RPKI Certificate
Location:                 rsync/rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/iNh7EC9cJ3HDZwZOIEm2ipA8cbU.cer (download)

Subject key identifier:   88:D8:7B:10:2F:5C:27:71:C3:67:06:4E:20:49:B6:8A:90:3C:71:B5
Authority key identifier: 74:01:65:A8:0D:10:71:97:0A:BC:09:C0:2B:71:C1:AC:7C:1D:6E:0E
Manifest:                 rpki.apnic.net/member_repository/A916A983/0E082E72CD0F11E89D9FF165C4F9AE02/iNh7EC9cJ3HDZwZOIEm2ipA8cbU.mft
CA Repository:            rpki.apnic.net/member_repository/A916A983/0E082E72CD0F11E89D9FF165C4F9AE02/
Notification URL:         https://rrdp.apnic.net/notification.xml
Subordinate resources:
    1: IP: 137.147.0.0/16
    2: IP: 138.130.0.0/16
    3: IP: 138.217.0.0/16
    4: IP: 139.130.0.0/16
    5: IP: 139.134.0.0/16
    6: IP: 139.168.0.0/16
    7: IP: 143.238.0.0/16
    8: IP: 144.130.0.0--144.140.255.255
    9: IP: 147.10.0.0/16
    10: IP: 147.69.0.0/16
    11: IP: 149.135.0.0/16
    12: IP: 149.167.0.0/16
    13: IP: 155.143.0.0/16
    14: IP: 165.228.0.0/16
    15: IP: 192.67.84.0/24
    16: IP: 192.70.219.0/24
    17: IP: 192.73.66.0/24
    18: IP: 192.74.139.0--192.74.208.255
    19: IP: 192.82.143.0/24
    20: IP: 192.111.105.0/24
    21: IP: 192.131.27.0--192.131.30.255
    22: IP: 192.148.116.0--192.148.165.255

--
$ openssl x509 -text -inform DER -in rsync/rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/iNh7EC9cJ3HDZwZOIEm2ipA8cbU.cer
Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 15321 (0x3bd9)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A90DC5BE/serialNumber=740165A80D1071970ABC09C02B71C1AC7C1D6E0E
        Validity
            Not Before: Jul 27 06:08:34 2021 GMT
            Not After : Sep 30 00:00:00 2022 GMT
        Subject: CN=A916A983/serialNumber=88D87B102F5C2771C367064E2049B68A903C71B5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:89:1d:aa:6f:69:f1:ab:bc:b0:97:d8:b3:e6:
                    1f:44:a2:cd:57:33:8c:d9:00:1a:ea:2b:03:26:9c:
                    a5:37:e6:e6:a3:09:d9:6a:bb:dc:6d:58:4c:b2:9e:
                    31:ec:de:88:19:6e:19:fa:dd:3d:9f:68:45:f7:9f:
                    fb:f8:9d:30:e4:13:0b:59:cb:5c:c5:a9:5f:94:74:
                    1e:cc:6a:0f:96:bd:c3:ff:19:f2:70:3c:5b:4d:d9:
                    9e:cf:0a:6f:5a:e8:84:64:f5:eb:2c:9f:60:ae:e0:
                    93:15:12:39:b5:ef:c8:ab:f2:2e:8f:61:5f:4c:0d:
                    d9:c4:af:89:ff:ac:fe:6f:3c:59:4a:a3:66:9a:9f:
                    6b:39:33:70:93:ac:ad:73:00:f5:15:1a:43:65:9a:
                    2e:7b:da:d7:ad:9a:f1:b2:7e:69:51:5f:44:3c:96:
                    2b:7d:d8:8e:fa:37:a0:a4:ea:1a:e7:6e:20:4e:e8:
                    98:43:74:6a:1f:62:9c:9f:3a:74:bd:db:5f:f1:4d:
                    6d:bb:d9:59:6f:41:4f:06:ae:be:f8:15:8b:83:8f:
                    28:04:e1:01:65:81:59:77:ab:48:9c:74:ff:25:52:
                    a6:3b:d0:cb:c3:fa:61:7f:bb:a9:5f:32:db:e3:a0:
                    c9:ce:6d:2c:0b:4c:bd:8b:52:54:5c:bf:9d:d3:66:
                    2d:bb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier: 
                88:D8:7B:10:2F:5C:27:71:C3:67:06:4E:20:49:B6:8A:90:3C:71:B5
            X509v3 Authority Key Identifier: 
                keyid:74:01:65:A8:0D:10:71:97:0A:BC:09:C0:2B:71:C1:AC:7C:1D:6E:0E

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points: 

                Full Name:
                  URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl

            Authority Information Access: 
                CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access: 
                CA Repository - URI:rsync://rpki.apnic.net/member_repository/A916A983/0E082E72CD0F11E89D9FF165C4F9AE02/
                RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A916A983/0E082E72CD0F11E89D9FF165C4F9AE02/iNh7EC9cJ3HDZwZOIEm2ipA8cbU.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  137.147.0.0/16
                  138.130.0.0/16
                  138.217.0.0/16
                  139.130.0.0/16
                  139.134.0.0/16
                  139.168.0.0/16
                  143.238.0.0/16
                  144.130.0.0-144.140.255.255
                  147.10.0.0/16
                  147.69.0.0/16
                  149.135.0.0/16
                  149.167.0.0/16
                  155.143.0.0/16
                  165.228.0.0/16
                  192.67.84.0/24
                  192.70.219.0/24
                  192.73.66.0/24
                  192.74.139.0-192.74.208.255
                  192.82.143.0/24
                  192.111.105.0/24
                  192.131.27.0-192.131.30.255
                  192.148.116.0-192.148.165.255

    Signature Algorithm: sha256WithRSAEncryption
         aa:d5:11:7f:ba:82:7d:4b:a1:05:ff:ff:1d:0d:1c:4f:09:e5:
         a3:3a:46:76:69:32:6c:0b:75:67:cd:f2:26:1e:5e:5a:41:86:
         fa:51:f4:d4:75:1e:cd:a0:ea:2b:56:29:a9:7a:8f:1c:c1:a5:
         f8:8c:b5:ce:5b:dc:63:8c:4b:3f:ec:99:ad:72:e2:51:7b:a8:
         d0:c3:48:c7:4c:49:d0:54:26:db:ec:2b:44:af:a3:33:e5:ea:
         d2:33:0e:df:10:44:73:a3:80:15:17:de:0a:77:90:6c:2b:77:
         f4:d4:a8:31:c2:d1:a3:08:63:83:87:48:7e:f8:41:8d:2c:fc:
         15:f7:8d:b2:81:ae:47:38:50:6d:6f:00:08:2b:9b:ea:6d:9e:
         88:4d:35:9d:7e:5e:88:5e:81:ae:20:fb:64:31:0e:f2:e1:4a:
         a5:7c:da:2d:de:27:d3:57:94:93:fc:c3:dc:5b:88:0a:d6:5a:
         c7:69:b7:33:ff:e1:f9:9d:d7:80:45:d7:33:24:63:0d:a5:f5:
         98:f0:d8:68:3b:a5:75:9b:90:87:45:96:49:aa:f6:0c:f5:19:
         16:07:72:79:8a:b0:e1:a0:e3:72:35:df:7e:31:27:8f:c9:30:
         b5:62:4d:1a:8a:4e:d0:8d:29:eb:9d:93:90:78:d4:cd:74:e6:
         3d:d5:67:4f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Generated at Sun Sep 26 12:50:05 2021 by LibreSSL & rpki-client.