RPKI Certificate
Location:                 ./rsync/rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/AD2ITOLxMzSwZf10SfZSopjD00c.cer (download)

Subject key identifier:   00:3D:88:4C:E2:F1:33:34:B0:65:FD:74:49:F6:52:A2:98:C3:D3:47
Authority key identifier: 0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
Manifest:                 rpki.apnic.net/member_repository/A9130040/C4F3FCB6817611E5992CA32EC4F9AE02/AD2ITOLxMzSwZf10SfZSopjD00c.mft
CA Repository:            rpki.apnic.net/member_repository/A9130040/C4F3FCB6817611E5992CA32EC4F9AE02/
Notification URL:         https://rrdp.apnic.net/notification.xml
Subject Public Key Info:  
Subordinate resources:
    until: 2022-05-01T00:00:00Z
    Resources:
    1: IP: 103.198.0.0/24
    2: IP: 2001:df6:a400::/48

--
$ openssl x509 -text -inform DER -in ./rsync/rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/AD2ITOLxMzSwZf10SfZSopjD00c.cer
Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 81241 (0x13d59)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
        Validity
            Not Before: Dec 31 16:30:46 2021 GMT
            Not After : May  1 00:00:00 2022 GMT
        Subject: CN=A9130040/serialNumber=003D884CE2F13334B065FD7449F652A298C3D347
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9e:2a:0e:81:73:96:5a:a6:83:4b:0e:5e:87:be:
                    63:f7:82:af:5d:84:9a:d2:09:d1:0a:dd:48:67:84:
                    66:b3:73:b6:f7:82:be:55:8a:a9:81:98:7f:2f:3b:
                    4c:4d:8d:11:e3:32:ef:8c:e9:0e:8f:cb:dc:21:5f:
                    00:7f:a5:c6:95:2e:ac:1c:58:f0:2e:aa:a5:c4:39:
                    51:e6:60:01:49:85:b2:24:dd:32:6a:76:30:64:1b:
                    06:f7:c7:b1:b5:ad:4b:b5:b4:45:34:2a:d5:a5:52:
                    b9:88:e9:57:fa:8f:b9:18:93:0a:70:47:bb:a4:e8:
                    c4:a3:8a:b2:f8:50:72:53:d3:1d:c3:81:a2:30:32:
                    35:58:71:45:f2:c1:48:5e:47:0d:39:9d:aa:e0:33:
                    5a:a4:0e:45:b7:d1:8b:4b:c2:e0:67:ee:d4:f0:39:
                    b5:ac:45:27:57:65:c5:ca:7f:6f:fd:86:5c:a4:26:
                    80:13:5a:f7:ce:70:fe:15:c4:75:1b:df:ae:19:ad:
                    a3:00:a4:ac:bf:07:0a:6a:a5:6d:d4:90:6e:1c:11:
                    b9:27:66:24:e4:a8:8d:7f:7f:e4:8a:1f:92:83:e9:
                    4e:a5:86:97:ac:15:1b:a8:71:12:78:10:9c:f1:4f:
                    5a:7c:62:12:ec:8e:1b:18:78:3f:33:59:ba:58:46:
                    c7:99
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier: 
                00:3D:88:4C:E2:F1:33:34:B0:65:FD:74:49:F6:52:A2:98:C3:D3:47
            X509v3 Authority Key Identifier: 
                keyid:0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points: 

                Full Name:
                  URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl

            Authority Information Access: 
                CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access: 
                CA Repository - URI:rsync://rpki.apnic.net/member_repository/A9130040/C4F3FCB6817611E5992CA32EC4F9AE02/
                RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A9130040/C4F3FCB6817611E5992CA32EC4F9AE02/AD2ITOLxMzSwZf10SfZSopjD00c.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.198.0.0/24
                IPv6:
                  2001:df6:a400::/48

    Signature Algorithm: sha256WithRSAEncryption
         2c:d3:5f:77:46:cf:f6:f5:d2:04:9b:e0:fe:83:9d:8e:2c:f1:
         41:ba:e2:1b:3d:cb:f6:8b:26:0f:0c:8c:83:59:63:c5:fe:98:
         83:41:4c:b6:14:ba:5d:d1:3e:af:8b:53:3b:c9:3f:0c:dd:5f:
         28:c4:ba:73:fe:f9:23:34:10:3e:56:70:20:45:56:12:0f:fc:
         b3:89:d8:38:2d:b4:05:19:a0:b4:b5:62:e1:48:e2:c5:8f:bc:
         23:59:10:95:1b:13:16:3c:cd:43:3d:cc:35:31:f8:07:65:52:
         44:90:45:83:54:1d:c5:28:af:46:0a:d0:3e:de:41:88:59:89:
         19:30:2f:b7:10:5c:c6:22:ab:77:e4:67:5f:18:7e:76:35:4b:
         7e:2c:bb:a6:9b:4a:2d:c5:b4:eb:bd:f5:cd:96:f1:72:e4:58:
         35:f6:11:59:c6:ee:28:b4:50:4d:07:a7:54:53:c7:e6:c7:49:
         71:67:a2:ff:d2:ba:6e:a6:4c:cb:63:7a:a5:0c:f2:8b:1d:f8:
         82:16:1e:45:fe:fe:86:9f:42:54:13:d5:9f:74:6c:01:6b:68:
         05:61:d1:3a:6d:7c:62:8e:15:8e:e2:5c:3e:f4:f0:a5:8a:58:
         e6:2e:c8:26:de:cd:7e:53:68:6d:68:39:68:c0:45:06:75:4b:
         04:c1:c3:b4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Generated at Fri Dec 31 19:19:26 2021 by LibreSSL & rpki-client.