RPKI Certificate
Location:                 ./rsync/rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_zkeMa_T_Onoby5Fg0xBsK3cb-k.cer (download)

Subject key identifier:   FF:39:1E:31:AF:D3:FC:E9:E8:6F:2E:45:83:4C:41:B0:AD:DC:6F:E9
Authority key identifier: 0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
Manifest:                 rpki.apnic.net/member_repository/A9161FE1/99FD8AE019BE11EC88E6281EC4F9AE02/_zkeMa_T_Onoby5Fg0xBsK3cb-k.mft
CA Repository:            rpki.apnic.net/member_repository/A9161FE1/99FD8AE019BE11EC88E6281EC4F9AE02/
Notification URL:         https://rrdp.apnic.net/notification.xml
Subject Public Key Info:  
Subordinate resources:
    until: 2023-01-31T00:00:00Z
    Resources:
    1: AS: 134711
    1: IP: 103.197.144.0/22
    2: IP: 220.158.188.0/22
    3: IP: 2001:df6:8400::/48

--
$ openssl x509 -text -inform DER -in ./rsync/rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_zkeMa_T_Onoby5Fg0xBsK3cb-k.cer
Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 79973 (0x13865)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
        Validity
            Not Before: Dec  2 03:34:14 2021 GMT
            Not After : Jan 31 00:00:00 2023 GMT
        Subject: CN=A9161FE1/serialNumber=FF391E31AFD3FCE9E86F2E45834C41B0ADDC6FE9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:99:da:c9:d2:32:c9:e1:25:99:a4:0c:84:7e:c4:
                    5b:b3:5d:6a:ff:40:00:26:c8:6c:3c:52:08:f6:c6:
                    3e:ab:00:3a:b1:ff:8c:18:11:3b:c3:ac:d6:a0:21:
                    4c:70:f1:81:84:b4:3c:4a:bc:a9:2e:57:b2:3b:6d:
                    e4:ab:39:cc:2c:1a:3a:d1:f6:6e:2c:5b:19:e7:60:
                    61:d5:48:b4:15:fe:bf:85:fe:72:36:57:a6:06:58:
                    1c:89:32:7d:12:a5:a7:98:1c:b4:8e:24:92:90:60:
                    2d:78:4f:46:f0:9e:ef:4d:9f:a8:ba:69:f0:8b:54:
                    3b:cc:e7:18:3b:3e:38:f9:de:c2:1f:de:e6:ae:7f:
                    cc:5b:48:35:8f:c2:00:3d:73:77:65:7a:bc:64:dc:
                    fd:3c:cc:80:b7:fb:c1:b5:64:36:4b:28:ee:fc:88:
                    35:58:6a:86:3a:76:3b:9e:39:61:6b:ff:16:c9:2e:
                    63:d4:69:89:aa:34:4d:f2:e6:ba:07:d6:23:9b:7d:
                    5a:05:37:36:da:9f:5b:d4:64:6d:8e:f3:68:4c:e7:
                    46:7a:de:be:68:13:db:c3:03:27:45:cd:3c:44:23:
                    df:75:84:49:5a:cf:42:8e:9a:a7:fe:f5:dd:80:21:
                    53:e9:e3:6c:2e:42:56:ad:26:28:40:3e:41:35:07:
                    b3:93
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier: 
                FF:39:1E:31:AF:D3:FC:E9:E8:6F:2E:45:83:4C:41:B0:AD:DC:6F:E9
            X509v3 Authority Key Identifier: 
                keyid:0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points: 

                Full Name:
                  URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl

            Authority Information Access: 
                CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access: 
                CA Repository - URI:rsync://rpki.apnic.net/member_repository/A9161FE1/99FD8AE019BE11EC88E6281EC4F9AE02/
                RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A9161FE1/99FD8AE019BE11EC88E6281EC4F9AE02/_zkeMa_T_Onoby5Fg0xBsK3cb-k.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  134711

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.197.144.0/22
                  220.158.188.0/22
                IPv6:
                  2001:df6:8400::/48

    Signature Algorithm: sha256WithRSAEncryption
         75:04:e6:0c:1d:ae:bf:3e:e9:cb:ec:92:85:ae:d8:86:bf:8c:
         87:97:01:91:ea:02:9d:13:6b:73:0e:0f:d0:5b:f5:08:1f:8c:
         5a:f8:4d:33:2c:ba:c0:6d:d2:b4:d5:72:ab:9d:8c:e3:a7:ea:
         45:20:81:23:28:01:29:fc:33:1c:fd:f1:bd:f7:c3:be:29:9e:
         c2:ce:d2:77:12:44:10:8f:e5:83:f8:c5:71:8c:fe:d9:39:0d:
         9d:1c:4c:49:6f:6c:16:40:b3:b0:5e:f1:73:ab:1d:c1:29:76:
         c7:ff:ea:48:21:28:57:6c:bb:eb:64:c8:a0:80:cf:5b:42:27:
         bd:6b:a8:10:c1:c1:ea:9e:c6:0a:0c:f2:99:05:30:d5:c0:9e:
         99:ec:87:c2:0f:37:02:32:2c:f1:b8:f6:09:e6:74:17:24:bf:
         c1:21:00:eb:6e:8b:6c:46:97:1b:d7:4c:86:93:aa:e6:74:5d:
         ba:a3:18:38:ae:7f:58:96:ef:59:a7:15:53:b6:89:fb:e5:10:
         c7:dd:8f:49:b8:71:31:47:e3:4c:0b:3f:dc:4a:9c:8a:40:50:
         5d:7a:5d:0d:d9:c0:23:c7:ce:41:ef:eb:8b:78:7f:ff:00:57:
         b3:e9:37:ad:0e:08:e9:d3:63:2c:d5:80:6a:74:6a:81:20:6b:
         cc:7f:56:8c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Generated at Thu Dec 2 06:11:01 2021 by LibreSSL & rpki-client.