RPKI Certificate
Location:                 rsync/rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/rIhkJjgk7eNlW5l0Lfs56IO7kUU.cer (download)

Subject key identifier:   AC:88:64:26:38:24:ED:E3:65:5B:99:74:2D:FB:39:E8:83:BB:91:45
Authority key identifier: 74:01:65:A8:0D:10:71:97:0A:BC:09:C0:2B:71:C1:AC:7C:1D:6E:0E
Manifest:                 rpki.apnic.net/member_repository/A9120974/E105B3BA3A4911E9940F2D16C4F9AE02/rIhkJjgk7eNlW5l0Lfs56IO7kUU.mft
CA Repository:            rpki.apnic.net/member_repository/A9120974/E105B3BA3A4911E9940F2D16C4F9AE02/
Notification URL:         https://rrdp.apnic.net/notification.xml
Subordinate resources:
    1: IP: 45.40.192.0/18
    2: IP: 129.28.0.0/16
    3: IP: 129.204.0.0/16
    4: IP: 129.211.0.0/16
    5: IP: 132.232.0.0/16
    6: IP: 134.175.0.0/16
    7: IP: 142.70.0.0/16
    8: IP: 142.86.0.0/16
    9: IP: 146.56.192.0/18
    10: IP: 148.70.0.0/16
    11: IP: 149.41.0.0/16
    12: IP: 152.136.0.0/16
    13: IP: 158.79.0.0/16
    14: IP: 159.75.0.0/16
    15: IP: 161.120.0.0/16
    16: IP: 162.14.0.0/16
    17: IP: 172.81.192.0/18
    18: IP: 192.144.128.0/17

--
$ openssl x509 -text -inform DER -in rsync/rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/rIhkJjgk7eNlW5l0Lfs56IO7kUU.cer
Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 15237 (0x3b85)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A90DC5BE/serialNumber=740165A80D1071970ABC09C02B71C1AC7C1D6E0E
        Validity
            Not Before: Jul 12 06:33:37 2021 GMT
            Not After : Jul 30 00:00:00 2022 GMT
        Subject: CN=A9120974/serialNumber=AC8864263824EDE3655B99742DFB39E883BB9145
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:32:cc:61:bd:20:76:20:f2:dc:b2:a4:68:f4:
                    fb:4d:96:94:70:08:ef:35:5b:cd:8b:7c:bb:6a:4e:
                    d2:99:a5:31:68:b3:25:79:65:e1:84:1c:07:a5:5d:
                    52:72:f3:c6:7c:2c:90:93:6a:42:3b:a9:9d:ca:3e:
                    df:19:8a:e5:fe:0f:c4:b3:00:bf:5b:e6:b6:ee:a2:
                    c0:86:23:4d:f9:bf:05:fe:79:8c:e6:0d:4c:de:58:
                    9e:92:2d:62:37:0e:22:11:70:fc:ec:26:34:a6:5a:
                    e9:30:bc:d6:33:f4:46:4d:4e:5b:87:b1:80:cb:58:
                    4e:c5:ff:6c:1b:04:00:17:b5:1b:9e:5c:e2:08:54:
                    3a:a5:58:88:5b:08:be:9c:2b:0d:28:07:85:68:14:
                    fe:4b:16:d2:5e:3a:08:bd:49:97:c2:8c:b0:60:78:
                    8e:ce:b4:17:e3:d1:f2:50:cd:f9:28:a4:c7:15:57:
                    b4:eb:e5:a6:f5:56:87:91:5d:f8:a5:1e:2b:96:18:
                    8e:6d:f9:99:f6:9f:85:a8:76:ab:57:98:5b:10:a7:
                    3f:87:f4:33:81:ef:a7:6e:23:97:ab:01:08:2c:9e:
                    d8:80:12:04:8b:4c:56:68:94:7a:aa:c3:ab:64:32:
                    e1:22:7e:73:9c:75:26:db:32:45:ce:c9:6f:c3:0a:
                    28:e7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier: 
                AC:88:64:26:38:24:ED:E3:65:5B:99:74:2D:FB:39:E8:83:BB:91:45
            X509v3 Authority Key Identifier: 
                keyid:74:01:65:A8:0D:10:71:97:0A:BC:09:C0:2B:71:C1:AC:7C:1D:6E:0E

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points: 

                Full Name:
                  URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl

            Authority Information Access: 
                CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access: 
                CA Repository - URI:rsync://rpki.apnic.net/member_repository/A9120974/E105B3BA3A4911E9940F2D16C4F9AE02/
                RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A9120974/E105B3BA3A4911E9940F2D16C4F9AE02/rIhkJjgk7eNlW5l0Lfs56IO7kUU.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.40.192.0/18
                  129.28.0.0/16
                  129.204.0.0/16
                  129.211.0.0/16
                  132.232.0.0/16
                  134.175.0.0/16
                  142.70.0.0/16
                  142.86.0.0/16
                  146.56.192.0/18
                  148.70.0.0/16
                  149.41.0.0/16
                  152.136.0.0/16
                  158.79.0.0/16
                  159.75.0.0/16
                  161.120.0.0/16
                  162.14.0.0/16
                  172.81.192.0/18
                  192.144.128.0/17

    Signature Algorithm: sha256WithRSAEncryption
         a8:8f:da:d1:c9:e8:bd:ed:f3:9e:5b:88:b5:85:31:f6:b8:22:
         ac:5e:ee:bd:7b:6a:7b:1f:75:08:f6:f8:c8:49:18:16:ab:a0:
         9e:a5:83:53:bf:8d:db:c4:64:21:8d:b3:27:f0:eb:b5:f7:d6:
         d8:11:e9:7f:fb:d7:0e:74:ca:77:0e:de:eb:fc:3c:f4:2c:7e:
         90:be:e9:1b:39:ca:c4:fe:e2:81:f4:14:83:7f:91:96:95:10:
         0e:c3:5d:70:a2:6f:a1:83:09:e1:61:58:d5:fd:ec:ae:8b:ea:
         9b:0f:f6:4a:91:29:24:a9:47:b6:c9:d0:38:76:91:9e:6d:e1:
         f5:03:70:14:fd:26:36:49:c5:f3:a7:93:ed:f3:78:62:75:2b:
         6c:3b:d8:75:53:91:43:40:45:c0:50:41:c6:89:05:0c:0c:06:
         95:5d:00:f5:72:fa:d2:0a:c0:ac:e5:48:0a:bb:6b:28:fa:29:
         69:b7:c3:5a:e3:d4:48:95:30:41:59:7d:6b:15:de:c4:84:d5:
         55:e5:3a:99:2a:fa:84:3c:23:6e:06:da:d4:65:21:33:cd:9f:
         c1:91:4b:65:d4:20:bd:98:9b:ac:bb:75:f2:d4:b3:24:b2:69:
         63:46:ca:8a:a8:f2:56:2f:39:ba:5f:9e:72:01:4b:9d:b7:9b:
         65:3f:44:a2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Generated at Sun Sep 26 12:50:07 2021 by LibreSSL & rpki-client.