RPKI Manifest
Location:                 rpki.apnic.net/member_repository/A91FBD28/26758BB43AB511E7B8609F1CC4F9AE02/bkhhCqDmsOLF7tQC3QeDOqc-fqI.mft (download)

Subject key identifier:   91:2A:AF:50:6C:7C:52:62:2A:8E:2C:17:D2:32:D0:3F:EC:C6:70:8A
Authority key identifier: 6E:48:61:0A:A0:E6:B0:E2:C5:EE:D4:02:DD:07:83:3A:A7:3E:7E:A2
Manifest Number:          16A8
Files:
    1: bkhhCqDmsOLF7tQC3QeDOqc-fqI.crl
	hash 9pWrwbP8d1hdaMMaPMgdTmcZFp/MPgb5ohVgxnncvgc=
    2: D8B92776A16A11EAA517B11EC4F9AE02.roa
	hash IUFW+lvDpacTKvygerFJUqrXoaWF2TD/2eEj/r6L6H8=

--
$ test-mft -p rpki.apnic.net/member_repository/A91FBD28/26758BB43AB511E7B8609F1CC4F9AE02/bkhhCqDmsOLF7tQC3QeDOqc-fqI.mft | openssl x509 -text
Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 5815 (0x16b7)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91FBD28/serialNumber=6E48610AA0E6B0E2C5EED402DD07833AA73E7EA2
        Validity
            Not Before: Jan 25 16:19:56 2022 GMT
            Not After : Jan 27 16:19:56 2022 GMT
        Subject: CN=61f0232d-3a01
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:6a:f4:f8:8f:fd:10:5a:a8:05:07:8c:54:cb:
                    1a:da:bf:76:9b:fe:51:ab:60:5a:74:a2:da:d2:51:
                    9d:07:a5:98:88:7d:27:e2:52:76:f8:74:1a:4c:2a:
                    5f:f5:b2:a3:0d:76:c3:75:53:dd:8b:22:b7:3f:d8:
                    9a:23:44:fc:b0:81:1a:88:42:4c:ee:8b:9e:b0:a0:
                    0c:ff:5b:cc:85:31:1e:9f:aa:49:5d:23:4c:b9:e7:
                    39:44:04:bc:f7:f6:1e:f5:4f:98:05:b8:95:9f:84:
                    e0:fa:0c:49:79:99:e3:68:16:20:3a:88:a7:0e:90:
                    fc:08:b7:ab:27:f2:36:56:f3:4e:5b:d3:09:5b:5f:
                    3e:e1:62:cc:6c:f7:0f:5f:e0:a4:6c:4c:61:3b:b7:
                    3f:00:34:83:53:90:9b:00:d7:25:e9:96:c8:ce:0a:
                    07:d5:d6:43:b2:37:84:d1:ab:3e:62:9e:d7:44:65:
                    22:97:3f:1b:e8:db:42:a5:c4:b4:e8:3c:7d:df:5d:
                    5e:34:37:42:22:dd:7d:77:56:a5:0a:a6:80:de:07:
                    1a:7b:d1:6d:2a:2b:d0:1e:10:57:76:1d:1c:f4:6c:
                    e4:d4:01:0d:48:f5:c5:50:2f:ca:69:4d:6e:56:f5:
                    b5:3f:d5:ff:fa:82:3c:aa:dc:cc:48:bc:03:ae:36:
                    40:8d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier: 
                91:2A:AF:50:6C:7C:52:62:2A:8E:2C:17:D2:32:D0:3F:EC:C6:70:8A
            X509v3 Authority Key Identifier: 
                keyid:6E:48:61:0A:A0:E6:B0:E2:C5:EE:D4:02:DD:07:83:3A:A7:3E:7E:A2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points: 

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91FBD28/26758BB43AB511E7B8609F1CC4F9AE02/bkhhCqDmsOLF7tQC3QeDOqc-fqI.crl

            Authority Information Access: 
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/bkhhCqDmsOLF7tQC3QeDOqc-fqI.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access: 
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91FBD28/26758BB43AB511E7B8609F1CC4F9AE02/bkhhCqDmsOLF7tQC3QeDOqc-fqI.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         40:71:46:e1:7f:b6:71:17:2f:a8:22:a8:5d:29:df:ce:bb:4c:
         9b:3b:6a:a9:95:05:92:72:e9:9c:95:17:63:8e:31:40:2b:d2:
         9f:3c:50:e7:a3:b0:64:3f:93:57:dc:48:41:04:5a:fd:9d:d3:
         67:b1:bb:28:81:83:77:e6:63:12:fe:6d:eb:2e:f5:6c:64:5b:
         1c:a4:92:c2:c9:2e:8f:d9:32:3b:77:23:80:e3:0d:15:a0:bb:
         17:96:bf:14:5f:c5:62:ba:d8:fa:f1:ff:93:21:8b:01:7e:e8:
         15:36:c2:31:81:5c:3c:c8:44:1e:c5:ab:a8:e6:60:0f:a5:e0:
         14:c5:05:4f:7b:5b:7a:0a:7e:61:e4:f9:94:95:c9:89:04:a9:
         e4:11:6f:34:ff:25:25:52:78:d0:6d:96:db:e0:91:ff:31:ef:
         c3:35:ee:12:74:69:34:35:b9:7d:61:a5:35:0c:ad:bc:87:ac:
         ca:b9:86:43:b8:4e:93:44:af:e4:9c:0a:cc:f4:4a:64:19:db:
         76:52:c4:96:df:b1:0a:01:53:6c:51:fc:77:6d:b2:ff:88:67:
         7d:ea:32:29:b3:e4:43:b2:1c:1d:83:47:0f:6b:64:2e:d9:63:
         e6:54:be:35:37:ec:51:4f:0b:90:a2:d4:30:dc:8c:55:70:61:
         a5:ab:cc:a0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Generated at Tue Jan 25 18:49:22 2022 by LibreSSL & rpki-client.