-Lf21Z8dK9ey3Www.cer
Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 15879 (0x3e07)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A90DC5BE/serialNumber=740165A80D1071970ABC09C02B71C1AC7C1D6E0E
        Validity
            Not Before: Nov  2 15:06:37 2021 GMT
            Not After : Dec 30 00:00:00 2022 GMT
        Subject: CN=A916BCDF/serialNumber=87954C0231CAACB2BE2DFDB567C74AF5ECB75B0C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:08:ec:2a:8b:52:b0:47:a6:13:a2:6a:53:97:
                    6d:bf:2d:8a:41:73:1a:50:c6:84:fe:a8:ea:96:8b:
                    47:68:46:ac:6d:1d:4f:49:01:57:a0:c1:eb:8a:d8:
                    38:20:2e:00:0c:e6:37:50:45:29:ce:16:02:fd:2f:
                    74:d8:2c:76:8d:58:b0:c0:05:90:cd:a2:61:0d:e1:
                    92:55:4b:cd:80:14:73:49:58:49:4b:93:aa:4f:ca:
                    9f:92:b8:4c:e6:2c:c4:24:6e:3c:ac:06:33:9a:e7:
                    b5:be:1f:f0:86:88:bb:6a:e2:b6:24:60:0f:a6:64:
                    ec:f8:5e:ed:f9:0e:81:96:d2:0c:a4:ad:fa:eb:77:
                    23:61:d8:f0:e3:15:62:ff:f5:06:2f:64:68:a4:a3:
                    a9:65:38:83:cc:b8:70:55:82:44:23:26:98:8a:76:
                    3a:88:e3:9f:f6:66:82:fc:62:7a:7d:f1:9c:7a:6f:
                    80:2b:43:35:17:d0:b9:0b:c3:86:f0:f9:98:c7:ab:
                    72:21:0f:f6:da:55:91:7d:1a:c3:a0:06:78:be:7e:
                    63:5e:de:19:59:04:38:8b:70:8a:74:b7:12:0a:bb:
                    c0:d7:05:ab:05:92:53:7a:e5:39:15:fb:b7:36:80:
                    b0:04:6c:76:37:1a:5f:35:aa:4e:5c:5b:6b:59:43:
                    33:b3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier: 
                87:95:4C:02:31:CA:AC:B2:BE:2D:FD:B5:67:C7:4A:F5:EC:B7:5B:0C
            X509v3 Authority Key Identifier: 
                keyid:74:01:65:A8:0D:10:71:97:0A:BC:09:C0:2B:71:C1:AC:7C:1D:6E:0E

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points: 

                Full Name:
                  URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl

            Authority Information Access: 
                CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access: 
                CA Repository - URI:rsync://rpki.apnic.net/member_repository/A916BCDF/ECE0FBE6E36D11E8956F3516C4F9AE02/
                RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A916BCDF/ECE0FBE6E36D11E8956F3516C4F9AE02/h5VMAjHKrLK-Lf21Z8dK9ey3Www.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  66.42.32.0/19
                  139.180.128.0-139.180.223.255
                  158.247.192.0/18
                  167.179.64.0/18
                  207.148.64.0/18

    Signature Algorithm: sha256WithRSAEncryption
         4b:c6:8e:13:45:c5:ce:cd:cb:dc:41:69:72:a6:94:b5:9c:a9:
         18:af:df:8e:48:f5:05:2d:42:a3:57:ad:f1:47:45:87:6e:1c:
         69:02:da:a3:27:7e:0a:ba:c3:b8:eb:61:a7:97:16:1b:ef:4b:
         b0:6a:20:41:15:94:63:a7:f4:93:16:73:22:9c:c0:cd:24:e4:
         54:5a:e8:ec:51:eb:2f:96:10:f3:81:c5:66:0d:99:d9:12:ee:
         c6:db:b0:0a:7d:b9:bd:66:7d:73:6f:01:db:9b:a6:3d:79:d9:
         db:d1:a1:65:9a:e9:f3:32:00:0f:35:70:b5:82:f8:f9:38:ad:
         6c:de:30:bd:e7:87:18:16:da:bf:0a:0f:da:8b:8f:cf:86:85:
         7d:54:be:53:1d:ae:f7:52:db:fb:3a:1e:1e:7e:e9:b0:1e:73:
         f1:84:8e:1f:2c:e6:1d:92:8e:02:18:e8:65:c8:f3:23:57:6c:
         98:55:38:98:c0:3f:67:50:ce:4d:4e:8c:ff:82:f6:9f:50:55:
         e5:9f:9f:67:17:66:24:43:c0:83:b4:ac:bb:ce:a8:ee:b5:12:
         53:f2:d2:8b:ec:80:cf:3d:80:77:f5:c4:69:e4:0f:cd:38:55:
         d9:2b:35:bb:6f:61:2d:59:4f:71:9c:e0:db:cb:ac:fa:e9:ef:
         f3:e0:5e:31
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Generated at Tue Nov 2 17:02:40 2021 by LibreSSL & rpki-client.