RPKI Certificate
Location:                 ./rsync/rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1CRFNmfW_LLYyFTWpZt4Hf_7UsY.cer (download)

Subject key identifier:   D4:24:45:36:67:D6:FC:B2:D8:C8:54:D6:A5:9B:78:1D:FF:FB:52:C6
Authority key identifier: 0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
Manifest:                 rpki.apnic.net/member_repository/A91FCE8A/006FE54A5DE311E6A5AA364DC4F9AE02/1CRFNmfW_LLYyFTWpZt4Hf_7UsY.mft
CA Repository:            rpki.apnic.net/member_repository/A91FCE8A/006FE54A5DE311E6A5AA364DC4F9AE02/
Notification URL:         https://rrdp.apnic.net/notification.xml
Subject Public Key Info:  
Subordinate resources:
    until: 2023-01-31T00:00:00Z
    Resources:
    1: AS: 134743
    1: IP: 45.253.128.0/23
    2: IP: 103.197.212.0/23
    3: IP: 103.223.136.0/23
    4: IP: 2405:9f80::/32

--
$ openssl x509 -text -inform DER -in ./rsync/rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1CRFNmfW_LLYyFTWpZt4Hf_7UsY.cer
Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 79985 (0x13871)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
        Validity
            Not Before: Dec  2 04:45:33 2021 GMT
            Not After : Jan 31 00:00:00 2023 GMT
        Subject: CN=A91FCE8A/serialNumber=D424453667D6FCB2D8C854D6A59B781DFFFB52C6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:98:10:8c:5b:9e:48:5d:16:14:c3:45:7c:6d:
                    55:1d:c0:b9:a7:85:e2:12:29:69:18:a2:47:7c:a8:
                    69:33:32:3c:3e:b6:12:25:bd:89:9d:b5:57:f2:a2:
                    c7:56:c4:ad:72:f3:67:0f:3e:c6:89:b1:18:2a:47:
                    b2:83:34:35:d1:31:6d:f7:a9:69:ec:b6:0a:82:d6:
                    c4:b5:5b:4b:38:61:1a:22:2b:dd:ba:65:12:e1:ef:
                    5d:41:f1:ef:a3:f6:e7:42:49:d8:ab:9e:1d:ba:eb:
                    38:59:db:22:5b:9c:80:09:1b:c1:a4:f3:6a:0a:f9:
                    da:8c:44:8d:a0:22:6f:6a:08:a8:75:06:d8:b0:5a:
                    b8:60:0d:88:45:9d:ac:66:5b:d0:9f:53:1a:04:77:
                    74:68:58:a0:af:af:ed:3a:a5:52:9b:06:90:42:cc:
                    38:1c:93:ec:4c:e9:48:d9:76:31:7b:9b:28:4d:70:
                    4f:48:3c:5d:eb:61:02:e5:25:9e:78:00:ae:d7:23:
                    7f:23:48:67:64:b6:99:c4:fb:1f:4c:ba:d0:d3:4d:
                    56:d2:d3:d3:19:63:df:48:d6:4a:ae:e0:af:b5:5f:
                    f2:2e:74:ff:6e:7d:2d:a5:af:8d:f2:70:d2:05:97:
                    e7:f2:d9:f7:0d:9c:3a:db:cc:cd:e7:22:9a:40:17:
                    81:63
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier: 
                D4:24:45:36:67:D6:FC:B2:D8:C8:54:D6:A5:9B:78:1D:FF:FB:52:C6
            X509v3 Authority Key Identifier: 
                keyid:0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points: 

                Full Name:
                  URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl

            Authority Information Access: 
                CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access: 
                CA Repository - URI:rsync://rpki.apnic.net/member_repository/A91FCE8A/006FE54A5DE311E6A5AA364DC4F9AE02/
                RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A91FCE8A/006FE54A5DE311E6A5AA364DC4F9AE02/1CRFNmfW_LLYyFTWpZt4Hf_7UsY.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  134743

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.253.128.0/23
                  103.197.212.0/23
                  103.223.136.0/23
                IPv6:
                  2405:9f80::/32

    Signature Algorithm: sha256WithRSAEncryption
         ce:08:ad:5d:6a:9d:44:33:c5:5a:bb:de:64:17:f9:79:fa:6a:
         87:48:27:ca:8b:cc:c1:db:1a:ba:98:ad:74:71:cc:86:6a:31:
         26:26:5e:b4:1d:80:2d:8e:51:e8:b3:d6:f3:52:36:1d:60:fd:
         48:93:31:38:cf:bc:4c:bf:81:29:99:0b:1e:1c:ca:cb:b7:b2:
         8c:80:d1:01:7f:94:0d:71:82:93:79:d7:89:c1:e4:9f:8d:e3:
         a4:b6:2f:a7:16:21:dd:7f:f0:5c:4b:27:5b:cb:73:ce:06:5b:
         c6:3e:ab:e2:aa:c0:19:13:b0:82:e1:4f:10:89:7e:58:f6:33:
         71:19:55:8e:82:51:91:0f:ba:4f:38:76:ec:a5:69:c4:94:71:
         24:ff:ec:6f:08:22:32:34:56:02:e2:9d:ec:be:9a:1c:b7:b0:
         67:e8:be:9f:47:af:bf:25:38:62:22:81:7d:5b:5a:0e:3d:76:
         1d:0e:1d:bf:63:ea:ff:61:15:3c:0b:2e:20:42:90:57:8b:bd:
         59:46:cd:e1:49:5b:6e:d1:57:5d:b1:89:6e:ce:cb:84:0e:d7:
         92:e9:78:50:a0:e9:61:80:a4:d2:33:5f:10:65:80:46:38:26:
         23:51:d3:ea:ab:7d:aa:34:38:d1:f4:0d:04:d2:ad:e7:29:ea:
         cb:51:e5:85
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Generated at Thu Dec 2 06:11:00 2021 by LibreSSL & rpki-client.