RPKI Manifest
Location:                 rpki.apnic.net/member_repository/A91FCE8A/006FE54A5DE311E6A5AA364DC4F9AE02/1CRFNmfW_LLYyFTWpZt4Hf_7UsY.mft (download)

Subject key identifier:   FA:03:B3:09:9C:AE:DE:B0:35:FB:43:A7:02:69:6B:D3:C7:4D:59:A6
Authority key identifier: D4:24:45:36:67:D6:FC:B2:D8:C8:54:D6:A5:9B:78:1D:FF:FB:52:C6
Manifest Number:          1AF7
Files:
    1: 1CRFNmfW_LLYyFTWpZt4Hf_7UsY.crl
	hash FAEQVCvuUOQTolILMhlcAnQh17kHaVdmZxSruqLuFzA=
    2: 7D3258F05DE411E6A6B7E453C4F9AE02.roa
	hash pTqNW1mJXyhclqpF+dkyFYXbM2BPupaDulWhFueQuds=

--
$ test-mft -p rpki.apnic.net/member_repository/A91FCE8A/006FE54A5DE311E6A5AA364DC4F9AE02/1CRFNmfW_LLYyFTWpZt4Hf_7UsY.mft | openssl x509 -text
Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 6910 (0x1afe)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91FCE8A/serialNumber=D424453667D6FCB2D8C854D6A59B781DFFFB52C6
        Validity
            Not Before: Jan 25 16:50:13 2022 GMT
            Not After : Jan 27 16:50:13 2022 GMT
        Subject: CN=61f02a46-2f0b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:21:09:bc:f0:00:51:6e:f8:bb:75:ea:1f:f5:
                    9a:b6:e7:b6:2e:33:48:2a:31:a8:54:2a:2e:c7:91:
                    12:66:5a:aa:ad:fb:a0:2e:f6:cf:6a:3e:68:4d:3f:
                    f5:28:96:49:8d:70:2c:dc:26:5e:1b:bb:aa:2f:2f:
                    a3:91:90:41:45:6d:16:19:35:7e:90:7b:f5:f6:77:
                    54:56:69:49:a2:7f:c7:24:42:7a:c3:f6:eb:e9:27:
                    fa:53:1d:cb:b9:35:95:78:79:7a:5f:f2:f5:8c:12:
                    1e:0c:c3:6d:62:86:2f:8d:8f:40:1e:67:c4:c7:a1:
                    d6:10:82:b1:6f:89:f5:a6:bf:0e:1c:8a:b5:d1:6e:
                    2d:29:10:27:bf:c6:4c:5a:a6:6e:c0:9c:c3:a6:b0:
                    de:ce:07:f4:55:66:79:59:9d:2d:d2:74:ed:e2:15:
                    e6:e6:44:d2:73:48:a6:d4:11:13:5b:83:af:07:f0:
                    3b:30:2c:83:82:0c:af:3b:52:65:d4:a2:31:90:bf:
                    9e:87:1e:70:9d:5c:61:d4:fd:5c:68:7b:3a:62:07:
                    f7:d3:93:4e:26:3a:cd:33:4e:ab:43:ff:f4:af:de:
                    c7:de:50:c0:17:00:67:e8:4c:c9:8a:50:36:26:fe:
                    b5:50:d7:f4:21:fe:75:41:2a:cf:28:05:be:52:4d:
                    2a:61
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier: 
                FA:03:B3:09:9C:AE:DE:B0:35:FB:43:A7:02:69:6B:D3:C7:4D:59:A6
            X509v3 Authority Key Identifier: 
                keyid:D4:24:45:36:67:D6:FC:B2:D8:C8:54:D6:A5:9B:78:1D:FF:FB:52:C6

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points: 

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91FCE8A/006FE54A5DE311E6A5AA364DC4F9AE02/1CRFNmfW_LLYyFTWpZt4Hf_7UsY.crl

            Authority Information Access: 
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1CRFNmfW_LLYyFTWpZt4Hf_7UsY.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access: 
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91FCE8A/006FE54A5DE311E6A5AA364DC4F9AE02/1CRFNmfW_LLYyFTWpZt4Hf_7UsY.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         38:f2:44:77:49:7e:66:5b:11:2d:f2:46:38:cc:9e:1c:17:5c:
         09:e4:e2:d1:e7:74:85:ff:d4:25:23:e8:05:bf:65:8b:9e:f1:
         5b:55:d0:02:22:e1:99:6d:b5:63:f1:b8:8e:10:84:22:cf:dd:
         8e:94:9d:1a:5e:a7:c4:3e:1a:06:fa:9a:3c:14:3e:f2:99:01:
         70:c5:37:cc:68:62:f6:2a:0a:2c:21:05:14:bc:53:d0:f1:91:
         fa:90:89:f6:51:8f:aa:58:e6:9e:68:ec:94:6f:4b:0c:0b:ce:
         28:51:7b:3d:41:44:9b:67:e0:af:24:86:42:8f:05:a8:bc:bd:
         f7:26:ee:92:10:ac:1f:52:67:0b:33:f0:f5:c9:2f:41:12:05:
         08:e6:7c:15:65:e5:06:f5:57:0c:77:dd:48:47:d4:f5:ee:d1:
         e3:19:ed:fd:de:4c:fe:35:bb:d2:14:7e:50:fb:0b:6b:c4:12:
         72:d8:c1:cf:d4:67:16:16:fb:70:8e:a0:b8:a2:a9:41:6a:78:
         fa:7e:73:e6:ae:5e:1b:7e:c1:3b:3e:1a:0a:a6:8b:7a:1a:70:
         e8:58:17:54:10:e6:72:35:9a:d2:b4:d7:ca:6f:40:e6:db:c6:
         15:dd:9f:70:5c:f7:a1:50:8a:24:ec:45:18:bc:2f:0b:75:ee:
         ca:fd:fa:c1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Generated at Tue Jan 25 18:49:23 2022 by LibreSSL & rpki-client.