RPKI Certificate
Location:                 rsync/rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MBSRY1x2WS1LSuf9MbJ_C2pa_j0.cer (download)

Subject key identifier:   30:14:91:63:5C:76:59:2D:4B:4A:E7:FD:31:B2:7F:0B:6A:5A:FE:3D
Authority key identifier: 0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
Manifest:                 rpki.apnic.net/member_repository/A9193492/AC132BACDEED11EABB3BB170C4F9AE02/MBSRY1x2WS1LSuf9MbJ_C2pa_j0.mft
CA Repository:            rpki.apnic.net/member_repository/A9193492/AC132BACDEED11EABB3BB170C4F9AE02/
Notification URL:         https://rrdp.apnic.net/notification.xml
Subordinate resources:
    1: IP: 203.17.237.0/24
    2: IP: 203.25.139.0/24

--
$ openssl x509 -text -inform DER -in rsync/rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MBSRY1x2WS1LSuf9MbJ_C2pa_j0.cer
Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 65346 (0xff42)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
        Validity
            Not Before: Jan 28 11:35:05 2021 GMT
            Not After : Mar 31 00:00:00 2022 GMT
        Subject: CN=A9193492/serialNumber=301491635C76592D4B4AE7FD31B27F0B6A5AFE3D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:4a:de:fc:6f:95:c5:de:b2:a9:02:55:b3:d2:
                    3c:b2:3c:ea:70:c3:32:3d:bc:9f:4e:36:84:90:d8:
                    34:7e:e4:0d:fe:b9:c8:ad:4a:ad:ae:8d:3c:d1:66:
                    96:d6:0f:d9:ea:f4:c8:22:82:ff:80:14:74:76:59:
                    23:f9:74:07:41:3c:78:8a:f5:60:0e:23:45:9b:37:
                    d5:42:40:b1:de:d7:a9:21:1c:72:c2:e0:3f:29:c2:
                    e2:e1:28:7e:4f:38:8a:00:0c:a2:78:9d:c4:ad:31:
                    7e:42:22:2a:25:f5:c8:39:df:e9:14:ce:76:a4:95:
                    db:a4:0a:e2:c5:d2:5d:ce:a6:49:4f:9b:43:d7:cc:
                    0d:10:44:4e:79:fe:b8:36:93:12:7b:13:2b:a1:f0:
                    c0:ea:33:fb:ed:77:ce:cf:c6:a9:fa:d0:de:a5:44:
                    4a:23:57:02:78:c8:8b:53:86:89:eb:03:f5:cc:9d:
                    a6:8f:af:ed:d7:d7:7f:72:fc:0b:98:a8:32:47:c9:
                    08:12:a3:c9:f6:99:81:de:58:fd:4e:af:49:37:2b:
                    df:f0:ad:33:52:69:16:40:56:b2:5a:ad:60:9a:bd:
                    e1:73:d1:9c:33:3d:95:4b:04:2c:b5:37:8e:ba:07:
                    8c:1b:b3:15:05:f6:1d:b2:1a:8f:2d:1d:8a:1c:d6:
                    ac:69
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier: 
                30:14:91:63:5C:76:59:2D:4B:4A:E7:FD:31:B2:7F:0B:6A:5A:FE:3D
            X509v3 Authority Key Identifier: 
                keyid:0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points: 

                Full Name:
                  URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl

            Authority Information Access: 
                CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access: 
                CA Repository - URI:rsync://rpki.apnic.net/member_repository/A9193492/AC132BACDEED11EABB3BB170C4F9AE02/
                RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A9193492/AC132BACDEED11EABB3BB170C4F9AE02/MBSRY1x2WS1LSuf9MbJ_C2pa_j0.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                0.0.....0.............
    Signature Algorithm: sha256WithRSAEncryption
         95:28:0f:99:4b:64:96:24:91:6a:22:74:6c:2e:bd:f5:e3:49:
         be:8b:c1:62:1f:9a:6b:e1:7e:95:a0:b3:25:75:72:0a:99:1d:
         7e:78:43:12:7d:65:a9:c0:bc:7e:b7:b3:89:76:60:a0:9b:ff:
         74:b3:5a:79:de:e2:5f:21:8b:ae:ad:2d:ba:fb:da:36:f8:30:
         5a:20:7e:65:82:25:67:45:63:f3:86:16:2d:8e:ec:a0:8a:4c:
         68:e4:97:e8:f1:49:12:68:ef:d0:85:d0:23:6e:26:d4:21:5f:
         2b:47:18:f0:a8:ac:b9:dd:20:50:f6:bd:fc:6a:bc:18:95:58:
         20:4e:f2:c8:a7:a3:a2:16:03:34:14:54:c1:30:2b:02:5d:02:
         69:27:e5:79:0c:68:25:ea:6a:a1:67:fe:7b:64:7e:81:5d:b1:
         e8:0b:52:a2:44:0b:1c:5b:7b:2a:2c:ea:a2:41:c0:20:80:19:
         f1:92:f9:fa:db:d9:30:5d:7f:6a:25:a7:2c:75:ea:4c:4d:0d:
         7b:2a:43:74:4b:73:90:aa:f3:d9:62:48:0c:5c:7d:61:c9:39:
         3c:a6:b6:2f:01:fe:3b:54:86:7d:d2:ab:d4:df:89:f0:25:fd:
         d6:9d:6d:52:a3:46:c3:5e:5d:32:38:93:c5:51:63:72:86:4d:
         87:55:89:83
-----BEGIN CERTIFICATE-----
MIIGBDCCBOygAwIBAgIDAP9CMA0GCSqGSIb3DQEBCwUAMEYxETAPBgNVBAMTCEE5
MERDNUJFMTEwLwYDVQQFEygwRTY1QTRGNUZEMzZCNUJENjhFQjNDOTIzNDA4OTc4
QzkwN0FBNzlGMB4XDTIxMDEyODExMzUwNVoXDTIyMDMzMTAwMDAwMFowRjERMA8G
A1UEAxMIQTkxOTM0OTIxMTAvBgNVBAUTKDMwMTQ5MTYzNUM3NjU5MkQ0QjRBRTdG
RDMxQjI3RjBCNkE1QUZFM0QwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB
AQDCSt78b5XF3rKpAlWz0jyyPOpwwzI9vJ9ONoSQ2DR+5A3+ucitSq2ujTzRZpbW
D9nq9Mgigv+AFHR2WSP5dAdBPHiK9WAOI0WbN9VCQLHe16khHHLC4D8pwuLhKH5P
OIoADKJ4ncStMX5CIiol9cg53+kUznakldukCuLF0l3OpklPm0PXzA0QRE55/rg2
kxJ7Eyuh8MDqM/vtd87Pxqn60N6lREojVwJ4yItThonrA/XMnaaPr+3X139y/AuY
qDJHyQgSo8n2mYHeWP1Or0k3K9/wrTNSaRZAVrJarWCaveFz0ZwzPZVLBCy1N466
B4wbsxUF9h2yGo8tHYoc1qxpAgMBAAGjggL5MIIC9TAdBgNVHQ4EFgQUMBSRY1x2
WS1LSuf9MbJ/C2pa/j0wHwYDVR0jBBgwFoAUDmWk9f02tb1o6zySNAiXjJB6p58w
DgYDVR0PAQH/BAQDAgEGMA8GA1UdEwEB/wQFMAMBAf8wcwYDVR0fBGwwajBooGag
ZIZicnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2
NjExRTJCQjQ2OEY3QzcyRkQxRkYyL0RtV2s5ZjAydGIxbzZ6eVNOQWlYakpCNnA1
OC5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L3JlcG9zaXRvcnkvOTgwNjUyRTBCNzdFMTFFN0E5NkEzOTUyMUE0
RjRGQjQvRG1XazlmMDJ0YjFvNnp5U05BaVhqSkI2cDU4LmNlcjBKBgNVHSABAf8E
QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj
Lm5ldC9SUEtJL0NQUy5wZGYwggEoBggrBgEFBQcBCwSCARowggEWMF8GCCsGAQUF
BzAFhlNyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5
MTkzNDkyL0FDMTMyQkFDREVFRDExRUFCQjNCQjE3MEM0RjlBRTAyLzB+BggrBgEF
BQcwCoZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9B
OTE5MzQ5Mi9BQzEzMkJBQ0RFRUQxMUVBQkIzQkIxNzBDNEY5QUUwMi9NQlNSWTF4
MldTMUxTdWY5TWJKX0MycGFfajAubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3Jy
ZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwJQYIKwYBBQUHAQcBAf8EFjAU
MBIEAgABMAwDBADLEe0DBADLGYswDQYJKoZIhvcNAQELBQADggEBAJUoD5lLZJYk
kWoidGwuvfXjSb6LwWIfmmvhfpWgsyV1cgqZHX54QxJ9ZanAvH63s4l2YKCb/3Sz
Wnne4l8hi66tLbr72jb4MFogfmWCJWdFY/OGFi2O7KCKTGjkl+jxSRJo79CF0CNu
JtQhXytHGPCorLndIFD2vfxqvBiVWCBO8sino6IWAzQUVMEwKwJdAmkn5XkMaCXq
aqFn/ntkfoFdsegLUqJECxxbeyos6qJBwCCAGfGS+frb2TBdf2olpyx16kxNDXsq
Q3RLc5Cq89liSAxcfWHJOTymti8B/jtUhn3Sq9TfifAl/dadbVKjRsNeXTI4k8VR
Y3KGTYdViYM=
-----END CERTIFICATE-----

Generated at Tue Jun 1 06:48:59 2021 by LibreSSL & rpki-client.