RPKI Certificate
Location:                 ./rsync/rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MIixerfplmRXm2wX2pICu3op9vQ.cer (download)

Subject key identifier:   30:88:B1:7A:B7:E9:96:64:57:9B:6C:17:DA:92:02:BB:7A:29:F6:F4
Authority key identifier: 0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
Manifest:                 rpki.apnic.net/member_repository/A91187A6/9EBE69608E7C11EA9833105EC4F9AE02/MIixerfplmRXm2wX2pICu3op9vQ.mft
CA Repository:            rpki.apnic.net/member_repository/A91187A6/9EBE69608E7C11EA9833105EC4F9AE02/
Notification URL:         https://rrdp.apnic.net/notification.xml
Subject Public Key Info:  
Subordinate resources:
    until: 2022-12-01T00:00:00Z
    Resources:
    1: AS: 132528
    1: IP: 103.73.108.0/22
    2: IP: 2406:f780::/32

--
$ openssl x509 -text -inform DER -in ./rsync/rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MIixerfplmRXm2wX2pICu3op9vQ.cer
Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 77481 (0x12ea9)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
        Validity
            Not Before: Oct 14 11:00:58 2021 GMT
            Not After : Dec  1 00:00:00 2022 GMT
        Subject: CN=A91187A6/serialNumber=3088B17AB7E99664579B6C17DA9202BB7A29F6F4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:58:7f:d3:79:34:44:a1:51:b5:a0:93:44:3d:
                    3d:e8:1d:7c:98:54:42:01:ec:68:c9:68:08:7d:47:
                    17:04:20:27:f0:94:ac:fe:45:34:7f:eb:39:83:ab:
                    ae:0c:ef:2a:ff:82:da:12:d5:bc:86:7a:57:40:f7:
                    04:9c:60:a1:76:c2:bf:c5:78:fa:c6:7b:d1:b0:7c:
                    fd:ea:59:26:39:de:ad:af:47:d3:e2:52:f0:f8:81:
                    4b:0a:5f:0e:12:c9:36:cb:36:1b:50:78:64:c0:81:
                    d1:5d:90:44:d7:c6:0a:cb:ca:9d:2e:08:32:25:a6:
                    3e:d1:87:a5:12:e7:70:fb:f3:d3:86:0f:62:ac:16:
                    ee:2c:97:1e:5b:84:75:88:f4:cb:9c:35:4d:39:35:
                    1a:9a:4e:a3:d1:94:cd:43:73:13:8d:c9:f9:f9:4d:
                    c7:c3:3b:f5:8b:79:8f:ea:6e:ba:ba:b7:9d:5a:96:
                    9a:69:fb:d7:6a:a9:3a:24:e6:e5:0f:2c:a4:23:1b:
                    06:18:9c:39:e4:ed:e8:27:0c:dd:7d:fd:e5:6e:0c:
                    5e:a9:21:2a:6a:86:d0:8c:65:6e:fc:04:0a:34:d7:
                    ac:31:57:63:ca:dd:9f:14:a7:fa:5b:35:fb:e9:6c:
                    f0:5f:7a:6f:80:3a:05:60:f0:f4:2c:04:3a:27:3d:
                    bb:71
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier: 
                30:88:B1:7A:B7:E9:96:64:57:9B:6C:17:DA:92:02:BB:7A:29:F6:F4
            X509v3 Authority Key Identifier: 
                keyid:0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points: 

                Full Name:
                  URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl

            Authority Information Access: 
                CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access: 
                CA Repository - URI:rsync://rpki.apnic.net/member_repository/A91187A6/9EBE69608E7C11EA9833105EC4F9AE02/
                RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A91187A6/9EBE69608E7C11EA9833105EC4F9AE02/MIixerfplmRXm2wX2pICu3op9vQ.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  132528

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.73.108.0/22
                IPv6:
                  2406:f780::/32

    Signature Algorithm: sha256WithRSAEncryption
         20:34:a9:34:a1:6f:2a:14:d9:56:7c:25:54:87:66:8b:75:b4:
         b0:e7:9c:6e:68:f7:9c:89:72:d7:41:aa:f9:98:d0:d4:ea:9c:
         30:56:82:98:ca:8f:57:1c:2b:91:b2:05:12:96:a4:33:d5:8f:
         b2:04:b5:d3:84:15:3b:d9:0c:d7:1a:b8:1f:e0:e1:0f:76:4c:
         75:c1:fc:3d:ce:4f:6b:f9:b5:51:aa:7c:53:fb:93:b3:ca:ba:
         0e:d4:85:80:7b:f7:30:13:a9:62:96:52:50:6c:55:9b:76:e6:
         77:9e:3f:71:8a:6c:7d:b3:cd:94:7d:58:a4:b8:78:9b:cc:7e:
         79:11:61:e3:12:88:e1:b6:0d:4e:68:39:d6:51:43:2b:32:90:
         f9:06:c1:a3:bc:f6:5c:17:5a:34:10:7d:ca:3f:5c:f2:8e:49:
         4d:7b:45:57:0a:f6:6d:dc:72:8b:d6:4d:a7:b1:29:d8:14:00:
         f6:69:7f:08:cc:3c:56:88:31:2e:04:ac:67:d4:61:b8:f8:57:
         92:10:d9:89:de:8d:69:6a:bf:d8:18:7b:9c:e0:d1:b9:f0:80:
         51:17:cc:2e:c2:26:a4:7b:d8:86:7f:26:4f:84:27:b3:f2:f3:
         2d:98:dc:9b:8a:ed:03:90:70:ef:22:44:87:f8:27:b7:d0:da:
         f1:cf:d7:24
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Generated at Thu Oct 14 13:40:49 2021 by LibreSSL & rpki-client.