RPKI Certificate
Location:                 ./rsync/rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Jkz8AvZxrKkvQFgusYzbbPlkT_U.cer (download)

Subject key identifier:   26:4C:FC:02:F6:71:AC:A9:2F:40:58:2E:B1:8C:DB:6C:F9:64:4F:F5
Authority key identifier: 0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
Manifest:                 rpki.apnic.net/member_repository/A914FD85/A8D4AFECD0E111EB95A1FF55C4F9AE02/Jkz8AvZxrKkvQFgusYzbbPlkT_U.mft
CA Repository:            rpki.apnic.net/member_repository/A914FD85/A8D4AFECD0E111EB95A1FF55C4F9AE02/
Notification URL:         https://rrdp.apnic.net/notification.xml
Subject Public Key Info:  
Subordinate resources:
    until: 2023-03-02T00:00:00Z
    Resources:
    1: IP: 203.56.44.0/24
    2: IP: 2001:df1:6500::/48

--
$ openssl x509 -text -inform DER -in ./rsync/rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Jkz8AvZxrKkvQFgusYzbbPlkT_U.cer
Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 79968 (0x13860)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
        Validity
            Not Before: Dec  2 02:46:54 2021 GMT
            Not After : Mar  2 00:00:00 2023 GMT
        Subject: CN=A914FD85/serialNumber=264CFC02F671ACA92F40582EB18CDB6CF9644FF5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:e5:cd:03:0a:8f:9c:15:7f:8e:1b:5d:73:ab:
                    3b:ec:ba:36:f5:ce:d2:b8:d0:62:38:cf:ce:7c:d7:
                    e7:78:52:2a:96:45:5f:c4:79:4a:ae:d0:b9:eb:5b:
                    6c:b1:ef:71:55:93:c3:dc:4f:b9:c6:3b:ea:be:a8:
                    b3:c6:40:93:80:fa:80:d6:3d:90:03:b7:25:2d:db:
                    d1:4d:a9:66:b7:1c:37:9c:28:43:b8:b6:29:02:ac:
                    46:b5:eb:88:69:38:a9:0c:f7:f7:d3:04:fc:17:17:
                    19:6d:cc:d7:16:5e:d4:b4:01:a6:f2:f1:5c:89:2e:
                    b1:ed:92:4b:b1:7e:63:7d:6e:1b:8a:39:b2:df:5e:
                    b7:4d:fb:0e:51:31:d6:d0:dc:a6:28:de:4d:ab:fc:
                    b4:2a:a2:98:00:d0:bf:d9:9e:4c:bc:32:2b:10:03:
                    c8:47:50:5b:87:ab:b0:9c:13:96:da:4a:e1:18:e4:
                    92:81:5d:7e:c2:91:34:fa:8c:ac:97:1b:04:06:f6:
                    f9:3f:73:54:2d:58:58:67:c3:8d:94:d3:02:51:f8:
                    a1:8e:bc:9c:fb:ae:2d:12:4d:91:02:3b:fc:b9:ad:
                    d4:3a:cf:36:7a:5d:e4:df:05:89:00:c9:e7:59:7e:
                    30:4e:b3:59:46:ff:1d:e1:e5:1a:61:cd:4e:cb:52:
                    a5:ff
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier: 
                26:4C:FC:02:F6:71:AC:A9:2F:40:58:2E:B1:8C:DB:6C:F9:64:4F:F5
            X509v3 Authority Key Identifier: 
                keyid:0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points: 

                Full Name:
                  URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl

            Authority Information Access: 
                CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access: 
                CA Repository - URI:rsync://rpki.apnic.net/member_repository/A914FD85/A8D4AFECD0E111EB95A1FF55C4F9AE02/
                RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A914FD85/A8D4AFECD0E111EB95A1FF55C4F9AE02/Jkz8AvZxrKkvQFgusYzbbPlkT_U.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  203.56.44.0/24
                IPv6:
                  2001:df1:6500::/48

    Signature Algorithm: sha256WithRSAEncryption
         73:10:2a:64:da:78:0c:56:94:6d:23:c5:fb:ae:a5:f0:db:49:
         b4:c4:d8:70:56:6c:94:65:c9:6f:09:a7:bb:cb:d9:93:e7:7a:
         cf:e6:7c:fe:61:c5:aa:16:35:98:f3:b1:48:28:7b:33:34:90:
         2e:6e:3c:de:39:1e:89:9e:8f:5e:e0:69:d8:7e:f5:19:58:4d:
         9d:83:9f:ac:05:85:42:4d:7e:6b:9a:18:04:04:3e:c2:4a:3d:
         20:3d:64:73:43:31:bf:0e:f5:11:7a:79:19:62:4e:3f:09:ca:
         48:35:d5:69:ad:bd:47:db:16:b3:d3:34:9c:8c:e4:13:af:49:
         97:88:0e:b1:02:3b:a1:92:c1:50:45:fe:5d:3e:57:cc:68:d8:
         cf:2a:2a:59:40:7c:8c:6c:26:c1:0a:e5:2a:3c:7f:04:89:e2:
         5d:87:7b:b1:c2:77:35:02:5e:82:39:ce:34:c7:33:6f:44:90:
         59:ec:8b:d0:4d:a1:31:e7:56:ee:98:9f:74:0b:fb:73:dd:52:
         61:d8:41:61:ef:73:fe:85:c1:c8:eb:4a:e4:47:3a:34:d9:b3:
         9b:b5:fd:a1:06:10:90:15:d6:3f:78:14:fa:58:cb:26:37:e1:
         c8:b6:45:9c:89:58:47:fe:fb:56:80:08:e1:aa:28:1a:3b:80:
         86:a0:a6:dc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----