RPKI Manifest
Location:                 rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft (download)

Subject key identifier:   65:BC:5A:07:B6:C9:6D:B0:A1:46:2B:AF:49:BD:39:2B:30:8E:9B:12
Authority key identifier: 0B:9C:CA:90:DD:0D:7A:8A:37:66:6B:19:21:7F:E0:D8:40:37:B7:A2
Manifest Number:          94
Files:
    1: C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
	hash 3RV/ifw2buOPkkdyvHf3xZfINonNLw1vYNFx2i+iJbc=
    2: mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
	hash R66OXj3Pbc4F5WVn5stkus5uD0MKRpCTF24ivOTi7Jw=

--
$ test-mft -p rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft | openssl x509 -text
Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 187 (0xbb)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=apnic-rpki-root-iana-origin
        Validity
            Not Before: Apr 27 22:16:02 2021 GMT
            Not After : Jun  4 22:16:02 2021 GMT
        Subject: CN=60888d22-259b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:d9:46:a1:3f:c9:56:ec:c4:7c:f1:83:4a:d8:
                    59:a6:70:a5:0e:27:9b:2f:24:b9:48:6a:bd:5c:bd:
                    09:9f:70:96:44:b7:b2:20:b8:bf:5c:06:9e:48:19:
                    b1:ee:29:8a:e8:7e:91:62:60:0e:99:d4:0e:d6:c2:
                    04:1d:88:c2:1b:04:28:b6:e7:f3:ab:ba:33:75:0f:
                    90:5e:cf:83:d0:78:6f:51:c1:8f:98:98:2d:b9:04:
                    7d:28:ea:62:30:18:89:d0:ee:95:2a:ab:6a:f3:93:
                    ee:3b:6f:3f:1a:87:e8:8e:c5:c3:35:b0:52:c2:75:
                    81:cc:99:4b:b3:db:d3:54:50:cb:9f:1d:c2:cd:28:
                    9c:69:c5:6d:d7:36:f4:4b:a4:6e:ba:42:10:7c:bf:
                    94:72:b5:0c:8c:4b:f5:c3:49:fb:94:f2:f2:94:80:
                    7a:1b:b8:24:8c:07:49:91:19:0d:f4:4d:76:4a:46:
                    dc:91:9c:49:13:b3:ea:45:48:29:da:9b:c7:7e:0b:
                    e0:a3:63:c6:65:27:1f:37:1e:7c:6f:c4:90:3a:c1:
                    a0:2d:b0:d5:32:5e:ca:f2:72:91:ae:bf:cd:ec:29:
                    b5:38:90:1c:4f:49:e3:88:c6:e8:f5:c9:de:b8:04:
                    6c:5e:6c:d1:e5:a9:dd:01:03:63:b6:88:08:e8:95:
                    d2:51
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier: 
                65:BC:5A:07:B6:C9:6D:B0:A1:46:2B:AF:49:BD:39:2B:30:8E:9B:12
            X509v3 Authority Key Identifier: 
                keyid:0B:9C:CA:90:DD:0D:7A:8A:37:66:6B:19:21:7F:E0:D8:40:37:B7:A2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points: 

                Full Name:
                  URI:rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl

            Authority Information Access: 
                CA Issuers - URI:rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access: 
                Signed Object - URI:rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft

            sbgp-autonomousSysNum: critical
                0.....
            sbgp-ipAddrBlock: critical
                0.0.......0.......
    Signature Algorithm: sha256WithRSAEncryption
         53:e3:dc:96:92:56:d1:d6:5b:d8:76:84:0e:6a:1b:85:bc:90:
         aa:b2:29:da:b6:5e:e3:6f:f6:45:a3:0f:6a:63:3e:42:ff:ae:
         98:b3:b6:04:72:94:9d:02:f6:4e:4e:ed:cb:a9:33:95:b4:83:
         ad:0c:f8:0a:48:a1:11:26:de:98:c0:45:d0:73:a1:0b:a0:55:
         eb:aa:6a:fe:25:ef:17:5b:07:96:a4:94:9f:09:2e:95:a9:9f:
         23:cf:7e:c4:a6:a4:ce:71:73:48:5d:db:e6:a0:47:0b:b7:e6:
         3a:e7:7f:c1:5e:21:e7:bf:49:e2:89:ed:89:30:f0:03:18:a2:
         54:c4:07:8b:e0:b8:6f:d6:93:44:8d:4a:80:72:64:c7:c8:9b:
         d8:f1:b1:aa:e3:31:bb:f8:9a:58:8b:c0:c2:88:04:62:0b:61:
         37:91:d4:3c:67:7b:75:25:02:e0:aa:b8:4a:ea:dc:94:0b:58:
         0f:4d:65:ed:91:55:85:f2:5d:00:7c:9e:d6:21:26:49:b8:f0:
         d0:75:87:92:08:1c:a7:9f:f9:41:c5:c8:64:32:ae:41:8b:f7:
         d1:f3:16:5a:4c:62:7c:59:1f:17:92:e0:fc:91:8f:10:3e:c0:
         57:a1:90:11:89:d1:fa:1c:cd:85:d5:1c:9a:42:b6:24:8b:6b:
         2b:dd:4b:bc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Generated at Tue May 18 08:10:48 2021 by LibreSSL & rpki-client.