RPKI Manifest
Location:                 rpki.apnic.net/member_repository/A914C33A/8F47A9FAE97D11E9A9DB5E52C4F9AE02/D96C0nlIVMmvzdhe-37-ScR9Lu4.mft (download)

Subject key identifier:   1E:8D:D5:5F:2E:EE:93:62:ED:8A:A2:30:6E:B5:29:14:5A:15:40:A0
Authority key identifier: 0F:DE:82:D2:79:48:54:C9:AF:CD:D8:5E:FB:7E:FE:49:C4:7D:2E:EE
Manifest Number:          08ED
Files:
    1: D96C0nlIVMmvzdhe-37-ScR9Lu4.crl
	hash EVFd7pOpJsZQalNhhGdrebVmB1lqOAhgaKX6mbgAIXk=
    2: 0DF331C28F9411EAA5E7B573C4F9AE02.roa
	hash GR0Nl+4XKlYQfV/jhoXa5RXea3/h6gY0voTHgShiwX8=

--
$ test-mft -p rpki.apnic.net/member_repository/A914C33A/8F47A9FAE97D11E9A9DB5E52C4F9AE02/D96C0nlIVMmvzdhe-37-ScR9Lu4.mft | openssl x509 -text
Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2293 (0x8f5)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A914C33A/serialNumber=0FDE82D2794854C9AFCDD85EFB7EFE49C47D2EEE
        Validity
            Not Before: Jan 25 16:10:07 2022 GMT
            Not After : Jan 27 16:10:07 2022 GMT
        Subject: CN=61f020df-23fc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:71:40:9a:74:6e:a0:bc:f0:d0:f9:3e:4e:f9:
                    30:a0:89:b7:79:92:c7:48:0d:0b:d4:c3:26:09:cb:
                    dd:44:f8:ef:c1:48:c9:ff:5c:3a:e3:bc:fb:54:bc:
                    68:dd:bc:9d:bb:cf:d6:49:98:0d:d6:c9:1d:58:eb:
                    ac:9d:9f:07:54:b0:a9:79:c8:f1:83:fa:20:41:00:
                    f3:91:9c:95:f7:02:34:90:f8:6e:0a:05:6e:90:60:
                    08:f9:14:49:41:99:eb:94:13:6b:5e:18:07:94:4a:
                    1d:d5:79:ff:8d:f5:f3:8c:73:f9:93:d5:d3:7d:f4:
                    b4:58:0e:47:0a:09:51:75:1c:08:00:3f:42:79:38:
                    a5:51:84:4a:06:36:c1:04:f9:63:83:53:0a:26:df:
                    fd:4a:4a:18:9b:08:13:fe:36:2b:58:d2:91:68:a1:
                    71:fe:6d:c7:e0:77:1d:60:47:54:82:ba:5e:5a:c9:
                    25:77:96:3b:e0:e9:2e:4c:d6:b8:49:70:5c:e0:e9:
                    a9:d4:6b:55:62:f5:f6:80:ff:1f:9c:9f:50:bc:3f:
                    b1:85:9c:5b:9d:04:f8:4d:73:0e:59:29:16:3a:b5:
                    9a:3c:2b:8e:1d:a7:39:0f:80:03:93:11:60:6e:bd:
                    da:b5:bd:c2:e6:da:a4:6f:54:12:bd:6e:1f:aa:88:
                    c8:a1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier: 
                1E:8D:D5:5F:2E:EE:93:62:ED:8A:A2:30:6E:B5:29:14:5A:15:40:A0
            X509v3 Authority Key Identifier: 
                keyid:0F:DE:82:D2:79:48:54:C9:AF:CD:D8:5E:FB:7E:FE:49:C4:7D:2E:EE

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points: 

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A914C33A/8F47A9FAE97D11E9A9DB5E52C4F9AE02/D96C0nlIVMmvzdhe-37-ScR9Lu4.crl

            Authority Information Access: 
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/D96C0nlIVMmvzdhe-37-ScR9Lu4.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access: 
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914C33A/8F47A9FAE97D11E9A9DB5E52C4F9AE02/D96C0nlIVMmvzdhe-37-ScR9Lu4.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         68:b3:77:28:a9:4c:10:fb:37:b7:43:64:9e:93:c6:d6:03:39:
         6d:78:81:fe:85:83:40:4c:bf:47:ff:63:e7:d1:92:95:0e:62:
         54:e8:8b:9d:35:fa:de:02:15:3f:97:7a:a5:77:4d:38:2f:5b:
         5d:d4:c4:57:cd:09:11:34:58:50:49:7f:f4:74:34:a7:bd:8b:
         7a:e7:a8:6e:ce:26:89:74:53:a9:03:a2:cc:24:1e:3c:03:67:
         6f:84:3a:bb:d5:21:d0:65:1c:1b:1f:90:12:e8:24:f9:5a:9d:
         a9:c2:53:d0:b1:59:5b:9d:23:86:bc:4b:a8:98:f0:e2:aa:67:
         b7:05:40:b8:50:d4:2b:08:34:0f:16:70:19:0c:81:ad:24:92:
         71:8d:35:29:8a:0c:52:53:8f:81:d9:53:f5:1a:28:06:39:76:
         ed:7e:62:dc:79:f0:80:4c:7d:8d:44:c6:b6:13:57:f3:80:6b:
         09:c8:15:51:d5:76:a6:3d:a1:33:fc:7d:a4:5a:14:81:44:43:
         e7:47:79:ad:60:5b:2d:e1:df:e6:d9:85:35:c5:cd:20:11:19:
         38:73:48:98:b3:e6:72:49:01:83:2b:90:91:1a:0a:90:f7:d1:
         0d:26:1b:29:1d:c4:8e:99:40:8d:aa:b5:9b:8d:26:78:b7:03:
         ed:56:0f:76
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Generated at Tue Jan 25 18:45:27 2022 by LibreSSL & rpki-client.