RPKI Manifest
Location:                 rpki.apnic.net/member_repository/A91F8119/4E2D7A38514011E98D983B61C4F9AE02/UT3TCM11FCJ69R2AXlVApqn10zk.mft (download)

Subject key identifier:   52:7D:16:F8:DC:61:17:9E:CD:59:6E:2A:45:E4:C1:9A:95:45:9A:5A
Authority key identifier: 51:3D:D3:08:CD:75:14:22:7A:F5:1D:80:5E:55:40:A6:A9:F5:D3:39
Manifest Number:          0BEF
Files:
    1: UT3TCM11FCJ69R2AXlVApqn10zk.crl
	hash CM1QUJLcKjxXNGl2vtYmUX9sH1lZF6/AiA/q9nhNzxw=
    2: 8BCB105015EA11EC86834E2FC4F9AE02.roa
	hash v9AJufVZMaalYnlsW5cYKrTUUwKUuhcvvFqsRJiuzRc=

--
$ test-mft -p rpki.apnic.net/member_repository/A91F8119/4E2D7A38514011E98D983B61C4F9AE02/UT3TCM11FCJ69R2AXlVApqn10zk.mft | openssl x509 -text
Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3059 (0xbf3)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91F8119/serialNumber=513DD308CD7514227AF51D805E5540A6A9F5D339
        Validity
            Not Before: Jan 25 16:23:45 2022 GMT
            Not After : Jan 27 16:23:45 2022 GMT
        Subject: CN=61f02411-0cad
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d1:42:6e:cf:d4:2f:b4:aa:d1:bd:aa:92:4d:1d:
                    b2:10:53:86:d2:45:d9:4d:76:96:f3:fc:3a:cc:6e:
                    06:9e:be:b0:2f:c1:e8:a1:8d:70:ad:e1:42:cf:58:
                    b2:0b:1b:37:0b:d4:f9:1c:49:d9:f8:58:dd:a1:d7:
                    e8:ac:60:62:0c:ac:b5:07:e5:bb:57:f0:91:9f:fa:
                    9d:8f:c5:7e:40:5b:1b:90:12:3d:22:a1:7b:b1:cf:
                    57:d1:29:07:c1:9c:0f:3c:d8:40:4f:d6:10:e2:99:
                    bb:a3:88:ca:24:6f:8e:21:6a:bc:67:37:05:8b:7f:
                    38:39:e9:d1:07:4e:39:16:0c:62:9d:4c:e6:80:14:
                    9e:8d:a4:6b:6c:21:26:f3:ef:1d:7b:86:b1:88:cd:
                    d2:92:7d:47:69:57:3c:a0:6e:83:7e:f4:1d:e6:a0:
                    0b:d4:a4:0c:60:60:c7:37:f1:ff:b0:92:48:46:52:
                    81:15:ae:85:4d:74:4e:e9:5b:0b:43:b2:c5:eb:bf:
                    9b:85:09:52:e6:87:24:3d:aa:bb:55:b5:70:bb:80:
                    3e:29:0d:b8:c3:45:7a:9f:63:3e:83:8d:5a:79:04:
                    12:c2:91:39:6d:06:87:00:ba:df:99:70:28:7d:95:
                    ce:d2:48:37:75:88:36:6a:23:99:24:8e:3e:88:5f:
                    bf:e9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier: 
                52:7D:16:F8:DC:61:17:9E:CD:59:6E:2A:45:E4:C1:9A:95:45:9A:5A
            X509v3 Authority Key Identifier: 
                keyid:51:3D:D3:08:CD:75:14:22:7A:F5:1D:80:5E:55:40:A6:A9:F5:D3:39

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points: 

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91F8119/4E2D7A38514011E98D983B61C4F9AE02/UT3TCM11FCJ69R2AXlVApqn10zk.crl

            Authority Information Access: 
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/UT3TCM11FCJ69R2AXlVApqn10zk.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access: 
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F8119/4E2D7A38514011E98D983B61C4F9AE02/UT3TCM11FCJ69R2AXlVApqn10zk.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         43:49:e1:61:bf:00:45:1e:bf:5f:d3:1d:01:bc:43:88:dc:ed:
         40:82:21:50:85:76:7f:af:d4:91:81:c8:df:d7:54:cf:5f:77:
         5c:de:1a:e5:0d:52:62:84:12:52:0d:62:e5:8f:95:35:01:d6:
         5e:11:c1:c6:c6:54:e5:24:4c:61:21:b7:7a:d4:38:65:f8:3f:
         7d:2f:51:fb:67:aa:a7:04:9d:be:82:2a:15:f0:47:42:2d:3c:
         96:9b:ca:9c:ef:f3:dd:ed:3a:3e:e2:3b:fb:db:e6:60:1a:80:
         9c:74:07:01:92:67:e6:12:07:7f:c6:8e:de:fb:f1:48:76:9f:
         65:2f:cf:e6:67:4f:dd:5b:ac:1e:48:75:b2:f4:2c:7f:77:dc:
         25:c3:93:9a:81:19:f4:f0:40:fc:a3:e8:97:e9:41:d1:4a:e4:
         cd:cc:d0:f2:c3:fa:60:d5:c4:b8:9e:46:fc:6c:94:b4:44:08:
         73:b6:f8:03:13:1b:1d:5d:25:38:17:d5:b9:6c:4e:2d:ab:b5:
         ad:0d:de:c6:92:17:f5:ba:b3:68:bc:70:19:f5:21:1b:be:4f:
         93:36:73:80:0d:17:50:7e:03:e0:85:35:09:c6:e8:f1:ec:52:
         34:01:0f:8d:a3:ce:3b:9b:a9:64:97:a7:59:52:b0:a6:76:f8:
         13:8d:d2:40
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Generated at Tue Jan 25 18:49:18 2022 by LibreSSL & rpki-client.