RPKI Certificate
Location:                 ./rsync/rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/EnvYBqI30MrekRgrn8cmZZvi73E.cer (download)

Subject key identifier:   12:7B:D8:06:A2:37:D0:CA:DE:91:18:2B:9F:C7:26:65:9B:E2:EF:71
Authority key identifier: 0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
Manifest:                 rpki.apnic.net/member_repository/A91D3876/262F7ACA977211EBBF6A5368C4F9AE02/EnvYBqI30MrekRgrn8cmZZvi73E.mft
CA Repository:            rpki.apnic.net/member_repository/A91D3876/262F7ACA977211EBBF6A5368C4F9AE02/
Notification URL:         https://rrdp.apnic.net/notification.xml
Subordinate resources:
    1: AS: 132015
    1: IP: 103.199.80.0/24
    2: IP: 103.215.20.0/23
    3: IP: 103.246.186.0/24
    4: IP: 2407:f80::/32

--
$ openssl x509 -text -inform DER -in ./rsync/rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/EnvYBqI30MrekRgrn8cmZZvi73E.cer
Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 76871 (0x12c47)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
        Validity
            Not Before: Oct  1 02:40:23 2021 GMT
            Not After : Dec  1 00:00:00 2022 GMT
        Subject: CN=A91D3876/serialNumber=127BD806A237D0CADE91182B9FC726659BE2EF71
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:ff:fb:8e:34:e5:85:a3:88:59:06:7e:79:cf:
                    f1:2c:aa:07:19:9c:ed:73:44:f3:2a:6c:af:4a:3e:
                    c2:a7:53:93:d0:fd:39:d5:c5:32:da:da:b3:33:1c:
                    50:e4:97:40:84:8f:35:ab:15:0f:3b:c3:b3:cd:0e:
                    2a:dc:eb:47:79:c5:16:79:b0:eb:18:85:df:ee:c1:
                    32:15:53:d4:2e:e4:a5:68:b3:a8:b7:e4:2b:ae:a4:
                    60:1f:ed:6d:33:ba:f8:37:84:f0:9c:66:d0:b6:ad:
                    83:ae:c7:4d:f7:e4:ea:3d:b8:58:42:d7:e9:84:6a:
                    f3:ad:51:56:96:7b:81:c5:0d:a8:fa:40:60:bf:79:
                    23:f8:d0:ea:ae:05:1e:d4:02:50:e2:e2:40:88:c1:
                    76:51:ac:fc:42:97:f7:39:e8:ea:62:8e:ed:b3:d3:
                    47:94:17:6b:0f:49:73:f4:da:a7:1c:8d:94:fb:7b:
                    7b:11:ed:71:22:20:e2:b1:0c:cc:8a:8d:b8:06:5a:
                    01:1b:d3:65:56:ba:b8:bd:b2:a1:1f:20:68:a4:09:
                    65:fa:b9:35:d3:f5:9a:9c:f4:9c:46:63:4c:28:7f:
                    ab:c7:32:f2:db:06:af:0d:66:53:31:8e:f9:13:9f:
                    69:f4:e5:f9:02:8b:e4:ba:9b:fb:a9:10:13:32:fb:
                    d9:33
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier: 
                12:7B:D8:06:A2:37:D0:CA:DE:91:18:2B:9F:C7:26:65:9B:E2:EF:71
            X509v3 Authority Key Identifier: 
                keyid:0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points: 

                Full Name:
                  URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl

            Authority Information Access: 
                CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access: 
                CA Repository - URI:rsync://rpki.apnic.net/member_repository/A91D3876/262F7ACA977211EBBF6A5368C4F9AE02/
                RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A91D3876/262F7ACA977211EBBF6A5368C4F9AE02/EnvYBqI30MrekRgrn8cmZZvi73E.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  132015

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.199.80.0/24
                  103.215.20.0/23
                  103.246.186.0/24
                IPv6:
                  2407:f80::/32

    Signature Algorithm: sha256WithRSAEncryption
         8f:95:e6:b5:34:70:18:f0:a6:7d:df:61:1c:31:96:18:91:1d:
         1d:58:bc:08:d6:8e:6b:9b:fa:1b:b8:73:e6:de:ed:1b:43:91:
         54:7d:c3:72:17:4b:43:ae:22:a7:68:56:32:72:a9:9c:ae:4d:
         23:93:91:ee:21:e7:ca:1a:89:c2:87:7f:11:c3:d0:dd:17:d3:
         46:51:57:2a:f5:ba:a7:28:1d:ba:54:5e:d8:8e:eb:34:32:8d:
         b2:1c:f3:65:a6:3d:b0:bb:c4:ca:cd:6a:d0:55:b5:1d:4d:9e:
         4d:6d:ea:45:fd:d2:89:5d:04:9f:13:86:e7:e1:a3:ec:ef:9f:
         a0:cc:14:eb:7a:dd:66:66:43:e7:a2:26:fa:e7:f6:75:dd:bc:
         c5:2a:aa:4d:ba:ed:f5:07:23:5b:a8:a8:c4:5d:f1:dc:90:62:
         be:6f:7e:fd:00:5a:bb:7d:63:ad:2a:15:da:30:a7:e1:50:a7:
         06:b7:24:95:9a:50:ed:bb:77:8d:db:e7:d9:e5:7f:7c:bc:a0:
         fe:1c:0b:03:ab:9d:6e:ef:7c:80:2b:0d:a9:d4:32:db:63:fb:
         b7:5c:a9:15:51:39:d2:a3:e6:45:70:cb:28:f7:f1:90:f3:1c:
         bb:6e:3f:29:0a:6a:ea:a8:9e:67:fc:4b:4f:fb:5b:5b:04:e2:
         20:53:e2:a6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Generated at Fri Oct 1 04:30:20 2021 by LibreSSL & rpki-client.