$ rpki-client -vvf rpki.apnic.net/member_repository/A91FB924/FED23D821D8B11E286A2E5E608B02CD2/sqo-Olsp4PQc3Vphf3-2o3obkBE.mft File: sqo-Olsp4PQc3Vphf3-2o3obkBE.mft (raw, json) Hash identifier: zyF5EmG6PygkGDq4RzYx+Ni6oZh5XtoUI2RXLnP82o4= Subject key identifier: 04:33:62:DA:15:66:69:05:4A:44:01:A5:6F:2A:6E:3B:14:5B:47:E9 Authority key identifier: B2:AA:3E:3A:5B:29:E0:F4:1C:DD:5A:61:7F:7F:B6:A3:7A:1B:90:11 Certificate issuer: /CN=A91FB924/serialNumber=B2AA3E3A5B29E0F41CDD5A617F7FB6A37A1B9011 Certificate serial: 34DC Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/sqo-Olsp4PQc3Vphf3-2o3obkBE.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91FB924/FED23D821D8B11E286A2E5E608B02CD2/sqo-Olsp4PQc3Vphf3-2o3obkBE.mft Manifest number: 34D5 Signing time: Sat 18 Oct 2025 14:38:57 +0000 Manifest this update: Sat 18 Oct 2025 14:38:56 +0000 Manifest next update: Sat 25 Oct 2025 14:38:56 +0000 Files and hashes: 1: sqo-Olsp4PQc3Vphf3-2o3obkBE.crl (hash: o5hklEVp1uIayYokkikLtGzqGcEvEWC1rCzFbbAlMT0=) 2: DF502EECD44511E984021644C4F9AE02.roa (hash: lhTwffgGoDZ+11LSS1CyopFlM7JUjXizmn+X+Kky/Wk=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91FB924/FED23D821D8B11E286A2E5E608B02CD2/sqo-Olsp4PQc3Vphf3-2o3obkBE.crl rsync://rpki.apnic.net/member_repository/A91FB924/FED23D821D8B11E286A2E5E608B02CD2/sqo-Olsp4PQc3Vphf3-2o3obkBE.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/sqo-Olsp4PQc3Vphf3-2o3obkBE.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 25 Oct 2025 14:38:55 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13532 (0x34dc) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91FB924, serialNumber=B2AA3E3A5B29E0F41CDD5A617F7FB6A37A1B9011 Validity Not Before: Oct 18 14:38:56 2025 GMT Not After : Oct 25 14:38:56 2025 GMT Subject: CN=68f3a680-2f82 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d0:54:d8:cc:66:0a:d8:36:0e:c5:af:2d:e8:be: 50:22:d7:92:70:cc:2f:ca:88:c9:1c:77:1b:6c:f1: ff:c7:11:53:94:e1:a0:80:aa:37:cd:6d:4a:62:9c: 3a:cc:44:08:5c:67:22:cd:34:47:5d:96:5a:f6:27: af:cc:f6:be:c7:54:96:4e:06:4a:38:f7:5c:fe:2b: 5e:2f:9a:30:f3:69:7b:62:ae:cd:69:ad:3d:1d:3b: d7:60:29:d2:47:fa:32:2d:52:55:4c:88:9d:56:89: 73:60:05:d5:74:72:b3:51:54:62:77:21:6a:ed:26: e6:bc:ae:c6:0b:54:31:b1:8e:e0:d4:eb:2b:94:0a: a3:45:b0:ac:43:5f:0c:9e:c4:79:c1:c4:f3:25:9c: 09:d4:69:27:58:65:b8:a2:d6:22:14:93:32:85:b0: cf:1d:b2:e8:d4:68:c7:c7:38:f7:30:19:3a:12:a4: 90:7e:01:b9:60:a7:63:a4:8d:1e:44:7e:16:5a:74: 98:2b:81:37:95:0d:21:e3:da:18:2b:9b:ca:61:39: 50:96:2d:6f:5f:e0:2f:b0:62:0d:5c:f6:0c:93:c4: 82:a3:9a:21:1b:01:ca:a1:45:2e:50:3a:df:ac:1c: 80:9d:a7:d0:56:d0:09:e3:ab:7a:56:66:ba:12:1a: 82:e7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 04:33:62:DA:15:66:69:05:4A:44:01:A5:6F:2A:6E:3B:14:5B:47:E9 X509v3 Authority Key Identifier: keyid:B2:AA:3E:3A:5B:29:E0:F4:1C:DD:5A:61:7F:7F:B6:A3:7A:1B:90:11 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91FB924/FED23D821D8B11E286A2E5E608B02CD2/sqo-Olsp4PQc3Vphf3-2o3obkBE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/sqo-Olsp4PQc3Vphf3-2o3obkBE.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91FB924/FED23D821D8B11E286A2E5E608B02CD2/sqo-Olsp4PQc3Vphf3-2o3obkBE.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 2e:b1:41:93:d3:ad:a1:dd:47:32:02:cd:45:59:18:9b:86:a0: 12:df:3b:45:02:d3:2a:8b:40:b8:28:17:30:89:37:35:25:11: 4e:37:bb:14:9b:4e:e3:f0:7f:82:8d:1e:25:61:d8:5e:3c:ae: ef:61:1d:a8:a5:b1:7c:33:8d:3d:5a:d7:c6:20:a4:03:2e:2f: c7:2a:32:b3:c2:80:f0:7c:5f:9e:ec:d1:ea:37:b3:fd:76:20: 2e:55:c0:ea:27:6b:67:3a:71:ef:4a:fc:60:2b:47:cd:a9:e8: 71:c3:bc:cd:b2:a1:7a:46:08:22:8f:13:ea:fd:5e:ac:39:05: 49:7d:72:45:79:96:67:8a:0d:94:26:75:3c:94:a0:89:df:43: 39:01:b9:d5:48:1b:bb:52:e1:15:e3:3d:37:b5:16:a3:67:c3: a5:f3:a3:30:00:f7:99:6c:25:4b:d7:4b:a0:36:45:e3:0b:f9: 6c:1a:f1:7b:13:80:fd:4b:d4:de:aa:d5:c0:2e:2a:58:f7:71: 80:41:fe:c4:6e:22:78:3c:77:b6:0e:db:de:a0:6b:05:40:55: c0:c5:33:8b:56:47:84:0a:f4:fe:e8:b4:fb:95:35:1a:ce:1f: d8:9c:dc:96:47:a8:f8:18:ce:0f:14:70:3f:3c:09:73:ec:11: 7a:15:57:eb -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICNNwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RkI5MjQxMTAvBgNVBAUTKEIyQUEzRTNBNUIyOUUwRjQxQ0RENUE2MTdGN0ZCNkEz N0ExQjkwMTEwHhcNMjUxMDE4MTQzODU2WhcNMjUxMDI1MTQzODU2WjAYMRYwFAYD VQQDEw02OGYzYTY4MC0yZjgyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA0FTYzGYK2DYOxa8t6L5QIteScMwvyojJHHcbbPH/xxFTlOGggKo3zW1KYpw6 zEQIXGcizTRHXZZa9ievzPa+x1SWTgZKOPdc/iteL5ow82l7Yq7Naa09HTvXYCnS R/oyLVJVTIidVolzYAXVdHKzUVRidyFq7SbmvK7GC1QxsY7g1OsrlAqjRbCsQ18M nsR5wcTzJZwJ1GknWGW4otYiFJMyhbDPHbLo1GjHxzj3MBk6EqSQfgG5YKdjpI0e RH4WWnSYK4E3lQ0h49oYK5vKYTlQli1vX+AvsGINXPYMk8SCo5ohGwHKoUUuUDrf rByAnafQVtAJ46t6Vma6EhqC5wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFAQzYtoV ZmkFSkQBpW8qbjsUW0fpMB8GA1UdIwQYMBaAFLKqPjpbKeD0HN1aYX9/tqN6G5AR MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGQjkyNC9GRUQyM0Q4MjFE OEIxMUUyODZBMkU1RTYwOEIwMkNEMi9zcW8tT2xzcDRQUWMzVnBoZjMtMm8zb2Jr QkUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3Nxby1PbHNwNFBRYzNWcGhmMy0ybzNvYmtCRS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG QjkyNC9GRUQyM0Q4MjFEOEIxMUUyODZBMkU1RTYwOEIwMkNEMi9zcW8tT2xzcDRQ UWMzVnBoZjMtMm8zb2JrQkUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAusUGT062h3UcyAs1FWRibhqAS3ztFAtMqi0C4KBcwiTc1JRFON7sU m07j8H+CjR4lYdhePK7vYR2opbF8M409WtfGIKQDLi/HKjKzwoDwfF+e7NHqN7P9 diAuVcDqJ2tnOnHvSvxgK0fNqehxw7zNsqF6RggijxPq/V6sOQVJfXJFeZZnig2U JnU8lKCJ30M5AbnVSBu7UuEV4z03tRajZ8Ol86MwAPeZbCVL10ugNkXjC/lsGvF7 E4D9S9TeqtXALipY93GAQf7EbiJ4PHe2DtveoGsFQFXAxTOLVkeECvT+6LT7lTUa zh/YnNyWR6j4GM4PFHA/PAlz7BF6FVfr -----END CERTIFICATE-----Generated at Mon Oct 20 09:26:39 2025 by rpki-client