RPKI Certificate
Location:                 ./rsync/rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8ZmKR16S3opsfUCUVWoNpn1dTQ4.cer (download)

Subject key identifier:   F1:99:8A:47:5E:92:DE:8A:6C:7D:40:94:55:6A:0D:A6:7D:5D:4D:0E
Authority key identifier: 0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
Manifest:                 rpki.apnic.net/member_repository/A9118CA7/2FC70A24A0D511EAA7FFDF29C4F9AE02/8ZmKR16S3opsfUCUVWoNpn1dTQ4.mft
CA Repository:            rpki.apnic.net/member_repository/A9118CA7/2FC70A24A0D511EAA7FFDF29C4F9AE02/
Notification URL:         https://rrdp.apnic.net/notification.xml
Subordinate resources:
    1: AS: 140674
    1: IP: 103.151.170.0/23
    2: IP: 2001:df3:cc80::/48

--
$ openssl x509 -text -inform DER -in ./rsync/rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8ZmKR16S3opsfUCUVWoNpn1dTQ4.cer
Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 77318 (0x12e06)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
        Validity
            Not Before: Oct 10 22:44:50 2021 GMT
            Not After : Aug 31 00:00:00 2022 GMT
        Subject: CN=A9118CA7/serialNumber=F1998A475E92DE8A6C7D4094556A0DA67D5D4D0E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:97:5d:4d:af:8a:f1:2a:ec:2e:d0:b8:18:03:
                    2e:ea:d9:ee:2d:b2:dc:b0:c3:88:17:b4:f2:73:8f:
                    0b:49:c2:a9:5d:71:3d:d9:27:1c:f2:8c:b2:5f:ba:
                    31:3c:4f:b9:1d:e6:d4:c9:10:63:49:47:c4:b6:f8:
                    f5:ea:f6:b5:fc:be:89:00:e1:f1:65:54:39:7f:90:
                    26:c1:05:a5:df:a6:cf:ea:9d:24:3e:9a:d4:66:2a:
                    5e:a9:ee:ba:a2:97:31:b6:62:15:c1:86:7a:54:08:
                    e5:80:47:32:55:4f:26:0b:f0:bb:fa:d8:d2:62:a5:
                    b3:e1:14:88:55:08:54:28:75:b5:bd:6a:c4:f7:fc:
                    f9:36:6a:a3:e0:8c:c9:6e:56:d0:7d:03:1c:2f:b0:
                    de:8c:90:9f:34:66:9a:27:d9:e5:03:6d:26:17:00:
                    b0:19:5e:e8:3a:b8:56:9a:e0:ab:0a:10:7f:b5:5c:
                    c1:25:4b:dd:1b:f8:7a:53:9c:ed:d1:cb:f0:b8:0e:
                    45:c2:f6:f5:d9:6e:3f:82:ab:a3:bd:fa:c2:66:4a:
                    a2:8d:06:35:25:35:d7:71:e0:2e:f7:92:3b:54:d7:
                    69:7e:3c:c0:68:9a:42:4c:45:1d:4c:10:f7:1c:80:
                    f8:0c:99:db:79:28:00:3e:66:fe:02:21:7e:c9:73:
                    86:b1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier: 
                F1:99:8A:47:5E:92:DE:8A:6C:7D:40:94:55:6A:0D:A6:7D:5D:4D:0E
            X509v3 Authority Key Identifier: 
                keyid:0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points: 

                Full Name:
                  URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl

            Authority Information Access: 
                CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access: 
                CA Repository - URI:rsync://rpki.apnic.net/member_repository/A9118CA7/2FC70A24A0D511EAA7FFDF29C4F9AE02/
                RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A9118CA7/2FC70A24A0D511EAA7FFDF29C4F9AE02/8ZmKR16S3opsfUCUVWoNpn1dTQ4.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                0...0....%.
            sbgp-ipAddrBlock: critical
                0.0.....0....g..0.....0.... .
...
    Signature Algorithm: sha256WithRSAEncryption
         62:71:07:9f:0f:10:4e:34:4b:4f:f9:88:5e:d6:96:7d:f6:dc:
         96:c2:65:48:61:33:8b:a9:72:2c:f7:48:ec:74:2a:39:69:00:
         6a:c2:ab:20:36:10:16:36:c5:2a:37:be:45:73:83:68:0c:1a:
         bb:98:91:c4:8e:3f:97:48:9f:01:08:5e:f5:f0:fe:fb:29:5c:
         b8:83:69:28:c1:66:73:5c:9f:a0:20:a0:6b:82:eb:36:d4:54:
         77:b9:f1:41:28:72:d9:76:cf:70:62:a2:a3:f8:9d:d0:6f:bd:
         5f:cb:0f:22:31:fb:1f:b3:f0:b6:1c:87:2c:6a:75:8b:38:35:
         03:51:e0:3d:15:fa:4c:9b:e8:3d:e0:63:50:b8:0b:79:57:98:
         81:95:33:91:93:73:2e:c3:03:6c:43:c1:f7:65:b9:dd:9f:25:
         d2:e2:21:69:82:f7:0f:99:49:b6:bc:7c:e9:95:c7:32:f9:4d:
         e0:33:36:46:bf:28:50:53:8f:ca:46:b7:4c:8d:c8:7f:b0:ed:
         84:fb:66:1c:07:ed:52:5e:be:cb:48:40:20:76:34:cf:4c:42:
         d5:0a:0e:a7:92:f1:9e:20:fa:96:12:8f:c5:7c:d5:27:34:00:
         ff:1e:d5:21:ed:54:53:18:91:19:35:73:88:43:2a:56:f7:45:
         0b:52:5d:d1
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----

Generated at Mon Oct 11 01:03:01 2021 by LibreSSL & rpki-client.