RPKI Certificate
Location:                 ./rsync/rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/Zd_y7j-bsuskVR4dGPHWPewKbhc.cer (download)

Subject key identifier:   65:DF:F2:EE:3F:9B:B2:EB:24:55:1E:1D:18:F1:D6:3D:EC:0A:6E:17
Authority key identifier: 74:01:65:A8:0D:10:71:97:0A:BC:09:C0:2B:71:C1:AC:7C:1D:6E:0E
Manifest:                 rpki.apnic.net/member_repository/A91DDCB6/E883DFD6CC3D11EA8BC45C29C4F9AE02/Zd_y7j-bsuskVR4dGPHWPewKbhc.mft
CA Repository:            rpki.apnic.net/member_repository/A91DDCB6/E883DFD6CC3D11EA8BC45C29C4F9AE02/
Notification URL:         https://rrdp.apnic.net/notification.xml
Subject Public Key Info:  
Subordinate resources:
    until: 2022-12-30T00:00:00Z
    Resources:
    1: IP: 146.88.24.0/22
    2: IP: 164.52.192.0/19
    3: IP: 205.147.96.0/21
    4: IP: 205.147.108.0/22
    5: IP: 216.48.176.0/20

--
$ openssl x509 -text -inform DER -in ./rsync/rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/Zd_y7j-bsuskVR4dGPHWPewKbhc.cer
Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 15746 (0x3d82)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A90DC5BE/serialNumber=740165A80D1071970ABC09C02B71C1AC7C1D6E0E
        Validity
            Not Before: Oct 12 05:59:26 2021 GMT
            Not After : Dec 30 00:00:00 2022 GMT
        Subject: CN=A91DDCB6/serialNumber=65DFF2EE3F9BB2EB24551E1D18F1D63DEC0A6E17
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:26:ee:18:05:09:02:51:be:f7:6a:c3:7c:d7:
                    2f:c9:36:a6:30:03:a8:34:7d:2f:a6:d6:db:13:43:
                    e0:c6:53:0a:7a:26:4a:f0:b0:28:74:71:67:3f:5f:
                    6b:a0:19:1b:0e:ba:97:09:35:d8:fb:18:70:fd:f6:
                    72:9c:99:19:2a:fc:8e:f5:b9:2a:d3:db:26:26:b9:
                    89:48:e7:5c:dd:6c:76:07:ea:70:09:72:5e:5f:15:
                    fc:d8:b9:81:e0:c2:2e:04:f2:20:09:21:d9:d2:82:
                    98:7e:ec:96:69:df:71:fb:66:8e:63:a0:2a:38:e2:
                    76:9a:7b:8e:81:65:67:d2:e0:a5:5b:cf:30:69:82:
                    89:85:c0:9e:e8:d9:85:55:7a:08:41:ff:e2:fe:86:
                    5b:36:a5:3e:41:75:3c:d9:47:4e:ad:b7:b3:f5:26:
                    4a:f8:27:f6:13:e6:71:46:9c:02:f3:90:26:ba:40:
                    c3:97:90:4f:28:2e:f1:fc:65:95:ef:2c:79:c6:2e:
                    93:aa:c6:d1:e5:01:41:9e:92:cc:41:c7:97:74:aa:
                    b6:b9:a7:7c:f4:f8:d2:bf:7f:b7:4a:2f:d5:f0:db:
                    9a:6b:f6:0a:e4:a4:e9:63:7a:0e:b5:9a:24:60:7b:
                    07:ec:b6:61:c3:86:3c:ae:85:11:16:27:f6:ec:df:
                    85:55
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier: 
                65:DF:F2:EE:3F:9B:B2:EB:24:55:1E:1D:18:F1:D6:3D:EC:0A:6E:17
            X509v3 Authority Key Identifier: 
                keyid:74:01:65:A8:0D:10:71:97:0A:BC:09:C0:2B:71:C1:AC:7C:1D:6E:0E

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points: 

                Full Name:
                  URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl

            Authority Information Access: 
                CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access: 
                CA Repository - URI:rsync://rpki.apnic.net/member_repository/A91DDCB6/E883DFD6CC3D11EA8BC45C29C4F9AE02/
                RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A91DDCB6/E883DFD6CC3D11EA8BC45C29C4F9AE02/Zd_y7j-bsuskVR4dGPHWPewKbhc.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  146.88.24.0/22
                  164.52.192.0/19
                  205.147.96.0/21
                  205.147.108.0/22
                  216.48.176.0/20

    Signature Algorithm: sha256WithRSAEncryption
         90:32:4c:80:f6:14:fb:40:d4:5d:0b:7d:4f:c9:a1:fa:07:33:
         f5:48:aa:cb:e8:d6:dd:75:10:16:a8:b4:eb:f3:ed:c0:f1:68:
         50:25:5e:63:16:1f:c6:fc:65:63:cf:83:58:21:9d:1b:fe:12:
         77:c7:79:77:4f:04:fd:0f:fa:e4:4d:4c:24:fb:ea:c1:9a:ba:
         15:56:a4:a9:37:64:bd:45:fc:3a:73:25:f1:2d:56:9e:5c:37:
         cb:e1:c1:a1:50:c2:74:1f:98:9b:ea:9e:3a:46:72:69:79:3a:
         fa:fd:b3:23:70:29:4f:a4:f3:36:14:6f:33:bb:ff:38:df:30:
         c8:b8:74:ac:71:99:8b:c8:9d:9b:93:95:db:0c:07:74:b2:e8:
         c8:ac:4f:45:0d:1e:04:b5:50:53:4b:2a:b2:49:10:2e:ee:25:
         75:1e:48:57:c9:50:cb:89:ac:69:63:6c:e3:ad:99:96:0b:7e:
         6e:08:e5:21:68:af:df:15:23:f7:16:bf:39:f5:c7:36:16:43:
         cc:8c:61:fc:c7:40:d1:63:d0:af:05:b7:ed:73:32:18:61:f9:
         3a:4a:9c:64:24:b9:76:54:f2:95:c1:5e:50:93:08:8a:36:5d:
         84:98:16:a8:52:4c:b0:e9:61:8c:1e:3e:5f:66:a1:22:14:bf:
         6f:e6:35:bb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----