RPKI Certificate
Location:                 rsync/rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ry1FO-u_318ptjrBZ1THjRsPy4g.cer (download)

Subject key identifier:   AF:2D:45:3B:EB:BF:DF:5F:29:B6:3A:C1:67:54:C7:8D:1B:0F:CB:88
Authority key identifier: 74:01:65:A8:0D:10:71:97:0A:BC:09:C0:2B:71:C1:AC:7C:1D:6E:0E
Manifest:                 rpki.apnic.net/member_repository/A91557BA/6812DF9204EB11EAA72FA363C4F9AE02/ry1FO-u_318ptjrBZ1THjRsPy4g.mft
CA Repository:            rpki.apnic.net/member_repository/A91557BA/6812DF9204EB11EAA72FA363C4F9AE02/
Notification URL:         https://rrdp.apnic.net/notification.xml
Subordinate resources:
    1: IP: 128.250.0.0/16
    2: IP: 192.43.207.0--192.43.209.255
    3: IP: 192.101.254.0/24
    4: IP: 192.231.127.0/24

--
$ openssl x509 -text -inform DER -in rsync/rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ry1FO-u_318ptjrBZ1THjRsPy4g.cer
Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 15340 (0x3bec)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A90DC5BE/serialNumber=740165A80D1071970ABC09C02B71C1AC7C1D6E0E
        Validity
            Not Before: Jul 30 08:07:09 2021 GMT
            Not After : Sep 30 00:00:00 2022 GMT
        Subject: CN=A91557BA/serialNumber=AF2D453BEBBFDF5F29B63AC16754C78D1B0FCB88
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:4c:87:0b:7e:46:c7:cd:f3:00:ac:84:55:1d:
                    85:48:3f:3e:11:cb:4d:8e:3c:26:d0:ac:87:17:67:
                    9c:5f:88:fb:dd:80:9c:fb:9f:05:0a:7b:ce:81:61:
                    e1:2a:66:44:7f:fa:84:91:c8:5f:99:0d:9c:67:d0:
                    66:d9:52:00:a6:4f:fd:d8:5d:da:fb:f0:14:cc:bf:
                    57:39:cf:54:20:9e:f3:81:44:f5:c4:93:42:52:f6:
                    30:d0:c5:09:b4:ee:cb:6f:45:1c:1d:ae:83:1d:60:
                    96:c1:9a:b2:34:90:ac:9b:4d:2b:17:bf:18:34:54:
                    db:5e:44:4f:19:ad:48:ba:83:cb:aa:e1:a4:a6:6d:
                    e9:56:8d:25:9a:70:1c:31:29:f2:66:63:b8:ea:ba:
                    5c:23:97:31:f4:44:d1:9b:64:84:bf:75:a2:80:77:
                    0b:9c:8f:2a:2b:51:69:1c:ec:1e:f9:d7:e9:3d:3e:
                    1e:75:a6:ce:66:60:36:d2:8e:4b:44:65:d5:95:17:
                    0a:fa:5f:8b:d1:93:68:4b:6e:86:c9:e9:2c:0c:fe:
                    10:8c:40:47:64:5e:07:75:34:fe:c9:62:fc:91:c3:
                    2c:48:14:21:ce:e6:61:44:df:e4:52:c7:33:49:7f:
                    83:e3:77:cc:f3:4d:b7:4c:2b:12:2f:ed:9d:44:36:
                    06:b3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier: 
                AF:2D:45:3B:EB:BF:DF:5F:29:B6:3A:C1:67:54:C7:8D:1B:0F:CB:88
            X509v3 Authority Key Identifier: 
                keyid:74:01:65:A8:0D:10:71:97:0A:BC:09:C0:2B:71:C1:AC:7C:1D:6E:0E

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points: 

                Full Name:
                  URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl

            Authority Information Access: 
                CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access: 
                CA Repository - URI:rsync://rpki.apnic.net/member_repository/A91557BA/6812DF9204EB11EAA72FA363C4F9AE02/
                RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A91557BA/6812DF9204EB11EAA72FA363C4F9AE02/ry1FO-u_318ptjrBZ1THjRsPy4g.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  128.250.0.0/16
                  192.43.207.0-192.43.209.255
                  192.101.254.0/24
                  192.231.127.0/24

    Signature Algorithm: sha256WithRSAEncryption
         54:6c:55:15:e9:1a:77:7c:6a:dc:ae:88:6e:2a:6c:55:02:69:
         3e:e9:1f:be:76:9a:1c:c8:3a:66:4b:ef:c2:e6:61:a0:02:e3:
         99:96:f4:83:36:51:8b:d4:f3:78:23:fe:e7:83:fa:9d:e9:fc:
         9f:6f:37:e9:63:3d:a0:4a:64:7e:5f:3b:1b:91:ce:22:fb:f5:
         2e:be:5d:d4:7d:45:51:a5:63:c7:91:6d:62:c6:c8:42:69:a2:
         40:32:e6:cd:e7:3c:63:96:f8:8f:3f:75:b6:ec:95:18:dd:75:
         6b:e9:21:88:43:54:2e:eb:b9:01:ba:77:5f:57:bd:8e:ab:38:
         36:69:64:af:a1:16:79:e4:e7:6f:99:24:64:74:3e:71:ad:eb:
         32:36:91:6d:45:64:e6:bf:bc:df:0d:b2:d3:12:53:4d:a7:02:
         c3:90:ef:fe:c3:3d:3f:8a:c3:a6:22:0b:fa:82:fe:5c:78:38:
         d6:64:2f:ee:ed:93:61:92:1c:92:e9:76:94:7d:70:56:87:ae:
         e1:52:7f:91:fa:05:06:f3:97:03:cb:23:91:79:35:36:99:ca:
         23:99:53:be:dd:1f:79:0c:de:f3:dc:f1:ba:f0:7e:bd:de:b8:
         3b:39:30:39:44:cf:1e:bb:19:cd:68:a8:30:53:10:e6:18:f0:
         ef:27:a2:14
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Generated at Sun Sep 26 12:50:07 2021 by LibreSSL & rpki-client.