RPKI Manifest
Location:                 rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft (download)

Subject key identifier:   57:FE:8F:02:B0:8A:D3:56:A4:C5:F7:35:11:EF:37:FD:84:F8:82:98
Authority key identifier: 0B:9C:CA:90:DD:0D:7A:8A:37:66:6B:19:21:7F:E0:D8:40:37:B7:A2
Manifest Number:          9A
Files:
    1: C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
	hash 1XA7c+BdDXgZ0GxtwSN0w2Pc0iMuSyyX5jFCoKgw7Dg=
    2: mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
	hash NGYgYgm1UP2tOpG06wFhNEtXz/MijUaK5swuJRUSaJ4=

--
$ test-mft -p rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft | openssl x509 -text
Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 194 (0xc2)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=apnic-rpki-root-iana-origin
        Validity
            Not Before: Sep 20 22:23:27 2021 GMT
            Not After : Oct 27 22:23:27 2021 GMT
        Subject: CN=614909df-eb64
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d4:55:60:41:0b:44:57:15:a1:30:81:58:49:a9:
                    97:54:7f:c3:b8:df:4a:97:6e:24:6c:77:44:29:f2:
                    ac:13:60:af:5c:c2:a3:5e:94:72:87:4a:dd:87:6d:
                    a8:18:93:34:d7:f7:02:90:32:c2:41:19:ab:0d:b1:
                    c5:ee:fe:e8:e3:cf:4d:74:11:df:c3:7c:71:8f:8e:
                    aa:56:1e:36:b9:e7:9f:76:52:82:1a:8f:2f:f9:fb:
                    87:73:64:95:41:46:6e:bf:dc:a5:86:7e:00:c2:a3:
                    02:7e:1d:e6:0f:9e:b9:df:24:45:ba:46:44:ff:44:
                    d3:68:e7:64:ca:2e:46:28:b2:2f:f7:72:d3:94:72:
                    94:46:9e:91:55:54:b2:7e:22:e7:c4:ec:a7:85:8f:
                    d0:a1:14:7b:e3:cf:32:a2:ac:7c:86:1e:a1:89:60:
                    b7:60:2b:68:e1:76:ce:1e:be:fb:82:71:5a:3d:a9:
                    4b:ee:b8:1c:ce:b5:23:f1:6d:08:86:a5:1b:78:7e:
                    69:71:87:ca:6e:94:34:ae:81:92:20:88:0a:db:49:
                    e5:7d:24:33:69:f8:f5:de:b7:b3:11:3e:e3:36:be:
                    93:77:c8:b8:15:61:83:b6:f1:d0:19:2c:31:aa:15:
                    1a:9a:68:be:18:3b:29:23:5a:d3:55:cd:be:7e:27:
                    e4:f1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier: 
                57:FE:8F:02:B0:8A:D3:56:A4:C5:F7:35:11:EF:37:FD:84:F8:82:98
            X509v3 Authority Key Identifier: 
                keyid:0B:9C:CA:90:DD:0D:7A:8A:37:66:6B:19:21:7F:E0:D8:40:37:B7:A2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points: 

                Full Name:
                  URI:rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl

            Authority Information Access: 
                CA Issuers - URI:rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access: 
                Signed Object - URI:rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         a8:f0:97:d4:c2:eb:dc:4d:d2:83:a2:7c:a4:ff:69:dd:5e:fd:
         48:59:c4:50:a3:38:a8:6f:14:2b:86:85:bc:69:7d:56:52:0e:
         e9:02:d8:f1:21:90:b4:26:84:6f:0e:54:01:9f:65:3d:2a:f2:
         d4:ce:fa:eb:41:54:98:05:b9:8e:0e:c6:22:9d:8c:0f:08:f8:
         56:4f:6e:58:be:c3:74:0a:e8:2e:36:a0:ae:8a:b2:a1:be:23:
         87:25:6d:d4:85:19:ff:51:1b:81:0a:f5:b1:26:e2:14:7f:2c:
         16:a7:52:3f:41:15:5d:d6:8f:1b:9c:e5:ec:d8:d2:77:f4:d2:
         6e:6d:7b:54:6d:cd:73:12:d7:61:7b:b6:a2:a9:7f:bb:a8:23:
         63:a8:48:39:f5:51:f1:c7:44:fb:74:c5:30:07:b6:50:e6:62:
         72:21:56:42:e5:7e:c9:19:50:39:9a:8c:40:f9:c6:25:4e:70:
         9d:42:9a:00:ab:e0:fd:1a:a3:95:6e:87:8d:bd:39:07:30:aa:
         68:c0:b1:a7:00:49:56:1d:52:5c:4f:d5:e1:dc:c1:0b:c8:68:
         fd:9c:57:fb:ac:7f:36:8e:04:d0:d9:3c:a8:9b:4f:80:98:cd:
         c2:27:a0:85:19:89:3b:6b:07:01:f5:52:65:42:18:ea:f0:7c:
         6d:2c:95:71
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Generated at Sun Sep 26 12:49:51 2021 by LibreSSL & rpki-client.