RPKI Certificate
Location:                 rsync/rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MU9VrlJExM2xD3hN_xXQItOJaEg.cer (download)

Subject key identifier:   31:4F:55:AE:52:44:C4:CD:B1:0F:78:4D:FF:15:D0:22:D3:89:68:48
Authority key identifier: 0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
Manifest:                 rpki.apnic.net/member_repository/A91F4288/A93AA880A27211E6B8BC996AC4F9AE02/MU9VrlJExM2xD3hN_xXQItOJaEg.mft
CA Repository:            rpki.apnic.net/member_repository/A91F4288/A93AA880A27211E6B8BC996AC4F9AE02/
Notification URL:         https://rrdp.apnic.net/notification.xml
Subordinate resources:
    1: AS: 17539
    1: IP: 45.64.180.0/22
    2: IP: 103.249.152.0/22
    3: IP: 203.170.64.0/20

--
$ openssl x509 -text -inform DER -in rsync/rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MU9VrlJExM2xD3hN_xXQItOJaEg.cer
Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 67333 (0x10705)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
        Validity
            Not Before: Mar 15 16:54:59 2021 GMT
            Not After : May  1 00:00:00 2022 GMT
        Subject: CN=A91F4288/serialNumber=314F55AE5244C4CDB10F784DFF15D022D3896848
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:26:98:69:1d:73:1f:aa:d3:26:d8:f4:43:67:
                    7e:ff:3a:f0:4d:89:62:23:f2:b8:7e:00:bb:3d:d2:
                    88:11:ba:d0:b6:95:24:ef:13:32:1e:24:21:d7:de:
                    40:a0:ba:da:4d:0e:0e:93:2f:4b:9e:48:f8:ec:9f:
                    3c:f0:95:72:a8:e6:94:1b:42:d9:88:57:81:4d:98:
                    68:a7:95:cc:1d:b0:e7:b8:f1:24:76:dc:2b:df:95:
                    81:59:d5:81:58:24:60:6b:f5:cb:9e:22:7c:50:c4:
                    67:75:96:f2:75:f2:26:e4:3f:4f:71:52:37:f7:77:
                    68:7f:8e:ff:ac:ef:e3:33:5b:76:a7:bf:97:cb:65:
                    27:34:ad:2b:ea:78:ba:53:0a:03:64:4d:58:5c:0c:
                    1f:9d:46:d3:f2:40:bd:b8:85:06:04:eb:f9:49:29:
                    65:74:e8:22:cc:a0:0a:d8:35:bb:a1:35:90:91:0a:
                    d7:8b:79:96:5d:01:72:dc:bf:86:34:82:5b:dd:ca:
                    9e:be:29:47:e1:87:00:c8:73:d4:77:eb:01:fc:17:
                    55:e7:76:e5:de:f6:4f:c6:d1:45:7c:06:30:3d:02:
                    b0:9c:70:7d:85:01:87:0e:34:9f:ad:d8:28:b7:c9:
                    19:58:05:3b:82:aa:b6:fe:39:e6:4f:43:d9:cd:02:
                    2c:6d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier: 
                31:4F:55:AE:52:44:C4:CD:B1:0F:78:4D:FF:15:D0:22:D3:89:68:48
            X509v3 Authority Key Identifier: 
                keyid:0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points: 

                Full Name:
                  URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl

            Authority Information Access: 
                CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access: 
                CA Repository - URI:rsync://rpki.apnic.net/member_repository/A91F4288/A93AA880A27211E6B8BC996AC4F9AE02/
                RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A91F4288/A93AA880A27211E6B8BC996AC4F9AE02/MU9VrlJExM2xD3hN_xXQItOJaEg.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  17539

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.64.180.0/22
                  103.249.152.0/22
                  203.170.64.0/20

    Signature Algorithm: sha256WithRSAEncryption
         5c:69:49:81:8e:1a:32:a1:ad:03:58:de:82:ec:bf:44:0e:ad:
         bd:7f:15:53:f0:13:5d:1d:f0:7a:34:da:1e:24:48:62:6b:1b:
         cb:b7:76:09:84:31:98:bc:15:a6:7f:6e:f5:c7:1a:f8:c3:de:
         4f:35:ba:90:53:1f:e0:ec:4c:11:90:62:b6:ae:d5:e6:53:32:
         12:d4:69:f5:a8:6c:1d:6b:3e:c4:6e:2a:a2:d2:53:3d:99:08:
         d9:50:1b:5e:38:32:9e:ee:b6:c8:68:7d:24:dd:dd:d9:17:8e:
         12:81:26:20:ca:fa:26:22:8f:3b:36:35:e0:dd:2d:6b:04:18:
         bd:41:20:f6:52:19:6a:f6:f6:4e:7b:1c:e1:8d:4b:0e:36:a2:
         98:7a:9c:d2:6c:00:da:25:a5:93:fb:0e:60:28:8a:fe:7f:85:
         7e:ed:d4:ee:f2:14:04:98:62:0c:bf:f0:89:d9:e2:38:06:40:
         0c:e9:21:b3:33:50:05:c1:49:be:fd:22:2e:98:ea:da:67:cb:
         0f:98:3a:de:17:7a:5a:4f:73:54:9a:06:d8:d3:df:bc:bf:e4:
         e9:c0:43:ef:c6:a7:70:f9:9e:23:e5:82:cf:be:c9:d9:7f:c9:
         5e:bd:ad:70:df:bc:ef:f8:ee:94:a1:d8:08:c0:49:c8:f3:aa:
         62:0f:ab:9e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Generated at Sun Sep 26 12:51:49 2021 by LibreSSL & rpki-client.