RPKI Certificate
Location:                 rsync/rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mk2vj8qF4ZPTTqSVl5lt7RfL3x4.cer (download)

Subject key identifier:   9A:4D:AF:8F:CA:85:E1:93:D3:4E:A4:95:97:99:6D:ED:17:CB:DF:1E
Authority key identifier: 0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
Manifest:                 rpki.apnic.net/member_repository/A91B6D28/61D453101D9211E29C5F3AF508B02CD2/mk2vj8qF4ZPTTqSVl5lt7RfL3x4.mft
CA Repository:            rpki.apnic.net/member_repository/A91B6D28/61D453101D9211E29C5F3AF508B02CD2/
Notification URL:         https://rrdp.apnic.net/notification.xml
Subordinate resources:
    1: AS: 38592
    1: IP: 101.2.160.0/21
    2: IP: 103.5.232.0/22
    3: IP: 119.10.168.0/21
    4: IP: 163.47.84.0/22
    5: IP: 202.65.168.0/21
    6: IP: 203.80.188.0/22
    7: IP: 2402:2300::/32

--
$ openssl x509 -text -inform DER -in rsync/rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mk2vj8qF4ZPTTqSVl5lt7RfL3x4.cer
Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 75927 (0x12897)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
        Validity
            Not Before: Sep  7 15:04:01 2021 GMT
            Not After : Oct 31 00:00:00 2022 GMT
        Subject: CN=A91B6D28/serialNumber=9A4DAF8FCA85E193D34EA49597996DED17CBDF1E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:af:ae:05:a0:66:86:5f:61:44:28:5c:3b:2d:
                    08:68:11:4b:0f:aa:52:65:72:66:7d:ff:4e:7d:b9:
                    99:ec:48:ce:3b:7f:4a:e4:9a:4a:8f:79:cf:72:d0:
                    58:ff:ef:f5:2d:bf:5a:d3:85:81:ff:eb:90:6a:7b:
                    1c:03:d8:9d:cd:a1:f2:53:a4:81:78:05:86:18:4e:
                    69:29:4d:cb:f2:e5:be:ce:6d:3e:a7:07:c5:c8:fb:
                    69:78:42:2f:06:5c:bf:4e:41:42:67:1f:8d:fe:2d:
                    33:a2:3d:47:0d:cf:33:b0:8c:e3:cc:92:af:0d:9b:
                    00:c5:cc:f1:c8:ab:6a:ab:3e:57:f2:a7:85:94:fb:
                    cd:12:5e:a4:64:17:2a:1b:a8:b9:fe:e1:b4:fe:04:
                    16:98:10:da:3a:60:cf:fa:b1:5b:e7:dd:68:59:d1:
                    c4:86:97:f9:8b:98:1a:26:eb:da:68:d2:fd:9b:20:
                    88:64:91:28:ac:4d:00:d3:26:d7:35:da:b5:e7:e2:
                    aa:c6:c3:68:79:da:64:f3:9b:c8:01:39:43:06:e2:
                    d5:ed:c9:8e:f4:65:1a:5d:dd:40:c7:2e:3d:56:7c:
                    64:ca:b9:d9:2f:31:39:c9:51:e2:71:43:58:da:a9:
                    7c:13:bd:57:79:60:b4:69:db:5d:d7:7c:e3:f6:c2:
                    e8:ad
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier: 
                9A:4D:AF:8F:CA:85:E1:93:D3:4E:A4:95:97:99:6D:ED:17:CB:DF:1E
            X509v3 Authority Key Identifier: 
                keyid:0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points: 

                Full Name:
                  URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl

            Authority Information Access: 
                CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access: 
                CA Repository - URI:rsync://rpki.apnic.net/member_repository/A91B6D28/61D453101D9211E29C5F3AF508B02CD2/
                RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A91B6D28/61D453101D9211E29C5F3AF508B02CD2/mk2vj8qF4ZPTTqSVl5lt7RfL3x4.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  38592

            sbgp-ipAddrBlock: critical
                IPv4:
                  101.2.160.0/21
                  103.5.232.0/22
                  119.10.168.0/21
                  163.47.84.0/22
                  202.65.168.0/21
                  203.80.188.0/22
                IPv6:
                  2402:2300::/32

    Signature Algorithm: sha256WithRSAEncryption
         a9:b0:b3:14:aa:82:11:00:42:97:13:0e:58:f2:8d:03:3e:16:
         36:f6:b3:01:ff:0a:59:c8:1d:dc:b8:08:84:de:d6:0c:4a:39:
         69:2f:ba:a4:72:a5:fc:b9:e9:e2:c8:e8:bc:41:89:af:81:a6:
         71:bb:7e:87:f3:63:08:cb:21:78:74:63:47:dc:b9:13:a8:6c:
         ec:d4:52:28:37:85:54:24:17:5f:2f:96:5e:79:40:b9:7f:06:
         a1:c7:ea:b9:0d:9b:09:fd:ee:bc:f1:f4:e4:74:60:66:5f:1c:
         81:0c:35:7e:a0:a1:7c:68:61:f4:6d:00:65:56:df:76:17:14:
         17:4d:46:da:f5:db:ac:c1:c6:fb:d4:1d:9c:59:8a:95:1d:89:
         cb:3f:e5:bd:f1:2d:0e:24:5b:49:55:d0:24:5f:9b:f1:51:8c:
         cb:fd:e1:c2:65:97:97:0e:29:be:b6:b9:46:6b:39:e5:55:7a:
         af:ee:6b:b7:e6:1c:bd:ce:5a:93:b8:c7:37:15:87:40:f5:37:
         9d:c2:b0:23:eb:5f:d7:01:20:2b:50:c3:72:70:9d:a5:cc:90:
         99:a6:27:9a:a7:af:a4:2f:b7:2a:cb:b4:a5:38:16:a8:0a:80:
         46:ca:dc:84:33:a7:07:6c:ec:01:5c:eb:e1:fd:ee:aa:1b:ca:
         3a:d3:3b:1d
-----BEGIN CERTIFICATE-----
MIIGRzCCBS+gAwIBAgIDASiXMA0GCSqGSIb3DQEBCwUAMEYxETAPBgNVBAMTCEE5
MERDNUJFMTEwLwYDVQQFEygwRTY1QTRGNUZEMzZCNUJENjhFQjNDOTIzNDA4OTc4
QzkwN0FBNzlGMB4XDTIxMDkwNzE1MDQwMVoXDTIyMTAzMTAwMDAwMFowRjERMA8G
A1UEAxMIQTkxQjZEMjgxMTAvBgNVBAUTKDlBNERBRjhGQ0E4NUUxOTNEMzRFQTQ5
NTk3OTk2REVEMTdDQkRGMUUwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB
AQDFr64FoGaGX2FEKFw7LQhoEUsPqlJlcmZ9/059uZnsSM47f0rkmkqPec9y0Fj/
7/Utv1rThYH/65BqexwD2J3NofJTpIF4BYYYTmkpTcvy5b7ObT6nB8XI+2l4Qi8G
XL9OQUJnH43+LTOiPUcNzzOwjOPMkq8NmwDFzPHIq2qrPlfyp4WU+80SXqRkFyob
qLn+4bT+BBaYENo6YM/6sVvn3WhZ0cSGl/mLmBom69po0v2bIIhkkSisTQDTJtc1
2rXn4qrGw2h52mTzm8gBOUMG4tXtyY70ZRpd3UDHLj1WfGTKudkvMTnJUeJxQ1ja
qXwTvVd5YLRp213XfOP2wuitAgMBAAGjggM8MIIDODAdBgNVHQ4EFgQUmk2vj8qF
4ZPTTqSVl5lt7RfL3x4wHwYDVR0jBBgwFoAUDmWk9f02tb1o6zySNAiXjJB6p58w
DgYDVR0PAQH/BAQDAgEGMA8GA1UdEwEB/wQFMAMBAf8wcwYDVR0fBGwwajBooGag
ZIZicnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2
NjExRTJCQjQ2OEY3QzcyRkQxRkYyL0RtV2s5ZjAydGIxbzZ6eVNOQWlYakpCNnA1
OC5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L3JlcG9zaXRvcnkvOTgwNjUyRTBCNzdFMTFFN0E5NkEzOTUyMUE0
RjRGQjQvRG1XazlmMDJ0YjFvNnp5U05BaVhqSkI2cDU4LmNlcjBKBgNVHSABAf8E
QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj
Lm5ldC9SUEtJL0NQUy5wZGYwggEoBggrBgEFBQcBCwSCARowggEWMF8GCCsGAQUF
BzAFhlNyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5
MUI2RDI4LzYxRDQ1MzEwMUQ5MjExRTI5QzVGM0FGNTA4QjAyQ0QyLzB+BggrBgEF
BQcwCoZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9B
OTFCNkQyOC82MUQ0NTMxMDFEOTIxMUUyOUM1RjNBRjUwOEIwMkNEMi9tazJ2ajhx
RjRaUFRUcVNWbDVsdDdSZkwzeDQubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3Jy
ZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwGgYIKwYBBQUHAQgBAf8ECzAJ
oAcwBQIDAJbAMEwGCCsGAQUFBwEHAQH/BD0wOzAqBAIAATAkAwQDZQKgAwQCZwXo
AwQDdwqoAwQCoy9UAwQDykGoAwQCy1C8MA0EAgACMAcDBQAkAiMAMA0GCSqGSIb3
DQEBCwUAA4IBAQCpsLMUqoIRAEKXEw5Y8o0DPhY29rMB/wpZyB3cuAiE3tYMSjlp
L7qkcqX8ueniyOi8QYmvgaZxu36H82MIyyF4dGNH3LkTqGzs1FIoN4VUJBdfL5Ze
eUC5fwahx+q5DZsJ/e688fTkdGBmXxyBDDV+oKF8aGH0bQBlVt92FxQXTUba9dus
wcb71B2cWYqVHYnLP+W98S0OJFtJVdAkX5vxUYzL/eHCZZeXDim+trlGaznlVXqv
7mu35hy9zlqTuMc3FYdA9TedwrAj61/XASArUMNycJ2lzJCZpieap6+kL7cqy7Sl
OBaoCoBGytyEM6cHbOwBXOvh/e6qG8o60zsd
-----END CERTIFICATE-----

Generated at Sun Sep 26 12:53:47 2021 by LibreSSL & rpki-client.