RPKI Certificate
Location:                 ./rsync/rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/zFkhdtiMQj-IWbUYtq0zT_92dAk.cer (download)

Subject key identifier:   CC:59:21:76:D8:8C:42:3F:88:59:B5:18:B6:AD:33:4F:FF:76:74:09
Authority key identifier: 74:01:65:A8:0D:10:71:97:0A:BC:09:C0:2B:71:C1:AC:7C:1D:6E:0E
Manifest:                 rpki.apnic.net/member_repository/A91F67BB/BDFBF1860E3E11E9836F4014C4F9AE02/zFkhdtiMQj-IWbUYtq0zT_92dAk.mft
CA Repository:            rpki.apnic.net/member_repository/A91F67BB/BDFBF1860E3E11E9836F4014C4F9AE02/
Notification URL:         https://rrdp.apnic.net/notification.xml
Subject Public Key Info:  
Subordinate resources:
    until: 2023-01-31T00:00:00Z
    Resources:
    1: IP: 66.96.192.0/19
    2: IP: 158.140.128.0/19
    3: IP: 165.173.0.0/18

--
$ openssl x509 -text -inform DER -in ./rsync/rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/zFkhdtiMQj-IWbUYtq0zT_92dAk.cer
Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 15997 (0x3e7d)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A90DC5BE/serialNumber=740165A80D1071970ABC09C02B71C1AC7C1D6E0E
        Validity
            Not Before: Nov 24 06:22:34 2021 GMT
            Not After : Jan 31 00:00:00 2023 GMT
        Subject: CN=A91F67BB/serialNumber=CC592176D88C423F8859B518B6AD334FFF767409
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:da:80:e7:74:85:e8:a2:3b:91:78:95:8d:fa:8e:
                    8a:36:64:64:b4:02:e6:86:7e:14:ae:a3:39:fd:8a:
                    0a:21:19:17:01:73:da:86:b6:20:39:39:94:cb:ce:
                    98:14:fc:df:4f:96:35:79:c7:81:41:2f:53:bc:f2:
                    38:8a:42:77:2d:84:0f:50:39:ad:4b:ad:5d:76:db:
                    58:1e:6a:86:27:20:eb:00:24:b1:16:91:69:85:c6:
                    c1:f1:2a:c6:92:61:96:be:24:2f:b6:2d:da:9a:c4:
                    5e:50:3d:d2:1e:32:06:3a:2e:72:ed:aa:1d:57:72:
                    a7:0c:de:0d:5d:0e:d8:58:0c:be:82:ce:28:cd:ad:
                    49:dd:92:6c:84:3a:ae:4f:3a:ce:36:62:9b:1d:c1:
                    30:84:97:15:4d:c8:57:33:9b:b0:de:3a:8e:7b:56:
                    ec:1f:5b:a0:4c:da:c4:a2:5d:4e:e4:bb:86:99:c6:
                    11:aa:af:e3:a2:12:44:98:8e:56:ad:c4:ed:84:46:
                    da:e4:d8:57:54:0d:c5:5f:e1:ae:82:7c:6a:ef:18:
                    10:24:22:c7:8e:7b:78:db:fd:c5:04:92:28:a4:cc:
                    fa:0b:e1:f9:2c:bd:48:df:fd:e4:13:68:70:8e:54:
                    26:ae:da:59:4c:c9:a8:cf:3f:4e:91:ea:01:f2:b9:
                    37:ff
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier: 
                CC:59:21:76:D8:8C:42:3F:88:59:B5:18:B6:AD:33:4F:FF:76:74:09
            X509v3 Authority Key Identifier: 
                keyid:74:01:65:A8:0D:10:71:97:0A:BC:09:C0:2B:71:C1:AC:7C:1D:6E:0E

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points: 

                Full Name:
                  URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl

            Authority Information Access: 
                CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access: 
                CA Repository - URI:rsync://rpki.apnic.net/member_repository/A91F67BB/BDFBF1860E3E11E9836F4014C4F9AE02/
                RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A91F67BB/BDFBF1860E3E11E9836F4014C4F9AE02/zFkhdtiMQj-IWbUYtq0zT_92dAk.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  66.96.192.0/19
                  158.140.128.0/19
                  165.173.0.0/18

    Signature Algorithm: sha256WithRSAEncryption
         b4:1a:15:7a:12:1f:66:0c:29:35:07:7f:e2:66:a9:a3:5c:f9:
         4b:c5:4a:86:28:36:06:3e:b2:bf:40:d8:b4:69:45:eb:1d:c1:
         e3:82:e3:ab:3f:ca:1d:be:b0:65:58:fa:7c:f1:28:76:2c:a7:
         70:36:5f:a0:78:8a:a3:07:a2:21:b2:5f:12:e6:55:34:e6:84:
         96:2f:23:15:c0:36:2e:4a:b5:f1:e0:5f:a3:71:1f:64:75:1b:
         f4:e1:b6:e0:c5:21:3c:c3:62:33:d0:a3:d7:02:76:45:f8:e4:
         ad:fd:65:fb:8f:f5:b2:ba:ef:1a:13:62:e9:70:d2:7b:4c:69:
         cc:49:ca:17:d8:d3:bc:65:78:eb:d9:7f:d5:1c:15:3f:41:91:
         1d:37:c0:f3:67:72:ca:9c:34:f3:93:64:05:5c:e5:ba:97:27:
         3d:8c:8c:e5:77:a1:57:80:ba:49:4b:3a:1c:ff:95:6e:a3:e1:
         d9:0e:5f:c4:d7:90:30:2f:f5:6c:e5:62:07:b2:74:28:25:16:
         1c:c4:48:2e:b0:13:e8:03:da:ff:fd:4f:10:36:7c:45:8a:b2:
         a1:a1:2f:44:cd:8e:7b:f2:a0:f7:3b:f5:33:45:0f:a9:46:a2:
         8b:b0:74:94:5a:cf:e2:f3:6d:3e:86:46:9f:31:cc:6e:bb:81:
         0b:26:8c:55
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Generated at Wed Nov 24 08:31:47 2021 by LibreSSL & rpki-client.