RPKI Certificate
Location:                 rsync/rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CLWPcrenoMWV2BJgXJ7jLFjhFDM.cer (download)

Subject key identifier:   08:B5:8F:72:B7:A7:A0:C5:95:D8:12:60:5C:9E:E3:2C:58:E1:14:33
Authority key identifier: 0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
Manifest:                 rpki.apnic.net/member_repository/A91FE88C/E856676A1D9811E2A727598308B02CD2/CLWPcrenoMWV2BJgXJ7jLFjhFDM.mft
CA Repository:            rpki.apnic.net/member_repository/A91FE88C/E856676A1D9811E2A727598308B02CD2/
Notification URL:         https://rrdp.apnic.net/notification.xml
Subordinate resources:
    1: AS: 45247
    1: IP: 202.45.148.0/24

--
$ openssl x509 -text -inform DER -in rsync/rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CLWPcrenoMWV2BJgXJ7jLFjhFDM.cer
Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 57472 (0xe080)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
        Validity
            Not Before: Jul  8 02:52:55 2020 GMT
            Not After : Sep 30 00:00:00 2021 GMT
        Subject: CN=A91FE88C/serialNumber=08B58F72B7A7A0C595D812605C9EE32C58E11433
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:fa:1b:ca:63:29:28:1d:5d:a6:ee:f4:13:82:dc:
                    1b:d2:b9:0e:a7:68:d3:3f:80:c1:15:50:c5:8f:64:
                    68:f1:33:88:ce:ff:0a:f8:98:0f:15:ec:e7:2d:85:
                    64:36:b3:a3:17:70:00:37:21:75:9b:de:0a:f8:b6:
                    cd:1c:68:1b:33:de:fe:98:ce:19:1e:e6:a0:05:e7:
                    62:59:44:40:18:d6:bf:3b:67:09:18:11:c0:b9:be:
                    e8:6d:6f:66:0c:c0:32:d3:8f:b0:7d:63:08:02:ea:
                    77:7d:71:ba:7e:fe:6b:37:e7:95:1d:ae:6f:f0:6b:
                    a3:ee:6d:08:b5:cd:ce:ec:24:75:e5:a3:dd:8a:d3:
                    6b:ed:96:0e:86:8f:da:1f:1d:d8:0e:10:a4:56:57:
                    06:e6:67:94:12:51:36:7d:78:40:59:68:77:f6:32:
                    59:1c:5c:22:fa:6e:55:ce:c8:d5:96:f1:13:8e:11:
                    4e:ce:e6:78:63:99:df:91:cb:d7:7d:08:ec:2f:53:
                    7b:d8:5d:9e:c2:aa:1a:c2:e1:2a:45:7c:b8:e1:4b:
                    a7:f8:36:13:b0:22:f3:b9:f8:da:d9:ab:f4:3b:5d:
                    9c:83:5e:4a:d8:87:a2:c5:cf:84:2c:7d:c3:b7:bd:
                    50:97:c9:ed:ea:51:3f:54:61:ea:25:41:c6:9d:b1:
                    ce:63
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier: 
                08:B5:8F:72:B7:A7:A0:C5:95:D8:12:60:5C:9E:E3:2C:58:E1:14:33
            X509v3 Authority Key Identifier: 
                keyid:0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points: 

                Full Name:
                  URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl

            Authority Information Access: 
                CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access: 
                CA Repository - URI:rsync://rpki.apnic.net/member_repository/A91FE88C/E856676A1D9811E2A727598308B02CD2/
                RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A91FE88C/E856676A1D9811E2A727598308B02CD2/CLWPcrenoMWV2BJgXJ7jLFjhFDM.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                0...0......
            sbgp-ipAddrBlock: critical
                0.0.....0.....-.
    Signature Algorithm: sha256WithRSAEncryption
         03:12:ea:d9:88:0c:52:17:f3:87:62:d3:52:4a:05:1c:55:32:
         e4:83:fd:d7:32:dd:09:87:b7:12:ba:40:5b:af:96:e8:9f:20:
         4f:f1:91:5e:cb:b4:cc:db:9d:5f:a5:2e:cb:b5:e9:9f:fa:be:
         f7:07:19:c7:1d:03:81:61:c5:f4:c4:07:d3:13:4c:0e:f5:3d:
         60:88:0e:f3:38:93:9c:7d:e0:a5:21:3d:64:74:47:95:99:dc:
         f7:88:ac:5f:0d:ed:c8:1d:3c:9c:1b:7f:ed:16:ca:61:74:c5:
         81:37:e4:1d:1d:a2:18:4c:bd:15:b2:09:62:62:c0:d5:38:78:
         b8:fb:61:24:2c:0a:a9:2b:14:1c:ef:81:79:35:77:78:17:b7:
         69:9e:09:cf:5b:95:c8:a4:fc:14:3f:f0:07:94:3a:ed:fd:90:
         cd:8d:1d:23:77:04:5f:73:19:ba:2f:b2:26:05:ec:a5:e1:83:
         a2:2f:da:96:76:a0:a0:d9:3c:38:95:d4:06:5c:10:9f:a6:af:
         a2:4b:bd:5d:37:e2:f6:54:ac:10:41:7c:c5:a8:28:09:20:72:
         35:43:c0:8f:4b:cf:be:4a:f6:dc:85:97:2b:4f:18:87:eb:33:
         04:83:47:eb:f0:b5:2b:6b:f4:f2:47:2c:29:46:06:1f:6d:52:
         2f:a1:39:25
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----