$ rpki-client -vvf rpki.apnic.net/member_repository/A91FB924/FED23D821D8B11E286A2E5E608B02CD2/sqo-Olsp4PQc3Vphf3-2o3obkBE.mft File: sqo-Olsp4PQc3Vphf3-2o3obkBE.mft (raw, json) Hash identifier: FAagfvhVJ9E2fQ46V92swSXI5xLrSzAepmRo57Au4xk= Subject key identifier: 79:1D:5D:3C:75:94:09:81:62:C7:3C:92:BD:27:60:1E:D3:CF:67:7C Authority key identifier: B2:AA:3E:3A:5B:29:E0:F4:1C:DD:5A:61:7F:7F:B6:A3:7A:1B:90:11 Certificate issuer: /CN=A91FB924/serialNumber=B2AA3E3A5B29E0F41CDD5A617F7FB6A37A1B9011 Certificate serial: 34A3 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/sqo-Olsp4PQc3Vphf3-2o3obkBE.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91FB924/FED23D821D8B11E286A2E5E608B02CD2/sqo-Olsp4PQc3Vphf3-2o3obkBE.mft Manifest number: 349C Signing time: Sat 28 Jun 2025 14:34:12 +0000 Manifest this update: Sat 28 Jun 2025 14:34:11 +0000 Manifest next update: Sat 05 Jul 2025 14:34:11 +0000 Files and hashes: 1: sqo-Olsp4PQc3Vphf3-2o3obkBE.crl (hash: E5RD3WYUN6/xaPA/QkoorVrDygc96m2OY6XA0rt+QsY=) 2: DF502EECD44511E984021644C4F9AE02.roa (hash: lhTwffgGoDZ+11LSS1CyopFlM7JUjXizmn+X+Kky/Wk=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91FB924/FED23D821D8B11E286A2E5E608B02CD2/sqo-Olsp4PQc3Vphf3-2o3obkBE.crl rsync://rpki.apnic.net/member_repository/A91FB924/FED23D821D8B11E286A2E5E608B02CD2/sqo-Olsp4PQc3Vphf3-2o3obkBE.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/sqo-Olsp4PQc3Vphf3-2o3obkBE.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 05 Jul 2025 14:34:10 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13475 (0x34a3) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91FB924, serialNumber=B2AA3E3A5B29E0F41CDD5A617F7FB6A37A1B9011 Validity Not Before: Jun 28 14:34:11 2025 GMT Not After : Jul 5 14:34:11 2025 GMT Subject: CN=685ffd63-573c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:6e:d8:2b:3a:2b:37:7b:79:7d:9d:e6:9d:55: a6:3b:e0:bc:73:1a:bf:84:9c:bc:a5:22:46:d6:65: 30:fc:b1:54:e9:e4:a1:0a:e1:13:ac:e3:fb:07:1b: 6d:66:21:d8:e4:89:b9:77:48:ef:5f:4a:b0:76:2d: fa:d0:09:a6:13:2d:76:c8:4f:8f:d2:12:d8:a8:f4: 77:dd:d5:78:2a:a2:19:0c:3f:fc:98:db:d5:5b:cb: 7c:83:92:0d:df:a1:e0:1d:7c:53:4e:ca:ff:86:93: de:d9:cb:a9:56:61:9d:da:73:3f:fd:c7:2c:56:b6: c7:ba:b1:16:d9:3d:c9:c0:79:8e:48:cf:cd:b1:3b: f0:1a:fc:61:9a:53:a0:0a:a5:d9:82:c6:83:07:f7: 0a:9b:e0:c9:ae:83:3a:8f:af:d0:89:76:88:17:89: bb:b1:d8:c1:92:fc:9a:26:63:97:16:28:b5:74:ae: dc:3f:b6:9b:52:f3:03:48:84:50:40:50:e9:f1:39: 09:b4:e5:cf:d1:78:05:cb:35:f7:59:1d:d9:6d:32: d8:82:22:8d:b1:37:a6:0d:38:17:01:43:a1:51:c4: 85:7c:91:ed:60:81:55:aa:a0:17:92:d9:27:47:ff: 93:80:ff:2d:b1:91:1d:57:9a:26:1e:e0:9a:de:65: 1c:9f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 79:1D:5D:3C:75:94:09:81:62:C7:3C:92:BD:27:60:1E:D3:CF:67:7C X509v3 Authority Key Identifier: keyid:B2:AA:3E:3A:5B:29:E0:F4:1C:DD:5A:61:7F:7F:B6:A3:7A:1B:90:11 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91FB924/FED23D821D8B11E286A2E5E608B02CD2/sqo-Olsp4PQc3Vphf3-2o3obkBE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/sqo-Olsp4PQc3Vphf3-2o3obkBE.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91FB924/FED23D821D8B11E286A2E5E608B02CD2/sqo-Olsp4PQc3Vphf3-2o3obkBE.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 5b:06:ba:4a:e5:7a:bb:33:46:23:c0:82:fc:ab:db:cb:a2:cc: a5:4d:bf:fa:e8:f8:d2:0a:f4:a5:be:5b:88:76:ea:57:3c:b8: e6:10:41:90:05:f8:0f:ce:02:51:6a:71:b0:d0:7c:4b:7a:11: 0b:e8:7d:c8:d8:b6:d2:b7:e2:43:15:9c:ae:ac:fb:14:92:bd: f7:6e:23:91:d4:d0:26:a0:93:80:3d:67:34:e9:f8:c7:cf:99: 26:38:c4:67:86:22:03:fa:eb:97:94:17:45:d3:b6:e7:cc:60: 9e:88:b1:00:c0:7c:a0:e2:bc:b6:c8:a6:d7:05:47:32:96:89: 28:26:a3:39:41:7b:1e:3f:b3:52:6f:c5:b0:5a:eb:47:b1:51: e6:7f:db:77:74:cc:33:f6:46:25:d0:58:ec:ea:c8:a4:a2:9b: 52:28:3e:df:bc:6b:8e:6b:46:f0:d1:e1:41:d0:fe:a8:49:b9: 88:b9:15:dd:c1:19:fb:32:2b:58:cb:7f:40:15:10:18:fd:24: 56:d6:be:a5:a6:39:0f:f8:18:66:52:15:71:46:4d:e5:d5:51: 64:80:b0:32:e2:b9:56:a0:27:ee:99:e3:44:e6:80:5a:30:2f: 7d:c8:b9:f6:ed:41:f8:44:f4:34:18:8b:27:2a:05:81:1d:63: fc:66:eb:2a -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICNKMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RkI5MjQxMTAvBgNVBAUTKEIyQUEzRTNBNUIyOUUwRjQxQ0RENUE2MTdGN0ZCNkEz N0ExQjkwMTEwHhcNMjUwNjI4MTQzNDExWhcNMjUwNzA1MTQzNDExWjAYMRYwFAYD VQQDEw02ODVmZmQ2My01NzNjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAsW7YKzorN3t5fZ3mnVWmO+C8cxq/hJy8pSJG1mUw/LFU6eShCuETrOP7Bxtt ZiHY5Im5d0jvX0qwdi360AmmEy12yE+P0hLYqPR33dV4KqIZDD/8mNvVW8t8g5IN 36HgHXxTTsr/hpPe2cupVmGd2nM//ccsVrbHurEW2T3JwHmOSM/NsTvwGvxhmlOg CqXZgsaDB/cKm+DJroM6j6/QiXaIF4m7sdjBkvyaJmOXFii1dK7cP7abUvMDSIRQ QFDp8TkJtOXP0XgFyzX3WR3ZbTLYgiKNsTemDTgXAUOhUcSFfJHtYIFVqqAXktkn R/+TgP8tsZEdV5omHuCa3mUcnwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFHkdXTx1 lAmBYsc8kr0nYB7Tz2d8MB8GA1UdIwQYMBaAFLKqPjpbKeD0HN1aYX9/tqN6G5AR MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGQjkyNC9GRUQyM0Q4MjFE OEIxMUUyODZBMkU1RTYwOEIwMkNEMi9zcW8tT2xzcDRQUWMzVnBoZjMtMm8zb2Jr QkUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3Nxby1PbHNwNFBRYzNWcGhmMy0ybzNvYmtCRS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG QjkyNC9GRUQyM0Q4MjFEOEIxMUUyODZBMkU1RTYwOEIwMkNEMi9zcW8tT2xzcDRQ UWMzVnBoZjMtMm8zb2JrQkUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBbBrpK5Xq7M0YjwIL8q9vLosylTb/66PjSCvSlvluIdupXPLjmEEGQ BfgPzgJRanGw0HxLehEL6H3I2LbSt+JDFZyurPsUkr33biOR1NAmoJOAPWc06fjH z5kmOMRnhiID+uuXlBdF07bnzGCeiLEAwHyg4ry2yKbXBUcylokoJqM5QXseP7NS b8WwWutHsVHmf9t3dMwz9kYl0Fjs6sikoptSKD7fvGuOa0bw0eFB0P6oSbmIuRXd wRn7MitYy39AFRAY/SRW1r6lpjkP+BhmUhVxRk3l1VFkgLAy4rlWoCfumeNE5oBa MC99yLn27UH4RPQ0GIsnKgWBHWP8Zusq -----END CERTIFICATE-----Generated at Sun Jun 29 15:34:17 2025 by rpki-client