RPKI Manifest
Location:                 rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft (download)

Subject key identifier:   B3:ED:62:91:DE:EB:9E:A7:C7:BF:BA:B4:83:C4:62:6F:EA:26:5E:A0
Authority key identifier: 98:14:2C:9D:0B:41:A3:B9:FB:60:3D:76:98:48:23:6F:D1:F3:19:24
Manifest Number:          010A
Files:
    1: mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
	hash Cf+0VIse/13vZ+VpIkZWBXA4cPfLTo2GgQWz45o6+6o=
    2: DmWk9f02tb1o6zySNAiXjJB6p58.cer
	hash wfctfJwyttou1tuL6lBz5APZpBqUBhztJgzXf7K+ZWc=
    3: dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
	hash 7luC5+jQ1jQaaAO0Qd1zV3oVTuKkCF8ZV9tTHS+glgU=
    4: NI-bm5KnLM_Tbzxw81Z1czzI6iI.cer
	hash zqV/b8HKvCzkjzhSxXnRyDXXcFr9HcOowMwk4pjsD3Q=
    5: DPzneFf88B852ZpitKpi5hWedvg.cer
	hash okC/smu0f6UErV7ccTXTVZwdfayO5D8fQQ2qsHrJ44Q=
    6: lqhe9LjK9dTDWhV_ThJe5JS6-Tk.cer
	hash uvFYvThPzNminOAu2zahm6aYbSGYn1UsqXlQyoruUP0=

--
$ test-mft -p rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft | openssl x509 -text
Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 544 (0x220)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=apnic-rpki-root-intermediate/serialNumber=98142C9D0B41A3B9FB603D769848236FD1F31924
        Validity
            Not Before: Jan 13 22:58:06 2022 GMT
            Not After : Feb 20 22:58:06 2022 GMT
        Subject: CN=61e0ae7e-d4a5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e2:b5:4a:bc:c8:bd:cb:00:c5:5e:f7:90:e5:b8:
                    0a:17:9c:e0:d0:96:ed:86:29:26:01:e0:3d:f5:ac:
                    da:cf:e8:3f:f1:e9:33:da:32:ab:2e:8c:16:29:26:
                    06:77:84:98:70:4e:d2:c0:cf:70:b4:74:ee:f1:ce:
                    88:64:ae:d9:ca:2e:f6:e4:c0:78:ad:95:c5:e3:93:
                    c2:ba:45:31:58:02:7f:4c:ad:8d:3c:4a:dc:c4:44:
                    f9:5c:43:90:d6:5e:93:28:bb:3c:08:b4:14:4b:38:
                    07:07:a2:1c:a3:1a:06:e4:24:d3:7e:da:2e:33:42:
                    f2:ca:d3:39:89:d6:2d:94:fb:5c:06:90:3f:66:0c:
                    b2:95:1a:5e:a0:5d:25:86:21:5a:1f:3c:21:83:d6:
                    44:b8:7f:7e:24:06:c1:0c:59:c1:e3:50:53:d6:86:
                    bb:c3:c2:21:4f:a7:37:b8:5b:0c:59:dc:1a:7e:17:
                    ec:3a:2c:34:8e:5e:d5:52:51:59:8c:29:18:26:24:
                    98:51:96:aa:ca:b2:a2:1b:e5:78:b2:fa:1e:76:96:
                    b5:21:00:21:9a:28:f7:82:5c:46:5f:31:2e:04:fa:
                    35:4f:31:15:8d:e2:1f:cc:62:51:d1:96:45:89:82:
                    21:d5:6d:30:94:6a:42:1f:95:2d:be:eb:ba:fc:ec:
                    21:19
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier: 
                B3:ED:62:91:DE:EB:9E:A7:C7:BF:BA:B4:83:C4:62:6F:EA:26:5E:A0
            X509v3 Authority Key Identifier: 
                keyid:98:14:2C:9D:0B:41:A3:B9:FB:60:3D:76:98:48:23:6F:D1:F3:19:24

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points: 

                Full Name:
                  URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl

            Authority Information Access: 
                CA Issuers - URI:rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access: 
                Signed Object - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         7d:c8:64:0f:79:fa:7d:bb:19:f1:e7:84:01:ff:2b:92:8e:c5:
         1c:92:81:b1:2d:3a:b9:59:80:29:71:c9:9c:17:8a:18:8c:e3:
         66:8a:c6:90:82:e7:a8:81:03:54:fd:bb:51:02:ff:00:87:27:
         34:fb:4c:2f:3d:a6:24:eb:39:63:e9:61:3d:9f:ca:f5:62:81:
         47:a5:21:1c:c2:15:5f:a1:f9:7d:e1:3e:e9:06:95:fe:0c:7f:
         c3:52:88:58:cf:bd:fc:9f:cf:ff:de:d1:64:45:e1:75:01:c7:
         e9:24:9e:0b:ca:e1:c9:f2:22:6e:bb:a8:27:34:1e:a8:46:b6:
         8e:36:e6:01:cb:ff:cb:2b:e0:1f:5a:4d:75:10:7f:96:66:d2:
         73:ab:7e:0d:4d:b8:ed:11:7a:89:b4:d2:14:8f:4e:02:22:36:
         06:e2:ea:38:19:92:76:04:91:9a:47:88:ab:f8:ac:54:48:bf:
         8d:20:b7:da:8c:0b:e5:e3:6b:46:3d:79:7e:f1:4d:97:e8:a3:
         1f:d6:26:13:cb:2e:a7:32:e5:6e:af:a8:ae:9b:e2:89:42:c7:
         ec:52:df:7e:07:31:83:ea:eb:02:53:7b:e9:c1:b2:5c:20:7a:
         70:7e:1d:0c:41:51:d9:5e:88:19:e6:50:98:e9:6e:1a:0d:67:
         96:f7:c3:5f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Generated at Fri Jan 14 10:07:41 2022 by LibreSSL & rpki-client.