RPKI Manifest
Location:                 rpki.apnic.net/member_repository/A9125475/8D9471F6290611E593BFC626C4F9AE02/3p1kAWKR6ioW87eVag9ANbcJ5Uc.mft (download)

Subject key identifier:   34:8C:A2:90:97:B6:52:1C:7E:16:17:77:27:9D:18:92:06:AA:F9:D6
Authority key identifier: DE:9D:64:01:62:91:EA:2A:16:F3:B7:95:6A:0F:40:35:B7:09:E5:47
Manifest Number:          213E
Files:
    1: 3p1kAWKR6ioW87eVag9ANbcJ5Uc.crl
	hash Ggqlzz3JbNV8zyFocr7rwZpcSiy683gk2YA0TLOkhXM=
    2: 19FEDB562AB611EC93861F65C4F9AE02.roa
	hash V91mZo/VDJ8uYHy7du0qsXv5NkJhCxm+kRndP8XB3vM=
    3: E7D3D36A406911EC83A0470DC4F9AE02.roa
	hash jIQMF2mBjIk86YQxK3npzxIm/gwCG2MlCcs+8TVu+Ow=
    4: 3373DB98902C11EA898EFD7FC4F9AE02.roa
	hash C6md8hzSeLvlI2Lw2DwJ/39MoDhqDIwzlaLwNSkWxX8=

--
$ test-mft -p rpki.apnic.net/member_repository/A9125475/8D9471F6290611E593BFC626C4F9AE02/3p1kAWKR6ioW87eVag9ANbcJ5Uc.mft | openssl x509 -text
Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 8533 (0x2155)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9125475/serialNumber=DE9D64016291EA2A16F3B7956A0F4035B709E547
        Validity
            Not Before: Jan 25 14:23:39 2022 GMT
            Not After : Jan 27 14:23:39 2022 GMT
        Subject: CN=61f007ec-a339
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:47:5e:50:62:b6:bc:a1:b9:98:6a:ed:c9:79:
                    47:15:97:e1:c2:86:f4:72:a2:09:cc:e5:3a:cf:47:
                    5d:c8:3d:17:39:59:e5:02:c3:cf:9d:67:9b:79:02:
                    04:21:29:c3:c5:8d:ec:a7:98:ff:1d:d2:cf:17:c8:
                    9f:ce:25:be:69:29:7b:c2:ed:cf:4c:7d:32:bf:a9:
                    ea:38:6a:85:8a:53:dc:a1:4c:5d:fd:64:6a:2a:80:
                    d5:40:84:d6:d5:d6:03:e6:cd:73:83:50:13:26:36:
                    0a:e1:64:b9:02:c7:82:2f:b1:e0:47:47:b4:39:5d:
                    b2:4b:fe:df:35:9d:c1:aa:2d:de:53:4b:5f:87:40:
                    19:16:fd:e6:89:f5:69:d1:48:51:47:3e:19:3b:28:
                    8a:40:d7:0e:dc:3c:c8:6c:e7:89:9a:88:75:d4:9b:
                    5a:7d:6b:49:38:94:fc:96:cb:fe:9c:6e:e8:5d:87:
                    34:e6:37:dd:95:05:9c:d6:f5:cd:87:b6:9c:4b:0a:
                    ec:e5:bd:7c:a3:d5:9e:f0:aa:3e:8d:47:4e:e9:1d:
                    17:f1:44:b5:2e:10:0b:95:36:88:fb:df:e0:d6:dc:
                    04:a7:c9:c6:fe:db:c8:c1:33:d6:51:55:08:84:11:
                    67:3c:04:a5:5d:26:50:19:8b:0d:fe:60:5e:a4:b6:
                    22:39
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier: 
                34:8C:A2:90:97:B6:52:1C:7E:16:17:77:27:9D:18:92:06:AA:F9:D6
            X509v3 Authority Key Identifier: 
                keyid:DE:9D:64:01:62:91:EA:2A:16:F3:B7:95:6A:0F:40:35:B7:09:E5:47

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points: 

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9125475/8D9471F6290611E593BFC626C4F9AE02/3p1kAWKR6ioW87eVag9ANbcJ5Uc.crl

            Authority Information Access: 
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/3p1kAWKR6ioW87eVag9ANbcJ5Uc.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access: 
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9125475/8D9471F6290611E593BFC626C4F9AE02/3p1kAWKR6ioW87eVag9ANbcJ5Uc.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         bc:fa:e0:af:7d:49:ce:e8:26:10:0b:e1:02:2a:72:92:82:3b:
         ef:c2:d9:6b:37:4c:f9:8d:88:b2:8e:4b:1b:4f:bf:ff:04:b6:
         28:fb:a6:ba:b6:51:22:30:b7:f4:33:83:61:cf:50:64:9d:b0:
         bf:62:ce:4a:bc:b7:d7:21:c4:6b:1e:2e:3e:03:ba:2a:76:0e:
         1f:6a:25:dd:48:45:b9:25:84:33:70:35:dd:d4:1e:78:51:6f:
         9a:27:17:6c:18:54:d0:68:26:45:cf:fa:e0:c9:7b:4a:e7:54:
         11:3c:7d:28:82:a8:e8:3b:88:61:24:fe:b1:bd:bd:9c:bc:71:
         13:91:ae:b7:09:97:10:21:57:0d:5c:29:17:65:44:b9:50:04:
         be:f3:c6:b9:2a:b1:20:e9:cb:ce:9e:61:7d:8e:25:c1:0d:d9:
         76:18:76:03:2c:0a:cf:2c:b5:29:50:8a:9a:20:09:64:de:bd:
         d9:ae:8e:70:30:e9:57:25:40:9f:b4:24:e7:02:d8:fd:a9:a2:
         59:97:6e:7a:29:ea:cd:a9:aa:f8:da:e9:be:f1:24:15:45:5f:
         71:20:c9:03:2b:14:7e:b4:91:7c:c9:74:d6:e0:8e:57:fc:7a:
         9c:87:54:60:1a:52:e1:ab:c9:82:11:e6:d6:ae:41:df:55:fe:
         8d:e8:da:1b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Generated at Tue Jan 25 17:21:39 2022 by LibreSSL & rpki-client.