RPKI Certificate
Location:                 ./rsync/rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/u8EDVhr9epMDbRxy3UwKfCpOKc4.cer (download)

Subject key identifier:   BB:C1:03:56:1A:FD:7A:93:03:6D:1C:72:DD:4C:0A:7C:2A:4E:29:CE
Authority key identifier: 74:01:65:A8:0D:10:71:97:0A:BC:09:C0:2B:71:C1:AC:7C:1D:6E:0E
Manifest:                 rpki.apnic.net/member_repository/A91F277D/78A1D08E8D6B11EB9840E05FC4F9AE02/u8EDVhr9epMDbRxy3UwKfCpOKc4.mft
CA Repository:            rpki.apnic.net/member_repository/A91F277D/78A1D08E8D6B11EB9840E05FC4F9AE02/
Notification URL:         https://rrdp.apnic.net/notification.xml
Subject Public Key Info:  
Subordinate resources:
    until: 2023-03-02T00:00:00Z
    Resources:
    1: IP: 139.163.0.0/16
    2: IP: 168.134.0.0/16

--
$ openssl x509 -text -inform DER -in ./rsync/rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/u8EDVhr9epMDbRxy3UwKfCpOKc4.cer
Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 16124 (0x3efc)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A90DC5BE/serialNumber=740165A80D1071970ABC09C02B71C1AC7C1D6E0E
        Validity
            Not Before: Dec 15 13:18:23 2021 GMT
            Not After : Mar  2 00:00:00 2023 GMT
        Subject: CN=A91F277D/serialNumber=BBC103561AFD7A93036D1C72DD4C0A7C2A4E29CE
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:a5:3e:ef:7f:6a:5a:a4:32:a3:b6:64:d6:14:
                    6d:b0:8b:ba:15:17:b3:48:1c:97:fc:53:f2:01:60:
                    de:40:85:29:03:b4:4d:db:8c:76:db:15:d7:37:26:
                    0d:1d:d5:13:4b:74:45:e5:62:f8:27:62:04:31:47:
                    f4:2b:43:75:2f:6b:12:15:a2:5c:64:f9:1b:e3:cd:
                    56:7e:06:e1:50:7d:1f:b9:92:98:e3:ce:44:b8:d3:
                    5a:57:0d:14:4b:4d:1a:07:79:b3:96:6e:4c:76:b9:
                    49:fc:42:8a:a9:ae:0e:d5:9f:44:45:18:77:6b:94:
                    59:a2:77:2a:0e:cb:a7:53:bf:1f:9b:5c:69:bb:ec:
                    dd:01:66:44:ad:dc:ec:12:41:50:45:1b:2e:7b:da:
                    f8:47:e7:61:66:6e:3c:e2:dc:93:eb:08:29:c7:db:
                    4f:a6:65:5a:0e:b8:12:37:41:e2:e6:b2:ec:4e:a0:
                    11:7f:b6:c2:4b:01:03:a3:e3:a2:0f:ad:de:59:bd:
                    4e:c8:20:c3:07:c0:5d:51:9c:52:fd:93:95:15:9d:
                    b5:b7:28:59:67:bc:90:48:0d:8a:61:9f:76:8f:a0:
                    d4:1d:4a:3a:02:e7:2a:4e:19:21:f1:ef:5a:77:11:
                    e2:cf:66:bf:27:8f:4e:72:96:e9:6d:d0:d2:eb:22:
                    88:5b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier: 
                BB:C1:03:56:1A:FD:7A:93:03:6D:1C:72:DD:4C:0A:7C:2A:4E:29:CE
            X509v3 Authority Key Identifier: 
                keyid:74:01:65:A8:0D:10:71:97:0A:BC:09:C0:2B:71:C1:AC:7C:1D:6E:0E

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points: 

                Full Name:
                  URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl

            Authority Information Access: 
                CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access: 
                CA Repository - URI:rsync://rpki.apnic.net/member_repository/A91F277D/78A1D08E8D6B11EB9840E05FC4F9AE02/
                RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A91F277D/78A1D08E8D6B11EB9840E05FC4F9AE02/u8EDVhr9epMDbRxy3UwKfCpOKc4.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  139.163.0.0/16
                  168.134.0.0/16

    Signature Algorithm: sha256WithRSAEncryption
         2c:aa:e6:7c:04:1e:3b:9e:6e:f3:38:5c:98:83:28:81:8a:90:
         ea:80:c5:03:2b:99:0d:9d:6d:e8:d9:54:fe:3e:86:a7:e6:2f:
         5c:de:0d:c1:5a:b5:e8:07:44:2f:bf:42:72:02:b2:ef:8c:63:
         03:89:48:ac:74:24:92:c4:c3:ff:a8:80:58:e2:c0:1e:0e:69:
         79:ce:7d:99:96:f6:92:fc:dc:e3:34:1c:68:e8:c6:57:d0:f5:
         ca:98:85:42:76:70:4e:97:ad:2d:58:d7:0a:b0:6e:f6:72:e1:
         27:a5:64:2f:d3:60:ea:ad:f8:a2:80:51:69:01:31:4d:a5:c4:
         ff:8f:06:38:50:04:21:71:93:d0:3a:8e:ff:f9:32:19:6f:06:
         ab:bb:69:e7:da:f6:19:9f:31:dc:1d:89:ce:58:45:36:31:88:
         2d:0d:de:a0:7b:bc:a5:e8:83:b8:68:1c:10:e7:2b:71:69:58:
         06:80:dc:13:05:fb:41:36:79:66:ca:bc:0f:10:e8:e9:4b:ec:
         6a:b7:9f:1e:c9:a0:83:2b:8d:a0:7a:51:51:ff:dc:cd:ec:3d:
         0e:17:bd:a3:a8:a0:2d:39:fb:e3:4c:94:54:e1:2f:29:f3:75:
         b3:45:1f:e1:37:3b:da:60:26:70:c6:e7:be:55:2f:5a:e7:42:
         6a:31:28:43
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Generated at Wed Dec 15 15:17:22 2021 by LibreSSL & rpki-client.