RPKI Certificate
Location:                 rsync/rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BFtcCGfeWB0rdIQv74BFwad76L0.cer (download)

Subject key identifier:   04:5B:5C:08:67:DE:58:1D:2B:74:84:2F:EF:80:45:C1:A7:7B:E8:BD
Authority key identifier: 0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
Manifest:                 rpki.apnic.net/member_repository/A917412F/D411414C6D5611E590D87472C4F9AE02/BFtcCGfeWB0rdIQv74BFwad76L0.mft
CA Repository:            rpki.apnic.net/member_repository/A917412F/D411414C6D5611E590D87472C4F9AE02/
Notification URL:         https://rrdp.apnic.net/notification.xml
Subordinate resources:
    1: AS: 132246
    2: AS: 132862
    3: AS: 133064
    4: AS: 133611
    1: IP: 103.26.36.0/22
    2: IP: 2001:df3:a000::/46

--
$ openssl x509 -text -inform DER -in rsync/rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BFtcCGfeWB0rdIQv74BFwad76L0.cer
Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 71863 (0x118b7)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
        Validity
            Not Before: Jun 11 14:32:25 2021 GMT
            Not After : Aug 31 00:00:00 2022 GMT
        Subject: CN=A917412F/serialNumber=045B5C0867DE581D2B74842FEF8045C1A77BE8BD
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:a0:0d:3f:fb:1e:82:86:bf:ca:0d:6a:1b:22:
                    ed:1e:9e:0c:66:9d:aa:ef:4a:d5:3c:2d:6f:18:71:
                    1d:1a:d8:6f:a9:30:25:f7:55:e0:34:78:43:e2:20:
                    64:be:ff:bf:c8:cf:a5:4d:fa:17:3d:a6:ab:8e:7e:
                    53:31:16:bb:57:c4:dc:6d:f5:8f:a8:d9:7a:59:f4:
                    45:a5:e7:b9:33:76:cc:e7:0a:04:4f:a4:51:a5:37:
                    8b:31:d1:92:5c:b1:a4:e9:35:4b:95:cb:7b:a6:ac:
                    88:dc:45:04:8e:ab:e2:7d:76:8f:c2:a4:f1:83:21:
                    cb:24:dd:d0:96:e0:ab:33:e4:e2:2a:04:63:27:55:
                    72:8d:43:0b:a8:b3:36:d3:55:59:7b:e4:66:8d:0b:
                    9f:73:03:be:2b:75:d0:09:d6:21:6b:79:92:d5:54:
                    1b:d8:0a:46:04:19:6c:c5:da:d9:bc:ec:9b:b9:97:
                    05:6e:74:d9:f7:2d:3b:2b:4f:29:eb:91:a6:4d:0d:
                    d9:df:01:06:9c:70:f3:61:66:81:7e:e3:2b:f7:d6:
                    89:2b:d3:21:2f:8b:e5:b7:69:4f:df:00:82:43:0a:
                    12:54:f5:c9:ff:0f:95:2e:10:3f:de:34:dd:e9:63:
                    6e:d9:a4:d6:09:62:6e:e2:ad:5f:f7:9c:39:ab:0a:
                    e7:55
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier: 
                04:5B:5C:08:67:DE:58:1D:2B:74:84:2F:EF:80:45:C1:A7:7B:E8:BD
            X509v3 Authority Key Identifier: 
                keyid:0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points: 

                Full Name:
                  URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl

            Authority Information Access: 
                CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access: 
                CA Repository - URI:rsync://rpki.apnic.net/member_repository/A917412F/D411414C6D5611E590D87472C4F9AE02/
                RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A917412F/D411414C6D5611E590D87472C4F9AE02/BFtcCGfeWB0rdIQv74BFwad76L0.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  132246
                  132862
                  133064
                  133611

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.26.36.0/22
                IPv6:
                  2001:df3:a000::/46

    Signature Algorithm: sha256WithRSAEncryption
         05:dd:73:7b:45:d5:84:f1:9f:27:2f:a0:3f:ac:1b:d2:f0:f8:
         df:d7:dc:8e:1a:d6:ec:ae:75:44:d6:1e:29:e0:4c:df:f0:ef:
         fc:9b:4d:6f:81:06:91:7e:69:46:0e:85:b7:3c:27:03:dd:f2:
         1d:03:ab:3c:09:8f:c9:b9:0d:3f:02:0c:ed:6a:c7:c3:7e:22:
         db:f3:5c:83:a3:9c:19:fd:dd:ff:a8:ab:c5:e0:31:1e:64:84:
         d5:47:8e:8e:dc:fa:78:0a:7a:55:44:e5:30:29:24:4d:13:f3:
         81:70:9f:74:0e:d7:7f:06:71:47:dd:1c:0e:69:51:9d:00:24:
         e2:25:da:80:98:ae:ec:73:6f:43:93:b5:cc:53:4e:d7:10:e2:
         0e:20:91:40:f1:72:51:5c:7d:03:18:41:38:de:5a:b6:f6:5b:
         d8:17:d0:74:0f:6e:75:fc:9e:23:c0:bd:41:41:5d:ab:bf:d4:
         a4:e8:15:97:fe:d5:e6:0c:10:2e:ba:4b:4c:57:cf:26:04:5d:
         d8:e5:1b:03:11:16:15:b4:84:40:38:c4:f3:39:25:1a:3b:1a:
         3b:bb:15:da:74:16:8a:ef:e0:c3:80:19:d4:35:87:d2:32:f7:
         1b:fc:7b:ca:49:b3:d6:28:06:19:4a:5d:49:7b:97:1f:06:32:
         ca:31:5c:a6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Generated at Sun Sep 26 12:51:01 2021 by LibreSSL & rpki-client.