RPKI Certificate
Location:                 rsync/rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/vw5vTuDhfd6MSiS_iX0ZuHqldZ8.cer (download)

Subject key identifier:   BF:0E:6F:4E:E0:E1:7D:DE:8C:4A:24:BF:89:7D:19:B8:7A:A5:75:9F
Authority key identifier: 74:01:65:A8:0D:10:71:97:0A:BC:09:C0:2B:71:C1:AC:7C:1D:6E:0E
Manifest:                 rpki.apnic.net/member_repository/A9149F3E/9A85BB501D8211E2BC6417D708B02CD2/vw5vTuDhfd6MSiS_iX0ZuHqldZ8.mft
CA Repository:            rpki.apnic.net/member_repository/A9149F3E/9A85BB501D8211E2BC6417D708B02CD2/
Notification URL:         https://rrdp.apnic.net/notification.xml
Subordinate resources:
    1: IP: 128.134.0.0/16
    2: IP: 129.254.0.0/16
    3: IP: 134.75.0.0/16
    4: IP: 137.68.0.0/16
    5: IP: 139.150.0.0/16
    6: IP: 143.248.0.0/16
    7: IP: 147.6.0.0/16
    8: IP: 147.43.0.0/16
    9: IP: 147.46.0.0/15
    10: IP: 152.99.0.0/16
    11: IP: 152.149.0.0/16
    12: IP: 155.230.0.0/16
    13: IP: 156.147.0.0/16
    14: IP: 157.197.0.0/16
    15: IP: 158.44.0.0/16
    16: IP: 161.122.0.0/16
    17: IP: 164.124.0.0/15
    18: IP: 165.132.0.0/15
    19: IP: 165.141.0.0/16
    20: IP: 165.186.0.0/16
    21: IP: 165.194.0.0/16
    22: IP: 165.213.0.0/16
    23: IP: 165.229.0.0/16
    24: IP: 165.243.0.0--165.244.255.255
    25: IP: 165.246.0.0/16
    26: IP: 166.79.0.0/16
    27: IP: 166.103.0.0--166.104.255.255
    28: IP: 166.125.0.0/16
    29: IP: 168.78.0.0/16
    30: IP: 168.115.0.0/16
    31: IP: 168.126.0.0/16
    32: IP: 168.131.0.0/16
    33: IP: 168.154.0.0/16
    34: IP: 168.188.0.0/16
    35: IP: 168.219.0.0/16
    36: IP: 168.248.0.0/15
    37: IP: 169.140.0.0/16
    38: IP: 169.208.0.0/12
    39: IP: 192.5.90.0/24
    40: IP: 192.100.2.0/24
    41: IP: 192.104.15.0/24
    42: IP: 192.132.15.0/24
    43: IP: 192.132.247.0--192.132.251.255
    44: IP: 192.195.39.0--192.195.40.255
    45: IP: 192.203.138.0--192.203.146.255
    46: IP: 192.245.249.0--192.245.251.255
    47: IP: 192.249.16.0/20

--
$ openssl x509 -text -inform DER -in rsync/rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/vw5vTuDhfd6MSiS_iX0ZuHqldZ8.cer
Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 15332 (0x3be4)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A90DC5BE/serialNumber=740165A80D1071970ABC09C02B71C1AC7C1D6E0E
        Validity
            Not Before: Jul 29 13:49:57 2021 GMT
            Not After : Aug 31 00:00:00 2022 GMT
        Subject: CN=A9149F3E/serialNumber=BF0E6F4EE0E17DDE8C4A24BF897D19B87AA5759F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f3:5f:b8:65:d9:57:24:56:e2:b8:22:75:98:a7:
                    55:b2:0a:b2:72:c7:17:59:7c:75:35:a0:5d:aa:04:
                    e8:e6:9b:9b:09:0e:27:5e:13:38:25:7a:14:8b:24:
                    c7:d5:41:94:3c:3a:8e:6c:72:f2:b8:2c:0f:3e:c9:
                    2f:c5:53:9a:a6:d8:21:61:ff:b8:31:27:e3:ec:7b:
                    7c:d8:32:82:16:7d:69:a4:ad:b1:4c:06:0c:c1:67:
                    f8:b6:90:63:82:87:7a:59:39:0e:e1:db:3c:1e:46:
                    0b:1d:6f:2a:d4:6c:61:d9:d6:fc:5c:00:c5:11:28:
                    37:9d:18:32:9a:b6:55:af:12:68:53:5a:0a:40:85:
                    ce:d6:f0:73:5b:48:3a:84:9a:c3:0d:3b:20:80:2a:
                    bc:6b:42:85:6a:3f:4a:32:f0:68:37:f3:a1:28:77:
                    0b:0f:e3:0d:2c:70:c7:7f:68:ec:51:41:88:43:31:
                    76:0b:c1:68:d1:65:b2:73:83:8b:c0:c9:77:6c:65:
                    d1:d1:dd:02:1f:64:8c:06:24:ee:91:11:9b:1f:5b:
                    79:67:36:3e:e4:8f:65:bf:24:ab:ef:db:26:c3:bd:
                    4d:a6:e7:82:37:a3:48:4a:d4:81:3e:53:89:58:13:
                    d3:f0:8b:f2:9f:e9:ad:fc:73:d0:57:97:5c:22:d0:
                    57:55
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier: 
                BF:0E:6F:4E:E0:E1:7D:DE:8C:4A:24:BF:89:7D:19:B8:7A:A5:75:9F
            X509v3 Authority Key Identifier: 
                keyid:74:01:65:A8:0D:10:71:97:0A:BC:09:C0:2B:71:C1:AC:7C:1D:6E:0E

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points: 

                Full Name:
                  URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl

            Authority Information Access: 
                CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access: 
                CA Repository - URI:rsync://rpki.apnic.net/member_repository/A9149F3E/9A85BB501D8211E2BC6417D708B02CD2/
                RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A9149F3E/9A85BB501D8211E2BC6417D708B02CD2/vw5vTuDhfd6MSiS_iX0ZuHqldZ8.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  128.134.0.0/16
                  129.254.0.0/16
                  134.75.0.0/16
                  137.68.0.0/16
                  139.150.0.0/16
                  143.248.0.0/16
                  147.6.0.0/16
                  147.43.0.0/16
                  147.46.0.0/15
                  152.99.0.0/16
                  152.149.0.0/16
                  155.230.0.0/16
                  156.147.0.0/16
                  157.197.0.0/16
                  158.44.0.0/16
                  161.122.0.0/16
                  164.124.0.0/15
                  165.132.0.0/15
                  165.141.0.0/16
                  165.186.0.0/16
                  165.194.0.0/16
                  165.213.0.0/16
                  165.229.0.0/16
                  165.243.0.0-165.244.255.255
                  165.246.0.0/16
                  166.79.0.0/16
                  166.103.0.0-166.104.255.255
                  166.125.0.0/16
                  168.78.0.0/16
                  168.115.0.0/16
                  168.126.0.0/16
                  168.131.0.0/16
                  168.154.0.0/16
                  168.188.0.0/16
                  168.219.0.0/16
                  168.248.0.0/15
                  169.140.0.0/16
                  169.208.0.0/12
                  192.5.90.0/24
                  192.100.2.0/24
                  192.104.15.0/24
                  192.132.15.0/24
                  192.132.247.0-192.132.251.255
                  192.195.39.0-192.195.40.255
                  192.203.138.0-192.203.146.255
                  192.245.249.0-192.245.251.255
                  192.249.16.0/20

    Signature Algorithm: sha256WithRSAEncryption
         b1:84:70:41:fc:b7:ad:74:e4:07:a1:d3:3b:71:a1:63:5f:ff:
         26:17:d4:99:54:01:94:f1:72:4a:43:3c:8d:14:4c:b9:08:66:
         c6:e8:e6:11:93:e6:4f:0a:d8:57:0b:c2:53:91:9b:60:50:0e:
         ea:38:c2:fb:90:f9:d3:b3:1d:f1:5b:f8:82:bf:58:7d:e6:6d:
         00:7a:3a:06:cc:55:7a:63:02:e5:7f:ec:35:62:09:c7:26:d4:
         ea:72:8f:0d:ea:80:53:44:94:0a:c4:78:74:b6:4d:a6:4e:8f:
         83:5d:76:90:c2:36:dc:f9:ee:e1:29:53:29:bf:1c:2a:7c:36:
         26:1a:f0:e8:2d:69:9f:1e:1b:c2:11:3d:47:39:35:f8:14:ec:
         86:2e:91:3d:47:b7:c6:c4:73:dd:b8:4f:04:9f:fa:b6:79:a2:
         ce:21:5b:7a:cd:02:9a:0c:6d:11:08:d2:51:55:99:3e:51:ca:
         26:8e:d3:05:28:86:91:4d:bc:f6:8d:7a:32:18:d5:18:9d:ea:
         e8:13:b4:8f:12:30:c9:05:c6:12:ab:19:7d:e6:0e:f2:84:47:
         f6:b1:22:e2:01:3a:ea:09:db:fe:4c:1f:6c:4b:9c:a3:f7:db:
         c3:89:c9:8f:52:f0:95:08:4e:14:a9:b1:80:da:1e:87:01:dd:
         b4:79:e9:6e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Generated at Sun Sep 26 12:50:08 2021 by LibreSSL & rpki-client.