$ rpki-client -vvvf rpki.apnic.net/member_repository/A91FB924/FED23D821D8B11E286A2E5E608B02CD2/sqo-Olsp4PQc3Vphf3-2o3obkBE.mft File: sqo-Olsp4PQc3Vphf3-2o3obkBE.mft (raw, json) Hash identifier: 7bgQcLfpJtNh1TP7RM5OcQ7nKyJGWjkJFzoRaWKd93Y= Subject key identifier: 5C:4A:AC:74:9C:89:E2:DA:D7:77:D7:DD:1B:DB:33:AB:4C:6F:5B:D6 Authority key identifier: B2:AA:3E:3A:5B:29:E0:F4:1C:DD:5A:61:7F:7F:B6:A3:7A:1B:90:11 Certificate issuer: /CN=A91FB924/serialNumber=B2AA3E3A5B29E0F41CDD5A617F7FB6A37A1B9011 Certificate serial: 3592 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/sqo-Olsp4PQc3Vphf3-2o3obkBE.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91FB924/FED23D821D8B11E286A2E5E608B02CD2/sqo-Olsp4PQc3Vphf3-2o3obkBE.mft Manifest number: 3588 Signing time: Tue 22 Sep 2026 14:35:41 +0000 Manifest this update: Tue 22 Sep 2026 14:35:40 +0000 Manifest next update: Tue 29 Sep 2026 14:35:40 +0000 Files and hashes: 1: sqo-Olsp4PQc3Vphf3-2o3obkBE.crl (hash: 1zfCkEAQzFPnXgVJNAmSvUqH4X64bgK5qI1AruusRkw=) 2: DF502EECD44511E984021644C4F9AE02.roa (hash: 21AjYTfLUshiJrSB8v0qMUe0rh432FPnINO3hRlb2tM=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91FB924/FED23D821D8B11E286A2E5E608B02CD2/sqo-Olsp4PQc3Vphf3-2o3obkBE.crl rsync://rpki.apnic.net/member_repository/A91FB924/FED23D821D8B11E286A2E5E608B02CD2/sqo-Olsp4PQc3Vphf3-2o3obkBE.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/sqo-Olsp4PQc3Vphf3-2o3obkBE.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 29 Sep 2026 14:27:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13714 (0x3592) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91FB924, serialNumber=B2AA3E3A5B29E0F41CDD5A617F7FB6A37A1B9011 Validity Not Before: Sep 22 14:35:40 2026 GMT Not After : Sep 29 14:35:40 2026 GMT Subject: CN=6ab2923d-4467 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d5:7d:a2:ee:3d:01:ed:a4:b8:51:99:71:a3:0c: 9b:df:72:59:24:45:14:1b:5f:88:a0:a5:ba:ce:03: 55:07:5c:1f:19:f6:55:90:f5:95:a9:d5:e4:68:49: d2:d5:b8:dc:2c:c6:ea:fd:38:94:a0:54:55:1c:fb: 01:4f:0e:39:1c:b2:0b:89:9e:7e:88:d7:10:5a:4d: c4:bd:e2:b4:24:03:90:f0:35:59:22:e2:cf:c8:6c: 4c:4d:66:4d:03:99:6b:a5:d5:15:8e:86:8d:41:f6: 6c:f2:a9:2d:19:be:ae:9f:46:91:ac:38:ba:c0:76: f6:e1:47:67:18:a6:27:62:fc:29:35:72:20:9e:bc: 19:75:6c:a1:19:55:55:df:8d:14:3e:1c:ab:25:19: 1b:7d:59:e8:63:70:5a:f6:a7:f0:15:f2:df:d6:40: 92:31:f4:c6:aa:c6:57:00:b1:79:5d:e2:4a:a9:c2: b3:73:7e:38:3e:c6:83:bd:c0:8b:cf:ac:b4:69:7d: ef:5f:80:fc:f9:a1:2c:0d:dd:95:ad:63:35:9b:9b: 67:e6:78:7e:85:2f:3c:8a:5a:64:82:c6:72:38:b1: e6:20:76:92:c1:b7:b3:51:77:fe:a1:e7:95:8a:71: d2:e7:a8:28:bf:bb:a0:e9:0a:ab:3e:90:ff:a3:8a: 5e:31 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5C:4A:AC:74:9C:89:E2:DA:D7:77:D7:DD:1B:DB:33:AB:4C:6F:5B:D6 X509v3 Authority Key Identifier: keyid:B2:AA:3E:3A:5B:29:E0:F4:1C:DD:5A:61:7F:7F:B6:A3:7A:1B:90:11 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91FB924/FED23D821D8B11E286A2E5E608B02CD2/sqo-Olsp4PQc3Vphf3-2o3obkBE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/sqo-Olsp4PQc3Vphf3-2o3obkBE.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91FB924/FED23D821D8B11E286A2E5E608B02CD2/sqo-Olsp4PQc3Vphf3-2o3obkBE.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption cc:12:7a:13:30:88:19:f6:55:87:d7:42:90:60:1e:c7:20:c1: 6f:b3:1a:7c:51:6d:3e:7e:16:97:56:c9:f9:c8:89:82:ac:d9: 70:18:d0:f9:3c:a4:4e:a7:75:c4:a4:71:0d:17:ec:be:1f:58: 19:94:cc:d2:e9:12:3e:c1:a4:e5:79:cd:8d:9c:22:6e:04:aa: 64:43:94:2a:9f:58:ed:3d:aa:2e:6d:59:d5:a2:3c:95:16:dc: 72:92:95:98:a3:09:de:3c:7f:1a:ec:7c:88:d4:e0:1b:b1:5f: 83:bf:79:04:d7:f3:4a:a6:67:92:9d:04:c4:1d:01:d5:e4:a4: 10:ba:3d:bc:16:81:77:23:41:c9:37:c4:59:98:13:31:e3:18: 10:42:f1:fe:ef:57:5d:35:bd:89:1a:4f:03:8f:d1:80:a7:1f: 5f:4f:c7:9a:fa:aa:5d:f2:49:7d:6b:15:6d:f7:f1:e5:cf:12: 40:42:4f:bd:95:c4:f1:77:d1:b5:dd:06:d6:1b:d1:38:81:6d: 54:41:db:c5:0b:10:e9:4d:e5:29:ab:4c:7b:dd:30:10:ba:7d: 8a:80:a9:23:9d:cf:af:e1:6d:32:51:c2:0e:e6:1a:54:f8:8f: 80:07:c3:6f:d9:47:24:18:c4:a2:33:b5:fc:ae:03:74:e9:49: 02:9d:a5:a8 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICNZIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RkI5MjQxMTAvBgNVBAUTKEIyQUEzRTNBNUIyOUUwRjQxQ0RENUE2MTdGN0ZCNkEz N0ExQjkwMTEwHhcNMjYwOTIyMTQzNTQwWhcNMjYwOTI5MTQzNTQwWjAYMRYwFAYD VQQDEw02YWIyOTIzZC00NDY3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA1X2i7j0B7aS4UZlxowyb33JZJEUUG1+IoKW6zgNVB1wfGfZVkPWVqdXkaEnS 1bjcLMbq/TiUoFRVHPsBTw45HLILiZ5+iNcQWk3EveK0JAOQ8DVZIuLPyGxMTWZN A5lrpdUVjoaNQfZs8qktGb6un0aRrDi6wHb24UdnGKYnYvwpNXIgnrwZdWyhGVVV 340UPhyrJRkbfVnoY3Ba9qfwFfLf1kCSMfTGqsZXALF5XeJKqcKzc344PsaDvcCL z6y0aX3vX4D8+aEsDd2VrWM1m5tn5nh+hS88ilpkgsZyOLHmIHaSwbezUXf+oeeV inHS56gov7ug6QqrPpD/o4peMQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFFxKrHSc ieLa13fX3RvbM6tMb1vWMB8GA1UdIwQYMBaAFLKqPjpbKeD0HN1aYX9/tqN6G5AR MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGQjkyNC9GRUQyM0Q4MjFE OEIxMUUyODZBMkU1RTYwOEIwMkNEMi9zcW8tT2xzcDRQUWMzVnBoZjMtMm8zb2Jr QkUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3Nxby1PbHNwNFBRYzNWcGhmMy0ybzNvYmtCRS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG QjkyNC9GRUQyM0Q4MjFEOEIxMUUyODZBMkU1RTYwOEIwMkNEMi9zcW8tT2xzcDRQ UWMzVnBoZjMtMm8zb2JrQkUubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAzBJ6EzCIGfZVh9dCkGAexyDBb7MafFFtPn4Wl1bJ+ciJgqzZcBjQ+TykTqd1 xKRxDRfsvh9YGZTM0ukSPsGk5XnNjZwibgSqZEOUKp9Y7T2qLm1Z1aI8lRbccpKV mKMJ3jx/Gux8iNTgG7Ffg795BNfzSqZnkp0ExB0B1eSkELo9vBaBdyNByTfEWZgT MeMYEELx/u9XXTW9iRpPA4/RgKcfX0/HmvqqXfJJfWsVbffx5c8SQEJPvZXE8XfR td0G1hvROIFtVEHbxQsQ6U3lKatMe90wELp9ioCpI53Pr+FtMlHCDuYaVPiPgAfD b9lHJBjEojO1/K4DdOlJAp2lqA== -----END CERTIFICATE-----Generated at Tue Sep 22 18:04:07 2026 by rpki-client