RPKI Manifest
Location:                 rpki.apnic.net/member_repository/A912BFC5/3F34203E290511E593BFC626C4F9AE02/XLKYvBpwUBeAXFYfCQoNR5UOar0.mft (download)

Subject key identifier:   4A:BA:C1:9A:29:8A:CB:AE:0A:D9:05:6C:E4:7F:7F:C0:AD:91:59:8B
Authority key identifier: 5C:B2:98:BC:1A:70:50:17:80:5C:56:1F:09:0A:0D:47:95:0E:6A:BD
Manifest Number:          211A
Files:
    1: XLKYvBpwUBeAXFYfCQoNR5UOar0.crl
	hash ryIwHKtrESY+nJu/AW8HHwKMzIq8uvOEkJ8pTYNElHo=

--
$ test-mft -p rpki.apnic.net/member_repository/A912BFC5/3F34203E290511E593BFC626C4F9AE02/XLKYvBpwUBeAXFYfCQoNR5UOar0.mft | openssl x509 -text
Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 8474 (0x211a)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A912BFC5/serialNumber=5CB298BC1A705017805C561F090A0D47950E6ABD
        Validity
            Not Before: Jan 25 14:17:10 2022 GMT
            Not After : Jan 27 14:17:10 2022 GMT
        Subject: CN=61f00666-4b73
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:ae:7a:35:fd:31:0f:90:cf:c7:73:a9:3c:bb:
                    04:c2:9c:af:79:75:88:cb:e1:25:ce:2f:c6:55:92:
                    a4:82:29:9e:98:9d:b7:7e:19:04:2a:53:99:43:68:
                    c3:3e:b2:c1:8c:8e:0a:ac:35:00:0d:bd:47:be:52:
                    8b:a7:c4:58:01:ee:ec:19:9a:09:8e:30:ce:83:69:
                    9f:6f:80:03:17:38:d3:7d:d1:77:46:af:d1:b0:7a:
                    87:59:4a:a0:ba:36:8f:55:b2:37:1b:d9:17:46:69:
                    16:6e:93:a7:b8:eb:6d:6d:6f:04:08:93:1c:f2:c9:
                    ca:4b:cc:cd:b6:fe:f4:54:61:a5:2d:34:7a:55:c2:
                    1f:4b:8d:96:cd:5a:3c:5f:5c:a7:4d:7b:96:aa:eb:
                    19:a8:bb:98:68:10:1b:57:20:07:c7:b2:34:fb:fc:
                    ad:b0:40:94:4f:62:fa:00:e6:c6:45:8d:18:ac:a9:
                    db:40:38:da:c3:49:13:d2:16:b4:b1:72:47:9c:23:
                    4f:47:fb:e7:ff:3b:24:1b:87:2a:2f:12:ad:36:db:
                    91:8f:32:c0:74:59:c6:04:6d:2f:39:c0:68:14:e2:
                    ed:f0:47:88:d0:1b:92:9e:67:ae:1c:a3:87:ee:ec:
                    45:f4:9d:01:b6:f8:5b:44:e8:a2:51:9a:47:03:c8:
                    e1:07
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier: 
                4A:BA:C1:9A:29:8A:CB:AE:0A:D9:05:6C:E4:7F:7F:C0:AD:91:59:8B
            X509v3 Authority Key Identifier: 
                keyid:5C:B2:98:BC:1A:70:50:17:80:5C:56:1F:09:0A:0D:47:95:0E:6A:BD

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points: 

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A912BFC5/3F34203E290511E593BFC626C4F9AE02/XLKYvBpwUBeAXFYfCQoNR5UOar0.crl

            Authority Information Access: 
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/XLKYvBpwUBeAXFYfCQoNR5UOar0.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access: 
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912BFC5/3F34203E290511E593BFC626C4F9AE02/XLKYvBpwUBeAXFYfCQoNR5UOar0.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         7c:11:5a:82:a9:8e:47:2f:27:83:5c:f6:d7:f1:ff:a8:8b:83:
         3a:a5:b0:51:15:38:53:a6:b4:0a:d1:f5:0f:b5:1b:7a:35:e0:
         d5:e4:77:cd:3a:cc:5b:31:f7:f4:c5:15:37:b8:06:22:4f:5d:
         66:48:5d:07:c8:78:5f:58:86:8e:da:b7:23:87:77:f7:c5:8f:
         a0:5c:3e:93:69:2d:da:d7:d3:cd:96:c2:11:7e:55:0b:73:69:
         18:5e:e7:24:4c:77:7c:98:54:6b:52:71:51:7d:b7:83:62:68:
         eb:6e:2d:28:a1:11:1c:a2:b9:01:03:b8:ec:fa:7b:bf:5a:14:
         69:ae:80:aa:2c:b5:b7:96:92:64:1d:32:3b:df:14:1d:23:b9:
         75:be:fe:b6:30:45:52:14:30:36:fc:f6:2d:cf:c3:c4:c1:6d:
         e8:e7:6d:1e:56:70:3b:50:3f:20:11:0e:96:ad:e1:e5:94:93:
         aa:02:52:bc:1c:5f:40:06:ce:ad:59:cb:d9:b2:01:19:48:91:
         bc:44:94:b7:df:03:39:c5:d2:89:9f:52:49:16:3a:0b:c5:3e:
         9d:83:af:bc:40:5d:38:5f:8d:35:27:9f:eb:e5:55:9a:bb:78:
         38:63:9a:ff:e4:d0:ef:62:6a:00:46:d6:f1:15:1e:12:75:4a:
         29:4a:12:96
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Generated at Tue Jan 25 17:21:48 2022 by LibreSSL & rpki-client.