$ rpki-client -vvf rpki.apnic.net/member_repository/A91FB924/FED23D821D8B11E286A2E5E608B02CD2/sqo-Olsp4PQc3Vphf3-2o3obkBE.mft File: sqo-Olsp4PQc3Vphf3-2o3obkBE.mft (raw, json) Hash identifier: ImFqc33CraQYvNuxU3LEM5qN28UaHuk/TrPobzK2Pzk= Subject key identifier: 64:3F:F6:43:42:59:08:F3:89:2A:B6:A0:2F:60:80:85:93:93:21:3A Authority key identifier: B2:AA:3E:3A:5B:29:E0:F4:1C:DD:5A:61:7F:7F:B6:A3:7A:1B:90:11 Certificate issuer: /CN=A91FB924/serialNumber=B2AA3E3A5B29E0F41CDD5A617F7FB6A37A1B9011 Certificate serial: 347F Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/sqo-Olsp4PQc3Vphf3-2o3obkBE.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91FB924/FED23D821D8B11E286A2E5E608B02CD2/sqo-Olsp4PQc3Vphf3-2o3obkBE.mft Manifest number: 3478 Signing time: Fri 18 Apr 2025 14:35:30 +0000 Manifest this update: Fri 18 Apr 2025 14:35:29 +0000 Manifest next update: Fri 25 Apr 2025 14:35:29 +0000 Files and hashes: 1: sqo-Olsp4PQc3Vphf3-2o3obkBE.crl (hash: LRWEhF3YlgNycGDzJtHBKwnBub6/9NcQQKoEu5HjvHg=) 2: DF502EECD44511E984021644C4F9AE02.roa (hash: lhTwffgGoDZ+11LSS1CyopFlM7JUjXizmn+X+Kky/Wk=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91FB924/FED23D821D8B11E286A2E5E608B02CD2/sqo-Olsp4PQc3Vphf3-2o3obkBE.crl rsync://rpki.apnic.net/member_repository/A91FB924/FED23D821D8B11E286A2E5E608B02CD2/sqo-Olsp4PQc3Vphf3-2o3obkBE.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/sqo-Olsp4PQc3Vphf3-2o3obkBE.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 25 Apr 2025 14:35:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13439 (0x347f) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91FB924, serialNumber=B2AA3E3A5B29E0F41CDD5A617F7FB6A37A1B9011 Validity Not Before: Apr 18 14:35:29 2025 GMT Not After : Apr 25 14:35:29 2025 GMT Subject: CN=68026332-58a3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:da:d9:20:34:75:8c:f9:a8:db:2f:89:32:ea:64: 92:5c:69:09:58:c1:1e:3a:1c:fc:04:15:81:21:e0: 8e:1e:8d:1a:0d:63:d8:40:c3:31:26:a4:8a:ec:c5: 44:f8:af:aa:bf:f6:bd:13:b7:f5:3d:44:c1:54:c5: 34:b8:ae:74:3c:81:66:a6:15:b4:bf:b6:e0:03:21: 42:34:3f:2e:99:d6:a6:dd:64:2f:9b:2d:b0:56:b7: 4b:31:a7:74:7f:74:7a:e2:c7:d7:de:a5:bf:79:64: 3f:db:4f:e7:eb:25:cf:a6:b9:e3:65:bd:62:6c:a1: 23:e4:12:70:81:c5:3b:64:82:d1:ae:4a:e2:84:05: b9:c4:35:3d:e7:65:16:26:d3:70:94:9b:1a:84:54: a4:6d:32:8d:55:8b:43:11:80:55:2d:1f:f5:3d:79: 36:4a:43:9d:11:14:7e:68:ba:30:ff:35:c1:80:c4: 36:8f:8b:57:17:a4:cb:1d:ae:65:ef:ae:9a:ac:48: 3b:58:a4:69:23:bb:44:32:41:87:d2:1a:9a:0a:08: d8:81:31:ed:5c:f3:96:73:b5:4d:d6:b5:8c:85:8c: 41:71:17:eb:c9:0e:40:7e:44:4e:a9:98:77:c2:29: 17:7e:23:1b:89:c2:eb:f9:36:16:c0:c4:5b:bd:f0: 92:c7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 64:3F:F6:43:42:59:08:F3:89:2A:B6:A0:2F:60:80:85:93:93:21:3A X509v3 Authority Key Identifier: keyid:B2:AA:3E:3A:5B:29:E0:F4:1C:DD:5A:61:7F:7F:B6:A3:7A:1B:90:11 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91FB924/FED23D821D8B11E286A2E5E608B02CD2/sqo-Olsp4PQc3Vphf3-2o3obkBE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/sqo-Olsp4PQc3Vphf3-2o3obkBE.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91FB924/FED23D821D8B11E286A2E5E608B02CD2/sqo-Olsp4PQc3Vphf3-2o3obkBE.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 42:e1:08:30:60:8f:3a:e9:15:9c:18:1c:15:d7:38:01:73:c6: 39:1a:46:b7:3e:11:e5:82:3b:c4:26:95:87:ff:38:0f:5e:fc: 1f:a8:ff:d1:e1:f1:81:f1:ab:b2:e0:8b:db:fb:ff:0c:6e:3e: 54:1c:46:88:19:a2:86:84:05:43:c9:7b:b9:c4:cc:13:35:12: 20:e8:e9:a1:73:3e:31:7e:35:23:67:bb:0a:61:a2:ac:6d:cb: 01:0f:42:82:a5:6e:0e:78:85:83:c7:56:87:56:1c:bb:97:e8: e5:1b:c0:e0:aa:db:ac:e8:94:52:5d:f3:94:87:6e:1e:19:78: db:cf:58:fa:b5:d1:97:d3:69:e4:f9:cf:19:61:a7:64:80:f0: 7a:0e:12:9c:83:2e:c6:bc:e6:bd:6b:dd:6d:6b:f6:61:10:f6: 67:d9:68:b2:6a:f1:8e:27:8f:9e:c4:20:ad:dc:ba:dc:a7:e1: 62:37:06:1a:42:b8:83:da:0e:b8:b0:3e:26:b6:a6:4d:e7:0d: 7c:ae:a4:a7:b6:e4:fb:74:b3:97:13:d7:26:e1:0a:02:7c:f8: 30:d5:19:e3:ae:38:41:48:3b:a1:d1:45:46:aa:c0:0f:b9:19: d8:7c:8d:db:21:f2:89:b4:89:01:f3:75:31:dd:fd:9c:17:70: df:cf:7d:ce -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICNH8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RkI5MjQxMTAvBgNVBAUTKEIyQUEzRTNBNUIyOUUwRjQxQ0RENUE2MTdGN0ZCNkEz N0ExQjkwMTEwHhcNMjUwNDE4MTQzNTI5WhcNMjUwNDI1MTQzNTI5WjAYMRYwFAYD VQQDEw02ODAyNjMzMi01OGEzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA2tkgNHWM+ajbL4ky6mSSXGkJWMEeOhz8BBWBIeCOHo0aDWPYQMMxJqSK7MVE +K+qv/a9E7f1PUTBVMU0uK50PIFmphW0v7bgAyFCND8umdam3WQvmy2wVrdLMad0 f3R64sfX3qW/eWQ/20/n6yXPprnjZb1ibKEj5BJwgcU7ZILRrkrihAW5xDU952UW JtNwlJsahFSkbTKNVYtDEYBVLR/1PXk2SkOdERR+aLow/zXBgMQ2j4tXF6TLHa5l 766arEg7WKRpI7tEMkGH0hqaCgjYgTHtXPOWc7VN1rWMhYxBcRfryQ5AfkROqZh3 wikXfiMbicLr+TYWwMRbvfCSxwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFGQ/9kNC WQjziSq2oC9ggIWTkyE6MB8GA1UdIwQYMBaAFLKqPjpbKeD0HN1aYX9/tqN6G5AR MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGQjkyNC9GRUQyM0Q4MjFE OEIxMUUyODZBMkU1RTYwOEIwMkNEMi9zcW8tT2xzcDRQUWMzVnBoZjMtMm8zb2Jr QkUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3Nxby1PbHNwNFBRYzNWcGhmMy0ybzNvYmtCRS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG QjkyNC9GRUQyM0Q4MjFEOEIxMUUyODZBMkU1RTYwOEIwMkNEMi9zcW8tT2xzcDRQ UWMzVnBoZjMtMm8zb2JrQkUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBC4QgwYI866RWcGBwV1zgBc8Y5Gka3PhHlgjvEJpWH/zgPXvwfqP/R 4fGB8auy4Ivb+/8Mbj5UHEaIGaKGhAVDyXu5xMwTNRIg6Omhcz4xfjUjZ7sKYaKs bcsBD0KCpW4OeIWDx1aHVhy7l+jlG8Dgqtus6JRSXfOUh24eGXjbz1j6tdGX02nk +c8ZYadkgPB6DhKcgy7GvOa9a91ta/ZhEPZn2WiyavGOJ4+exCCt3Lrcp+FiNwYa QriD2g64sD4mtqZN5w18rqSntuT7dLOXE9cm4QoCfPgw1RnjrjhBSDuh0UVGqsAP uRnYfI3bIfKJtIkB83Ux3f2cF3Dfz33O -----END CERTIFICATE-----Generated at Sat Apr 19 12:10:04 2025 by rpki-client