RPKI Certificate
Location:                 rsync/rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XhBeDvkNGLn6S4j640EMah3vcZA.cer (download)

Subject key identifier:   5E:10:5E:0E:F9:0D:18:B9:FA:4B:88:FA:E3:41:0C:6A:1D:EF:71:90
Authority key identifier: 0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
Manifest:                 rpki.apnic.net/member_repository/A91F69E7/46AAD6B2904011EAA688BE45C4F9AE02/XhBeDvkNGLn6S4j640EMah3vcZA.mft
CA Repository:            rpki.apnic.net/member_repository/A91F69E7/46AAD6B2904011EAA688BE45C4F9AE02/
Notification URL:         https://rrdp.apnic.net/notification.xml
Subordinate resources:
    1: AS: 9387
    1: IP: 43.254.12.0/22
    2: IP: 103.11.60.0/22
    3: IP: 113.203.208.0--113.203.255.255
    4: IP: 180.178.128.0/18
    5: IP: 223.29.224.0/20
    6: IP: 2401:4100::/32

--
$ openssl x509 -text -inform DER -in rsync/rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XhBeDvkNGLn6S4j640EMah3vcZA.cer
Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 76503 (0x12ad7)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
        Validity
            Not Before: Sep 23 05:54:42 2021 GMT
            Not After : Dec  1 00:00:00 2022 GMT
        Subject: CN=A91F69E7/serialNumber=5E105E0EF90D18B9FA4B88FAE3410C6A1DEF7190
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:cb:5d:cc:f0:18:85:14:5a:08:b3:97:e6:db:
                    28:6b:5c:c6:b5:5c:82:78:c2:37:8f:2d:6c:58:73:
                    f0:26:9f:6e:5a:5d:9e:e3:fd:0f:4d:60:c8:7e:59:
                    6e:c5:af:98:57:25:58:a6:0d:12:12:b6:aa:a2:94:
                    a4:b0:f4:19:30:6d:07:11:bb:ba:d6:ac:b0:93:6a:
                    cb:fb:43:7f:c4:45:43:4b:9c:67:9e:3e:d6:0f:fe:
                    8b:12:00:b4:e7:68:08:90:87:4f:f0:fe:00:b4:20:
                    76:81:1a:b5:14:47:bf:60:a5:c9:72:0b:35:3b:6d:
                    d3:90:5c:94:42:6d:bd:cb:6f:d4:21:7d:12:90:88:
                    ed:e8:00:26:72:ab:cb:f6:8b:13:62:a8:89:76:01:
                    04:28:a9:2e:10:60:56:fc:e9:94:7f:d3:57:06:0f:
                    48:f2:52:e6:2c:c8:59:d5:30:57:b0:54:0f:17:83:
                    ba:b8:88:7c:c7:20:0a:d9:59:d8:9d:c0:73:62:b8:
                    20:ad:48:a1:57:e0:fd:b0:f3:d5:5b:ef:71:18:8b:
                    58:a9:da:98:67:55:dd:2c:ed:cc:c8:4d:34:2e:c7:
                    9a:26:67:d4:e8:db:b5:f4:29:8b:7f:64:e3:6e:28:
                    b7:75:84:1b:86:85:99:22:ab:39:c9:27:65:1a:eb:
                    5a:9b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier: 
                5E:10:5E:0E:F9:0D:18:B9:FA:4B:88:FA:E3:41:0C:6A:1D:EF:71:90
            X509v3 Authority Key Identifier: 
                keyid:0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points: 

                Full Name:
                  URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl

            Authority Information Access: 
                CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access: 
                CA Repository - URI:rsync://rpki.apnic.net/member_repository/A91F69E7/46AAD6B2904011EAA688BE45C4F9AE02/
                RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A91F69E7/46AAD6B2904011EAA688BE45C4F9AE02/XhBeDvkNGLn6S4j640EMah3vcZA.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  9387

            sbgp-ipAddrBlock: critical
                IPv4:
                  43.254.12.0/22
                  103.11.60.0/22
                  113.203.208.0-113.203.255.255
                  180.178.128.0/18
                  223.29.224.0/20
                IPv6:
                  2401:4100::/32

    Signature Algorithm: sha256WithRSAEncryption
         92:d7:f6:da:1a:e0:4c:f6:1c:8e:ca:2f:af:bf:20:7d:ec:b9:
         1f:8d:06:cb:e5:60:32:46:a9:37:b7:d0:f2:57:d6:db:b3:32:
         f9:20:4b:91:dc:97:45:f3:f5:ba:1e:db:d2:15:c7:b2:38:2f:
         b4:15:25:f7:2c:4b:e0:13:e5:cf:f5:0b:06:41:f0:3d:29:cf:
         11:d0:35:cd:6f:93:94:d4:0e:b6:39:1a:b0:3a:a1:32:a9:73:
         e2:45:1e:5c:15:03:67:e2:a5:13:ae:0a:b2:01:20:f9:49:5e:
         b7:3f:b2:19:ef:6e:d8:2f:87:ca:10:e7:95:5b:bb:db:03:1f:
         ae:09:a8:09:1b:ff:1d:87:ad:9c:12:d3:41:ed:b8:09:21:6b:
         6c:bc:34:49:dd:06:ed:b1:01:3f:96:1f:08:89:78:88:7c:d0:
         a1:13:e0:7e:29:39:13:eb:0e:89:06:90:41:f6:aa:38:5a:51:
         60:31:05:f4:f6:7b:fe:38:7d:5e:7c:d7:a1:e4:6e:bb:ef:3a:
         bb:ef:f2:a1:da:04:3a:e5:6b:3b:c7:7b:0f:7f:00:d7:a1:c8:
         29:34:31:49:c7:75:95:90:df:99:38:90:9a:7b:e6:d2:64:28:
         c5:49:2e:8d:4a:19:68:f3:43:c7:b3:53:bc:cd:89:75:f8:27:
         ce:48:1a:86
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Generated at Sun Sep 26 12:52:36 2021 by LibreSSL & rpki-client.