RPKI Certificate
Location:                 ./rsync/rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JhmcX2GJ4C7FFoU5GeFbpgHXyF8.cer (download)

Subject key identifier:   26:19:9C:5F:61:89:E0:2E:C5:16:85:39:19:E1:5B:A6:01:D7:C8:5F
Authority key identifier: 0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
Manifest:                 rpki.apnic.net/member_repository/A91275FB/FDDB88DCC21011E7920A955DC4F9AE02/JhmcX2GJ4C7FFoU5GeFbpgHXyF8.mft
CA Repository:            rpki.apnic.net/member_repository/A91275FB/FDDB88DCC21011E7920A955DC4F9AE02/
Notification URL:         https://rrdp.apnic.net/notification.xml
Subject Public Key Info:  
Subordinate resources:
    until: 2023-01-31T00:00:00Z
    Resources:
    1: AS: 135636
    1: IP: 103.77.76.0/22
    2: IP: 2407:8f80::/32

--
$ openssl x509 -text -inform DER -in ./rsync/rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JhmcX2GJ4C7FFoU5GeFbpgHXyF8.cer
Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 79599 (0x136ef)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
        Validity
            Not Before: Nov 26 12:55:23 2021 GMT
            Not After : Jan 31 00:00:00 2023 GMT
        Subject: CN=A91275FB/serialNumber=26199C5F6189E02EC516853919E15BA601D7C85F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:6b:4a:22:6b:b8:d0:39:96:ac:52:33:89:8e:
                    5c:d4:de:64:e7:99:61:ef:2a:22:2c:a6:1f:8d:81:
                    df:f6:19:a0:74:6e:0f:7d:f4:e9:27:90:71:9b:41:
                    59:f9:1f:ba:b3:6c:d1:2b:93:f1:56:11:e3:12:75:
                    ea:55:3f:fb:d6:cf:6d:34:52:a3:94:d2:b7:21:83:
                    3a:eb:5e:70:52:7b:1f:24:7c:c1:cc:cf:01:13:ea:
                    80:2d:01:3b:7b:c3:d9:0a:77:a4:3d:46:e1:90:34:
                    5b:15:45:d0:61:53:e3:00:09:fa:e9:36:04:3c:1e:
                    3e:b8:30:a2:cc:a5:2c:2c:b9:19:3d:4a:33:ef:b9:
                    4c:0f:f9:f9:f1:6c:12:38:c7:7e:67:94:b9:6e:e6:
                    46:2a:1a:2b:64:9c:b7:30:fb:a5:b8:a6:89:67:4a:
                    74:05:19:bd:3d:96:d7:83:c7:84:f3:08:19:1a:71:
                    35:23:d4:21:15:8b:a6:c6:9e:c4:d6:a5:74:0a:28:
                    95:3b:ba:4b:e6:5e:8c:ae:f7:20:07:c1:13:b4:4b:
                    44:ea:56:e4:f3:8b:e8:2e:e9:c2:ce:0c:d2:87:2e:
                    cb:3c:d3:b3:a6:79:19:59:4e:28:b8:43:b5:b0:dc:
                    f9:e0:b9:21:f2:c0:50:65:75:ab:3e:8e:8a:21:24:
                    b1:df
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier: 
                26:19:9C:5F:61:89:E0:2E:C5:16:85:39:19:E1:5B:A6:01:D7:C8:5F
            X509v3 Authority Key Identifier: 
                keyid:0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points: 

                Full Name:
                  URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl

            Authority Information Access: 
                CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access: 
                CA Repository - URI:rsync://rpki.apnic.net/member_repository/A91275FB/FDDB88DCC21011E7920A955DC4F9AE02/
                RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A91275FB/FDDB88DCC21011E7920A955DC4F9AE02/JhmcX2GJ4C7FFoU5GeFbpgHXyF8.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  135636

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.77.76.0/22
                IPv6:
                  2407:8f80::/32

    Signature Algorithm: sha256WithRSAEncryption
         4c:d2:68:4a:72:fb:20:fc:14:89:de:32:4f:73:d1:66:f3:ab:
         5f:7d:0f:98:08:8d:44:15:b6:fa:6e:d8:2a:85:b0:34:5a:f3:
         1c:bc:0c:22:8f:78:78:3b:53:97:21:05:2c:56:59:92:9b:04:
         39:ca:ec:4b:64:da:c5:7c:4e:25:44:15:fb:9d:db:5e:0e:d0:
         23:fc:ec:49:3b:63:44:04:1b:b7:a2:5c:6a:5b:f6:1b:6d:9e:
         9d:d2:14:16:17:4c:c5:e8:11:f1:a5:88:20:3c:52:45:e5:d9:
         68:ee:2f:e3:a6:8a:c1:61:34:3f:38:8d:0b:6d:d6:10:0a:51:
         1d:c9:6c:c7:e2:94:16:eb:df:ea:fb:9e:d2:0a:af:ed:2d:59:
         6e:50:50:e4:7f:3c:a3:c6:59:bd:58:4f:fe:82:e9:7d:90:6e:
         de:29:c0:8b:44:a2:41:d1:86:ef:21:65:18:06:41:85:ac:59:
         18:07:de:5f:99:32:3f:0d:a4:bc:77:a6:e0:58:8b:98:5c:f1:
         07:1e:26:3e:a6:1e:fb:40:97:d9:c9:c5:86:1d:05:2e:7f:ba:
         96:83:42:f5:47:0e:ab:16:4f:5f:4b:66:9e:df:b6:bf:c5:55:
         eb:86:f3:32:3d:1a:28:f4:d9:3d:d4:1d:6c:9c:86:f0:61:65:
         7a:34:91:c5
-----BEGIN CERTIFICATE-----
MIIGKTCCBRGgAwIBAgIDATbvMA0GCSqGSIb3DQEBCwUAMEYxETAPBgNVBAMTCEE5
MERDNUJFMTEwLwYDVQQFEygwRTY1QTRGNUZEMzZCNUJENjhFQjNDOTIzNDA4OTc4
QzkwN0FBNzlGMB4XDTIxMTEyNjEyNTUyM1oXDTIzMDEzMTAwMDAwMFowRjERMA8G
A1UEAxMIQTkxMjc1RkIxMTAvBgNVBAUTKDI2MTk5QzVGNjE4OUUwMkVDNTE2ODUz
OTE5RTE1QkE2MDFEN0M4NUYwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB
AQC6a0oia7jQOZasUjOJjlzU3mTnmWHvKiIsph+Ngd/2GaB0bg999OknkHGbQVn5
H7qzbNErk/FWEeMSdepVP/vWz200UqOU0rchgzrrXnBSex8kfMHMzwET6oAtATt7
w9kKd6Q9RuGQNFsVRdBhU+MACfrpNgQ8Hj64MKLMpSwsuRk9SjPvuUwP+fnxbBI4
x35nlLlu5kYqGitknLcw+6W4polnSnQFGb09lteDx4TzCBkacTUj1CEVi6bGnsTW
pXQKKJU7ukvmXoyu9yAHwRO0S0TqVuTzi+gu6cLODNKHLss807OmeRlZTii4Q7Ww
3PnguSHywFBldas+joohJLHfAgMBAAGjggMeMIIDGjAdBgNVHQ4EFgQUJhmcX2GJ
4C7FFoU5GeFbpgHXyF8wHwYDVR0jBBgwFoAUDmWk9f02tb1o6zySNAiXjJB6p58w
DgYDVR0PAQH/BAQDAgEGMA8GA1UdEwEB/wQFMAMBAf8wcwYDVR0fBGwwajBooGag
ZIZicnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2
NjExRTJCQjQ2OEY3QzcyRkQxRkYyL0RtV2s5ZjAydGIxbzZ6eVNOQWlYakpCNnA1
OC5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L3JlcG9zaXRvcnkvOTgwNjUyRTBCNzdFMTFFN0E5NkEzOTUyMUE0
RjRGQjQvRG1XazlmMDJ0YjFvNnp5U05BaVhqSkI2cDU4LmNlcjBKBgNVHSABAf8E
QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj
Lm5ldC9SUEtJL0NQUy5wZGYwggEoBggrBgEFBQcBCwSCARowggEWMF8GCCsGAQUF
BzAFhlNyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5
MTI3NUZCL0ZEREI4OERDQzIxMDExRTc5MjBBOTU1REM0RjlBRTAyLzB+BggrBgEF
BQcwCoZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9B
OTEyNzVGQi9GRERCODhEQ0MyMTAxMUU3OTIwQTk1NURDNEY5QUUwMi9KaG1jWDJH
SjRDN0ZGb1U1R2VGYnBnSFh5RjgubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3Jy
ZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwGgYIKwYBBQUHAQgBAf8ECzAJ
oAcwBQIDAhHUMC4GCCsGAQUFBwEHAQH/BB8wHTAMBAIAATAGAwQCZ01MMA0EAgAC
MAcDBQAkB4+AMA0GCSqGSIb3DQEBCwUAA4IBAQBM0mhKcvsg/BSJ3jJPc9Fm86tf
fQ+YCI1EFbb6btgqhbA0WvMcvAwij3h4O1OXIQUsVlmSmwQ5yuxLZNrFfE4lRBX7
ndteDtAj/OxJO2NEBBu3olxqW/YbbZ6d0hQWF0zF6BHxpYggPFJF5dlo7i/jporB
YTQ/OI0LbdYQClEdyWzH4pQW69/q+57SCq/tLVluUFDkfzyjxlm9WE/+gul9kG7e
KcCLRKJB0YbvIWUYBkGFrFkYB95fmTI/DaS8d6bgWIuYXPEHHiY+ph77QJfZycWG
HQUuf7qWg0L1Rw6rFk9fS2ae37a/xVXrhvMyPRoo9Nk91B1snIbwYWV6NJHF
-----END CERTIFICATE-----