RPKI Certificate
Location:                 rsync/rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/I7Z79Sq_qoVblcucsX8gE8JDCFo.cer (download)

Subject key identifier:   23:B6:7B:F5:2A:BF:AA:85:5B:95:CB:9C:B1:7F:20:13:C2:43:08:5A
Authority key identifier: 0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
Manifest:                 rpki.apnic.net/member_repository/A91CAEB5/AE3B7052AAF311EAB0758537C4F9AE02/I7Z79Sq_qoVblcucsX8gE8JDCFo.mft
CA Repository:            rpki.apnic.net/member_repository/A91CAEB5/AE3B7052AAF311EAB0758537C4F9AE02/
Notification URL:         https://rrdp.apnic.net/notification.xml
Subordinate resources:
    1: IP: 103.10.228.0/22

--
$ openssl x509 -text -inform DER -in rsync/rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/I7Z79Sq_qoVblcucsX8gE8JDCFo.cer
Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 74270 (0x1221e)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
        Validity
            Not Before: Aug  3 05:06:49 2021 GMT
            Not After : Sep 30 00:00:00 2022 GMT
        Subject: CN=A91CAEB5/serialNumber=23B67BF52ABFAA855B95CB9CB17F2013C243085A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:23:d4:36:62:5d:71:15:cf:64:d9:37:75:85:
                    f6:d1:6e:34:75:1d:28:9a:ec:7e:ec:eb:f4:4e:c5:
                    99:16:d6:74:ac:0e:d9:b9:35:18:9d:d5:9f:5f:05:
                    dc:24:2c:b2:75:7d:c9:90:2f:df:59:85:4d:97:97:
                    ea:d4:42:08:2c:e7:6d:b9:fc:31:0b:15:b8:28:83:
                    1b:c0:31:ab:1a:2f:74:eb:13:81:f5:cc:aa:ca:83:
                    19:05:a2:4a:13:78:90:59:40:27:fe:13:3b:96:f3:
                    39:09:30:a9:ef:94:dc:17:65:dd:0d:5d:cb:fd:98:
                    32:49:10:47:06:1d:fd:ce:35:07:83:bc:b0:54:f7:
                    82:68:75:7c:99:45:4f:59:a9:ab:eb:9c:ca:c7:21:
                    a4:31:b8:2f:24:2a:d6:4d:8e:c8:c7:34:ab:60:3d:
                    98:f9:cc:a0:23:38:d7:dd:49:d0:cd:e0:6e:30:06:
                    29:cc:15:6d:d3:7c:1e:8b:33:fa:6b:ca:46:8b:4a:
                    81:54:e2:ac:83:83:fb:5e:7b:2d:f2:72:24:9f:c5:
                    83:26:77:e3:5c:e0:87:0d:d3:19:33:44:ef:0d:5a:
                    f5:ae:1d:8f:bb:a1:17:be:78:be:b4:6e:cd:2c:02:
                    99:dc:9a:b4:dd:24:3b:c3:6f:99:9a:68:9e:7b:da:
                    f3:41
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier: 
                23:B6:7B:F5:2A:BF:AA:85:5B:95:CB:9C:B1:7F:20:13:C2:43:08:5A
            X509v3 Authority Key Identifier: 
                keyid:0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points: 

                Full Name:
                  URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl

            Authority Information Access: 
                CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access: 
                CA Repository - URI:rsync://rpki.apnic.net/member_repository/A91CAEB5/AE3B7052AAF311EAB0758537C4F9AE02/
                RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A91CAEB5/AE3B7052AAF311EAB0758537C4F9AE02/I7Z79Sq_qoVblcucsX8gE8JDCFo.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.10.228.0/22

    Signature Algorithm: sha256WithRSAEncryption
         13:d7:90:c8:9b:bb:9b:04:10:ac:69:d6:4d:af:2b:a9:21:9e:
         4b:ef:8a:d8:00:86:b6:b3:a9:8b:49:ff:72:d6:d9:b9:86:a9:
         bc:05:78:32:81:f8:fc:08:01:6a:ac:90:c4:1d:fb:2b:24:60:
         c4:ea:89:95:1c:21:d8:34:2f:f0:90:2d:7a:52:ee:31:48:8c:
         23:8c:37:bb:3d:21:85:9d:40:8c:a0:7a:20:96:96:a7:8c:11:
         09:e9:47:ec:77:3c:32:9e:f3:a1:f8:4e:0f:f2:2b:f8:42:f6:
         be:e6:e8:7d:1c:57:20:3d:9e:0b:29:d5:f3:d3:33:87:5b:41:
         66:ac:68:e5:2c:d8:a5:de:a9:db:ab:57:2d:7f:71:09:23:1f:
         10:00:3c:bd:32:28:e2:2a:0d:1c:b3:a8:c2:7c:61:a3:ad:16:
         ac:dd:97:66:e5:b9:2c:3c:78:fb:35:2c:d7:80:ef:05:a3:8b:
         a6:05:c2:8f:cd:3e:5a:9b:a8:b0:d4:2b:2c:2d:29:c3:c3:f3:
         24:e6:96:4f:4d:2b:34:5b:1a:5a:3d:03:22:72:ff:02:1d:fd:
         fb:03:67:82:cb:cf:9a:f1:81:43:85:00:85:24:c4:00:a0:aa:
         64:f3:e3:2c:c2:ea:04:5c:d1:1c:65:46:cd:c7:23:b4:36:1a:
         e8:73:70:fa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Generated at Sun Sep 26 12:51:30 2021 by LibreSSL & rpki-client.