RPKI Manifest
Location:                 rpki.apnic.net/member_repository/A91E6E3D/F5B37EEE225B11E2B3438FBC08B02CD2/CI8D5lLYS8azmzSOgBApu5qhYNE.mft (download)

Subject key identifier:   84:5C:EB:05:0B:DC:12:A2:7C:75:BD:36:13:F9:13:F7:E3:D4:CB:9A
Authority key identifier: 08:8F:03:E6:52:D8:4B:C6:B3:9B:34:8E:80:10:29:BB:9A:A1:60:D1
Manifest Number:          308D
Files:
    1: CI8D5lLYS8azmzSOgBApu5qhYNE.crl
	hash PG2DQtZRfVGgQ7ehQXe1EncnrhTYwDuD9U46ceBa5vg=
    2: E4C4C8C4B0EA11E5A2DD683CC4F9AE02.roa
	hash 29rgZ8AFQF8BWWXxB5CXGF1Bfq92onfLiEP8wTVD2II=

--
$ test-mft -p rpki.apnic.net/member_repository/A91E6E3D/F5B37EEE225B11E2B3438FBC08B02CD2/CI8D5lLYS8azmzSOgBApu5qhYNE.mft | openssl x509 -text
Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 12445 (0x309d)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91E6E3D/serialNumber=088F03E652D84BC6B39B348E801029BB9AA160D1
        Validity
            Not Before: Jan 25 15:51:03 2022 GMT
            Not After : Jan 27 15:51:03 2022 GMT
        Subject: CN=61f01c67-ecb1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:45:41:32:43:a8:2c:5c:2a:34:39:60:46:8f:
                    e4:20:68:04:33:66:75:87:14:62:c8:76:73:8a:1d:
                    96:d4:14:97:1c:a5:ab:46:9b:df:79:43:55:9d:6a:
                    a2:03:08:c4:31:f0:d5:c3:a5:05:ea:e5:e2:5c:c4:
                    e9:c2:cc:08:7f:d1:4c:ce:08:a9:16:5f:78:6b:ea:
                    30:e0:e6:99:b4:98:47:17:31:83:c3:c3:cb:dd:31:
                    8d:4a:d6:9d:3c:ae:01:d6:09:42:17:e4:51:79:aa:
                    01:de:c5:06:71:d3:51:3e:0f:4c:5b:06:af:56:c3:
                    79:95:12:1e:07:bd:2b:7d:81:11:5f:a4:c5:3a:4f:
                    90:9f:e3:cf:b2:80:23:6f:4c:f5:2c:e9:c6:c8:d9:
                    34:9c:f5:4b:d5:7f:2b:d6:c5:04:b5:d9:e7:0d:65:
                    bd:c0:f8:4e:06:10:a8:e3:46:b1:92:e2:72:a7:ff:
                    6f:2f:c7:63:0f:c8:0d:32:32:d4:cb:07:78:31:66:
                    d7:97:02:35:0d:ab:fe:87:bb:0d:9f:3c:7c:ff:73:
                    db:a1:0d:01:f9:56:ff:d7:15:4c:a4:0f:48:dc:c8:
                    31:c6:52:e6:8f:0f:c3:46:01:db:be:10:78:08:af:
                    05:af:04:85:60:5c:0c:3a:6b:ae:a0:26:ef:64:d1:
                    e4:85
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier: 
                84:5C:EB:05:0B:DC:12:A2:7C:75:BD:36:13:F9:13:F7:E3:D4:CB:9A
            X509v3 Authority Key Identifier: 
                keyid:08:8F:03:E6:52:D8:4B:C6:B3:9B:34:8E:80:10:29:BB:9A:A1:60:D1

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points: 

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91E6E3D/F5B37EEE225B11E2B3438FBC08B02CD2/CI8D5lLYS8azmzSOgBApu5qhYNE.crl

            Authority Information Access: 
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/CI8D5lLYS8azmzSOgBApu5qhYNE.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access: 
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E6E3D/F5B37EEE225B11E2B3438FBC08B02CD2/CI8D5lLYS8azmzSOgBApu5qhYNE.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         b4:59:fc:1a:aa:25:e4:37:c4:0a:d6:56:67:24:81:1d:fe:ec:
         68:77:6d:54:76:fb:ed:e4:5d:ce:4a:e0:06:a2:cb:6e:9a:0b:
         44:e8:13:62:2e:85:74:63:12:c8:fe:81:aa:8b:ce:7a:55:37:
         a0:7b:a3:e7:a6:54:cc:dc:20:56:8b:a1:a6:f8:73:70:5f:1e:
         53:c2:f8:98:f3:d6:ca:93:c7:a4:ae:a9:e5:ba:13:38:f4:32:
         ac:16:7b:b2:42:18:8a:48:48:58:b6:4c:ed:e8:66:54:9f:20:
         ab:86:50:5f:bb:ad:7a:c9:f0:67:7b:8d:f4:26:84:f8:5d:42:
         41:fe:43:22:e1:8d:61:86:b1:d1:a3:11:d9:36:24:ad:7a:13:
         37:67:e2:ef:21:f4:55:31:db:e5:4b:b1:4c:cc:1c:a2:05:85:
         63:f9:c1:f0:db:1b:55:d6:20:c1:cc:3a:29:b4:c6:7c:4f:4a:
         90:62:b4:04:57:9c:c1:e6:cb:75:71:be:a9:33:54:2d:10:f0:
         23:a4:6c:f1:ba:fc:b6:88:90:bb:e8:cb:45:05:2a:f8:a7:d7:
         ae:e9:a3:10:22:02:4d:3b:56:0e:24:61:6a:43:59:e2:5e:5b:
         71:9b:65:f9:a3:cb:82:39:51:5b:35:3b:15:fa:5d:83:d4:5d:
         06:5b:17:0c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Generated at Tue Jan 25 17:26:01 2022 by LibreSSL & rpki-client.