RPKI Certificate
Location:                 rsync/rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MdYOrDBSk0zbscaXU1FtBwgwNO0.cer (download)

Subject key identifier:   31:D6:0E:AC:30:52:93:4C:DB:B1:C6:97:53:51:6D:07:08:30:34:ED
Authority key identifier: 0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
Manifest:                 rpki.apnic.net/member_repository/A91F3B43/75A9C2CE389611E887DE212AC4F9AE02/MdYOrDBSk0zbscaXU1FtBwgwNO0.mft
CA Repository:            rpki.apnic.net/member_repository/A91F3B43/75A9C2CE389611E887DE212AC4F9AE02/
Notification URL:         https://rrdp.apnic.net/notification.xml
Subordinate resources:
    1: AS: 132714
    1: IP: 103.112.200.0/22
    2: IP: 2402:b140::/32

--
$ openssl x509 -text -inform DER -in rsync/rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MdYOrDBSk0zbscaXU1FtBwgwNO0.cer
Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 69798 (0x110a6)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
        Validity
            Not Before: May  4 05:53:14 2021 GMT
            Not After : Jul  1 00:00:00 2022 GMT
        Subject: CN=A91F3B43/serialNumber=31D60EAC3052934CDBB1C69753516D07083034ED
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:66:9d:38:74:e8:dc:7a:7e:bf:26:04:9a:e8:
                    2d:a4:fb:e8:c3:06:92:cf:77:15:86:7b:86:9e:e7:
                    fb:0b:e8:e7:07:0c:7d:d2:db:a5:bd:64:12:af:ca:
                    ef:f0:8a:ad:b9:7b:dd:48:92:1e:4c:e0:29:2a:22:
                    4a:5d:b2:23:16:21:4a:9d:b4:10:1d:33:4a:52:98:
                    d0:c2:7e:71:f3:e8:00:8e:d3:fe:b2:3d:2d:05:5c:
                    05:5f:25:4b:3f:26:56:bd:31:e2:d9:60:93:47:ce:
                    1e:d5:db:ad:2a:cc:b2:2c:5c:5a:ca:a8:e1:17:06:
                    58:a3:3c:eb:98:97:30:64:96:ac:f2:3c:5f:36:a4:
                    00:7f:d9:73:98:8b:aa:e9:50:a3:c0:59:04:96:6d:
                    85:e9:f2:a3:d4:57:3e:b4:3d:ce:d0:63:c8:58:7c:
                    62:d4:b4:98:cc:6e:fb:63:09:e0:df:9c:13:30:e3:
                    e1:cd:14:20:63:7b:b7:25:05:d1:be:da:b3:2e:c4:
                    9c:62:83:96:40:ec:a5:39:51:aa:ea:4d:24:cf:8f:
                    29:de:1a:b3:9f:b6:d9:7e:cc:da:24:8b:61:c5:a4:
                    00:38:4e:b0:0c:a6:4c:7b:43:9d:73:64:0b:23:64:
                    2f:ec:24:09:b7:fb:7a:0d:bf:f1:d4:52:e0:16:48:
                    52:37
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier: 
                31:D6:0E:AC:30:52:93:4C:DB:B1:C6:97:53:51:6D:07:08:30:34:ED
            X509v3 Authority Key Identifier: 
                keyid:0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points: 

                Full Name:
                  URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl

            Authority Information Access: 
                CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access: 
                CA Repository - URI:rsync://rpki.apnic.net/member_repository/A91F3B43/75A9C2CE389611E887DE212AC4F9AE02/
                RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A91F3B43/75A9C2CE389611E887DE212AC4F9AE02/MdYOrDBSk0zbscaXU1FtBwgwNO0.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  132714

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.112.200.0/22
                IPv6:
                  2402:b140::/32

    Signature Algorithm: sha256WithRSAEncryption
         c1:aa:87:92:10:0b:89:3c:0e:50:f7:cf:ee:b7:18:f6:98:5a:
         7b:aa:cf:9a:43:b6:8b:d3:07:5f:f7:05:01:97:14:64:a2:5c:
         a4:d9:20:b4:e8:ca:2c:57:86:4d:f6:c5:f8:e9:67:5a:15:08:
         a3:8c:4d:a8:dc:16:78:75:f3:52:1a:36:c4:32:ae:c3:e3:96:
         d5:71:7c:8f:84:9d:46:dc:7d:2c:58:2d:8e:e0:3c:e9:43:b5:
         5c:69:cd:12:4b:b3:a9:c6:46:5c:cb:d5:50:fa:8c:a0:18:95:
         f8:58:c4:d3:7c:7e:a5:ba:9f:5d:99:4a:76:a9:07:c9:0c:7d:
         ff:6b:8e:a9:6e:33:6c:ab:57:c0:a5:96:30:ad:b7:58:f7:bc:
         63:13:e4:59:3c:52:f9:3c:f6:77:81:54:47:7d:fa:91:dc:7a:
         12:c9:e4:ea:34:54:0f:4a:23:49:29:c9:da:df:dd:1d:93:f4:
         d8:60:90:4b:29:78:76:78:aa:9a:98:d7:07:16:f2:ad:4d:ce:
         17:cc:ed:fd:17:69:e3:6e:cf:d4:60:96:2f:24:81:c5:69:57:
         3d:c8:4d:66:09:84:98:55:db:ea:29:71:1f:31:14:d6:78:48:
         33:96:d3:0f:c9:c5:1c:c9:4c:7d:b1:d1:49:ae:cf:3b:aa:b7:
         06:e0:ff:59
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----