RPKI Certificate
Location:                 rsync/rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/944YPQBWySvHDDtApkl3pBKA7zM.cer (download)

Subject key identifier:   F7:8E:18:3D:00:56:C9:2B:C7:0C:3B:40:A6:49:77:A4:12:80:EF:33
Authority key identifier: 0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
Manifest:                 rpki.apnic.net/member_repository/A918806F/B21E0C986F4A11E8B627496CC4F9AE02/944YPQBWySvHDDtApkl3pBKA7zM.mft
CA Repository:            rpki.apnic.net/member_repository/A918806F/B21E0C986F4A11E8B627496CC4F9AE02/
Notification URL:         https://rrdp.apnic.net/notification.xml
Subordinate resources:
    1: AS: 58588
    1: IP: 43.224.76.0/22
    2: IP: 103.8.172.0/22
    3: IP: 2403:b300::/32

--
$ openssl x509 -text -inform DER -in rsync/rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/944YPQBWySvHDDtApkl3pBKA7zM.cer
Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 68716 (0x10c6c)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
        Validity
            Not Before: Apr  9 05:53:18 2021 GMT
            Not After : Jul  1 00:00:00 2022 GMT
        Subject: CN=A918806F/serialNumber=F78E183D0056C92BC70C3B40A64977A41280EF33
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:5d:04:09:22:11:66:81:e4:1a:2a:b6:8c:2f:
                    fc:c6:4c:ae:6b:94:ed:0a:42:48:bf:db:55:c0:11:
                    fc:6f:65:0c:dd:96:21:82:43:f3:2c:24:19:c4:76:
                    f8:4d:0f:fb:c0:b5:26:16:2c:8c:1f:54:b6:00:48:
                    9b:a2:74:f5:21:22:a3:4d:b7:c8:6f:f4:7a:02:25:
                    3b:1c:90:8a:a5:36:ad:b0:8d:54:ba:dc:64:21:1e:
                    dd:ed:de:34:bb:a7:c6:ca:3b:16:07:f5:81:98:da:
                    04:a6:cb:01:80:76:9d:40:e0:e4:7e:88:25:fb:30:
                    21:46:42:4f:f0:c9:87:3c:51:50:5f:8a:1f:75:1f:
                    93:4f:d0:35:31:58:e3:34:44:f0:1e:3b:db:ef:6e:
                    86:8e:59:69:4e:dc:ed:17:5f:32:f9:cf:33:91:95:
                    02:e0:5a:9f:2f:04:56:27:78:f8:00:8b:ba:6e:94:
                    e7:2d:4b:f2:22:44:c9:12:51:46:cf:a3:bf:b3:b8:
                    f9:ef:6c:11:31:9e:d5:8a:d1:b0:2a:7c:9b:f7:ee:
                    dd:a9:aa:a0:27:2b:b7:4b:0e:fb:91:dd:7c:c8:24:
                    57:1d:8e:7b:d1:91:c1:d0:66:1f:63:83:42:5c:d6:
                    d9:9a:17:1d:18:6b:da:00:2c:f7:20:98:b0:ed:b3:
                    f0:5b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier: 
                F7:8E:18:3D:00:56:C9:2B:C7:0C:3B:40:A6:49:77:A4:12:80:EF:33
            X509v3 Authority Key Identifier: 
                keyid:0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points: 

                Full Name:
                  URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl

            Authority Information Access: 
                CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access: 
                CA Repository - URI:rsync://rpki.apnic.net/member_repository/A918806F/B21E0C986F4A11E8B627496CC4F9AE02/
                RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A918806F/B21E0C986F4A11E8B627496CC4F9AE02/944YPQBWySvHDDtApkl3pBKA7zM.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  58588

            sbgp-ipAddrBlock: critical
                IPv4:
                  43.224.76.0/22
                  103.8.172.0/22
                IPv6:
                  2403:b300::/32

    Signature Algorithm: sha256WithRSAEncryption
         8b:e8:85:9a:da:5d:f3:30:1d:ed:a7:46:4a:eb:26:06:d4:22:
         84:5c:c5:c1:e3:b7:67:1a:75:f1:61:25:f6:7a:39:9b:d6:24:
         d0:27:b4:4a:3b:cc:de:7d:aa:d2:7f:49:d0:5c:da:cb:c2:00:
         8e:02:b2:72:cb:75:46:77:d4:50:c1:0a:9e:23:ba:06:91:6b:
         b5:04:52:1c:bf:0a:c6:9b:8e:b1:47:b9:5d:ba:af:10:96:92:
         5c:9f:e0:36:9e:2f:b6:d2:bb:6e:d4:42:ac:44:85:43:79:8c:
         50:17:79:ea:1a:16:ce:c4:81:66:ae:51:f3:9e:cb:ff:6f:f4:
         05:1f:1c:0a:73:a7:15:24:d4:7d:e7:86:0a:06:b9:a4:3f:ca:
         00:18:53:ca:67:9a:7d:a8:0e:ee:75:4d:ab:42:0e:6b:6c:e9:
         9f:16:8b:05:f4:a0:d6:48:a3:ac:a1:8d:07:58:49:e1:0c:ff:
         c7:c1:c1:b5:40:aa:31:d5:28:79:5a:1c:56:8f:b5:2d:36:11:
         59:ec:b3:ac:54:e1:d5:07:81:f1:8a:5a:0e:2b:54:0e:bc:b0:
         97:97:d7:bc:08:28:71:72:11:a4:fb:63:bb:73:93:4a:dc:57:
         fc:07:da:ec:b5:45:69:29:be:b6:4b:d3:d8:d4:6b:ba:12:54:
         93:e9:d0:4f
-----BEGIN CERTIFICATE-----
MIIGLzCCBRegAwIBAgIDAQxsMA0GCSqGSIb3DQEBCwUAMEYxETAPBgNVBAMTCEE5
MERDNUJFMTEwLwYDVQQFEygwRTY1QTRGNUZEMzZCNUJENjhFQjNDOTIzNDA4OTc4
QzkwN0FBNzlGMB4XDTIxMDQwOTA1NTMxOFoXDTIyMDcwMTAwMDAwMFowRjERMA8G
A1UEAxMIQTkxODgwNkYxMTAvBgNVBAUTKEY3OEUxODNEMDA1NkM5MkJDNzBDM0I0
MEE2NDk3N0E0MTI4MEVGMzMwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB
AQDEXQQJIhFmgeQaKraML/zGTK5rlO0KQki/21XAEfxvZQzdliGCQ/MsJBnEdvhN
D/vAtSYWLIwfVLYASJuidPUhIqNNt8hv9HoCJTsckIqlNq2wjVS63GQhHt3t3jS7
p8bKOxYH9YGY2gSmywGAdp1A4OR+iCX7MCFGQk/wyYc8UVBfih91H5NP0DUxWOM0
RPAeO9vvboaOWWlO3O0XXzL5zzORlQLgWp8vBFYnePgAi7pulOctS/IiRMkSUUbP
o7+zuPnvbBExntWK0bAqfJv37t2pqqAnK7dLDvuR3XzIJFcdjnvRkcHQZh9jg0Jc
1tmaFx0Ya9oALPcgmLDts/BbAgMBAAGjggMkMIIDIDAdBgNVHQ4EFgQU944YPQBW
ySvHDDtApkl3pBKA7zMwHwYDVR0jBBgwFoAUDmWk9f02tb1o6zySNAiXjJB6p58w
DgYDVR0PAQH/BAQDAgEGMA8GA1UdEwEB/wQFMAMBAf8wcwYDVR0fBGwwajBooGag
ZIZicnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2
NjExRTJCQjQ2OEY3QzcyRkQxRkYyL0RtV2s5ZjAydGIxbzZ6eVNOQWlYakpCNnA1
OC5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L3JlcG9zaXRvcnkvOTgwNjUyRTBCNzdFMTFFN0E5NkEzOTUyMUE0
RjRGQjQvRG1XazlmMDJ0YjFvNnp5U05BaVhqSkI2cDU4LmNlcjBKBgNVHSABAf8E
QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj
Lm5ldC9SUEtJL0NQUy5wZGYwggEoBggrBgEFBQcBCwSCARowggEWMF8GCCsGAQUF
BzAFhlNyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5
MTg4MDZGL0IyMUUwQzk4NkY0QTExRThCNjI3NDk2Q0M0RjlBRTAyLzB+BggrBgEF
BQcwCoZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9B
OTE4ODA2Ri9CMjFFMEM5ODZGNEExMUU4QjYyNzQ5NkNDNEY5QUUwMi85NDRZUFFC
V3lTdkhERHRBcGtsM3BCS0E3ek0ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3Jy
ZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwGgYIKwYBBQUHAQgBAf8ECzAJ
oAcwBQIDAOTcMDQGCCsGAQUFBwEHAQH/BCUwIzASBAIAATAMAwQCK+BMAwQCZwis
MA0EAgACMAcDBQAkA7MAMA0GCSqGSIb3DQEBCwUAA4IBAQCL6IWa2l3zMB3tp0ZK
6yYG1CKEXMXB47dnGnXxYSX2ejmb1iTQJ7RKO8zefarSf0nQXNrLwgCOArJyy3VG
d9RQwQqeI7oGkWu1BFIcvwrGm46xR7lduq8QlpJcn+A2ni+20rtu1EKsRIVDeYxQ
F3nqGhbOxIFmrlHznsv/b/QFHxwKc6cVJNR954YKBrmkP8oAGFPKZ5p9qA7udU2r
Qg5rbOmfFosF9KDWSKOsoY0HWEnhDP/HwcG1QKox1Sh5WhxWj7UtNhFZ7LOsVOHV
B4HxiloOK1QOvLCXl9e8CChxchGk+2O7c5NK3Ff8B9rstUVpKb62S9PY1Gu6ElST
6dBP
-----END CERTIFICATE-----

Generated at Sun Sep 26 12:50:53 2021 by LibreSSL & rpki-client.