Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91FB924/FED23D821D8B11E286A2E5E608B02CD2/sqo-Olsp4PQc3Vphf3-2o3obkBE.mft
File:                     sqo-Olsp4PQc3Vphf3-2o3obkBE.mft (raw, json)
Hash identifier:          Wb6tMGR77hGngjS3IpkSF2KQZGtgn/SnVKWJLRfAciU=
Subject key identifier:   BD:11:E3:6A:AA:BF:08:AD:AD:C3:F8:FE:72:0E:75:70:88:BE:C0:40
Authority key identifier: B2:AA:3E:3A:5B:29:E0:F4:1C:DD:5A:61:7F:7F:B6:A3:7A:1B:90:11
Certificate issuer:       /CN=A91FB924/serialNumber=B2AA3E3A5B29E0F41CDD5A617F7FB6A37A1B9011
Certificate serial:       3575
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/sqo-Olsp4PQc3Vphf3-2o3obkBE.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91FB924/FED23D821D8B11E286A2E5E608B02CD2/sqo-Olsp4PQc3Vphf3-2o3obkBE.mft
Manifest number:          356B
Signing time:             Tue 28 Jul 2026 14:36:48 +0000
Manifest this update:     Tue 28 Jul 2026 14:36:47 +0000
Manifest next update:     Tue 04 Aug 2026 14:36:47 +0000
Files and hashes:         1: sqo-Olsp4PQc3Vphf3-2o3obkBE.crl (hash: sK5a90oqDpa2297N5tJPOjcA+ELXKxYsbG6L5inGQ/o=)
                          2: DF502EECD44511E984021644C4F9AE02.roa (hash: 21AjYTfLUshiJrSB8v0qMUe0rh432FPnINO3hRlb2tM=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91FB924/FED23D821D8B11E286A2E5E608B02CD2/sqo-Olsp4PQc3Vphf3-2o3obkBE.crl
                          rsync://rpki.apnic.net/member_repository/A91FB924/FED23D821D8B11E286A2E5E608B02CD2/sqo-Olsp4PQc3Vphf3-2o3obkBE.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/sqo-Olsp4PQc3Vphf3-2o3obkBE.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 04 Aug 2026 14:36:46 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 13685 (0x3575)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91FB924, serialNumber=B2AA3E3A5B29E0F41CDD5A617F7FB6A37A1B9011
        Validity
            Not Before: Jul 28 14:36:47 2026 GMT
            Not After : Aug  4 14:36:47 2026 GMT
        Subject: CN=6a68be7f-f2fe
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:de:07:c9:04:84:24:05:37:36:6e:01:16:49:
                    a5:45:24:2d:f2:03:2e:64:e1:e6:d3:59:f5:d0:09:
                    56:f2:24:4e:06:a9:86:41:ff:81:6a:f4:46:f0:8d:
                    ee:72:5d:84:bb:0a:c5:17:5d:d0:ad:00:59:1b:74:
                    c4:11:6f:f1:45:b2:9c:9d:8a:86:69:6a:b4:a3:54:
                    74:72:72:a0:49:be:bf:b4:63:68:e4:4f:51:31:2e:
                    14:0a:1c:70:67:29:b6:39:fb:00:fc:eb:70:ad:3c:
                    22:f0:bf:e4:2d:99:87:3f:e7:cf:8e:44:87:2e:e5:
                    55:3f:2e:5f:c6:1c:06:86:4d:5a:82:40:9d:db:42:
                    a3:82:7d:e4:94:78:98:f8:fc:04:b4:fd:56:92:27:
                    99:2a:17:36:97:a1:f0:58:63:35:ad:27:99:5a:0f:
                    6e:b6:8d:ef:fb:29:07:68:3c:59:b8:20:bd:5e:fc:
                    72:9f:08:20:d5:97:b2:91:27:63:79:77:bb:42:94:
                    d4:93:60:c4:90:b5:b1:a2:d5:46:7c:7f:81:d0:7d:
                    ac:96:1f:73:ae:07:7c:59:4f:98:f8:95:32:e5:7c:
                    11:0d:90:08:92:35:f4:0e:b1:4e:c2:9a:fc:6e:4f:
                    03:47:e2:4a:23:0f:c1:e0:76:ca:6b:71:79:7f:ca:
                    42:39
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BD:11:E3:6A:AA:BF:08:AD:AD:C3:F8:FE:72:0E:75:70:88:BE:C0:40
            X509v3 Authority Key Identifier:
                keyid:B2:AA:3E:3A:5B:29:E0:F4:1C:DD:5A:61:7F:7F:B6:A3:7A:1B:90:11

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91FB924/FED23D821D8B11E286A2E5E608B02CD2/sqo-Olsp4PQc3Vphf3-2o3obkBE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/sqo-Olsp4PQc3Vphf3-2o3obkBE.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91FB924/FED23D821D8B11E286A2E5E608B02CD2/sqo-Olsp4PQc3Vphf3-2o3obkBE.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         c3:cb:ca:54:7e:60:89:94:18:4c:51:04:5b:fd:3b:dd:f8:cd:
         d7:9e:6a:9d:53:d8:06:a2:f0:ab:92:be:ba:79:b0:79:ba:cd:
         40:b1:11:c3:20:5d:93:52:8c:e2:f1:b8:48:3d:23:5d:92:29:
         68:56:48:b7:41:a0:4b:43:59:7d:18:25:79:2a:15:5a:d3:5c:
         2c:70:5e:47:ef:fd:fa:9f:e1:c9:4f:51:17:bd:c9:ef:ec:a4:
         ef:c5:c4:20:51:d3:fd:53:4b:e3:59:03:12:ee:ae:0e:88:8e:
         37:27:18:a1:3a:3e:97:11:e9:96:a3:1e:d5:26:a1:7c:f7:9e:
         4a:9c:9e:0f:18:fb:fa:82:e5:15:41:c8:ca:6c:68:63:e5:32:
         24:12:fb:98:1c:f9:d9:9b:95:bd:c9:db:a5:89:ec:79:18:10:
         d2:a5:e9:0a:24:11:be:30:d1:c7:06:db:54:2d:06:c2:95:6d:
         da:f8:1d:5e:7d:46:4e:bf:91:18:19:8e:e4:1f:10:d7:3f:fa:
         22:23:3e:7f:76:c0:f3:0b:81:67:99:5e:c4:a3:81:9f:46:d8:
         fa:24:ea:a8:3c:86:20:77:97:17:f6:33:22:ea:9d:cb:72:61:
         7c:22:f3:73:c9:0c:2f:23:bd:84:b2:62:3c:47:ee:9d:0b:3d:
         68:3f:f5:f1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 19:32:57 2026 by rpki-client