RPKI Certificate
Location:                 rsync/rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CXb8PSMYbUjGcXc3QIkc9U4xuA4.cer (download)

Subject key identifier:   09:76:FC:3D:23:18:6D:48:C6:71:77:37:40:89:1C:F5:4E:31:B8:0E
Authority key identifier: 0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
Manifest:                 rpki.apnic.net/member_repository/A91E9D1A/C59B02DA1D7011E286F147B508B02CD2/CXb8PSMYbUjGcXc3QIkc9U4xuA4.mft
CA Repository:            rpki.apnic.net/member_repository/A91E9D1A/C59B02DA1D7011E286F147B508B02CD2/
Notification URL:         https://rrdp.apnic.net/notification.xml
Subordinate resources:
    1: AS: 55518
    2: AS: 132696
    1: IP: 103.16.102.0/23
    2: IP: 202.3.78.0/24
    3: IP: 2001:de8:12::/48
    4: IP: 2001:df0:214::/48

--
$ openssl x509 -text -inform DER -in rsync/rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CXb8PSMYbUjGcXc3QIkc9U4xuA4.cer
Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 70758 (0x11466)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
        Validity
            Not Before: May 28 05:24:08 2021 GMT
            Not After : Jul 30 00:00:00 2022 GMT
        Subject: CN=A91E9D1A/serialNumber=0976FC3D23186D48C671773740891CF54E31B80E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:a5:dd:41:f7:be:2c:a1:8d:23:4f:ad:f6:82:
                    9d:4f:56:7e:5d:3d:69:bb:dc:6d:08:d5:40:f7:f3:
                    c2:07:8b:ad:a5:d5:79:11:da:55:bf:c4:9d:38:b6:
                    ac:19:30:c4:30:53:07:13:de:4c:ed:3e:8d:e8:9d:
                    82:d0:31:6c:eb:46:85:37:47:d3:dc:a5:21:1a:85:
                    12:91:0c:6a:d1:76:a4:09:7f:85:2c:58:7d:aa:27:
                    d2:83:b8:5d:50:d5:3b:e3:41:9c:3c:ad:64:74:01:
                    35:5c:3e:b0:50:42:17:39:1a:4c:66:b8:5a:46:a7:
                    ed:76:b4:d0:6b:20:c9:39:76:65:97:a1:74:49:a1:
                    80:db:20:e9:1c:40:df:0a:38:a4:72:f9:5a:cc:34:
                    8e:1b:e6:b2:28:8a:e5:12:81:b4:62:33:dc:d3:b5:
                    b7:f1:9a:20:f3:3a:39:e2:57:25:5e:ab:f0:97:2f:
                    79:c9:93:c0:2b:68:fa:2a:02:5f:6f:8a:89:74:95:
                    d6:92:bf:fb:c0:26:88:a1:39:af:cc:47:c0:09:54:
                    28:02:28:77:4b:e8:6d:67:87:41:56:e3:56:e5:21:
                    3c:77:ef:bb:4a:6f:24:b4:75:e0:c8:a6:b2:af:04:
                    64:97:71:77:da:8d:a9:24:2f:a9:05:53:0a:ca:c0:
                    ce:b9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier: 
                09:76:FC:3D:23:18:6D:48:C6:71:77:37:40:89:1C:F5:4E:31:B8:0E
            X509v3 Authority Key Identifier: 
                keyid:0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points: 

                Full Name:
                  URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl

            Authority Information Access: 
                CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access: 
                CA Repository - URI:rsync://rpki.apnic.net/member_repository/A91E9D1A/C59B02DA1D7011E286F147B508B02CD2/
                RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A91E9D1A/C59B02DA1D7011E286F147B508B02CD2/CXb8PSMYbUjGcXc3QIkc9U4xuA4.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  55518
                  132696

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.16.102.0/23
                  202.3.78.0/24
                IPv6:
                  2001:de8:12::/48
                  2001:df0:214::/48

    Signature Algorithm: sha256WithRSAEncryption
         9b:a5:b1:08:76:92:9a:f7:8b:7c:d4:29:54:e3:df:43:12:10:
         ab:20:16:16:10:cc:5c:f4:69:1c:dd:d8:ae:a4:5f:70:96:2c:
         17:7e:dd:ed:a9:e8:76:2b:7f:86:fd:c3:d8:34:80:48:60:22:
         f6:4e:af:f7:f8:0e:ca:23:59:a4:a9:af:54:db:b7:49:a1:50:
         81:d5:e0:8f:d9:9c:14:e7:19:de:39:e0:a7:64:84:5e:bc:6e:
         79:2e:55:ff:92:38:50:02:9f:6c:75:45:68:3a:89:57:1f:bd:
         7a:49:99:e2:08:8d:3c:f4:48:05:e6:ae:0a:8d:41:c8:81:9a:
         d3:24:7e:2d:84:b5:18:97:50:2c:a2:7a:24:26:bc:58:3c:49:
         00:90:37:61:7c:ff:31:c7:72:8d:78:a7:59:74:13:5c:63:37:
         3d:ce:0a:be:ac:0f:39:be:e3:b9:98:a5:dd:be:81:51:9b:41:
         e7:b8:39:0c:f5:df:fc:c1:ba:07:1a:2c:97:d9:a7:42:6c:3f:
         bf:41:e8:62:8f:f1:2a:21:c0:46:06:b8:ff:39:de:da:be:74:
         61:db:f5:82:5b:8c:e6:e0:53:0b:20:89:bb:10:42:65:04:e5:
         90:cc:eb:9a:1b:57:67:1d:fb:b3:c5:95:46:3a:64:64:80:06:
         e9:7b:ec:2f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Generated at Sun Sep 26 12:51:06 2021 by LibreSSL & rpki-client.