RPKI Manifest
Location:                 rpki.apnic.net/member_repository/A919B3BC/304197E88F9B11E6BEC5CB25C4F9AE02/UTbgDQPR84UAq2cpty7T1yzWoQU.mft (download)

Subject key identifier:   89:C9:62:B0:DB:A9:78:67:0E:9B:EB:CC:E1:24:0F:BB:03:10:6A:E5
Authority key identifier: 51:36:E0:0D:03:D1:F3:85:00:AB:67:29:B7:2E:D3:D7:2C:D6:A1:05
Manifest Number:          1A02
Files:
    1: UTbgDQPR84UAq2cpty7T1yzWoQU.crl
	hash jih30FDcVNXtmjxWy80kPjSCtHG2TyjzRhUlEoyD1RE=
    2: AB5B2644D2C111E9B5D20B2AC4F9AE02.roa
	hash NuwQMqH/X2VtadIbI9KIVtNHKLKQsFevnMENTetBTKY=

--
$ test-mft -p rpki.apnic.net/member_repository/A919B3BC/304197E88F9B11E6BEC5CB25C4F9AE02/UTbgDQPR84UAq2cpty7T1yzWoQU.mft | openssl x509 -text
Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 6669 (0x1a0d)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A919B3BC/serialNumber=5136E00D03D1F38500AB6729B72ED3D72CD6A105
        Validity
            Not Before: Jan 25 16:55:36 2022 GMT
            Not After : Jan 27 16:55:35 2022 GMT
        Subject: CN=61f02b88-ca19
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:ae:c8:3c:c0:db:f9:af:8a:50:ef:38:ac:33:
                    43:27:a6:8f:78:3c:aa:a9:ab:99:d5:be:3f:00:18:
                    96:50:49:a9:aa:78:bb:b9:07:c5:e9:7a:f2:7d:0b:
                    0a:ab:77:4b:7c:af:71:63:b0:15:f9:84:0f:1c:c3:
                    c1:16:a9:50:c3:cf:d8:47:11:00:d7:60:a6:b4:49:
                    e2:1b:36:5f:3f:04:df:31:cb:96:9e:39:e0:80:66:
                    32:24:2e:71:a5:f0:13:f3:e7:cf:5e:58:bd:d9:48:
                    b6:ed:79:14:69:9c:5e:8c:bc:b1:65:8b:73:e8:46:
                    f2:45:13:ae:59:23:54:42:6f:be:a2:82:24:b4:5f:
                    41:84:c0:64:43:c5:c8:24:8c:be:47:d5:f2:e4:9c:
                    05:e2:af:4e:f5:38:ae:64:63:07:11:06:58:e9:0a:
                    f5:7d:3e:0c:e3:65:10:5a:de:f6:70:ff:9d:91:fb:
                    a7:c1:74:76:b2:ea:ab:b5:1f:6f:3e:7b:fd:59:57:
                    d8:c4:91:8d:dc:08:92:23:a5:40:7f:1a:50:1b:b9:
                    ff:da:30:e8:11:19:50:49:96:04:3e:9a:91:b6:af:
                    8e:71:a9:6c:e3:ee:b8:fd:39:de:84:12:49:97:50:
                    bf:09:42:15:81:2a:15:bc:69:79:c4:a0:60:71:45:
                    d8:13
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier: 
                89:C9:62:B0:DB:A9:78:67:0E:9B:EB:CC:E1:24:0F:BB:03:10:6A:E5
            X509v3 Authority Key Identifier: 
                keyid:51:36:E0:0D:03:D1:F3:85:00:AB:67:29:B7:2E:D3:D7:2C:D6:A1:05

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points: 

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A919B3BC/304197E88F9B11E6BEC5CB25C4F9AE02/UTbgDQPR84UAq2cpty7T1yzWoQU.crl

            Authority Information Access: 
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/UTbgDQPR84UAq2cpty7T1yzWoQU.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access: 
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919B3BC/304197E88F9B11E6BEC5CB25C4F9AE02/UTbgDQPR84UAq2cpty7T1yzWoQU.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         6b:11:09:12:da:93:38:1c:cc:03:25:6d:ab:b2:14:24:ac:3a:
         01:57:8d:72:e7:39:78:d3:df:91:5f:6d:55:77:f7:4e:ce:10:
         81:6d:bf:42:58:95:27:9a:56:69:dc:aa:96:f2:87:77:20:0c:
         dd:5b:57:2f:48:67:aa:17:5d:2f:15:e6:ac:d7:35:04:b3:79:
         29:45:ef:81:9c:1f:48:75:8a:00:cd:98:b8:24:32:2f:a4:aa:
         fc:a9:dc:c6:08:e4:f8:ad:24:e4:84:8c:02:d8:8c:50:94:5f:
         a1:9a:95:1a:c4:db:40:df:6a:32:d1:f1:6e:ff:68:98:70:12:
         16:b6:8a:fc:c7:2a:0e:01:36:20:70:dd:d5:c5:9d:9d:d6:f0:
         d9:ef:aa:1c:38:ac:2a:a1:ec:3f:51:7b:ec:c9:45:d4:18:83:
         0a:bb:8b:7a:b0:bb:ca:ad:45:06:a7:a5:6f:1a:3a:35:92:c1:
         84:ab:88:47:19:43:2f:32:56:27:30:5e:63:16:ec:03:d9:53:
         1a:22:17:76:72:c6:28:88:15:2f:b2:93:6b:c1:06:75:40:f3:
         a0:7b:46:ce:bf:f4:33:2f:0b:76:24:6d:8c:35:96:73:e0:fe:
         a6:44:27:0d:4d:5c:7b:6f:f6:e2:f6:d2:3c:7c:a7:fd:88:00:
         d1:bb:4c:92
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Generated at Tue Jan 25 18:47:13 2022 by LibreSSL & rpki-client.