RPKI Certificate
Location:                 ./rsync/rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Nu2LZ16nI4CFr6BsCT5UqdP9e2A.cer (download)

Subject key identifier:   36:ED:8B:67:5E:A7:23:80:85:AF:A0:6C:09:3E:54:A9:D3:FD:7B:60
Authority key identifier: 0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
Manifest:                 rpki.apnic.net/member_repository/A91803DB/0DC35D3E8DD411E9BFE2C556C4F9AE02/Nu2LZ16nI4CFr6BsCT5UqdP9e2A.mft
CA Repository:            rpki.apnic.net/member_repository/A91803DB/0DC35D3E8DD411E9BFE2C556C4F9AE02/
Notification URL:         https://rrdp.apnic.net/notification.xml
Subject Public Key Info:  
Subordinate resources:
    until: 2022-09-30T00:00:00Z
    Resources:
    1: AS: 7720 -- 7721
    2: AS: 17830
    3: AS: 17920
    4: AS: 24144
    5: AS: 37972
    6: AS: 38041
    7: AS: 134478
    8: AS: 139023
    9: AS: 139226
    10: AS: 139247 -- 139249
    11: AS: 139328
    12: AS: 139589
    13: AS: 139796
    14: AS: 139833
    15: AS: 139888
    16: AS: 140219
    17: AS: 140498
    18: AS: 142277
    19: AS: 142280 -- 142282
    20: AS: 142284
    21: AS: 142549
    22: AS: 142551
    1: IP: 103.140.8.0/23
    2: IP: 2404:f4c0::/32

--
$ openssl x509 -text -inform DER -in ./rsync/rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Nu2LZ16nI4CFr6BsCT5UqdP9e2A.cer
Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 81737 (0x13f49)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
        Validity
            Not Before: Jan 13 04:29:23 2022 GMT
            Not After : Sep 30 00:00:00 2022 GMT
        Subject: CN=A91803DB/serialNumber=36ED8B675EA7238085AFA06C093E54A9D3FD7B60
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d8:c1:76:16:5b:44:6c:3b:ae:10:7b:a7:70:fa:
                    84:3c:10:23:d3:c3:c3:03:3c:b9:0f:73:63:0a:af:
                    fc:cc:35:3f:7c:be:bf:a5:13:a6:70:e8:8f:bb:4a:
                    62:54:27:9f:48:85:80:d2:e4:db:44:40:98:35:6d:
                    84:78:fc:93:89:34:07:90:95:ba:a7:a1:fd:c1:70:
                    71:05:a0:70:87:83:96:8e:b1:f7:41:93:b2:ce:fb:
                    be:83:59:5a:85:d1:dc:a5:5a:48:fe:3c:6d:01:c0:
                    3d:bb:80:49:65:d3:61:04:4e:57:c6:f1:2a:4e:e2:
                    10:1d:55:7c:90:6b:19:d8:3e:34:9c:af:86:2f:e5:
                    e6:18:90:56:44:f0:b4:d0:0d:f5:7b:43:a9:7c:71:
                    f5:5d:94:7b:13:95:48:b6:cd:ca:61:a4:c0:62:b9:
                    b6:a5:a7:8b:be:c9:6e:27:17:2d:9f:2c:40:cb:62:
                    4b:56:b3:77:22:0e:bf:a1:83:aa:9d:7a:35:02:07:
                    e2:f3:79:c2:98:7c:cc:cd:55:c8:7a:a4:db:5a:21:
                    2f:93:f5:16:e3:82:14:f1:fa:ad:dc:19:f4:3b:5b:
                    1d:3a:64:75:53:46:ed:d2:20:cf:9f:37:11:bc:12:
                    0d:1b:bd:09:81:4f:41:c1:87:a2:c1:06:ba:2f:ff:
                    f5:07
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier: 
                36:ED:8B:67:5E:A7:23:80:85:AF:A0:6C:09:3E:54:A9:D3:FD:7B:60
            X509v3 Authority Key Identifier: 
                keyid:0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points: 

                Full Name:
                  URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl

            Authority Information Access: 
                CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access: 
                CA Repository - URI:rsync://rpki.apnic.net/member_repository/A91803DB/0DC35D3E8DD411E9BFE2C556C4F9AE02/
                RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A91803DB/0DC35D3E8DD411E9BFE2C556C4F9AE02/Nu2LZ16nI4CFr6BsCT5UqdP9e2A.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  7720-7721
                  17830
                  17920
                  24144
                  37972
                  38041
                  134478
                  139023
                  139226
                  139247-139249
                  139328
                  139589
                  139796
                  139833
                  139888
                  140219
                  140498
                  142277
                  142280-142282
                  142284
                  142549
                  142551

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.140.8.0/23
                IPv6:
                  2404:f4c0::/32

    Signature Algorithm: sha256WithRSAEncryption
         92:cc:91:7a:fd:ba:e9:79:f6:07:b2:38:34:cc:03:0a:42:0f:
         12:0f:45:39:7b:e6:49:fe:06:13:c3:68:0c:a7:00:8e:85:5c:
         bc:8a:dd:9b:aa:b2:2e:7a:2f:7a:08:19:f4:1a:2b:1b:dd:55:
         6c:a0:ae:ea:97:03:1b:5f:78:83:3a:ee:66:04:fc:31:db:4c:
         e7:84:89:82:c9:ac:5b:6d:e3:a9:98:b4:72:07:b9:86:61:a7:
         8f:d4:bf:45:4c:3a:17:63:2d:c5:8b:82:c9:74:a8:2a:96:07:
         73:04:e7:01:6e:82:a3:22:26:03:5c:83:e7:be:cd:06:c8:d5:
         99:6f:51:22:df:fd:e7:45:38:3e:b4:72:11:5c:fb:41:38:c1:
         a7:36:a3:0e:70:23:8b:41:e6:0c:bf:dd:a6:6d:e0:f9:cc:e6:
         ce:2a:0f:09:44:58:b6:93:6e:f5:55:66:0b:1b:f2:7c:c7:f1:
         43:3d:d2:c5:0f:48:67:9f:e9:0e:bf:f0:21:84:d0:53:b3:ec:
         1c:d5:a6:c7:9a:26:d6:3b:99:d9:db:d0:8d:47:87:5b:df:51:
         99:42:8c:2b:2d:78:e7:87:75:a0:d1:5f:59:4e:2f:7c:74:66:
         51:fa:74:34:6c:20:0a:c0:f7:da:c5:08:72:8c:3e:29:83:65:
         15:09:41:ee
-----BEGIN CERTIFICATE-----
MIIGpjCCBY6gAwIBAgIDAT9JMA0GCSqGSIb3DQEBCwUAMEYxETAPBgNVBAMTCEE5
MERDNUJFMTEwLwYDVQQFEygwRTY1QTRGNUZEMzZCNUJENjhFQjNDOTIzNDA4OTc4
QzkwN0FBNzlGMB4XDTIyMDExMzA0MjkyM1oXDTIyMDkzMDAwMDAwMFowRjERMA8G
A1UEAxMIQTkxODAzREIxMTAvBgNVBAUTKDM2RUQ4QjY3NUVBNzIzODA4NUFGQTA2
QzA5M0U1NEE5RDNGRDdCNjAwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB
AQDYwXYWW0RsO64Qe6dw+oQ8ECPTw8MDPLkPc2MKr/zMNT98vr+lE6Zw6I+7SmJU
J59IhYDS5NtEQJg1bYR4/JOJNAeQlbqnof3BcHEFoHCHg5aOsfdBk7LO+76DWVqF
0dylWkj+PG0BwD27gEll02EETlfG8SpO4hAdVXyQaxnYPjScr4Yv5eYYkFZE8LTQ
DfV7Q6l8cfVdlHsTlUi2zcphpMBiubalp4u+yW4nFy2fLEDLYktWs3ciDr+hg6qd
ejUCB+LzecKYfMzNVch6pNtaIS+T9RbjghTx+q3cGfQ7Wx06ZHVTRu3SIM+fNxG8
Eg0bvQmBT0HBh6LBBrov//UHAgMBAAGjggObMIIDlzAdBgNVHQ4EFgQUNu2LZ16n
I4CFr6BsCT5UqdP9e2AwHwYDVR0jBBgwFoAUDmWk9f02tb1o6zySNAiXjJB6p58w
DgYDVR0PAQH/BAQDAgEGMA8GA1UdEwEB/wQFMAMBAf8wcwYDVR0fBGwwajBooGag
ZIZicnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2
NjExRTJCQjQ2OEY3QzcyRkQxRkYyL0RtV2s5ZjAydGIxbzZ6eVNOQWlYakpCNnA1
OC5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L3JlcG9zaXRvcnkvOTgwNjUyRTBCNzdFMTFFN0E5NkEzOTUyMUE0
RjRGQjQvRG1XazlmMDJ0YjFvNnp5U05BaVhqSkI2cDU4LmNlcjBKBgNVHSABAf8E
QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj
Lm5ldC9SUEtJL0NQUy5wZGYwggEoBggrBgEFBQcBCwSCARowggEWMF8GCCsGAQUF
BzAFhlNyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5
MTgwM0RCLzBEQzM1RDNFOERENDExRTlCRkUyQzU1NkM0RjlBRTAyLzB+BggrBgEF
BQcwCoZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9B
OTE4MDNEQi8wREMzNUQzRThERDQxMUU5QkZFMkM1NTZDNEY5QUUwMi9OdTJMWjE2
bkk0Q0ZyNkJzQ1Q1VXFkUDllMkEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3Jy
ZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwgZYGCCsGAQUFBwEIAQH/BIGG
MIGDoIGAMH4wCAICHigCAh4pAgJFpgICRgACAl5QAgMAlFQCAwCUmQIDAg1OAgMC
Hw8CAwIf2jAKAgMCH+8CAwIf8QIDAiBAAgMCIUUCAwIiFAIDAiI5AgMCInACAwIj
uwIDAiTSAgMCK8UwCgIDAivIAgMCK8oCAwIrzAIDAizVAgMCLNcwLgYIKwYBBQUH
AQcBAf8EHzAdMAwEAgABMAYDBAFnjAgwDQQCAAIwBwMFACQE9MAwDQYJKoZIhvcN
AQELBQADggEBAJLMkXr9uul59geyODTMAwpCDxIPRTl75kn+BhPDaAynAI6FXLyK
3Zuqsi56L3oIGfQaKxvdVWygruqXAxtfeIM67mYE/DHbTOeEiYLJrFtt46mYtHIH
uYZhp4/Uv0VMOhdjLcWLgsl0qCqWB3ME5wFugqMiJgNcg+e+zQbI1ZlvUSLf/edF
OD60chFc+0E4wac2ow5wI4tB5gy/3aZt4PnM5s4qDwlEWLaTbvVVZgsb8nzH8UM9
0sUPSGef6Q6/8CGE0FOz7BzVpseaJtY7mdnb0I1Hh1vfUZlCjCsteOeHdaDRX1lO
L3x0ZlH6dDRsIArA99rFCHKMPimDZRUJQe4=
-----END CERTIFICATE-----

Generated at Thu Jan 13 06:59:36 2022 by LibreSSL & rpki-client.