RPKI Manifest
Location:                 rpki.apnic.net/member_repository/A9111DD6/3AD2F7F2D99111EB8A17D81BC4F9AE02/ePNA8YcbcGJ-Dsk-l9fQ2AwK0CE.mft (download)

Subject key identifier:   52:F2:42:13:2B:E9:D4:AD:63:28:8A:5A:15:20:2E:1B:D1:61:0A:05
Authority key identifier: 78:F3:40:F1:87:1B:70:62:7E:0E:C9:3E:97:D7:D0:D8:0C:0A:D0:21
Manifest Number:          01A0
Files:
    1: ePNA8YcbcGJ-Dsk-l9fQ2AwK0CE.crl
	hash 1NZ8XvvM7GUiyPbmJbhKBM7WYwq5+y3A2BSxG3yIqks=
    2: E4259BA8D99511EBBBFB5D50C4F9AE02.roa
	hash UBcLSJ4EjHLfnRnn7RwSF74+hL7J+j+8/ttierkm4AI=

--
$ test-mft -p rpki.apnic.net/member_repository/A9111DD6/3AD2F7F2D99111EB8A17D81BC4F9AE02/ePNA8YcbcGJ-Dsk-l9fQ2AwK0CE.mft | openssl x509 -text
Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 418 (0x1a2)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9111DD6/serialNumber=78F340F1871B70627E0EC93E97D7D0D80C0AD021
        Validity
            Not Before: Jan 25 14:52:37 2022 GMT
            Not After : Jan 27 14:52:37 2022 GMT
        Subject: CN=61f00eb6-5e86
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:55:9b:15:d8:44:9b:9d:53:1d:3e:84:d1:97:
                    a2:08:83:c8:31:7e:52:16:37:a4:5f:0e:10:93:dc:
                    87:ee:77:42:c1:73:17:9b:ba:fb:f5:00:ad:57:7e:
                    ec:60:87:5a:f1:9c:bc:a5:d9:4c:1e:6c:7f:6c:4b:
                    08:e7:0a:b9:ea:1a:7d:10:13:ae:00:f7:75:26:61:
                    b8:9f:14:59:6e:06:95:3a:50:76:b9:d9:63:ee:50:
                    38:32:47:18:cf:a3:61:ef:90:e1:6c:49:b8:9a:82:
                    b1:1a:79:5f:01:60:ab:11:fe:20:ff:5b:46:ce:10:
                    fe:b4:b6:04:ee:e9:fb:39:bc:e7:16:a9:d2:5e:38:
                    2d:02:c7:37:ba:3d:3c:ec:28:b2:76:8e:f7:f5:29:
                    ff:33:55:9c:71:7e:94:a3:c1:86:ee:2c:ad:ff:e8:
                    f5:07:d8:75:60:d4:8d:29:34:5e:79:b0:d9:30:31:
                    df:4b:fe:ae:e4:c7:fb:83:9a:1a:37:ee:6c:44:54:
                    4c:ba:6e:7a:1d:ec:fa:c5:58:18:52:01:15:11:bb:
                    60:8f:bf:3b:ae:b5:e3:57:6c:8d:7a:9f:40:d4:e1:
                    0a:6c:1b:fc:b4:1c:c3:bb:5b:2b:9c:07:10:af:50:
                    3f:1e:d6:08:43:f0:05:ac:5d:c0:22:bd:d3:43:87:
                    46:8b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier: 
                52:F2:42:13:2B:E9:D4:AD:63:28:8A:5A:15:20:2E:1B:D1:61:0A:05
            X509v3 Authority Key Identifier: 
                keyid:78:F3:40:F1:87:1B:70:62:7E:0E:C9:3E:97:D7:D0:D8:0C:0A:D0:21

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points: 

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9111DD6/3AD2F7F2D99111EB8A17D81BC4F9AE02/ePNA8YcbcGJ-Dsk-l9fQ2AwK0CE.crl

            Authority Information Access: 
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ePNA8YcbcGJ-Dsk-l9fQ2AwK0CE.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access: 
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9111DD6/3AD2F7F2D99111EB8A17D81BC4F9AE02/ePNA8YcbcGJ-Dsk-l9fQ2AwK0CE.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         28:0d:37:bf:03:dc:89:8c:8b:fb:90:3e:f8:e9:df:05:04:b3:
         c1:c2:82:c2:4b:e2:b7:ef:8a:0a:aa:25:3e:d6:31:e1:36:31:
         ff:72:46:ec:04:cc:5a:97:ad:5e:4f:f2:a5:56:b5:98:b0:0b:
         e1:ba:21:81:a6:45:38:7d:d4:fa:66:98:1f:77:0f:0a:1b:02:
         bd:25:f3:d5:29:24:1d:e0:3b:b3:ad:98:24:d5:b6:98:26:54:
         22:02:e7:26:89:94:1e:cf:34:8c:39:af:2b:2a:34:f6:99:fc:
         39:85:39:c8:3e:91:17:30:95:e0:f8:5f:fb:02:b2:c9:20:b8:
         1d:8e:f0:15:35:03:32:ea:29:d5:58:f8:e8:51:15:c3:8d:e2:
         f9:51:53:9f:08:7c:7e:5d:5f:06:f0:90:d7:38:bf:7b:31:69:
         e7:ec:66:0b:68:ac:f3:4b:7d:cb:88:35:f3:d4:ec:64:0a:35:
         8f:d6:7a:d8:c7:ac:bf:44:e6:e9:a2:07:c5:4c:8d:73:ea:33:
         74:38:98:e3:65:f5:fc:74:02:56:85:85:44:40:1a:d3:f4:b4:
         f7:a8:a5:ab:0d:73:53:4e:18:a3:f1:2c:d3:2a:6a:a1:bc:a5:
         6a:dd:dc:ec:2a:d8:b9:1b:87:88:44:d3:1d:35:b9:f3:a1:25:
         62:4b:3d:e3
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgICAaIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
MTFERDYxMTAvBgNVBAUTKDc4RjM0MEYxODcxQjcwNjI3RTBFQzkzRTk3RDdEMEQ4
MEMwQUQwMjEwHhcNMjIwMTI1MTQ1MjM3WhcNMjIwMTI3MTQ1MjM3WjAYMRYwFAYD
VQQDEw02MWYwMGViNi01ZTg2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAyVWbFdhEm51THT6E0ZeiCIPIMX5SFjekXw4Qk9yH7ndCwXMXm7r79QCtV37s
YIda8Zy8pdlMHmx/bEsI5wq56hp9EBOuAPd1JmG4nxRZbgaVOlB2udlj7lA4MkcY
z6Nh75DhbEm4moKxGnlfAWCrEf4g/1tGzhD+tLYE7un7ObznFqnSXjgtAsc3uj08
7Ciydo739Sn/M1WccX6Uo8GG7iyt/+j1B9h1YNSNKTReebDZMDHfS/6u5Mf7g5oa
N+5sRFRMum56Hez6xVgYUgEVEbtgj787rrXjV2yNep9A1OEKbBv8tBzDu1srnAcQ
r1A/HtYIQ/AFrF3AIr3TQ4dGiwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFFLyQhMr
6dStYyiKWhUgLhvRYQoFMB8GA1UdIwQYMBaAFHjzQPGHG3Bifg7JPpfX0NgMCtAh
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExMURENi8zQUQyRjdGMkQ5
OTExMUVCOEExN0Q4MUJDNEY5QUUwMi9lUE5BOFljYmNHSi1Ec2stbDlmUTJBd0sw
Q0UuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL2VQTkE4WWNiY0dKLURzay1sOWZRMkF3SzBDRS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx
MURENi8zQUQyRjdGMkQ5OTExMUVCOEExN0Q4MUJDNEY5QUUwMi9lUE5BOFljYmNH
Si1Ec2stbDlmUTJBd0swQ0UubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu
YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF
ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB
CwUAA4IBAQAoDTe/A9yJjIv7kD746d8FBLPBwoLCS+K374oKqiU+1jHhNjH/ckbs
BMxal61eT/KlVrWYsAvhuiGBpkU4fdT6Zpgfdw8KGwK9JfPVKSQd4DuzrZgk1baY
JlQiAucmiZQezzSMOa8rKjT2mfw5hTnIPpEXMJXg+F/7ArLJILgdjvAVNQMy6inV
WPjoURXDjeL5UVOfCHx+XV8G8JDXOL97MWnn7GYLaKzzS33LiDXz1OxkCjWP1nrY
x6y/RObpogfFTI1z6jN0OJjjZfX8dAJWhYVEQBrT9LT3qKWrDXNTThij8SzTKmqh
vKVq3dzsKti5G4eIRNMdNbnzoSViSz3j
-----END CERTIFICATE-----

Generated at Tue Jan 25 17:21:14 2022 by LibreSSL & rpki-client.