RPKI Certificate
Location:                 ./rsync/rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dKGUOXIqgzAE05VKV4ToXm6ZvME.cer (download)

Subject key identifier:   74:A1:94:39:72:2A:83:30:04:D3:95:4A:57:84:E8:5E:6E:99:BC:C1
Authority key identifier: 0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
Manifest:                 rpki.apnic.net/member_repository/A914454E/2AF9DBB0C4D511EA8021A718C4F9AE02/dKGUOXIqgzAE05VKV4ToXm6ZvME.mft
CA Repository:            rpki.apnic.net/member_repository/A914454E/2AF9DBB0C4D511EA8021A718C4F9AE02/
Notification URL:         https://rrdp.apnic.net/notification.xml
Subordinate resources:
    1: AS: 38714
    1: IP: 103.98.184.0/22
    2: IP: 118.82.32.0/20
    3: IP: 2401:4400::/32

--
$ openssl x509 -text -inform DER -in ./rsync/rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dKGUOXIqgzAE05VKV4ToXm6ZvME.cer
Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 76806 (0x12c06)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
        Validity
            Not Before: Sep 30 13:37:49 2021 GMT
            Not After : Dec  1 00:00:00 2022 GMT
        Subject: CN=A914454E/serialNumber=74A19439722A833004D3954A5784E85E6E99BCC1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e7:58:fc:36:68:b4:7e:15:5a:cd:83:9b:d1:fd:
                    25:a1:47:97:78:ae:9b:99:53:81:54:44:7f:57:76:
                    21:36:0f:31:49:35:18:28:1b:96:38:89:d1:0d:0b:
                    b6:2a:ec:e4:e3:e7:f7:d0:2b:eb:ea:d9:26:89:a4:
                    06:91:05:77:4a:2b:44:8f:2a:2a:1f:3a:5d:71:a7:
                    e2:96:37:26:2a:e1:2d:b6:c9:bf:f7:73:fa:e9:a2:
                    02:c6:bf:11:65:a5:7f:be:52:a0:11:b9:7e:33:12:
                    3b:a8:25:7a:1c:6a:d8:b9:4d:7b:cf:7a:40:10:93:
                    93:4f:b4:42:36:f5:8a:06:9a:a3:a0:7a:c6:81:46:
                    8e:7d:fc:15:88:40:71:92:41:51:7f:b7:f6:6d:00:
                    d9:ea:48:0b:7c:fc:0a:9d:35:ae:e1:3e:a0:1e:34:
                    7e:a9:c0:a3:14:86:f7:3d:e3:c8:6b:cb:9f:da:5a:
                    f9:8f:96:b8:a2:81:5a:c2:4c:39:14:4f:e0:f1:00:
                    8a:89:96:1b:b8:84:2b:e7:c5:96:c4:85:8a:96:44:
                    61:40:84:03:0b:ef:9b:cd:73:d7:1e:fd:bc:af:93:
                    93:3d:7c:18:56:8d:07:30:87:32:57:0c:67:5e:5e:
                    3a:4c:c4:83:b0:b7:db:7a:f0:a0:ae:db:f1:c8:e3:
                    f4:b5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier: 
                74:A1:94:39:72:2A:83:30:04:D3:95:4A:57:84:E8:5E:6E:99:BC:C1
            X509v3 Authority Key Identifier: 
                keyid:0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points: 

                Full Name:
                  URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl

            Authority Information Access: 
                CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access: 
                CA Repository - URI:rsync://rpki.apnic.net/member_repository/A914454E/2AF9DBB0C4D511EA8021A718C4F9AE02/
                RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A914454E/2AF9DBB0C4D511EA8021A718C4F9AE02/dKGUOXIqgzAE05VKV4ToXm6ZvME.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  38714

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.98.184.0/22
                  118.82.32.0/20
                IPv6:
                  2401:4400::/32

    Signature Algorithm: sha256WithRSAEncryption
         ae:30:e1:af:33:f7:0c:91:c0:05:30:83:82:70:05:82:0d:11:
         8a:9e:3a:1b:45:28:9c:53:34:ad:51:92:81:25:06:9f:c5:38:
         76:a7:9a:a6:5b:84:a3:c0:f2:d6:42:7f:8f:27:bb:15:9f:7c:
         6e:8d:0e:cb:ac:12:d4:ac:46:5b:1a:63:4e:66:56:52:e2:19:
         6b:ea:b5:ab:05:3c:8f:a4:8e:35:6a:d4:f5:ba:9c:7c:75:d8:
         d2:de:49:bb:ef:51:c3:cd:63:51:ff:0f:30:5b:d9:ac:5a:42:
         67:27:70:bb:88:4d:16:c5:6e:d4:37:a6:0d:3f:b3:d5:e3:37:
         6b:f8:bb:e8:25:aa:2f:40:fa:38:d1:bd:4b:d3:7c:bd:91:40:
         90:bc:2c:87:62:c1:05:8c:c6:ff:26:d3:bf:6a:89:4e:0d:b0:
         38:3b:41:9e:19:c4:fd:c6:f8:8b:80:cb:bd:3f:7f:af:0a:27:
         5e:f9:4c:a0:52:06:a5:fd:82:6b:59:6a:63:0d:42:d9:93:64:
         f9:37:3a:eb:2f:23:5c:c3:33:b7:0d:d4:0b:16:d0:d0:61:14:
         9a:ef:b1:47:9e:e9:6b:f7:a0:86:ff:24:d5:59:0b:76:c1:2c:
         de:e3:43:b5:de:45:08:d3:d7:2b:2d:dd:6d:64:d8:9e:84:48:
         0b:e2:78:66
-----BEGIN CERTIFICATE-----
MIIGLzCCBRegAwIBAgIDASwGMA0GCSqGSIb3DQEBCwUAMEYxETAPBgNVBAMTCEE5
MERDNUJFMTEwLwYDVQQFEygwRTY1QTRGNUZEMzZCNUJENjhFQjNDOTIzNDA4OTc4
QzkwN0FBNzlGMB4XDTIxMDkzMDEzMzc0OVoXDTIyMTIwMTAwMDAwMFowRjERMA8G
A1UEAxMIQTkxNDQ1NEUxMTAvBgNVBAUTKDc0QTE5NDM5NzIyQTgzMzAwNEQzOTU0
QTU3ODRFODVFNkU5OUJDQzEwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB
AQDnWPw2aLR+FVrNg5vR/SWhR5d4rpuZU4FURH9XdiE2DzFJNRgoG5Y4idENC7Yq
7OTj5/fQK+vq2SaJpAaRBXdKK0SPKiofOl1xp+KWNyYq4S22yb/3c/rpogLGvxFl
pX++UqARuX4zEjuoJXocati5TXvPekAQk5NPtEI29YoGmqOgesaBRo59/BWIQHGS
QVF/t/ZtANnqSAt8/AqdNa7hPqAeNH6pwKMUhvc948hry5/aWvmPlriigVrCTDkU
T+DxAIqJlhu4hCvnxZbEhYqWRGFAhAML75vNc9ce/byvk5M9fBhWjQcwhzJXDGde
XjpMxIOwt9t68KCu2/HI4/S1AgMBAAGjggMkMIIDIDAdBgNVHQ4EFgQUdKGUOXIq
gzAE05VKV4ToXm6ZvMEwHwYDVR0jBBgwFoAUDmWk9f02tb1o6zySNAiXjJB6p58w
DgYDVR0PAQH/BAQDAgEGMA8GA1UdEwEB/wQFMAMBAf8wcwYDVR0fBGwwajBooGag
ZIZicnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2
NjExRTJCQjQ2OEY3QzcyRkQxRkYyL0RtV2s5ZjAydGIxbzZ6eVNOQWlYakpCNnA1
OC5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L3JlcG9zaXRvcnkvOTgwNjUyRTBCNzdFMTFFN0E5NkEzOTUyMUE0
RjRGQjQvRG1XazlmMDJ0YjFvNnp5U05BaVhqSkI2cDU4LmNlcjBKBgNVHSABAf8E
QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj
Lm5ldC9SUEtJL0NQUy5wZGYwggEoBggrBgEFBQcBCwSCARowggEWMF8GCCsGAQUF
BzAFhlNyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5
MTQ0NTRFLzJBRjlEQkIwQzRENTExRUE4MDIxQTcxOEM0RjlBRTAyLzB+BggrBgEF
BQcwCoZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9B
OTE0NDU0RS8yQUY5REJCMEM0RDUxMUVBODAyMUE3MThDNEY5QUUwMi9kS0dVT1hJ
cWd6QUUwNVZLVjRUb1htNlp2TUUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3Jy
ZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwGgYIKwYBBQUHAQgBAf8ECzAJ
oAcwBQIDAJc6MDQGCCsGAQUFBwEHAQH/BCUwIzASBAIAATAMAwQCZ2K4AwQEdlIg
MA0EAgACMAcDBQAkAUQAMA0GCSqGSIb3DQEBCwUAA4IBAQCuMOGvM/cMkcAFMIOC
cAWCDRGKnjobRSicUzStUZKBJQafxTh2p5qmW4SjwPLWQn+PJ7sVn3xujQ7LrBLU
rEZbGmNOZlZS4hlr6rWrBTyPpI41atT1upx8ddjS3km771HDzWNR/w8wW9msWkJn
J3C7iE0WxW7UN6YNP7PV4zdr+LvoJaovQPo40b1L03y9kUCQvCyHYsEFjMb/JtO/
aolODbA4O0GeGcT9xviLgMu9P3+vCide+UygUgal/YJrWWpjDULZk2T5NzrrLyNc
wzO3DdQLFtDQYRSa77FHnulr96CG/yTVWQt2wSze40O13kUI09crLd1tZNiehEgL
4nhm
-----END CERTIFICATE-----

Generated at Thu Sep 30 16:26:28 2021 by LibreSSL & rpki-client.