RPKI Certificate
Location:                 rsync/rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/p65HRBaw6K06iehndKZA_r5pc_k.cer (download)

Subject key identifier:   A7:AE:47:44:16:B0:E8:AD:3A:89:E8:67:74:A6:40:FE:BE:69:73:F9
Authority key identifier: 74:01:65:A8:0D:10:71:97:0A:BC:09:C0:2B:71:C1:AC:7C:1D:6E:0E
Manifest:                 rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/p65HRBaw6K06iehndKZA_r5pc_k.mft
CA Repository:            rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/
Notification URL:         https://rrdp.apnic.net/notification.xml
Subordinate resources:
    1: IP: 67.158.52.0/24
    2: IP: 142.79.224.0/19
    3: IP: 158.144.0.0/16
    4: IP: 159.117.144.0/20
    5: IP: 162.216.140.0/22
    6: IP: 164.164.0.0/16
    7: IP: 168.220.224.0/19
    8: IP: 198.217.248.0/24

--
$ openssl x509 -text -inform DER -in rsync/rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/p65HRBaw6K06iehndKZA_r5pc_k.cer
Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 14958 (0x3a6e)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A90DC5BE/serialNumber=740165A80D1071970ABC09C02B71C1AC7C1D6E0E
        Validity
            Not Before: May 25 15:18:07 2021 GMT
            Not After : Jul  1 00:00:00 2022 GMT
        Subject: CN=A918EDB2/serialNumber=A7AE474416B0E8AD3A89E86774A640FEBE6973F9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cf:8e:6d:9c:f8:84:dd:79:81:26:a0:d8:35:82:
                    a4:b2:a9:73:15:75:51:ed:35:62:d1:b7:15:29:6d:
                    75:ea:83:fe:ad:76:50:68:6c:b7:c1:e1:b5:0b:16:
                    cc:c2:95:fd:9d:ae:df:e8:98:ce:30:b9:1f:a5:38:
                    80:c1:78:56:a9:e2:97:7d:e3:67:2f:02:37:34:c7:
                    7d:4f:04:9a:8a:0b:1c:20:49:43:b9:59:f2:45:09:
                    1c:18:f2:13:8e:47:fe:2b:d0:c5:c6:34:ee:c6:ad:
                    b5:f5:13:45:eb:2a:15:5f:de:7a:70:6c:c1:81:17:
                    6e:02:d0:43:88:d1:be:f6:9c:45:a5:a7:2e:f7:cb:
                    7f:90:e6:28:b7:53:1e:24:ad:bc:be:d2:0a:a6:92:
                    41:0c:7e:a8:13:42:d7:58:ae:0a:79:50:62:ba:23:
                    54:ca:ce:4c:d6:78:76:8d:50:18:21:7b:de:df:f2:
                    48:6b:78:15:2c:17:91:7f:78:68:67:75:35:cc:d4:
                    0c:c0:ea:83:40:00:71:30:ee:30:ac:d9:02:fe:a2:
                    f7:9e:19:7e:c5:ad:c2:e3:82:57:ee:4e:cb:29:e0:
                    38:c5:a7:28:68:ed:2b:ac:1e:1c:40:c6:00:94:0e:
                    d7:2a:b2:4f:38:a1:29:8b:65:8b:e6:74:22:ca:f4:
                    69:09
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier: 
                A7:AE:47:44:16:B0:E8:AD:3A:89:E8:67:74:A6:40:FE:BE:69:73:F9
            X509v3 Authority Key Identifier: 
                keyid:74:01:65:A8:0D:10:71:97:0A:BC:09:C0:2B:71:C1:AC:7C:1D:6E:0E

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points: 

                Full Name:
                  URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl

            Authority Information Access: 
                CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access: 
                CA Repository - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/
                RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/p65HRBaw6K06iehndKZA_r5pc_k.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  67.158.52.0/24
                  142.79.224.0/19
                  158.144.0.0/16
                  159.117.144.0/20
                  162.216.140.0/22
                  164.164.0.0/16
                  168.220.224.0/19
                  198.217.248.0/24

    Signature Algorithm: sha256WithRSAEncryption
         8f:4e:ab:1a:bb:97:cf:34:0d:8e:3c:d0:dd:fa:10:26:fe:de:
         fa:2d:35:f5:0e:a2:f7:39:b0:c8:e7:4b:7a:6b:d3:26:27:e9:
         c3:0b:08:3c:6f:10:4c:01:ae:07:be:df:aa:38:e8:41:b1:5a:
         ce:42:5d:2c:09:30:4a:a3:ce:3b:9e:f0:f1:92:99:69:7a:26:
         23:3d:00:54:8d:93:12:2b:9e:0f:5f:2e:d6:ad:90:a4:ff:a4:
         c1:3c:19:fa:b3:50:a2:b6:3c:a2:ce:5c:4a:84:7c:dd:ad:9f:
         f8:12:94:27:6a:0a:56:7d:37:de:6c:a0:d5:dc:50:8b:5f:83:
         dd:c5:3e:b3:fd:67:04:48:97:63:cc:48:bd:31:fc:f0:fb:39:
         f4:10:70:f9:ae:2c:bc:bb:6a:af:3e:be:89:7c:6b:80:65:83:
         be:49:49:78:2b:b8:34:20:8b:05:39:91:f7:09:a2:04:71:db:
         08:41:46:4a:c3:3b:92:46:16:7a:ea:44:93:52:22:5a:93:2a:
         f5:e1:01:6a:ed:44:91:20:b0:e2:9b:c2:cf:07:28:33:86:81:
         91:c1:e7:2d:5e:88:64:ef:7f:2c:ba:76:4f:f6:41:ca:44:8d:
         06:d1:e3:35:de:cc:c9:39:e0:44:8f:0a:cc:36:59:58:5c:81:
         01:5b:10:b6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Generated at Sun Sep 26 12:50:06 2021 by LibreSSL & rpki-client.