RPKI Certificate
Location:                 rsync/rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/tYNoYWQ5x1DSxpZkOVLtTxUDZZQ.cer (download)

Subject key identifier:   B5:83:68:61:64:39:C7:50:D2:C6:96:64:39:52:ED:4F:15:03:65:94
Authority key identifier: 74:01:65:A8:0D:10:71:97:0A:BC:09:C0:2B:71:C1:AC:7C:1D:6E:0E
Manifest:                 rpki.apnic.net/member_repository/A916988B/467EE69E8D6D11EB9840E05FC4F9AE02/tYNoYWQ5x1DSxpZkOVLtTxUDZZQ.mft
CA Repository:            rpki.apnic.net/member_repository/A916988B/467EE69E8D6D11EB9840E05FC4F9AE02/
Notification URL:         https://rrdp.apnic.net/notification.xml
Subordinate resources:
    1: IP: 192.207.165.0/24

--
$ openssl x509 -text -inform DER -in rsync/rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/tYNoYWQ5x1DSxpZkOVLtTxUDZZQ.cer
Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 15386 (0x3c1a)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A90DC5BE/serialNumber=740165A80D1071970ABC09C02B71C1AC7C1D6E0E
        Validity
            Not Before: Aug  6 02:18:04 2021 GMT
            Not After : Sep 30 00:00:00 2022 GMT
        Subject: CN=A916988B/serialNumber=B58368616439C750D2C696643952ED4F15036594
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:c0:db:47:08:0f:6b:5f:de:e9:8a:7c:a6:98:
                    0f:41:43:06:cf:b9:de:5c:8e:3f:82:fe:f4:99:1a:
                    5b:7e:fe:b1:b4:5d:ae:6d:f6:83:9b:a4:44:fb:83:
                    7a:b7:82:d7:90:4d:a7:12:67:31:6d:86:99:5c:ef:
                    e0:0f:4e:13:e7:aa:50:54:f3:94:b9:df:1b:1d:32:
                    78:28:77:9e:2a:70:f6:61:4a:a4:5d:ea:84:4b:22:
                    ca:5e:62:04:86:44:62:23:43:10:54:75:ca:6a:5d:
                    50:60:a7:f0:41:60:ab:f5:9f:9c:e9:c8:cb:d4:27:
                    27:51:75:2d:27:cc:fd:26:d0:24:16:79:15:76:87:
                    03:b1:1c:15:20:03:ea:32:a4:74:80:ec:e6:9e:40:
                    2a:02:40:85:51:d4:2a:0d:bb:8b:38:cd:b5:89:50:
                    ab:45:a9:8d:4d:ce:90:e6:99:ba:9d:46:bb:97:45:
                    45:25:11:b3:b6:ec:75:f0:81:61:f6:9d:8e:8c:ad:
                    d7:c1:33:b9:90:93:39:39:dd:cf:ee:cb:c4:52:df:
                    d8:95:5b:0a:6c:bb:ee:6c:e0:09:f9:57:49:f9:fd:
                    2e:c6:5b:83:e3:b7:fb:32:5d:41:c8:ca:20:d0:0f:
                    e0:db:b4:d7:2b:2b:96:39:9b:2f:d1:77:7b:92:37:
                    57:93
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier: 
                B5:83:68:61:64:39:C7:50:D2:C6:96:64:39:52:ED:4F:15:03:65:94
            X509v3 Authority Key Identifier: 
                keyid:74:01:65:A8:0D:10:71:97:0A:BC:09:C0:2B:71:C1:AC:7C:1D:6E:0E

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points: 

                Full Name:
                  URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl

            Authority Information Access: 
                CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access: 
                CA Repository - URI:rsync://rpki.apnic.net/member_repository/A916988B/467EE69E8D6D11EB9840E05FC4F9AE02/
                RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A916988B/467EE69E8D6D11EB9840E05FC4F9AE02/tYNoYWQ5x1DSxpZkOVLtTxUDZZQ.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.207.165.0/24

    Signature Algorithm: sha256WithRSAEncryption
         15:40:ee:af:e1:65:19:74:b5:c5:eb:27:f7:d7:98:3d:6f:e1:
         ad:b0:bd:6e:f3:86:16:cc:c8:75:47:3b:4c:22:50:41:4d:80:
         e4:a8:3a:5f:e7:cc:4d:08:22:43:d6:9c:05:fd:eb:13:3b:c0:
         d5:7d:da:b4:9c:68:b3:0d:95:fa:0e:51:04:9f:c3:e0:69:c5:
         8c:20:03:5b:a6:9d:f9:f3:59:6e:5f:c3:d0:c6:ea:e5:92:49:
         7c:d8:ff:9f:47:e5:c0:ac:94:b7:03:37:64:e4:84:7d:27:9f:
         28:a2:9a:63:81:15:1d:94:9d:11:ce:53:d2:a3:94:f4:c1:7e:
         4f:90:cb:33:5b:d1:ae:61:dd:44:ba:5c:9c:f5:58:0e:e9:83:
         4a:22:c4:ac:42:a3:cf:7c:0f:88:a7:54:14:79:62:4a:8e:1e:
         6a:3b:1f:90:28:42:63:04:a1:e9:df:7c:91:47:1c:9e:41:5f:
         4c:06:e3:11:6a:74:79:56:4d:23:42:66:08:d4:e7:94:b2:e3:
         82:5d:72:ae:b3:dc:57:02:01:4c:20:cf:29:92:d1:ae:b1:0b:
         10:7e:fd:f5:b9:79:a2:04:4c:3d:98:f1:1e:b4:49:4d:7c:16:
         d3:7c:1f:86:51:4c:6a:b2:59:dd:c3:5d:d8:eb:78:e9:45:b0:
         88:20:02:24
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Generated at Sun Sep 26 12:50:08 2021 by LibreSSL & rpki-client.