$ rpki-client -vvf rpki.apnic.net/member_repository/A91FB924/FED23D821D8B11E286A2E5E608B02CD2/sqo-Olsp4PQc3Vphf3-2o3obkBE.mft File: sqo-Olsp4PQc3Vphf3-2o3obkBE.mft (raw, json) Hash identifier: naRrgtQ8J4ptyy2n6kmyJ3tk9VM4qQwXfDxFL33LlWU= Subject key identifier: C4:C4:12:B0:5B:86:94:B4:03:90:3C:AF:49:56:67:F5:92:75:AF:88 Authority key identifier: B2:AA:3E:3A:5B:29:E0:F4:1C:DD:5A:61:7F:7F:B6:A3:7A:1B:90:11 Certificate issuer: /CN=A91FB924/serialNumber=B2AA3E3A5B29E0F41CDD5A617F7FB6A37A1B9011 Certificate serial: 3535 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/sqo-Olsp4PQc3Vphf3-2o3obkBE.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91FB924/FED23D821D8B11E286A2E5E608B02CD2/sqo-Olsp4PQc3Vphf3-2o3obkBE.mft Manifest number: 352B Signing time: Tue 24 Mar 2026 14:35:39 +0000 Manifest this update: Tue 24 Mar 2026 14:35:39 +0000 Manifest next update: Tue 31 Mar 2026 14:35:39 +0000 Files and hashes: 1: sqo-Olsp4PQc3Vphf3-2o3obkBE.crl (hash: 3Epkz9qo3Zi2V7cz8sh6pkapgiwYWinesZ3zIh7xgI0=) 2: DF502EECD44511E984021644C4F9AE02.roa (hash: 21AjYTfLUshiJrSB8v0qMUe0rh432FPnINO3hRlb2tM=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91FB924/FED23D821D8B11E286A2E5E608B02CD2/sqo-Olsp4PQc3Vphf3-2o3obkBE.crl rsync://rpki.apnic.net/member_repository/A91FB924/FED23D821D8B11E286A2E5E608B02CD2/sqo-Olsp4PQc3Vphf3-2o3obkBE.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/sqo-Olsp4PQc3Vphf3-2o3obkBE.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 31 Mar 2026 14:35:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13621 (0x3535) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91FB924, serialNumber=B2AA3E3A5B29E0F41CDD5A617F7FB6A37A1B9011 Validity Not Before: Mar 24 14:35:39 2026 GMT Not After : Mar 31 14:35:39 2026 GMT Subject: CN=69c2a13b-1dc6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a0:f5:2a:af:9c:7f:73:0a:b9:4b:3e:9c:ce:01: 2a:aa:56:f2:2d:8a:50:c2:cd:d5:2d:0b:4c:8f:1a: 61:cb:a9:a4:6d:ae:01:c7:02:5a:ab:49:63:cb:3b: d4:34:31:02:87:18:13:8a:95:c9:f5:1b:87:9f:ca: db:6e:45:73:e1:2e:40:07:fc:63:35:0e:f0:df:64: da:92:eb:77:c7:28:13:73:6c:c7:9c:15:f1:7e:fb: 8e:fc:46:22:17:2f:46:6b:36:be:ad:34:0a:1a:9b: dd:7d:05:0d:85:68:5d:54:54:c6:21:b5:ef:aa:bd: f8:fc:54:13:bd:7a:f7:2b:44:1c:1a:4c:f7:e4:c8: b2:83:7c:5f:1c:62:4c:ac:de:a2:56:55:69:b6:bf: f9:02:74:9e:8b:89:c5:d7:92:af:aa:7d:76:c2:c4: 40:09:00:6d:2b:06:5d:69:6a:bf:a1:ad:2c:96:6e: a2:c0:97:46:fa:e7:8d:ad:2d:64:ad:27:fd:91:da: 9c:bd:2a:f7:4a:18:79:27:31:44:98:57:72:e8:7b: db:50:7c:93:80:76:ac:87:ac:1e:c0:09:25:4d:46: 70:f9:90:cb:71:08:41:c1:17:23:81:7a:58:7b:b3: 97:0b:1c:51:ca:9b:8b:7c:78:88:26:d9:51:09:7d: 6b:c5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C4:C4:12:B0:5B:86:94:B4:03:90:3C:AF:49:56:67:F5:92:75:AF:88 X509v3 Authority Key Identifier: keyid:B2:AA:3E:3A:5B:29:E0:F4:1C:DD:5A:61:7F:7F:B6:A3:7A:1B:90:11 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91FB924/FED23D821D8B11E286A2E5E608B02CD2/sqo-Olsp4PQc3Vphf3-2o3obkBE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/sqo-Olsp4PQc3Vphf3-2o3obkBE.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91FB924/FED23D821D8B11E286A2E5E608B02CD2/sqo-Olsp4PQc3Vphf3-2o3obkBE.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption ae:66:46:0a:ad:9f:be:42:00:cf:da:a5:f9:02:b2:6a:58:93: 81:1c:da:c7:78:50:f3:65:56:b3:31:05:a5:9e:c9:73:78:7f: b0:c6:a2:f8:d2:a1:ab:fe:51:e9:47:26:e1:fa:3d:6d:7d:43: 53:48:7b:d7:fa:f8:82:1b:c9:c2:03:c4:c8:40:d9:10:6b:22: d9:14:1c:eb:ce:0a:c7:89:1e:a1:df:a6:63:22:a4:9b:5b:c0: 7a:95:a5:a0:08:9d:b3:7a:fd:f0:3f:e9:45:3b:22:f5:9b:bc: a3:4f:cb:18:47:68:1f:5e:3f:31:cd:2e:87:43:32:e5:72:88: 78:cb:f1:00:81:01:6c:03:8f:b9:be:32:94:2e:39:08:2b:58: 75:08:0a:14:c8:f8:1b:53:cf:f2:b8:36:0e:48:fc:3c:7a:7e: e2:4e:65:9b:e0:62:ed:30:d1:ac:79:cd:40:fd:f5:ea:9b:9c: fd:39:b4:89:79:44:ec:a4:da:29:bd:d2:af:3e:39:d4:f4:74: 3b:31:68:34:3c:82:f0:f2:a3:c3:6f:87:99:8d:b1:ac:bc:8a: 66:b4:95:8c:f0:ad:3d:1f:6e:46:87:61:0f:02:fa:4e:64:3e: 5e:35:da:30:27:09:8c:14:fe:09:5e:76:ec:30:38:a1:fa:ee: e7:90:13:b5 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICNTUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RkI5MjQxMTAvBgNVBAUTKEIyQUEzRTNBNUIyOUUwRjQxQ0RENUE2MTdGN0ZCNkEz N0ExQjkwMTEwHhcNMjYwMzI0MTQzNTM5WhcNMjYwMzMxMTQzNTM5WjAYMRYwFAYD VQQDEw02OWMyYTEzYi0xZGM2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAoPUqr5x/cwq5Sz6czgEqqlbyLYpQws3VLQtMjxphy6mkba4BxwJaq0ljyzvU NDEChxgTipXJ9RuHn8rbbkVz4S5AB/xjNQ7w32Takut3xygTc2zHnBXxfvuO/EYi Fy9Gaza+rTQKGpvdfQUNhWhdVFTGIbXvqr34/FQTvXr3K0QcGkz35Miyg3xfHGJM rN6iVlVptr/5AnSei4nF15Kvqn12wsRACQBtKwZdaWq/oa0slm6iwJdG+ueNrS1k rSf9kdqcvSr3Shh5JzFEmFdy6HvbUHyTgHash6wewAklTUZw+ZDLcQhBwRcjgXpY e7OXCxxRypuLfHiIJtlRCX1rxQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFMTEErBb hpS0A5A8r0lWZ/WSda+IMB8GA1UdIwQYMBaAFLKqPjpbKeD0HN1aYX9/tqN6G5AR MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGQjkyNC9GRUQyM0Q4MjFE OEIxMUUyODZBMkU1RTYwOEIwMkNEMi9zcW8tT2xzcDRQUWMzVnBoZjMtMm8zb2Jr QkUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3Nxby1PbHNwNFBRYzNWcGhmMy0ybzNvYmtCRS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG QjkyNC9GRUQyM0Q4MjFEOEIxMUUyODZBMkU1RTYwOEIwMkNEMi9zcW8tT2xzcDRQ UWMzVnBoZjMtMm8zb2JrQkUubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEArmZGCq2fvkIAz9ql+QKyaliTgRzax3hQ82VWszEFpZ7Jc3h/sMai+NKhq/5R 6Ucm4fo9bX1DU0h71/r4ghvJwgPEyEDZEGsi2RQc684Kx4keod+mYyKkm1vAepWl oAids3r98D/pRTsi9Zu8o0/LGEdoH14/Mc0uh0My5XKIeMvxAIEBbAOPub4ylC45 CCtYdQgKFMj4G1PP8rg2Dkj8PHp+4k5lm+Bi7TDRrHnNQP316puc/Tm0iXlE7KTa Kb3Srz451PR0OzFoNDyC8PKjw2+HmY2xrLyKZrSVjPCtPR9uRodhDwL6TmQ+XjXa MCcJjBT+CV527DA4ofru55ATtQ== -----END CERTIFICATE-----Generated at Thu Mar 26 07:15:48 2026 by rpki-client