RPKI Certificate
Location:                 rsync/rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/iHgvgx82npb5eaJYXPJzyRbHtP0.cer (download)

Subject key identifier:   88:78:2F:83:1F:36:9E:96:F9:79:A2:58:5C:F2:73:C9:16:C7:B4:FD
Authority key identifier: 0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
Manifest:                 rpki.apnic.net/member_repository/A91B65E6/87D1ED067A8711EB908EBD63C4F9AE02/iHgvgx82npb5eaJYXPJzyRbHtP0.mft
CA Repository:            rpki.apnic.net/member_repository/A91B65E6/87D1ED067A8711EB908EBD63C4F9AE02/
Notification URL:         https://rrdp.apnic.net/notification.xml
Subordinate resources:
    1: AS: 133441
    2: AS: 141994
    1: IP: 103.101.188.0/22
    2: IP: 2401:d3c0::/32

--
$ openssl x509 -text -inform DER -in rsync/rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/iHgvgx82npb5eaJYXPJzyRbHtP0.cer
Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 75755 (0x127eb)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
        Validity
            Not Before: Sep  2 13:52:53 2021 GMT
            Not After : Dec 30 00:00:00 2022 GMT
        Subject: CN=A91B65E6/serialNumber=88782F831F369E96F979A2585CF273C916C7B4FD
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:58:45:3c:59:ff:f7:cd:2c:7a:9a:ae:d2:37:
                    17:3c:e9:b7:db:47:2d:90:26:24:70:56:67:88:79:
                    36:76:c8:04:c0:5d:63:95:48:3d:b1:24:4c:00:0c:
                    23:86:d9:3d:19:af:0f:55:e7:d6:64:2d:e4:53:7b:
                    fa:df:d6:b0:28:53:13:53:aa:b8:42:16:79:38:ec:
                    87:0f:44:19:fc:0c:74:a8:7e:6a:3b:4a:51:cc:86:
                    c7:5b:cd:4b:11:7f:9c:3c:e9:d1:70:7b:70:f0:0f:
                    99:96:00:18:07:13:2b:aa:0b:b2:ba:b6:52:e5:ca:
                    44:4c:e9:6d:38:fa:ac:6f:e3:86:bf:fb:aa:33:17:
                    f6:eb:81:c5:c8:dc:81:c5:4c:56:47:af:9a:da:22:
                    35:5a:81:3c:56:97:98:46:6a:94:ed:00:3c:8d:7b:
                    41:be:b3:39:be:cc:c5:9d:58:38:36:47:7e:f8:47:
                    12:42:bc:bc:7e:66:0e:06:4d:e3:f1:ec:90:bc:f8:
                    fc:3b:9b:3f:b6:a7:0b:e0:40:7b:25:f4:d5:6f:5e:
                    6c:ac:b3:5a:e5:8f:43:6c:85:2a:af:f7:5a:09:61:
                    10:47:dd:39:e6:d5:d1:b0:37:05:7a:b9:67:a6:8b:
                    11:ea:43:d1:4b:7d:21:f3:bd:da:ca:34:0b:7e:85:
                    49:11
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier: 
                88:78:2F:83:1F:36:9E:96:F9:79:A2:58:5C:F2:73:C9:16:C7:B4:FD
            X509v3 Authority Key Identifier: 
                keyid:0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points: 

                Full Name:
                  URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl

            Authority Information Access: 
                CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access: 
                CA Repository - URI:rsync://rpki.apnic.net/member_repository/A91B65E6/87D1ED067A8711EB908EBD63C4F9AE02/
                RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A91B65E6/87D1ED067A8711EB908EBD63C4F9AE02/iHgvgx82npb5eaJYXPJzyRbHtP0.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  133441
                  141994

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.101.188.0/22
                IPv6:
                  2401:d3c0::/32

    Signature Algorithm: sha256WithRSAEncryption
         ba:b5:98:2c:40:98:83:3a:d8:f3:a7:71:79:e7:82:53:43:8e:
         ab:c2:72:48:01:80:eb:a6:4c:02:40:6c:d3:50:ed:ac:9c:3f:
         3c:8f:0b:cd:cf:2b:3f:08:21:c8:56:25:06:77:f3:0d:af:bd:
         6d:4d:e8:7f:a7:b4:3f:67:11:cf:15:b6:a8:ab:06:8f:f0:26:
         74:10:fc:94:61:29:3b:99:d6:2b:a8:fe:75:a6:04:89:77:5f:
         6d:66:de:5d:df:bb:42:3a:df:3e:18:ba:3e:19:fb:71:55:c2:
         79:83:8d:2f:3f:b9:43:92:84:0b:11:1a:51:73:ad:79:03:78:
         91:e8:a0:3b:a4:6e:63:d1:45:77:c3:23:94:d1:5b:1f:44:4d:
         c0:80:e7:d9:c8:c5:9a:1a:75:27:e5:34:ff:fd:2d:5a:d1:f6:
         33:09:89:96:4a:c1:e6:63:64:dc:31:d4:1e:3a:bc:93:6b:cf:
         5a:3f:78:81:1e:82:db:79:fc:d8:b3:7b:d8:15:87:ee:97:94:
         a1:88:00:2c:4d:14:b3:0a:2f:4e:78:47:60:98:73:7a:19:24:
         58:28:17:00:80:9b:c0:ef:83:fd:3d:07:d3:31:1b:8a:cb:9c:
         d4:53:df:8e:c7:36:01:b7:23:23:2a:56:e4:aa:23:8c:11:49:
         36:a9:03:67
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Generated at Sun Sep 26 12:53:28 2021 by LibreSSL & rpki-client.