RPKI Certificate
Location:                 ./rsync/rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/xwtOBHyqc3ckuJ1YTbXAwahY0o4.cer (download)

Subject key identifier:   C7:0B:4E:04:7C:AA:73:77:24:B8:9D:58:4D:B5:C0:C1:A8:58:D2:8E
Authority key identifier: 74:01:65:A8:0D:10:71:97:0A:BC:09:C0:2B:71:C1:AC:7C:1D:6E:0E
Manifest:                 rpki.apnic.net/member_repository/A9125C22/FACCBC5C7FAD11EB977B5335C4F9AE02/xwtOBHyqc3ckuJ1YTbXAwahY0o4.mft
CA Repository:            rpki.apnic.net/member_repository/A9125C22/FACCBC5C7FAD11EB977B5335C4F9AE02/
Notification URL:         https://rrdp.apnic.net/notification.xml
Subject Public Key Info:  
Subordinate resources:
    until: 2023-01-31T00:00:00Z
    Resources:
    1: IP: 207.174.176.0/20
    2: IP: 216.108.240.0/20

--
$ openssl x509 -text -inform DER -in ./rsync/rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/xwtOBHyqc3ckuJ1YTbXAwahY0o4.cer
Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 15920 (0x3e30)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A90DC5BE/serialNumber=740165A80D1071970ABC09C02B71C1AC7C1D6E0E
        Validity
            Not Before: Nov  9 00:52:51 2021 GMT
            Not After : Jan 31 00:00:00 2023 GMT
        Subject: CN=A9125C22/serialNumber=C70B4E047CAA737724B89D584DB5C0C1A858D28E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:54:40:37:f5:7f:a5:00:44:39:93:52:cb:84:
                    5e:09:7d:e9:74:d3:47:93:a5:33:0c:b5:5c:d0:77:
                    d5:ac:6e:00:8b:da:eb:7b:ee:fa:e0:6f:ec:94:4b:
                    d7:d6:17:ee:96:5c:04:c3:b3:84:31:3a:7b:33:a2:
                    46:11:bd:25:ff:f2:6c:e9:19:56:8e:a3:2a:62:a0:
                    1e:bc:5b:03:d1:51:d9:16:54:80:fe:5a:b3:04:ea:
                    b7:22:9a:70:1b:2d:cb:b7:81:8a:9d:58:1b:9f:2a:
                    c8:ba:6c:59:78:ae:cd:99:1a:18:09:2b:36:68:fe:
                    ad:94:26:35:4d:5f:5a:f5:ce:01:7b:7b:b1:9b:cc:
                    14:8d:91:92:da:bd:31:80:2c:a1:f0:c0:11:e0:b4:
                    60:64:a5:9c:01:b0:af:5a:8c:6e:dc:16:43:47:06:
                    8d:f5:ed:2e:02:f2:1e:a2:61:d2:67:30:79:54:d7:
                    d3:03:a5:fb:37:5d:0f:09:9f:b7:5d:29:4e:b1:94:
                    ca:89:07:26:7e:ae:b6:f6:3a:7f:07:42:91:d0:6b:
                    db:2f:c6:81:18:64:7c:a9:46:48:6d:7c:28:c7:4d:
                    69:75:8a:4d:64:bc:41:76:e5:f5:a4:89:95:e5:12:
                    96:f4:96:b4:c7:2b:24:b0:e1:d8:9c:19:b3:5f:4a:
                    e1:f5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier: 
                C7:0B:4E:04:7C:AA:73:77:24:B8:9D:58:4D:B5:C0:C1:A8:58:D2:8E
            X509v3 Authority Key Identifier: 
                keyid:74:01:65:A8:0D:10:71:97:0A:BC:09:C0:2B:71:C1:AC:7C:1D:6E:0E

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points: 

                Full Name:
                  URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl

            Authority Information Access: 
                CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access: 
                CA Repository - URI:rsync://rpki.apnic.net/member_repository/A9125C22/FACCBC5C7FAD11EB977B5335C4F9AE02/
                RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A9125C22/FACCBC5C7FAD11EB977B5335C4F9AE02/xwtOBHyqc3ckuJ1YTbXAwahY0o4.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  207.174.176.0/20
                  216.108.240.0/20

    Signature Algorithm: sha256WithRSAEncryption
         43:08:56:f9:98:d5:bc:dc:86:fa:df:f2:2c:ca:41:84:83:42:
         b2:13:3c:82:5c:c9:35:2d:8b:ea:dd:43:a3:83:62:99:02:bc:
         2a:95:9b:7c:2c:3a:b6:be:60:55:85:33:1d:a6:ee:1d:db:e4:
         b8:64:10:25:54:88:36:0b:a9:b7:5c:d2:bb:c0:b5:34:6a:b8:
         3a:09:b0:21:75:61:32:a4:89:dc:1f:4a:ae:f8:41:02:dc:85:
         02:84:cb:3d:c9:ae:2a:8c:6e:b0:ec:e3:c0:14:05:d5:75:51:
         f3:93:9c:73:17:4d:38:00:d9:a4:37:d6:37:eb:9a:fa:a2:02:
         90:3a:c1:36:a6:e9:5c:02:16:6e:56:b3:e2:1e:a5:eb:28:f1:
         76:c9:f2:09:ef:1b:de:ad:c3:10:b7:4c:3d:e4:6d:96:af:49:
         ab:c6:2d:60:45:63:c3:1b:f5:78:2f:81:c1:b9:aa:95:09:eb:
         20:2f:54:c2:98:40:53:c2:56:40:ca:26:30:2b:5d:02:75:9f:
         39:4b:21:95:4b:04:cb:49:43:ab:91:35:b4:fe:01:c4:09:5d:
         0f:de:a7:fd:9a:96:05:29:0e:5c:cd:e2:41:af:8a:8d:09:13:
         2d:36:02:61:fa:30:b5:a1:dd:8a:eb:1d:50:88:f5:78:89:a2:
         3d:dc:69:6d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Generated at Tue Nov 9 02:56:02 2021 by LibreSSL & rpki-client.