$ rpki-client -vvf rpki.apnic.net/member_repository/A91FB924/FED23D821D8B11E286A2E5E608B02CD2/sqo-Olsp4PQc3Vphf3-2o3obkBE.mft File: sqo-Olsp4PQc3Vphf3-2o3obkBE.mft (raw, json) Hash identifier: 4jCFmGw9//IWdYw1sPvo/ytSeAv5OS97/nd8JIZUjGo= Subject key identifier: 04:13:61:83:76:9B:C6:8A:16:E8:20:5C:92:D9:E6:7F:9D:BF:3C:58 Authority key identifier: B2:AA:3E:3A:5B:29:E0:F4:1C:DD:5A:61:7F:7F:B6:A3:7A:1B:90:11 Certificate issuer: /CN=A91FB924/serialNumber=B2AA3E3A5B29E0F41CDD5A617F7FB6A37A1B9011 Certificate serial: 34B5 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/sqo-Olsp4PQc3Vphf3-2o3obkBE.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91FB924/FED23D821D8B11E286A2E5E608B02CD2/sqo-Olsp4PQc3Vphf3-2o3obkBE.mft Manifest number: 34AE Signing time: Sat 02 Aug 2025 14:36:38 +0000 Manifest this update: Sat 02 Aug 2025 14:36:37 +0000 Manifest next update: Sat 09 Aug 2025 14:36:37 +0000 Files and hashes: 1: sqo-Olsp4PQc3Vphf3-2o3obkBE.crl (hash: DuHNDEFoDs4OUKlE4/ELA94YbTA4Nvl676kvgECv3bw=) 2: DF502EECD44511E984021644C4F9AE02.roa (hash: lhTwffgGoDZ+11LSS1CyopFlM7JUjXizmn+X+Kky/Wk=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91FB924/FED23D821D8B11E286A2E5E608B02CD2/sqo-Olsp4PQc3Vphf3-2o3obkBE.crl rsync://rpki.apnic.net/member_repository/A91FB924/FED23D821D8B11E286A2E5E608B02CD2/sqo-Olsp4PQc3Vphf3-2o3obkBE.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/sqo-Olsp4PQc3Vphf3-2o3obkBE.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 09 Aug 2025 14:36:36 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13493 (0x34b5) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91FB924, serialNumber=B2AA3E3A5B29E0F41CDD5A617F7FB6A37A1B9011 Validity Not Before: Aug 2 14:36:37 2025 GMT Not After : Aug 9 14:36:37 2025 GMT Subject: CN=688e2275-6954 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:74:2e:f3:dd:db:ca:6a:64:62:5e:5f:01:82: b3:f3:8a:9d:ba:57:64:89:a1:73:d2:3b:73:cb:54: e2:97:40:ee:43:1e:ee:cc:ed:ae:03:d8:c4:ca:76: 73:98:e5:0b:af:17:54:63:52:f0:fe:03:95:a9:25: fe:69:38:4d:1a:94:66:d2:36:18:a4:a4:ac:f0:a9: 6e:74:c7:b2:99:55:fe:35:b2:4d:0a:bb:6c:3e:8a: 96:15:1c:84:48:6b:d6:d5:3b:89:12:da:76:ad:a3: 2c:bc:04:ba:23:b8:e2:99:bd:9e:b6:d4:84:11:16: d8:dc:d6:ec:ad:ec:13:5f:e5:6f:b5:16:f5:13:a9: 9c:18:b7:61:21:20:35:77:55:dd:9b:92:f8:db:4e: 0e:86:8a:ed:b8:85:41:b7:dd:9e:70:5e:62:1c:2f: cc:d9:cf:3e:0d:a2:5e:86:5f:af:b9:f8:52:67:ce: 24:3d:5a:bd:61:78:38:68:4c:91:e5:16:f6:14:5d: 13:0d:01:e7:f3:2f:9c:e5:d7:98:f3:cd:fc:8b:f9: 3b:f0:d7:5f:71:7f:00:8b:4b:1c:c6:7f:31:49:b3: f8:cd:8e:d3:76:ae:16:ee:26:cb:3a:31:ea:09:ab: a8:6e:3f:f6:72:f2:31:c5:2b:52:90:7b:86:16:86: 50:7f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 04:13:61:83:76:9B:C6:8A:16:E8:20:5C:92:D9:E6:7F:9D:BF:3C:58 X509v3 Authority Key Identifier: keyid:B2:AA:3E:3A:5B:29:E0:F4:1C:DD:5A:61:7F:7F:B6:A3:7A:1B:90:11 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91FB924/FED23D821D8B11E286A2E5E608B02CD2/sqo-Olsp4PQc3Vphf3-2o3obkBE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/sqo-Olsp4PQc3Vphf3-2o3obkBE.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91FB924/FED23D821D8B11E286A2E5E608B02CD2/sqo-Olsp4PQc3Vphf3-2o3obkBE.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 79:8f:98:50:81:f8:ef:78:a1:4c:38:ce:85:10:f2:b9:66:cd: 89:66:0a:15:7c:c9:97:7f:25:40:8a:47:33:b3:21:be:6c:f5: be:e1:ef:8a:53:46:2f:75:2a:88:12:69:1b:21:db:4e:48:14: 4a:70:34:52:be:31:81:55:8a:74:b9:35:7d:9d:60:22:e1:bb: 66:49:5f:51:f1:b5:65:c7:fd:cb:b0:93:a1:ee:46:ef:82:be: f8:cc:c0:80:d1:fc:d4:12:aa:9e:42:3b:2a:63:5d:d6:58:02: 65:95:85:6f:b5:c9:5c:75:37:1a:af:32:3f:a9:a4:9e:33:1e: c5:0a:11:5a:f5:d9:c6:d7:7c:1f:0b:da:3c:1f:c3:5d:66:2f: 69:0e:35:ad:4f:a0:c3:19:a2:54:a8:c4:aa:49:27:f4:51:93: 3a:09:17:c8:93:c6:c8:17:d8:91:8c:b3:e5:9d:32:fd:6d:e1: e6:1e:e7:2b:16:cc:93:f2:1a:c0:56:50:2f:8b:8d:a1:42:8a: 5d:b8:92:cf:5c:af:12:d3:36:c5:a1:7b:0d:76:de:cb:b5:8d: 92:f2:8e:df:96:73:23:7c:6f:4f:07:a5:c6:96:3c:90:24:09: 35:f6:33:98:ab:42:27:45:96:53:e2:e5:cd:51:33:cc:94:36: b4:6f:74:7a -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICNLUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RkI5MjQxMTAvBgNVBAUTKEIyQUEzRTNBNUIyOUUwRjQxQ0RENUE2MTdGN0ZCNkEz N0ExQjkwMTEwHhcNMjUwODAyMTQzNjM3WhcNMjUwODA5MTQzNjM3WjAYMRYwFAYD VQQDEw02ODhlMjI3NS02OTU0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAuHQu893bympkYl5fAYKz84qduldkiaFz0jtzy1Til0DuQx7uzO2uA9jEynZz mOULrxdUY1Lw/gOVqSX+aThNGpRm0jYYpKSs8KludMeymVX+NbJNCrtsPoqWFRyE SGvW1TuJEtp2raMsvAS6I7jimb2ettSEERbY3NbsrewTX+VvtRb1E6mcGLdhISA1 d1Xdm5L4204OhortuIVBt92ecF5iHC/M2c8+DaJehl+vufhSZ84kPVq9YXg4aEyR 5Rb2FF0TDQHn8y+c5deY8838i/k78NdfcX8Ai0scxn8xSbP4zY7Tdq4W7ibLOjHq Cauobj/2cvIxxStSkHuGFoZQfwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFAQTYYN2 m8aKFuggXJLZ5n+dvzxYMB8GA1UdIwQYMBaAFLKqPjpbKeD0HN1aYX9/tqN6G5AR MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGQjkyNC9GRUQyM0Q4MjFE OEIxMUUyODZBMkU1RTYwOEIwMkNEMi9zcW8tT2xzcDRQUWMzVnBoZjMtMm8zb2Jr QkUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3Nxby1PbHNwNFBRYzNWcGhmMy0ybzNvYmtCRS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG QjkyNC9GRUQyM0Q4MjFEOEIxMUUyODZBMkU1RTYwOEIwMkNEMi9zcW8tT2xzcDRQ UWMzVnBoZjMtMm8zb2JrQkUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQB5j5hQgfjveKFMOM6FEPK5Zs2JZgoVfMmXfyVAikczsyG+bPW+4e+K U0YvdSqIEmkbIdtOSBRKcDRSvjGBVYp0uTV9nWAi4btmSV9R8bVlx/3LsJOh7kbv gr74zMCA0fzUEqqeQjsqY13WWAJllYVvtclcdTcarzI/qaSeMx7FChFa9dnG13wf C9o8H8NdZi9pDjWtT6DDGaJUqMSqSSf0UZM6CRfIk8bIF9iRjLPlnTL9beHmHucr FsyT8hrAVlAvi42hQopduJLPXK8S0zbFoXsNdt7LtY2S8o7flnMjfG9PB6XGljyQ JAk19jOYq0InRZZT4uXNUTPMlDa0b3R6 -----END CERTIFICATE-----Generated at Mon Aug 4 11:07:12 2025 by rpki-client