RPKI Certificate
Location:                 rsync/rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/xlPvd7GdEIz1xZrhgB8CADq1Xu0.cer (download)

Subject key identifier:   C6:53:EF:77:B1:9D:10:8C:F5:C5:9A:E1:80:1F:02:00:3A:B5:5E:ED
Authority key identifier: 74:01:65:A8:0D:10:71:97:0A:BC:09:C0:2B:71:C1:AC:7C:1D:6E:0E
Manifest:                 rpki.apnic.net/member_repository/A91EBFAE/ED32440A290911E593BFC626C4F9AE02/xlPvd7GdEIz1xZrhgB8CADq1Xu0.mft
CA Repository:            rpki.apnic.net/member_repository/A91EBFAE/ED32440A290911E593BFC626C4F9AE02/
Notification URL:         https://rrdp.apnic.net/notification.xml
Subordinate resources:
    1: IP: 162.56.0.0/16
    2: IP: 165.42.0.0/15
    3: IP: 199.43.18.0/23
    4: IP: 199.43.45.0/24
    5: IP: 199.43.63.0/24

--
$ openssl x509 -text -inform DER -in rsync/rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/xlPvd7GdEIz1xZrhgB8CADq1Xu0.cer
Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 14467 (0x3883)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A90DC5BE/serialNumber=740165A80D1071970ABC09C02B71C1AC7C1D6E0E
        Validity
            Not Before: Feb 26 14:40:34 2021 GMT
            Not After : May  1 00:00:00 2022 GMT
        Subject: CN=A91EBFAE/serialNumber=C653EF77B19D108CF5C59AE1801F02003AB55EED
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:e3:64:d7:6d:92:25:fe:4f:f8:63:c4:49:44:
                    d2:62:e4:86:38:dd:8d:30:04:19:71:be:0d:57:de:
                    c2:c5:1b:08:0b:d3:b9:0f:f8:b9:41:a2:00:f5:4a:
                    aa:3e:88:05:ea:a2:82:dc:ae:42:65:1b:9f:ff:cf:
                    57:a6:f1:ca:51:29:24:dc:d4:25:c6:19:e7:16:f2:
                    af:80:7e:b6:5c:d6:b8:10:21:6f:1f:8e:83:56:25:
                    a1:97:7a:ed:dd:1a:dc:58:7a:61:fd:d9:b8:a3:e6:
                    60:a6:cf:3c:13:e3:65:b1:80:f8:88:5a:62:0d:48:
                    8a:f8:c0:e4:b4:57:59:02:a2:42:50:35:b5:d9:ed:
                    0c:02:a8:1d:21:12:88:8b:cd:e3:03:46:a6:b7:ca:
                    a5:76:06:f7:db:c3:71:d1:c1:13:d5:3e:d2:e0:63:
                    59:df:a9:df:90:be:3d:41:ec:91:f8:11:3d:e1:70:
                    02:a4:4e:19:de:a5:25:03:8d:81:a0:ef:4c:7e:08:
                    d3:60:39:0c:f7:ed:b8:f2:08:76:9d:0c:81:ec:fe:
                    f9:cb:66:c1:75:97:48:e6:7c:e5:c7:67:ac:29:d9:
                    cb:33:a2:c0:b5:e0:e1:16:75:cc:a4:b9:ae:93:8a:
                    43:c4:a4:cf:e9:b8:66:bc:3e:5a:04:f3:fe:e8:a1:
                    30:8f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier: 
                C6:53:EF:77:B1:9D:10:8C:F5:C5:9A:E1:80:1F:02:00:3A:B5:5E:ED
            X509v3 Authority Key Identifier: 
                keyid:74:01:65:A8:0D:10:71:97:0A:BC:09:C0:2B:71:C1:AC:7C:1D:6E:0E

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points: 

                Full Name:
                  URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl

            Authority Information Access: 
                CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access: 
                CA Repository - URI:rsync://rpki.apnic.net/member_repository/A91EBFAE/ED32440A290911E593BFC626C4F9AE02/
                RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A91EBFAE/ED32440A290911E593BFC626C4F9AE02/xlPvd7GdEIz1xZrhgB8CADq1Xu0.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  162.56.0.0/16
                  165.42.0.0/15
                  199.43.18.0/23
                  199.43.45.0/24
                  199.43.63.0/24

    Signature Algorithm: sha256WithRSAEncryption
         9b:2d:71:e5:03:a0:17:28:34:7e:4f:b1:12:40:dd:fc:82:48:
         3f:43:6b:d5:4a:8f:99:ca:a7:99:ce:25:51:20:1a:20:5a:1b:
         b3:d4:f7:44:40:23:10:11:50:40:4e:eb:7c:a4:54:d3:13:f3:
         c5:de:c9:24:ec:59:a9:8a:47:2b:41:8d:8f:f4:ee:56:d4:c8:
         be:c1:34:36:e3:f2:2c:5e:ac:52:6a:d5:f1:76:9d:a5:ea:ab:
         30:ea:8d:66:81:0a:96:14:fb:09:37:78:62:af:01:2f:9c:86:
         e4:2a:30:d6:92:2e:1d:dc:4e:43:a0:fe:e2:91:f0:38:0e:e8:
         5c:f9:03:4f:d0:83:6a:c2:23:cd:54:da:b5:95:94:7b:19:ea:
         01:0c:1d:74:77:a6:23:9a:6a:8a:93:77:a1:33:85:7d:19:59:
         ec:a2:0f:6e:33:a0:2a:03:d6:6e:9a:88:2b:a1:69:2b:e5:3f:
         26:3c:53:14:82:de:ab:76:9d:14:9f:39:0d:7e:e4:a1:34:6f:
         30:c2:8c:57:0f:d0:93:6f:32:32:40:da:b7:f5:bc:7e:db:9d:
         fc:4d:21:20:f6:c0:33:01:da:e5:84:1e:0f:b3:57:d7:58:b7:
         19:33:8c:34:2a:6e:27:46:f4:ef:57:0e:f7:9f:b3:36:76:fb:
         38:62:47:b8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Generated at Sun Sep 26 12:50:08 2021 by LibreSSL & rpki-client.