Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91FB924/FED23D821D8B11E286A2E5E608B02CD2/sqo-Olsp4PQc3Vphf3-2o3obkBE.mft
File:                     sqo-Olsp4PQc3Vphf3-2o3obkBE.mft (raw, json)
Hash identifier:          FhQcp37VLuISS2Sz2R0r4I5K9ziqdsy9h2lj8JoGXxQ=
Subject key identifier:   17:7C:86:4B:F8:2C:2A:E5:57:CF:A7:9B:45:8C:B8:30:F1:E0:BD:A1
Authority key identifier: B2:AA:3E:3A:5B:29:E0:F4:1C:DD:5A:61:7F:7F:B6:A3:7A:1B:90:11
Certificate issuer:       /CN=A91FB924/serialNumber=B2AA3E3A5B29E0F41CDD5A617F7FB6A37A1B9011
Certificate serial:       355E
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/sqo-Olsp4PQc3Vphf3-2o3obkBE.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91FB924/FED23D821D8B11E286A2E5E608B02CD2/sqo-Olsp4PQc3Vphf3-2o3obkBE.mft
Manifest number:          3554
Signing time:             Fri 12 Jun 2026 14:35:47 +0000
Manifest this update:     Fri 12 Jun 2026 14:35:47 +0000
Manifest next update:     Fri 19 Jun 2026 14:35:47 +0000
Files and hashes:         1: sqo-Olsp4PQc3Vphf3-2o3obkBE.crl (hash: UFCxgZeP3SAUNbhm9jTOcT4TABK6GDyPAuYqrpUbo3E=)
                          2: DF502EECD44511E984021644C4F9AE02.roa (hash: 21AjYTfLUshiJrSB8v0qMUe0rh432FPnINO3hRlb2tM=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91FB924/FED23D821D8B11E286A2E5E608B02CD2/sqo-Olsp4PQc3Vphf3-2o3obkBE.crl
                          rsync://rpki.apnic.net/member_repository/A91FB924/FED23D821D8B11E286A2E5E608B02CD2/sqo-Olsp4PQc3Vphf3-2o3obkBE.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/sqo-Olsp4PQc3Vphf3-2o3obkBE.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 19 Jun 2026 14:35:46 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 13662 (0x355e)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91FB924, serialNumber=B2AA3E3A5B29E0F41CDD5A617F7FB6A37A1B9011
        Validity
            Not Before: Jun 12 14:35:47 2026 GMT
            Not After : Jun 19 14:35:47 2026 GMT
        Subject: CN=6a2c1943-ef0a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d2:4e:18:2e:e0:8d:82:46:50:c5:ed:ef:08:d8:
                    98:81:2d:a6:95:e8:1b:f7:5c:9f:5e:3d:b1:e2:6a:
                    2b:93:40:b0:c7:1b:dc:58:6c:bc:f8:45:59:3c:1e:
                    1d:12:aa:25:3c:ad:38:1b:af:52:34:66:0f:08:d0:
                    5c:0d:2e:d8:29:63:e8:7d:17:1c:f4:9d:d8:c8:ca:
                    25:e7:fa:e3:5d:2f:6c:eb:a1:fe:db:58:67:42:e1:
                    dd:58:24:1c:cc:79:a1:39:45:4e:e3:61:01:68:cc:
                    6b:2e:3d:0f:d8:84:d6:23:cf:96:b8:51:42:89:6f:
                    50:c6:26:db:65:e7:de:58:cf:a8:57:e4:9f:98:7d:
                    b5:17:e4:64:c7:23:9e:6b:05:29:45:1c:20:87:7e:
                    14:8b:af:64:ca:17:41:ce:49:d5:c0:b4:f8:22:b8:
                    0c:14:c3:dc:76:f3:b8:70:c7:bd:9f:03:33:cb:dd:
                    89:a6:77:36:26:6d:f7:ec:8f:9f:b3:34:13:9a:de:
                    d2:ef:cc:8b:55:7e:9e:0b:96:0a:46:27:a2:65:f0:
                    df:5f:57:d9:f8:b5:91:db:f6:dd:3b:ab:2e:05:c2:
                    19:3c:f4:49:0f:f5:87:ad:e7:b6:63:c9:81:08:ea:
                    b4:fe:f3:64:e5:9b:13:99:8f:0b:93:93:a7:ca:fe:
                    1b:67
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                17:7C:86:4B:F8:2C:2A:E5:57:CF:A7:9B:45:8C:B8:30:F1:E0:BD:A1
            X509v3 Authority Key Identifier:
                keyid:B2:AA:3E:3A:5B:29:E0:F4:1C:DD:5A:61:7F:7F:B6:A3:7A:1B:90:11

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91FB924/FED23D821D8B11E286A2E5E608B02CD2/sqo-Olsp4PQc3Vphf3-2o3obkBE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/sqo-Olsp4PQc3Vphf3-2o3obkBE.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91FB924/FED23D821D8B11E286A2E5E608B02CD2/sqo-Olsp4PQc3Vphf3-2o3obkBE.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         92:02:84:6b:be:8a:b8:e5:04:64:4d:aa:a1:6d:20:41:fe:5c:
         50:60:c6:a7:89:88:3b:38:02:99:12:a6:53:89:69:39:1d:09:
         a7:fe:08:e1:74:b9:21:65:e9:e7:5a:80:69:61:57:0a:bb:08:
         c3:52:38:b7:76:89:5c:df:84:7d:75:c7:08:25:0b:7e:af:e1:
         fa:3a:03:72:5f:0a:ff:a4:ca:07:a9:36:93:dc:e8:7e:49:30:
         65:0b:f1:40:c6:8e:df:15:5a:b3:63:82:d2:ae:1b:c6:57:cf:
         9b:96:51:97:39:07:19:17:51:03:0f:55:1f:63:d9:d7:d3:20:
         2d:b7:95:8b:0c:c9:f0:2f:83:11:ca:a0:ff:b0:3f:90:f3:3d:
         27:6f:91:11:16:45:93:d2:64:bd:a4:22:67:24:85:0a:fe:0a:
         eb:79:4a:b5:89:e0:a9:db:5a:a2:33:3b:2c:15:7a:91:1a:a3:
         7d:53:4e:a5:88:cb:88:80:8e:69:a0:06:b7:48:55:87:17:16:
         f0:32:5a:31:26:03:11:aa:a1:bd:3e:63:f3:4f:ef:48:93:7d:
         6d:a7:4c:5c:a5:1e:5a:d6:91:51:ca:0e:fe:b6:8e:b5:fc:08:
         4d:af:1e:13:38:7a:ff:2c:93:b0:17:9a:15:fb:24:e6:18:6f:
         64:40:f3:a6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 08:37:09 2026 by rpki-client