RPKI Certificate
Location:                 ./rsync/rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TN7H1CHxboUWcqgSOd0Y_IweOVY.cer (download)

Subject key identifier:   4C:DE:C7:D4:21:F1:6E:85:16:72:A8:12:39:DD:18:FC:8C:1E:39:56
Authority key identifier: 0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
Manifest:                 rpki.apnic.net/member_repository/A91D0A62/1FA96DA0283111EC97A01316C4F9AE02/TN7H1CHxboUWcqgSOd0Y_IweOVY.mft
CA Repository:            rpki.apnic.net/member_repository/A91D0A62/1FA96DA0283111EC97A01316C4F9AE02/
Notification URL:         https://rrdp.apnic.net/notification.xml
Subordinate resources:
    1: IP: 103.174.70.0/23

--
$ openssl x509 -text -inform DER -in ./rsync/rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TN7H1CHxboUWcqgSOd0Y_IweOVY.cer
Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 77283 (0x12de3)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
        Validity
            Not Before: Oct  8 12:13:27 2021 GMT
            Not After : Dec  1 00:00:00 2022 GMT
        Subject: CN=A91D0A62/serialNumber=4CDEC7D421F16E851672A81239DD18FC8C1E3956
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9d:02:22:23:d3:91:fa:33:15:79:d2:16:87:25:
                    e9:41:2a:a5:eb:f7:13:63:e5:55:d6:36:94:9e:65:
                    6c:0f:68:dd:b1:bf:0a:95:5a:3a:9f:27:4c:4b:68:
                    1f:c5:03:a4:ab:54:af:4a:68:cf:1e:a9:7c:18:8b:
                    ce:79:f3:2d:c6:2f:37:ef:e6:3d:26:eb:ad:27:d0:
                    a2:90:fc:71:b1:bc:35:4a:2f:ba:68:52:e7:59:21:
                    cd:82:20:b1:0f:d5:c5:20:cb:c6:e8:f2:c9:01:47:
                    bb:96:a4:07:19:89:65:85:6a:15:2e:d6:b1:61:99:
                    da:ff:b3:e7:d2:12:f8:50:88:11:be:d1:26:40:fa:
                    21:56:e5:31:f9:d3:a6:2d:89:a2:e7:2c:b4:03:94:
                    8b:87:0f:46:8f:95:78:f3:d8:ed:1b:ee:48:eb:87:
                    cc:46:19:d9:0b:d8:f5:b9:53:08:8a:6b:2e:a9:a5:
                    92:97:ef:65:70:f0:aa:51:b9:da:31:c2:0d:80:55:
                    78:0e:48:d0:27:e2:f9:cf:ea:bf:c2:53:6a:26:e1:
                    e2:d2:5d:18:12:0b:7d:3c:cc:3e:30:e2:90:a0:7c:
                    d7:6b:e4:4e:1f:69:96:cb:c4:3a:29:87:07:b6:ba:
                    b8:e5:71:15:71:82:60:56:81:bd:77:d5:e1:70:e6:
                    d4:13
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier: 
                4C:DE:C7:D4:21:F1:6E:85:16:72:A8:12:39:DD:18:FC:8C:1E:39:56
            X509v3 Authority Key Identifier: 
                keyid:0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points: 

                Full Name:
                  URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl

            Authority Information Access: 
                CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access: 
                CA Repository - URI:rsync://rpki.apnic.net/member_repository/A91D0A62/1FA96DA0283111EC97A01316C4F9AE02/
                RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A91D0A62/1FA96DA0283111EC97A01316C4F9AE02/TN7H1CHxboUWcqgSOd0Y_IweOVY.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                0.0.....0....g.F
    Signature Algorithm: sha256WithRSAEncryption
         00:ba:0e:eb:f7:a9:ba:36:96:06:d6:6e:9a:6f:94:bb:a8:da:
         6b:93:0d:31:44:5a:72:19:d4:44:e9:2e:0a:c1:68:5f:d4:53:
         72:b1:d5:94:b4:c3:05:80:24:78:17:d7:b1:9e:ba:13:96:66:
         90:13:f0:1d:4d:f1:d5:c6:ea:53:d8:6a:34:65:ca:0c:1b:95:
         7a:ae:94:40:89:34:3e:e3:ca:e7:8b:06:2d:ed:3f:57:4e:7d:
         54:06:d5:de:45:50:d3:6d:14:00:80:87:a5:aa:6c:6d:bf:79:
         d8:27:d2:84:be:dd:89:ab:5e:d9:50:92:0d:a2:6c:73:5c:a5:
         0c:d1:df:a8:32:04:e1:0e:f3:63:2f:7d:2d:58:78:a5:0e:cb:
         c9:a0:12:fa:b0:d5:2b:b2:f3:bc:8f:5e:ac:db:9f:c4:e4:42:
         a9:f1:29:c3:1e:4c:8e:bb:5d:69:7a:e3:70:23:68:53:7a:fc:
         7d:b4:d7:93:d0:96:61:b6:53:b6:74:f8:50:54:0e:5c:11:47:
         1b:1d:af:b6:8c:75:e5:4f:1a:54:65:4c:3c:4c:dd:41:be:1c:
         e8:af:5c:44:e1:18:05:69:04:66:79:01:74:22:1d:4a:c1:45:
         6d:5e:9b:33:45:70:07:04:8a:f9:0c:61:1d:bd:e4:33:c4:b6:
         5b:51:d1:02
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Generated at Fri Oct 8 15:04:33 2021 by LibreSSL & rpki-client.