RPKI Certificate
Location:                 rsync/rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mpwxvYeWc4abPI8FWW6IFVgvEdA.cer (download)

Subject key identifier:   9A:9C:31:BD:87:96:73:86:9B:3C:8F:05:59:6E:88:15:58:2F:11:D0
Authority key identifier: 0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
Manifest:                 rpki.apnic.net/member_repository/A91856C4/A3BAD8E204FF11EA93EE9A23C4F9AE02/mpwxvYeWc4abPI8FWW6IFVgvEdA.mft
CA Repository:            rpki.apnic.net/member_repository/A91856C4/A3BAD8E204FF11EA93EE9A23C4F9AE02/
Notification URL:         https://rrdp.apnic.net/notification.xml
Subordinate resources:
    1: AS: 136813
    1: IP: 103.97.120.0/22
    2: IP: 2401:86c0::/32

--
$ openssl x509 -text -inform DER -in rsync/rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mpwxvYeWc4abPI8FWW6IFVgvEdA.cer
Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 75276 (0x1260c)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
        Validity
            Not Before: Aug 26 14:57:18 2021 GMT
            Not After : Oct 31 00:00:00 2022 GMT
        Subject: CN=A91856C4/serialNumber=9A9C31BD879673869B3C8F05596E8815582F11D0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d4:2f:b9:f8:ed:d3:46:75:5b:bd:50:cf:d2:db:
                    d9:d2:ca:ae:0b:6d:fe:e7:40:7b:7f:18:12:94:8c:
                    ad:62:7b:78:4b:2e:c6:18:40:19:04:5d:2a:27:8c:
                    a3:24:27:a6:51:e8:97:8e:c8:2e:a3:51:bf:81:66:
                    e9:42:c0:91:12:8b:b7:09:a4:58:50:0c:60:27:38:
                    73:03:9b:a9:5a:ee:5c:23:5b:8e:ad:f8:80:2e:98:
                    72:d8:6e:c0:5a:aa:24:d7:a1:08:5f:ea:a4:ab:e8:
                    8f:f1:04:a5:b3:10:3e:b5:32:92:c9:60:fa:97:22:
                    84:f2:8f:71:c2:07:13:35:52:7c:03:2b:9d:e3:c5:
                    f1:ec:a2:9f:0d:03:65:d2:02:37:1d:1d:c7:fb:4a:
                    05:25:79:85:83:29:1e:d1:22:bf:d8:fd:88:94:10:
                    d3:86:fd:e4:c3:6e:a9:84:fa:46:84:72:36:e7:4c:
                    c7:26:35:01:38:a7:da:1d:28:74:64:bc:bb:8d:5d:
                    15:1b:e8:f1:91:bf:91:a2:3f:b2:06:2d:19:b3:a3:
                    aa:f3:21:8f:07:96:5e:e4:a9:eb:bc:66:e4:58:92:
                    f5:a9:a9:16:a8:0a:7b:4b:8d:29:1a:ce:44:49:6c:
                    d1:02:73:19:d3:ac:9e:3e:c2:bf:21:3a:aa:42:ed:
                    36:b9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier: 
                9A:9C:31:BD:87:96:73:86:9B:3C:8F:05:59:6E:88:15:58:2F:11:D0
            X509v3 Authority Key Identifier: 
                keyid:0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points: 

                Full Name:
                  URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl

            Authority Information Access: 
                CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access: 
                CA Repository - URI:rsync://rpki.apnic.net/member_repository/A91856C4/A3BAD8E204FF11EA93EE9A23C4F9AE02/
                RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A91856C4/A3BAD8E204FF11EA93EE9A23C4F9AE02/mpwxvYeWc4abPI8FWW6IFVgvEdA.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  136813

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.97.120.0/22
                IPv6:
                  2401:86c0::/32

    Signature Algorithm: sha256WithRSAEncryption
         00:66:e8:39:59:f7:bb:ba:b9:fa:84:87:3d:e6:88:53:18:85:
         d9:5f:2c:94:40:bb:1f:4e:23:ef:35:3d:5c:e4:79:84:b2:fa:
         0d:39:38:ce:55:1d:1d:14:75:76:4b:95:e4:4d:1a:47:6d:07:
         56:5e:47:69:f8:a7:e0:60:b2:45:b3:a2:32:3b:90:56:c1:83:
         09:99:e1:9e:aa:71:9d:f7:e1:f7:08:34:5a:5c:e4:53:25:2e:
         61:0a:71:f4:2c:ee:0e:b0:f2:5b:79:52:00:98:ae:c0:ff:c1:
         bd:b8:83:17:dc:59:e6:5b:61:34:58:c9:8c:37:a2:1c:71:0b:
         c4:7c:e0:1d:6e:55:42:7c:c9:0c:b4:2c:55:4c:63:44:70:3e:
         6d:76:cc:c3:80:5a:03:95:8a:4a:eb:40:ab:99:24:55:4b:d0:
         9a:52:28:83:a2:cf:c2:5d:20:05:f2:07:35:e9:d9:56:9c:f9:
         c4:51:9a:a5:88:6c:f8:d4:a2:cb:35:65:66:46:1c:88:08:ae:
         00:54:b7:0a:5b:b9:65:1f:ce:0b:bc:8c:37:92:af:d0:68:96:
         19:f0:ba:b9:92:2d:a7:69:eb:01:c6:02:5d:72:66:6b:3e:5c:
         ff:a7:23:4e:77:5b:86:5a:71:fa:80:90:14:09:3b:3e:3c:6d:
         5d:c7:73:44
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Generated at Sun Sep 26 12:53:47 2021 by LibreSSL & rpki-client.