RPKI Certificate
Location:                 rsync/rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/uM4JoP0DPFnT-9h48xQx-9oT2RQ.cer (download)

Subject key identifier:   B8:CE:09:A0:FD:03:3C:59:D3:FB:D8:78:F3:14:31:FB:DA:13:D9:14
Authority key identifier: 74:01:65:A8:0D:10:71:97:0A:BC:09:C0:2B:71:C1:AC:7C:1D:6E:0E
Manifest:                 rpki.apnic.net/member_repository/A91C7633/78599E741D7F11EB8AECD529C4F9AE02/uM4JoP0DPFnT-9h48xQx-9oT2RQ.mft
CA Repository:            rpki.apnic.net/member_repository/A91C7633/78599E741D7F11EB8AECD529C4F9AE02/
Notification URL:         https://rrdp.apnic.net/notification.xml
Subordinate resources:
    1: IP: 158.140.224.0--158.140.251.255

--
$ openssl x509 -text -inform DER -in rsync/rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/uM4JoP0DPFnT-9h48xQx-9oT2RQ.cer
Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 15520 (0x3ca0)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A90DC5BE/serialNumber=740165A80D1071970ABC09C02B71C1AC7C1D6E0E
        Validity
            Not Before: Aug 30 04:46:48 2021 GMT
            Not After : Oct 31 00:00:00 2022 GMT
        Subject: CN=A91C7633/serialNumber=B8CE09A0FD033C59D3FBD878F31431FBDA13D914
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:94:be:f3:0c:30:d9:f1:ba:41:87:4e:ec:a5:25:
                    55:85:1e:f6:88:fc:82:50:09:29:e0:92:96:b3:e2:
                    c9:19:53:56:4b:17:60:96:89:b0:61:0c:ad:16:09:
                    e4:80:50:68:3c:d2:04:f6:f0:08:90:5b:48:f6:f4:
                    f9:cf:ec:92:33:7e:99:a5:2e:e9:ab:37:f7:9d:5e:
                    51:31:05:db:76:47:4e:eb:70:ca:45:2d:9b:f6:f0:
                    80:9a:c7:98:8f:a0:fa:a2:86:83:69:88:fb:e0:ba:
                    cd:a1:ac:48:4a:79:f3:6c:00:c2:56:89:15:93:8c:
                    c5:74:6c:50:6c:6e:c9:bb:47:91:0c:4b:55:4d:65:
                    b2:d3:9e:de:63:63:6a:c6:c6:43:c9:75:cc:cb:a1:
                    58:e4:6e:06:b8:b1:b6:96:61:c5:47:c6:b2:a6:8e:
                    85:7c:85:13:89:21:b4:58:f7:4b:e6:4f:b4:ca:48:
                    a8:7f:b4:3f:f3:95:41:df:22:84:7a:ee:e0:b8:3e:
                    09:df:c6:29:48:a0:f9:0c:3d:40:4b:d3:d7:1e:87:
                    c5:fa:e2:66:7b:20:77:d0:cc:a3:b7:e5:fe:8e:1e:
                    d1:8b:3d:05:31:7a:31:fe:48:f3:f3:62:84:42:f2:
                    d2:1b:73:40:ab:7f:f6:c8:c7:b2:d6:88:23:f5:f1:
                    65:db
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier: 
                B8:CE:09:A0:FD:03:3C:59:D3:FB:D8:78:F3:14:31:FB:DA:13:D9:14
            X509v3 Authority Key Identifier: 
                keyid:74:01:65:A8:0D:10:71:97:0A:BC:09:C0:2B:71:C1:AC:7C:1D:6E:0E

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points: 

                Full Name:
                  URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl

            Authority Information Access: 
                CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access: 
                CA Repository - URI:rsync://rpki.apnic.net/member_repository/A91C7633/78599E741D7F11EB8AECD529C4F9AE02/
                RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A91C7633/78599E741D7F11EB8AECD529C4F9AE02/uM4JoP0DPFnT-9h48xQx-9oT2RQ.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  158.140.224.0-158.140.251.255

    Signature Algorithm: sha256WithRSAEncryption
         2d:8d:eb:11:d9:dd:75:17:33:16:4e:7a:bf:7d:d3:70:ea:10:
         1f:1f:4c:94:9f:15:82:4b:0e:8c:09:72:77:33:b0:4a:ba:f2:
         32:8f:c3:38:39:6c:99:d9:9e:77:13:1d:b6:3c:b3:e5:6e:a9:
         40:c8:57:49:09:10:b5:4a:72:e2:08:8e:58:0e:25:95:50:b7:
         db:8d:cc:4a:7f:af:c0:79:0f:8f:1e:b0:21:82:cd:7b:db:25:
         86:96:e1:66:22:9c:74:dd:a1:48:45:5f:57:1e:d6:1b:e2:14:
         21:ac:f9:cd:b3:d7:e4:f4:5e:e6:8b:41:b9:52:9b:3e:56:59:
         e9:a5:84:9c:45:4d:79:a7:50:cf:8e:b2:91:9a:3b:3b:ce:75:
         7b:07:3d:3d:b4:61:30:aa:7d:fe:10:a5:b5:a5:b0:7b:be:2f:
         93:0e:a7:13:c2:c0:c3:63:4b:86:59:86:e6:82:1c:bb:d8:62:
         9d:69:39:b2:7c:49:11:48:b2:54:37:38:c3:03:3f:91:bb:af:
         41:fb:c9:87:52:53:a2:bc:54:84:f4:2f:b3:d8:f5:a4:c2:a6:
         14:6b:39:c3:5c:a9:61:99:d3:97:2d:c9:58:77:5a:84:b2:86:
         2d:da:41:c7:c0:fa:8e:89:fc:25:93:d2:51:42:d3:18:f1:f8:
         e2:08:40:9d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Generated at Sun Sep 26 12:50:08 2021 by LibreSSL & rpki-client.