RPKI Certificate
Location:                 rsync/rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_cYTVRXV0BXJRDu0xZvL-20Gk9E.cer (download)

Subject key identifier:   FD:C6:13:55:15:D5:D0:15:C9:44:3B:B4:C5:9B:CB:FB:6D:06:93:D1
Authority key identifier: 0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
Manifest:                 rpki.apnic.net/member_repository/A919DF6F/DA40A8E8429811EAB7A22A12C4F9AE02/_cYTVRXV0BXJRDu0xZvL-20Gk9E.mft
CA Repository:            rpki.apnic.net/member_repository/A919DF6F/DA40A8E8429811EAB7A22A12C4F9AE02/
Notification URL:         https://rrdp.apnic.net/notification.xml
Subordinate resources:
    1: AS: 139928
    1: IP: 103.147.110.0/23
    2: IP: 2001:df2:9380::/48

--
$ openssl x509 -text -inform DER -in rsync/rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_cYTVRXV0BXJRDu0xZvL-20Gk9E.cer
Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 64717 (0xfccd)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
        Validity
            Not Before: Jan 11 15:17:18 2021 GMT
            Not After : Mar 31 00:00:00 2022 GMT
        Subject: CN=A919DF6F/serialNumber=FDC6135515D5D015C9443BB4C59BCBFB6D0693D1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:58:81:e4:22:6c:51:8a:d0:0e:80:6a:e0:64:
                    09:c9:89:ed:89:04:11:45:18:e2:9d:d0:b3:d9:cd:
                    f1:c3:a9:28:46:4c:db:4d:ba:c0:33:03:66:c7:fa:
                    30:b1:e2:be:9b:9b:ae:36:08:5b:4f:ad:74:02:62:
                    96:25:a1:eb:8e:54:e8:1f:a8:54:1e:e6:a4:72:42:
                    6d:a3:47:25:94:88:0b:9f:89:00:fa:be:47:5e:fb:
                    02:2d:59:3c:d9:39:03:a2:15:a4:3f:08:ba:a7:66:
                    78:f4:fd:98:7c:57:35:f2:d9:bb:e8:65:ad:46:c7:
                    61:d6:ff:ce:1c:70:e3:f9:e2:3e:25:10:39:4c:b6:
                    09:e1:e3:f4:15:4c:9e:ef:1e:29:6b:50:dd:07:26:
                    d2:5d:2a:63:be:b6:6d:6d:11:06:ff:fc:d4:bc:93:
                    7f:00:1e:09:7e:cf:76:60:8a:c8:64:c1:2d:dc:49:
                    0a:02:c1:e9:48:53:a7:ce:88:11:96:b0:8f:e2:00:
                    e5:69:bb:f6:63:2b:ac:f4:eb:82:78:2c:d8:0b:91:
                    4c:60:b6:e8:49:d0:2e:92:37:4b:6f:86:c6:a3:b4:
                    47:66:62:da:c0:66:5d:85:45:16:d5:2f:93:83:e6:
                    c0:b4:b2:8a:dd:70:15:fb:52:c2:eb:ad:d9:80:09:
                    45:df
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier: 
                FD:C6:13:55:15:D5:D0:15:C9:44:3B:B4:C5:9B:CB:FB:6D:06:93:D1
            X509v3 Authority Key Identifier: 
                keyid:0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points: 

                Full Name:
                  URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl

            Authority Information Access: 
                CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access: 
                CA Repository - URI:rsync://rpki.apnic.net/member_repository/A919DF6F/DA40A8E8429811EAB7A22A12C4F9AE02/
                RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A919DF6F/DA40A8E8429811EAB7A22A12C4F9AE02/_cYTVRXV0BXJRDu0xZvL-20Gk9E.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  139928

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.147.110.0/23
                IPv6:
                  2001:df2:9380::/48

    Signature Algorithm: sha256WithRSAEncryption
         3d:bf:83:d1:ff:ec:24:8a:43:60:cb:7c:eb:b9:f6:62:35:01:
         bb:3f:53:a2:36:46:05:35:10:79:f7:83:25:51:6c:2c:ce:c6:
         7f:62:35:cd:3c:e0:c9:54:be:26:27:78:b3:24:e4:a3:d5:c4:
         7f:35:50:3e:c7:99:75:93:52:d7:d9:77:c8:4a:30:f0:d8:a7:
         86:49:ce:b7:c0:6e:81:08:c4:96:4f:21:7c:4d:c3:03:90:3b:
         44:fc:f0:d5:a8:2b:ca:cf:33:74:3d:b4:22:00:00:5e:85:39:
         d6:8b:98:b1:93:09:55:94:a5:b0:a8:d1:8b:56:d7:28:66:c5:
         52:73:9b:55:4f:64:a0:5d:89:33:93:33:8e:38:c8:34:9f:86:
         ca:96:b4:5e:75:df:92:7b:a3:70:62:03:23:68:19:9a:dd:e7:
         83:64:6f:55:74:c3:3f:28:77:3f:20:39:2c:c7:41:b5:41:bf:
         25:fc:fd:06:12:10:ee:bf:4c:67:29:89:10:6c:26:ea:f7:8f:
         5c:94:b2:63:14:d5:1d:cb:33:03:8f:0a:26:97:cf:b4:d6:a8:
         30:88:39:83:0b:20:40:4a:e3:c4:3b:8c:da:8e:52:83:d6:4a:
         e9:c6:3f:bb:b5:16:78:47:7d:7e:3e:ae:e9:14:27:ff:d3:b5:
         db:1c:cc:4a
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----

Generated at Sun Sep 26 12:52:48 2021 by LibreSSL & rpki-client.