RPKI Certificate
Location:                 ./rsync/rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_eNrbpSTmOUtleidQL32CyXbabk.cer (download)

Subject key identifier:   FD:E3:6B:6E:94:93:98:E5:2D:95:E8:9D:40:BD:F6:0B:25:DB:69:B9
Authority key identifier: 0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
Manifest:                 rpki.apnic.net/member_repository/A916B18B/628DE502DF2311E797225D2EC4F9AE02/_eNrbpSTmOUtleidQL32CyXbabk.mft
CA Repository:            rpki.apnic.net/member_repository/A916B18B/628DE502DF2311E797225D2EC4F9AE02/
Notification URL:         https://rrdp.apnic.net/notification.xml
Subject Public Key Info:  
Subordinate resources:
    until: 2023-01-31T00:00:00Z
    Resources:
    1: IP: 103.240.120.0/22
    2: IP: 136.158.128.0/17
    3: IP: 223.130.16.0/22
    4: IP: 2403:4c0::/32

--
$ openssl x509 -text -inform DER -in ./rsync/rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_eNrbpSTmOUtleidQL32CyXbabk.cer
Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 79456 (0x13660)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
        Validity
            Not Before: Nov 24 02:42:28 2021 GMT
            Not After : Jan 31 00:00:00 2023 GMT
        Subject: CN=A916B18B/serialNumber=FDE36B6E949398E52D95E89D40BDF60B25DB69B9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:d3:46:b8:59:e0:7f:e0:82:99:a1:91:70:c4:
                    d0:88:bf:79:23:5d:eb:f6:7a:4a:a5:99:19:07:d8:
                    ba:4b:c6:69:ba:69:15:0a:9a:a3:04:35:b8:ed:a2:
                    8e:61:f5:b4:4a:2f:fe:e1:39:67:53:4b:e1:14:17:
                    2b:37:4a:82:25:e4:a8:8c:44:d5:6c:7c:88:76:de:
                    a8:8e:4b:13:5e:95:6f:c1:31:ac:2c:48:a4:8f:d5:
                    8f:18:ac:12:f9:d4:ac:2a:8c:11:9d:2e:4e:58:ef:
                    2f:23:e0:69:55:fe:d7:22:3a:61:88:27:ff:f5:00:
                    c5:a1:06:88:bc:e3:51:9b:ea:b3:c0:a9:27:f3:4e:
                    b6:26:d8:65:2e:68:9b:8c:0d:cb:7e:5e:56:b4:cf:
                    3f:c8:09:b6:96:5d:26:aa:17:8f:38:b1:93:0f:22:
                    ad:fa:58:62:84:c3:08:e5:d4:36:22:0a:21:e3:d6:
                    49:78:73:5b:69:99:ca:63:12:cf:04:42:bf:86:ed:
                    9c:f9:88:f5:bd:16:ef:5c:13:d5:4a:a5:98:a3:65:
                    e6:f9:10:c4:59:46:5e:f6:bc:69:3c:64:8b:3c:8c:
                    7f:ba:b7:f0:d7:40:b6:1a:6c:ca:f8:b8:01:11:66:
                    ee:74:24:d4:48:dc:52:a9:9a:4f:0c:4a:b1:e9:97:
                    73:df
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier: 
                FD:E3:6B:6E:94:93:98:E5:2D:95:E8:9D:40:BD:F6:0B:25:DB:69:B9
            X509v3 Authority Key Identifier: 
                keyid:0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points: 

                Full Name:
                  URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl

            Authority Information Access: 
                CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access: 
                CA Repository - URI:rsync://rpki.apnic.net/member_repository/A916B18B/628DE502DF2311E797225D2EC4F9AE02/
                RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A916B18B/628DE502DF2311E797225D2EC4F9AE02/_eNrbpSTmOUtleidQL32CyXbabk.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.240.120.0/22
                  136.158.128.0/17
                  223.130.16.0/22
                IPv6:
                  2403:4c0::/32

    Signature Algorithm: sha256WithRSAEncryption
         cb:80:9a:c9:a6:9a:ee:59:d1:7f:a6:c2:f5:b3:98:fd:eb:04:
         93:88:55:49:49:3e:47:44:8f:e3:5a:2f:9d:05:f3:6d:88:a7:
         04:92:c1:3f:64:d1:be:45:68:74:1b:f3:4d:84:ef:eb:63:6a:
         e5:61:b3:73:5a:96:a0:ad:92:4f:72:fa:35:13:68:05:6d:0d:
         53:a2:42:1d:7c:2e:26:bd:8b:93:d9:83:f3:60:d3:02:55:5a:
         e2:35:4d:01:25:57:ef:ed:2b:cb:b4:5e:eb:9b:34:37:25:62:
         bb:42:5d:5b:47:7a:4a:a0:a4:01:22:b2:d4:68:62:5a:b0:59:
         8a:fd:7c:2b:da:1e:b1:60:32:91:19:9d:f6:a6:4e:9d:f8:2a:
         bb:c0:ff:36:46:b4:56:6d:9a:21:16:47:62:49:48:66:fd:aa:
         f8:72:b3:c3:be:90:99:06:af:70:34:db:32:44:7c:19:12:56:
         ad:96:8a:be:45:88:40:a3:38:61:59:ae:33:67:96:f5:e8:e3:
         1d:4e:09:6f:da:01:22:ee:21:1e:43:02:8e:42:ab:dd:ae:6b:
         4c:3f:dd:1d:98:0e:70:e4:51:48:71:aa:09:1d:86:10:a6:94:
         1f:c9:da:ec:c5:39:a2:b5:0d:b2:5c:9f:2f:c1:e2:f3:a0:23:
         fd:6b:6f:09
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Generated at Wed Nov 24 05:17:56 2021 by LibreSSL & rpki-client.