RPKI Manifest
Location:                 rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft (download)

Subject key identifier:   31:81:BB:66:25:B6:2A:10:92:C5:20:15:81:E4:5B:7B:70:23:24:84
Authority key identifier: 0B:9C:CA:90:DD:0D:7A:8A:37:66:6B:19:21:7F:E0:D8:40:37:B7:A2
Manifest Number:          96
Files:
    1: C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
	hash H9/rXH2T8xj7M/8NtpftiQYQR2wxn9OjbTod75GOJsA=
    2: mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
	hash R66OXj3Pbc4F5WVn5stkus5uD0MKRpCTF24ivOTi7Jw=

--
$ test-mft -p rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft | openssl x509 -text
Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 189 (0xbd)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=apnic-rpki-root-iana-origin
        Validity
            Not Before: Jul  5 22:29:25 2021 GMT
            Not After : Aug 12 22:29:25 2021 GMT
        Subject: CN=60e387c5-cead
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d0:50:70:49:30:0c:9d:7c:80:ae:63:04:da:7f:
                    7f:44:cf:90:c5:3c:0c:8c:c8:40:c1:c1:29:b9:7f:
                    4f:1f:37:96:78:77:74:b9:60:27:26:10:44:cb:26:
                    e9:f2:fa:2b:f9:88:c7:46:48:f0:e6:ed:3a:bd:1c:
                    50:26:01:18:71:37:d7:4f:5a:8f:9c:68:4a:c4:3c:
                    6f:7b:b5:51:38:60:b5:6c:13:04:68:b8:ff:94:7d:
                    de:9a:02:af:b2:0c:66:30:63:60:55:a5:65:ed:a4:
                    dd:e2:98:ac:5b:51:6b:73:0b:5e:42:71:93:ed:bf:
                    37:c9:09:cd:aa:f3:72:bf:a4:36:2b:d9:20:7a:45:
                    01:e2:e5:e4:cc:e7:72:c7:a3:47:48:b4:88:cd:e2:
                    ec:d0:35:21:f5:32:73:65:ad:a4:ad:87:78:f6:b7:
                    bf:94:ef:ba:59:f9:66:2c:4a:a4:59:9a:61:4e:eb:
                    f6:7b:5d:37:77:ca:47:c2:ee:5e:f4:35:1c:94:a5:
                    66:31:30:c7:50:9c:ee:f5:67:69:d4:a1:d6:6c:b5:
                    30:cb:8a:78:ef:88:9e:5d:52:0b:39:b7:9b:39:da:
                    8f:3b:ac:26:a1:28:5f:5e:63:61:80:ab:6d:b3:ca:
                    d8:05:c0:85:90:47:8d:4e:09:1a:23:97:53:b6:6c:
                    14:29
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier: 
                31:81:BB:66:25:B6:2A:10:92:C5:20:15:81:E4:5B:7B:70:23:24:84
            X509v3 Authority Key Identifier: 
                keyid:0B:9C:CA:90:DD:0D:7A:8A:37:66:6B:19:21:7F:E0:D8:40:37:B7:A2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points: 

                Full Name:
                  URI:rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl

            Authority Information Access: 
                CA Issuers - URI:rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access: 
                Signed Object - URI:rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft

            sbgp-autonomousSysNum: critical
                0.....
            sbgp-ipAddrBlock: critical
                0.0.......0.......
    Signature Algorithm: sha256WithRSAEncryption
         74:7e:d2:7e:9f:7b:f0:ea:71:40:18:3e:95:3f:6c:9a:55:0f:
         f6:94:2d:c2:f0:51:cb:a8:59:ee:6c:58:5f:ca:c5:cf:2c:96:
         8f:77:34:87:c6:39:0f:74:d8:cb:4c:2e:ca:ba:ee:b8:f4:9e:
         cd:43:c5:f8:28:cc:9e:28:1a:a8:04:48:28:5e:8e:73:8e:c3:
         13:53:7f:b3:4a:88:ce:96:6d:32:44:a4:02:25:31:ba:72:90:
         4a:e8:51:57:f6:fa:2d:62:be:68:e4:32:20:37:ad:25:7f:bf:
         cc:1b:f2:cb:21:09:bd:2d:91:4e:75:ec:7f:df:b2:2d:b8:1c:
         af:3c:91:0c:af:ff:67:7c:cf:c6:a4:00:6b:cc:39:66:31:ea:
         96:cc:69:38:83:0c:44:cd:67:fe:82:36:a9:35:37:93:5e:a3:
         e9:6b:fe:9e:8e:bf:ef:29:01:68:82:f1:9a:ce:90:60:ea:41:
         f2:ba:ed:15:f2:26:63:a2:e8:a0:25:9e:e0:74:65:a7:c9:4e:
         6f:84:fe:b6:80:58:59:b5:f7:0b:04:46:5a:45:72:7a:e9:b1:
         ff:19:4c:8b:11:19:89:03:bc:0f:13:ea:c2:0e:b4:b9:c4:ce:
         9a:48:b0:b8:89:4b:83:bf:30:12:58:93:8a:86:f8:78:34:c1:
         78:19:f0:71
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Generated at Wed Aug 4 01:28:04 2021 by LibreSSL & rpki-client.