RPKI Manifest
Location:                 rpki.apnic.net/member_repository/A9131EDD/210B43047BBF11EBA02A4339C4F9AE02/pGlL5HxPO8lIBdSjZqAHxpBwUS4.mft (download)

Subject key identifier:   D2:F8:63:0B:47:2F:19:CC:B1:71:3A:38:A7:4C:46:87:4F:A8:B3:9C
Authority key identifier: A4:69:4B:E4:7C:4F:3B:C9:48:05:D4:A3:66:A0:07:C6:90:70:51:2E
Manifest Number:          028C
Files:
    1: pGlL5HxPO8lIBdSjZqAHxpBwUS4.crl
	hash pZ9kUWmWkJ32iBHXvrb6Xyrcgs9EPK4HbFihYSildBg=
    2: 247681E07BCC11EB91CCFB33C4F9AE02.roa
	hash 0kZYXQNNLtbXfVcikb9dBSnJtUw5Fm0oyA0ar91k7IE=
    3: 250F0E9C7BCC11EB91CCFB33C4F9AE02.roa
	hash 2qD6OqnnumJW9iepDgFnoiswng+0pBO6wohQbUXXyrE=

--
$ test-mft -p rpki.apnic.net/member_repository/A9131EDD/210B43047BBF11EBA02A4339C4F9AE02/pGlL5HxPO8lIBdSjZqAHxpBwUS4.mft | openssl x509 -text
Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 656 (0x290)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9131EDD/serialNumber=A4694BE47C4F3BC94805D4A366A007C69070512E
        Validity
            Not Before: Jan 25 13:31:28 2022 GMT
            Not After : Jan 27 13:31:28 2022 GMT
        Subject: CN=61effbb1-b308
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dc:16:5c:07:a6:6e:bf:a8:45:5c:bd:c2:87:f1:
                    ce:b9:a9:0f:58:52:2f:9d:0d:96:85:fb:48:10:06:
                    8b:43:5e:f2:b4:76:ad:ef:fa:36:17:68:1f:34:53:
                    bf:ea:1a:79:f9:fb:e1:23:91:a9:c8:b3:4c:52:4d:
                    f3:fb:99:51:56:da:20:92:20:cf:06:65:ee:88:a5:
                    aa:7c:f1:fe:4e:14:0e:fe:2f:84:f7:e7:de:fd:c8:
                    d5:f9:c2:68:75:a8:53:1d:bd:4b:07:3e:c9:d7:50:
                    41:ce:77:78:7f:0d:5b:0c:38:fe:43:c0:32:65:31:
                    c5:d0:96:c7:bf:b6:63:21:14:9b:cf:5c:58:c4:a3:
                    35:0f:07:be:08:24:9b:77:59:20:92:c8:60:78:ae:
                    78:09:57:d8:f8:1f:fd:03:96:33:b9:36:12:57:ee:
                    1d:43:0c:0d:07:cf:51:c1:cc:b8:8b:ba:d9:b8:b1:
                    12:58:7f:4a:4e:76:8f:c6:65:50:0d:86:56:ac:ad:
                    e2:68:b8:0c:3a:38:8a:a4:4c:17:69:77:6b:13:1b:
                    0d:38:ab:0c:36:2a:22:f6:66:ba:fc:6b:a1:39:73:
                    93:9f:c1:2c:1a:ff:63:9a:4a:17:09:47:21:9c:ea:
                    1e:80:66:be:fd:67:73:92:bf:9d:b8:75:86:f3:9c:
                    0c:09
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier: 
                D2:F8:63:0B:47:2F:19:CC:B1:71:3A:38:A7:4C:46:87:4F:A8:B3:9C
            X509v3 Authority Key Identifier: 
                keyid:A4:69:4B:E4:7C:4F:3B:C9:48:05:D4:A3:66:A0:07:C6:90:70:51:2E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points: 

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9131EDD/210B43047BBF11EBA02A4339C4F9AE02/pGlL5HxPO8lIBdSjZqAHxpBwUS4.crl

            Authority Information Access: 
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pGlL5HxPO8lIBdSjZqAHxpBwUS4.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access: 
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9131EDD/210B43047BBF11EBA02A4339C4F9AE02/pGlL5HxPO8lIBdSjZqAHxpBwUS4.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         a9:32:70:64:99:bb:b4:6b:88:6a:40:9f:1b:bf:23:bb:1a:5c:
         bd:a6:12:05:81:b5:b0:9e:30:40:dd:06:b6:30:dc:f3:94:d1:
         5e:78:e6:c1:01:f6:85:ae:30:a6:5e:93:5e:e0:86:ac:74:f3:
         c0:22:1e:6a:95:6f:1d:88:84:77:6d:48:b8:a7:5f:94:1b:8b:
         12:06:9a:90:69:47:a5:61:cc:e3:57:a4:fe:94:a9:bb:71:e8:
         79:7f:4f:e3:ef:7a:b9:d0:07:52:35:4f:e5:33:17:20:fa:40:
         b4:b4:57:0d:99:bf:c1:cf:32:fe:09:7a:de:f7:f3:3f:57:e4:
         6a:cc:da:69:06:56:63:8a:9d:4d:6c:87:13:4a:0d:58:4c:44:
         04:91:99:db:a0:f9:d7:cb:6e:99:5b:e7:cc:76:d2:68:46:c1:
         34:d8:f3:e8:fb:3e:01:15:1d:ca:67:fc:67:f1:b2:17:7b:05:
         fd:2a:12:95:8b:80:6a:fc:25:27:e3:fc:25:4d:f3:be:c3:a0:
         94:ef:81:35:9e:8a:17:15:a0:a5:43:62:39:da:3a:b0:92:ae:
         52:5e:cf:1d:43:e9:a1:92:21:3d:3b:e2:ce:ae:f3:1e:5d:ff:
         3a:3c:e4:fa:44:58:31:72:2c:5d:0e:11:18:de:26:51:90:7e:
         82:df:8f:98
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Generated at Tue Jan 25 15:35:25 2022 by LibreSSL & rpki-client.