RPKI Manifest
Location:                 rpki.apnic.net/member_repository/A919C233/1FDAFD6243E611E8BC415F65C4F9AE02/28IYSbtMFwTSMZPEG3DGaxqWVi8.mft (download)

Subject key identifier:   0C:7D:F7:A3:C0:B4:CE:FC:8A:7F:42:22:CF:95:8A:E3:11:31:40:12
Authority key identifier: DB:C2:18:49:BB:4C:17:04:D2:31:93:C4:1B:70:C6:6B:1A:96:56:2F
Manifest Number:          1143
Files:
    1: 28IYSbtMFwTSMZPEG3DGaxqWVi8.crl
	hash VH80kYO60JGlUV2iSOEfOPPZ/FkeWwYNqdVIH8Bu5jQ=
    2: C355C10243E611E8843B4E66C4F9AE02.roa
	hash rlN8lX1cXkIK5vUCK7b2PkeIbSzp+7YnrkS/zmfdQGg=

--
$ test-mft -p rpki.apnic.net/member_repository/A919C233/1FDAFD6243E611E8BC415F65C4F9AE02/28IYSbtMFwTSMZPEG3DGaxqWVi8.mft | openssl x509 -text
Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 4424 (0x1148)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A919C233/serialNumber=DBC21849BB4C1704D23193C41B70C66B1A96562F
        Validity
            Not Before: Jan 25 05:53:44 2022 GMT
            Not After : Jan 27 05:53:44 2022 GMT
        Subject: CN=61ef9069-5ce5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:f1:66:a2:40:8c:ea:5c:a7:96:ad:6b:55:39:
                    41:80:aa:8f:de:74:d0:8c:35:cc:82:60:bd:f0:b8:
                    44:71:bd:40:c6:d0:6d:a7:60:f7:35:9e:ce:75:0d:
                    5f:e7:9e:b8:b5:62:0f:57:69:34:12:81:eb:31:cb:
                    1c:24:77:3e:d5:85:44:4f:58:42:47:1b:93:d9:44:
                    64:30:9a:76:55:ca:4c:99:47:e0:cc:73:a8:e4:9a:
                    8e:f3:b1:0a:60:f3:a3:a0:6f:20:e7:e9:99:d7:ab:
                    9e:59:38:b2:e1:e9:bc:b0:87:40:93:d2:20:15:a0:
                    a4:75:03:6f:47:a1:cc:ea:3f:5f:c4:25:e0:dd:c4:
                    ae:8a:fc:1c:8d:51:04:01:7f:f0:a3:a1:c8:e2:94:
                    8e:74:83:34:63:c3:8f:78:c4:90:ae:f8:c7:99:34:
                    d8:1c:b7:68:e9:79:c5:12:c5:6d:12:5d:0d:86:57:
                    e0:e2:e8:75:28:e3:de:ef:41:59:29:ca:4d:d0:a0:
                    8b:a5:6d:6f:48:de:9d:91:98:e9:0b:86:d4:d2:19:
                    75:ac:bf:41:d1:50:4c:55:e0:df:5b:64:86:fd:9a:
                    f8:b9:38:4d:01:c7:05:84:42:11:36:79:25:76:4d:
                    6d:15:09:70:70:05:9b:3e:cd:b7:c7:6b:01:22:ae:
                    86:19
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier: 
                0C:7D:F7:A3:C0:B4:CE:FC:8A:7F:42:22:CF:95:8A:E3:11:31:40:12
            X509v3 Authority Key Identifier: 
                keyid:DB:C2:18:49:BB:4C:17:04:D2:31:93:C4:1B:70:C6:6B:1A:96:56:2F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points: 

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A919C233/1FDAFD6243E611E8BC415F65C4F9AE02/28IYSbtMFwTSMZPEG3DGaxqWVi8.crl

            Authority Information Access: 
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/28IYSbtMFwTSMZPEG3DGaxqWVi8.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access: 
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919C233/1FDAFD6243E611E8BC415F65C4F9AE02/28IYSbtMFwTSMZPEG3DGaxqWVi8.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         2a:32:b4:77:f8:d7:19:1a:80:bd:6f:ff:3f:7b:7d:d9:ab:b3:
         9c:e1:74:c0:f9:1e:9f:23:80:ac:e1:e8:0e:b2:52:aa:18:e6:
         a9:49:ee:1d:10:34:d4:74:65:5f:ca:f4:bc:a8:9c:f0:ff:b2:
         d0:d6:26:26:32:0f:bf:87:0e:46:26:a7:fa:eb:d2:44:a8:d0:
         d9:69:af:97:df:fc:5d:85:94:29:1c:f8:75:7d:68:11:b9:8e:
         4e:e8:56:b8:31:89:98:36:eb:f1:56:c4:3b:21:b5:85:11:16:
         b4:c9:35:f2:d7:ff:72:77:64:8b:f0:57:b7:73:b3:18:4b:72:
         94:9b:85:d6:60:38:10:e9:60:1b:94:c6:d1:1f:bf:96:55:8b:
         06:63:0d:ab:27:89:6e:ab:a4:ea:da:ce:03:1a:a8:da:84:7d:
         db:76:d2:60:e4:af:58:73:2c:8f:0c:b0:40:1a:13:98:5c:80:
         45:72:2d:76:80:44:d8:6d:99:b8:99:f7:4f:d6:d8:8b:90:d1:
         97:c8:57:51:a0:2d:53:e7:8b:93:b9:16:02:c7:a3:d8:64:a8:
         c1:cd:12:8b:ce:06:b3:9a:e1:28:0d:70:53:5c:14:92:14:29:
         88:30:cb:79:9a:f0:66:c5:85:97:b6:6c:e8:ea:2c:b3:f7:9e:
         79:6a:a7:e0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Generated at Tue Jan 25 08:40:02 2022 by LibreSSL & rpki-client.