RPKI Manifest
Location:                 rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft (download)

Subject key identifier:   B8:98:4E:36:07:DD:2F:29:58:46:08:FA:21:BD:9F:8A:49:C7:E1:99
Authority key identifier: 0B:9C:CA:90:DD:0D:7A:8A:37:66:6B:19:21:7F:E0:D8:40:37:B7:A2
Manifest Number:          9E
Files:
    1: C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
	hash dD7cceAv6oU+fHCJEHmdtR1JkQSo2nKEkh6oTo0zHM0=
    2: mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
	hash ZZJVMY8bKUiYcYynkLUmuO8xTTCbd0TTORHyiUqyjIk=

--
$ test-mft -p rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft | openssl x509 -text
Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 201 (0xc9)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=apnic-rpki-root-iana-origin
        Validity
            Not Before: Jan 12 22:49:15 2022 GMT
            Not After : Feb 19 22:49:15 2022 GMT
        Subject: CN=61df5aeb-1022
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e5:ac:85:ca:36:ce:3d:6f:66:7b:46:8a:88:02:
                    ea:7a:df:71:90:5c:a0:71:3a:68:b8:3b:9c:2c:28:
                    62:73:27:c3:46:de:f7:0c:a9:68:1f:fc:fe:57:85:
                    58:e8:6b:f4:67:15:e5:7c:c4:68:8c:6c:3a:d8:60:
                    81:82:05:57:e2:f1:5c:5c:b8:0b:b7:78:34:7e:e7:
                    97:b6:98:67:23:3a:75:c5:db:ad:de:5b:ed:0d:b9:
                    a9:88:20:8a:98:02:0e:92:11:1b:f5:48:f9:cf:67:
                    e8:2d:49:81:b8:db:2d:49:04:f4:03:f7:c6:13:2c:
                    97:db:53:37:0d:77:7e:86:03:ab:ff:43:4a:55:81:
                    48:b3:8a:9a:0e:bd:33:6b:ca:95:a6:e1:d5:51:d4:
                    3e:e4:2c:ec:6b:fb:05:97:7f:4c:16:26:79:e2:e2:
                    54:36:ba:8d:ea:a8:14:f7:dd:97:c6:a6:93:08:79:
                    bd:d9:93:3d:4e:88:d6:12:ed:e6:d0:9d:f0:25:e0:
                    59:2e:17:31:0d:57:92:12:fb:f8:ed:9a:59:49:30:
                    e7:24:c4:9d:d2:9a:63:94:9c:52:c1:1a:35:8b:e7:
                    73:f5:fb:ce:d9:df:58:75:b7:7b:46:47:bc:14:2a:
                    84:dd:74:de:77:d2:53:60:ae:06:ee:1e:6e:c9:cc:
                    01:bd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier: 
                B8:98:4E:36:07:DD:2F:29:58:46:08:FA:21:BD:9F:8A:49:C7:E1:99
            X509v3 Authority Key Identifier: 
                keyid:0B:9C:CA:90:DD:0D:7A:8A:37:66:6B:19:21:7F:E0:D8:40:37:B7:A2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points: 

                Full Name:
                  URI:rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl

            Authority Information Access: 
                CA Issuers - URI:rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access: 
                Signed Object - URI:rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         54:33:6f:4c:e2:a4:b7:e0:13:f7:70:a9:34:f0:0a:f4:f6:2c:
         89:b3:46:d6:68:e3:f7:b6:18:50:d3:2a:a6:2b:3c:0f:65:d7:
         8b:1b:db:c6:6b:a9:3d:ee:8a:ee:82:d1:b8:ce:50:3b:86:17:
         2c:76:eb:d1:ef:d3:71:2a:4c:90:b4:e8:9e:65:50:a5:e0:5f:
         c2:da:d1:9e:09:72:7a:99:ce:b9:e9:54:fa:e3:c4:75:b0:22:
         1d:da:04:86:b6:91:eb:2c:81:d2:19:1b:92:55:98:dd:18:85:
         a0:a2:55:b8:d5:34:5d:ae:a6:15:0e:04:4b:76:31:b6:43:c8:
         5f:ba:53:9e:ac:ce:dd:78:54:3a:b2:cb:0c:5e:c7:45:61:94:
         0a:e6:2d:4a:f3:ff:d1:99:c8:78:8b:27:72:3a:d8:71:35:4f:
         a3:a2:02:f1:7c:50:9f:aa:a2:40:9d:11:9e:85:c1:9e:5a:7a:
         ea:8a:af:67:37:ee:9c:d9:14:83:5b:b9:de:ee:09:1a:ed:2e:
         b9:89:57:57:cc:bb:44:42:5d:19:4d:49:36:80:a3:a8:6f:ed:
         42:19:0e:ae:8d:0b:f6:a3:90:9e:54:fa:c8:0e:e7:e7:8f:c1:
         77:b3:8a:d1:33:98:36:a2:d5:07:4b:05:17:bf:ce:2f:76:d7:
         10:cf:3f:e2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Generated at Thu Jan 13 01:49:09 2022 by LibreSSL & rpki-client.