RPKI Certificate
Location:                 ./rsync/rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/i_fikwz8buuRbnOQ-JPgEAupOzI.cer (download)

Subject key identifier:   8B:F7:E2:93:0C:FC:6E:EB:91:6E:73:90:F8:93:E0:10:0B:A9:3B:32
Authority key identifier: 74:01:65:A8:0D:10:71:97:0A:BC:09:C0:2B:71:C1:AC:7C:1D:6E:0E
Manifest:                 rpki.apnic.net/member_repository/A918C661/04AAB29E836D11EAB4A2D76DC4F9AE02/i_fikwz8buuRbnOQ-JPgEAupOzI.mft
CA Repository:            rpki.apnic.net/member_repository/A918C661/04AAB29E836D11EAB4A2D76DC4F9AE02/
Notification URL:         https://rrdp.apnic.net/notification.xml
Subject Public Key Info:  
Subordinate resources:
    until: 2023-01-31T00:00:00Z
    Resources:
    1: IP: 134.122.128.0/17
    2: IP: 137.220.128.0/17
    3: IP: 143.92.32.0/19

--
$ openssl x509 -text -inform DER -in ./rsync/rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/i_fikwz8buuRbnOQ-JPgEAupOzI.cer
Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 15888 (0x3e10)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A90DC5BE/serialNumber=740165A80D1071970ABC09C02B71C1AC7C1D6E0E
        Validity
            Not Before: Nov  3 10:28:08 2021 GMT
            Not After : Jan 31 00:00:00 2023 GMT
        Subject: CN=A918C661/serialNumber=8BF7E2930CFC6EEB916E7390F893E0100BA93B32
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:93:4c:ed:a9:06:59:2f:90:93:b9:7a:48:82:
                    f0:52:b1:80:12:cc:ee:4f:6d:55:7e:67:cd:e6:c8:
                    69:ea:de:30:45:1a:a3:94:31:e0:6e:6b:06:fd:23:
                    92:6a:8d:d3:61:10:33:6b:bd:e7:65:0a:dc:17:8c:
                    2b:10:cc:06:73:14:d9:22:94:d3:80:6f:6d:74:98:
                    1b:8d:3f:93:34:a7:15:a8:d0:b3:c6:12:36:96:92:
                    a3:8f:55:0f:2d:0e:f6:be:bf:3f:8d:27:43:79:48:
                    95:a3:5d:4c:d0:16:98:78:9b:52:3e:d8:0c:ec:97:
                    fe:de:7d:57:f0:05:8f:6f:c1:b1:7a:2b:33:a8:4a:
                    47:69:7d:ec:21:c7:65:e9:b8:6c:9e:29:2d:94:bb:
                    f6:93:aa:89:02:77:a0:e2:69:99:b8:70:a6:77:06:
                    cc:20:26:92:16:73:54:01:e3:05:89:de:32:22:67:
                    92:4b:bf:20:28:ef:dd:60:8b:4b:d9:59:50:b9:42:
                    b9:ff:a2:aa:79:0f:84:a2:2a:f8:3e:23:7d:75:e1:
                    d8:5d:69:29:59:3b:53:10:87:63:03:30:ac:f0:db:
                    fe:e2:c9:3c:0f:29:a1:d3:66:bd:be:2e:97:32:4c:
                    3a:89:f4:5d:6a:e5:7e:fc:23:f6:78:b6:63:78:6f:
                    e6:bd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier: 
                8B:F7:E2:93:0C:FC:6E:EB:91:6E:73:90:F8:93:E0:10:0B:A9:3B:32
            X509v3 Authority Key Identifier: 
                keyid:74:01:65:A8:0D:10:71:97:0A:BC:09:C0:2B:71:C1:AC:7C:1D:6E:0E

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points: 

                Full Name:
                  URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl

            Authority Information Access: 
                CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access: 
                CA Repository - URI:rsync://rpki.apnic.net/member_repository/A918C661/04AAB29E836D11EAB4A2D76DC4F9AE02/
                RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A918C661/04AAB29E836D11EAB4A2D76DC4F9AE02/i_fikwz8buuRbnOQ-JPgEAupOzI.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  134.122.128.0/17
                  137.220.128.0/17
                  143.92.32.0/19

    Signature Algorithm: sha256WithRSAEncryption
         ad:fa:ee:75:7c:05:b1:2c:b5:67:ae:61:67:b4:d9:78:5d:ff:
         6e:02:f2:19:6d:43:a5:af:66:da:c8:14:07:7c:e7:56:c1:5d:
         d5:f8:8b:5a:db:71:c7:a5:a8:ce:0e:c8:c4:c0:88:3f:96:ae:
         8b:5e:b9:34:bc:0d:62:67:c0:1d:e0:f8:de:14:2a:16:a9:3f:
         4a:c6:04:1e:21:96:d3:06:64:ff:00:23:58:02:02:63:6c:c8:
         09:3f:dd:6d:1a:9a:49:06:99:fe:40:8b:9f:77:16:4e:a1:65:
         b5:1a:c4:b7:d0:e7:5d:c9:1b:bf:b2:bb:04:37:75:02:a4:d2:
         1d:16:f7:e1:76:e8:e1:d1:ba:aa:0f:3b:9a:d8:16:76:ae:06:
         11:4e:bb:c7:09:70:2a:98:50:23:f1:fc:d4:17:a6:6c:34:1c:
         23:18:42:f7:87:74:be:0a:a0:97:d2:db:44:b6:18:f6:b5:61:
         9e:19:00:d2:fb:1f:36:0b:32:15:45:7f:2e:92:9c:9c:16:c5:
         9b:52:47:8f:10:0f:e9:4b:45:8f:0a:d0:ab:7b:aa:c2:05:b1:
         86:d3:08:da:8e:d0:2c:60:d0:c7:34:51:9b:81:03:6a:09:e5:
         b8:9d:5f:63:79:66:8c:5b:cb:bd:6a:d7:3b:3b:a3:60:df:eb:
         24:b5:06:56
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Generated at Wed Nov 3 12:41:59 2021 by LibreSSL & rpki-client.