RPKI Manifest
Location:                 rpki.apnic.net/member_repository/A91275FD/F48AD12226D911E5B24DA633C4F9AE02/Xr3U1fNsaqWbASyeiZqtPCfq2O0.mft (download)

Subject key identifier:   45:BD:1A:68:2C:2C:42:A9:EB:54:82:C0:3F:3B:79:F9:83:ED:CC:7A
Authority key identifier: 5E:BD:D4:D5:F3:6C:6A:A5:9B:01:2C:9E:89:9A:AD:3C:27:EA:D8:ED
Manifest Number:          212F
Files:
    1: Xr3U1fNsaqWbASyeiZqtPCfq2O0.crl
	hash YC+rge+2MVPnDdd5/hHPr4Czpm2gFgpTtmOJ8BUboog=
    2: 9461B15C144611EBA5418244C4F9AE02.roa
	hash n2u8HcCs3Ytora+u58nVyI/nMobarO5wE04yKAyWl1I=

--
$ test-mft -p rpki.apnic.net/member_repository/A91275FD/F48AD12226D911E5B24DA633C4F9AE02/Xr3U1fNsaqWbASyeiZqtPCfq2O0.mft | openssl x509 -text
Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 8504 (0x2138)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91275FD/serialNumber=5EBDD4D5F36C6AA59B012C9E899AAD3C27EAD8ED
        Validity
            Not Before: Jan 25 16:19:42 2022 GMT
            Not After : Jan 27 16:19:42 2022 GMT
        Subject: CN=61f0231e-dbd2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:9c:a2:f5:c5:ea:71:bc:b0:21:45:ec:8e:80:
                    03:8e:d2:34:53:2e:b7:02:cc:88:a4:d9:e4:93:7a:
                    aa:ec:af:1d:87:e5:1a:39:67:28:a5:8a:ed:1d:09:
                    4d:1f:a6:53:79:55:af:0d:ed:3f:81:1f:9c:dd:e5:
                    b7:54:94:87:97:8f:c9:46:b7:e0:aa:63:9d:16:af:
                    55:4a:25:00:6b:24:a3:59:f5:28:88:e9:2a:44:7f:
                    ea:06:63:fb:bd:1e:c3:91:a6:37:fc:18:e1:91:8e:
                    72:7b:10:9d:68:20:98:c6:8c:88:8e:21:80:7c:78:
                    3e:5d:51:c4:11:49:1b:a9:0b:ab:ce:b3:79:a4:b6:
                    fd:d6:8a:ae:ae:98:71:4a:5e:e9:8e:b0:ed:b0:73:
                    1c:05:c3:b7:c8:96:3c:94:5c:da:e5:31:c3:7f:0b:
                    2a:60:cc:4d:71:df:17:70:62:5c:c5:2b:58:09:3c:
                    04:17:c9:66:c3:ed:67:c2:b7:ca:96:67:55:34:7a:
                    82:ee:9a:e9:8e:4e:45:45:b6:71:db:49:d6:77:aa:
                    08:28:30:5c:bd:37:43:69:dc:41:45:66:39:d7:21:
                    2e:9b:b5:97:2c:40:0e:2c:66:30:83:3c:50:97:70:
                    94:13:54:a4:9f:9d:f0:cd:13:80:95:83:98:21:9b:
                    79:27
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier: 
                45:BD:1A:68:2C:2C:42:A9:EB:54:82:C0:3F:3B:79:F9:83:ED:CC:7A
            X509v3 Authority Key Identifier: 
                keyid:5E:BD:D4:D5:F3:6C:6A:A5:9B:01:2C:9E:89:9A:AD:3C:27:EA:D8:ED

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points: 

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91275FD/F48AD12226D911E5B24DA633C4F9AE02/Xr3U1fNsaqWbASyeiZqtPCfq2O0.crl

            Authority Information Access: 
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/Xr3U1fNsaqWbASyeiZqtPCfq2O0.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access: 
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91275FD/F48AD12226D911E5B24DA633C4F9AE02/Xr3U1fNsaqWbASyeiZqtPCfq2O0.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         54:f3:bd:ca:e0:16:7f:ac:8b:0f:8b:17:ea:75:33:49:e8:99:
         84:84:e4:4f:c7:73:bd:44:b0:aa:ef:38:57:39:0f:db:08:16:
         cd:b4:69:d5:26:62:ae:f1:07:ec:90:bd:0c:26:b3:9a:64:49:
         71:16:52:a3:31:f2:f8:f4:34:6b:e0:40:7a:c8:70:ba:80:2a:
         70:30:cf:a2:74:8d:02:dd:13:cd:ac:f3:3b:a2:d0:6b:29:cc:
         a6:c2:f4:b7:56:49:06:d0:ad:44:5f:ed:7a:23:d2:7b:ed:31:
         e2:2d:09:79:08:bc:e9:83:d7:77:95:a6:96:96:04:6e:b0:6f:
         d8:c6:7a:2c:04:b8:d2:3d:81:c8:f5:e1:8a:ef:3f:d2:42:89:
         99:5e:9d:1d:5d:e0:e0:2d:64:3d:c5:01:6e:d2:ad:15:42:96:
         1f:20:5a:1c:29:45:f1:2a:18:98:13:c2:a3:b3:f8:ec:a3:41:
         79:4e:92:0b:a9:12:04:e2:3c:c4:95:db:33:12:8a:7e:38:46:
         a6:d2:98:17:45:34:55:5c:5d:75:be:50:8e:45:db:ff:0d:12:
         64:a6:d3:53:aa:e5:65:54:f3:64:c2:35:49:b0:61:d7:82:b0:
         15:da:f1:b6:d7:99:7b:ec:80:ec:8f:56:82:51:77:35:9e:53:
         a3:68:6e:8a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Generated at Tue Jan 25 18:44:34 2022 by LibreSSL & rpki-client.