
$ rpki-client -vvf rpki.apnic.net/member_repository/A91FB924/FED23D821D8B11E286A2E5E608B02CD2/sqo-Olsp4PQc3Vphf3-2o3obkBE.mft
File: sqo-Olsp4PQc3Vphf3-2o3obkBE.mft (raw, json)
Hash identifier: ARbIsJOVRgftp3dDphLFmrCiKoQy2IT+DsgtgvNGTW4=
Subject key identifier: 61:7B:67:49:37:3E:1F:7A:B2:2A:C1:F2:A0:58:DD:59:28:24:4A:8B
Authority key identifier: B2:AA:3E:3A:5B:29:E0:F4:1C:DD:5A:61:7F:7F:B6:A3:7A:1B:90:11
Certificate issuer: /CN=A91FB924/serialNumber=B2AA3E3A5B29E0F41CDD5A617F7FB6A37A1B9011
Certificate serial: 3542
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/sqo-Olsp4PQc3Vphf3-2o3obkBE.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91FB924/FED23D821D8B11E286A2E5E608B02CD2/sqo-Olsp4PQc3Vphf3-2o3obkBE.mft
Manifest number: 3538
Signing time: Sat 18 Apr 2026 14:35:42 +0000
Manifest this update: Sat 18 Apr 2026 14:35:41 +0000
Manifest next update: Sat 25 Apr 2026 14:35:41 +0000
Files and hashes: 1: sqo-Olsp4PQc3Vphf3-2o3obkBE.crl (hash: kT9G/8bZxWk+dSZnH2M6KaVsgc7Dd23A/9QBqTTrTjs=)
2: DF502EECD44511E984021644C4F9AE02.roa (hash: 21AjYTfLUshiJrSB8v0qMUe0rh432FPnINO3hRlb2tM=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91FB924/FED23D821D8B11E286A2E5E608B02CD2/sqo-Olsp4PQc3Vphf3-2o3obkBE.crl
rsync://rpki.apnic.net/member_repository/A91FB924/FED23D821D8B11E286A2E5E608B02CD2/sqo-Olsp4PQc3Vphf3-2o3obkBE.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/sqo-Olsp4PQc3Vphf3-2o3obkBE.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 25 Apr 2026 14:35:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 13634 (0x3542)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91FB924, serialNumber=B2AA3E3A5B29E0F41CDD5A617F7FB6A37A1B9011
Validity
Not Before: Apr 18 14:35:41 2026 GMT
Not After : Apr 25 14:35:41 2026 GMT
Subject: CN=69e396be-ba18
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:7b:54:3c:e0:d3:97:58:97:41:42:dd:12:5d:
84:57:46:c3:86:8d:da:83:09:48:da:81:fe:35:ce:
cc:34:bf:03:06:75:3d:56:48:d3:a5:1b:6b:94:d4:
96:0d:b8:63:66:f1:80:96:6f:1d:4c:be:84:3d:8e:
4f:90:8f:fc:03:21:58:d2:a4:42:89:1a:f2:ef:c3:
0c:96:6b:b1:ab:08:c9:f7:66:58:ca:43:4a:ec:c3:
ae:d8:a3:77:53:78:ec:ec:5f:e0:f6:a0:f7:c5:9f:
e4:ed:a8:54:7c:8b:2c:63:67:35:de:8a:f3:83:98:
a5:7f:3d:57:32:8b:54:b1:94:7b:6d:2b:9e:d1:da:
8d:d6:8d:2d:ff:18:18:a1:78:48:34:91:33:98:35:
70:d8:c7:4f:02:12:be:9d:2a:27:69:6c:92:f9:58:
7b:5b:fd:7a:61:5a:6f:c4:08:4d:ce:43:ad:e6:6d:
28:b1:ea:4c:f6:c8:60:3e:71:bc:54:16:6d:e4:be:
81:41:90:99:df:03:3e:a5:fd:e0:f8:00:52:a5:5d:
53:6a:7e:45:57:b4:09:8c:cf:56:88:f8:1a:c0:2a:
32:4b:90:08:04:71:5b:9a:a0:6a:65:b7:80:76:f1:
1a:71:26:7e:c4:fb:b5:ff:9e:8a:ac:86:9d:4e:ce:
af:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
61:7B:67:49:37:3E:1F:7A:B2:2A:C1:F2:A0:58:DD:59:28:24:4A:8B
X509v3 Authority Key Identifier:
keyid:B2:AA:3E:3A:5B:29:E0:F4:1C:DD:5A:61:7F:7F:B6:A3:7A:1B:90:11
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91FB924/FED23D821D8B11E286A2E5E608B02CD2/sqo-Olsp4PQc3Vphf3-2o3obkBE.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/sqo-Olsp4PQc3Vphf3-2o3obkBE.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91FB924/FED23D821D8B11E286A2E5E608B02CD2/sqo-Olsp4PQc3Vphf3-2o3obkBE.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
ce:4b:aa:bc:af:36:de:35:7e:b6:88:3b:74:4a:c5:5a:ee:39:
32:f1:e0:c6:80:4c:4c:67:89:2e:95:e3:4c:50:a0:c7:72:95:
a6:5a:1c:e7:a2:62:8a:57:f5:fc:99:1e:ae:e7:57:e8:53:c6:
ef:c1:d8:3e:2c:c5:87:22:f5:1e:7d:94:2e:fa:d9:69:04:9f:
b6:23:16:98:23:c2:79:27:38:20:3b:b5:f7:8a:16:d4:33:b2:
b6:62:b8:6f:30:2b:bd:20:ee:b8:19:58:33:cc:f0:6d:c9:d3:
89:a1:72:f6:e8:37:05:37:29:fc:09:e7:22:4d:2e:45:da:27:
0a:c3:bd:3d:2a:fd:a2:c4:4d:58:fe:42:0f:6c:d1:b8:dc:15:
55:cd:44:c9:85:71:a7:73:9e:67:80:34:df:3b:41:51:7b:d5:
5a:1b:23:5e:81:d8:a4:b6:42:a6:71:56:18:41:1a:5a:ff:ae:
55:d1:ea:d0:bf:d2:50:3c:3d:d0:44:f9:5f:33:75:d5:43:79:
b1:08:86:16:24:c7:e7:e5:2e:04:bc:63:98:e9:91:13:a9:f5:
9b:93:6f:4b:91:fa:3a:dd:28:8f:d0:00:6e:aa:b2:1e:dc:97:
a6:ee:4a:c2:f0:e7:86:d7:d5:6a:cd:d6:5e:6b:06:05:35:fe:
11:65:5e:03
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 19 09:44:58 2026 by rpki-client