
$ rpki-client -vvvf rpki.apnic.net/member_repository/A91973D2/DA839C94BFC811EBA5B3A67CC4F9AE02/hqs-vXxB5lbM7s21qFDHpLHiZ-M.mft
File: hqs-vXxB5lbM7s21qFDHpLHiZ-M.mft (raw, json)
Hash identifier: G3GJT6f5gZNPhZfU8BBPpvzGird7h4/yOQM9OPrgQvI=
Subject key identifier: 9F:27:1D:2C:95:1C:5D:87:FB:B2:70:3C:01:59:C6:2E:46:5E:0F:A4
Authority key identifier: 86:AB:3E:BD:7C:41:E6:56:CC:EE:CD:B5:A8:50:C7:A4:B1:E2:67:E3
Certificate issuer: /CN=A91973D2/serialNumber=86AB3EBD7C41E656CCEECDB5A850C7A4B1E267E3
Certificate serial: 06D3
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hqs-vXxB5lbM7s21qFDHpLHiZ-M.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91973D2/DA839C94BFC811EBA5B3A67CC4F9AE02/hqs-vXxB5lbM7s21qFDHpLHiZ-M.mft
Manifest number: 06C5
Signing time: Sat 26 Sep 2026 22:26:12 +0000
Manifest this update: Sat 26 Sep 2026 22:26:11 +0000
Manifest next update: Sat 03 Oct 2026 22:26:11 +0000
Files and hashes: 1: hqs-vXxB5lbM7s21qFDHpLHiZ-M.crl (hash: FTyniJdA77RsHm1XP0VKKExQBfA7IosOvEZWccW8LSE=)
2: 6959BDA8C05B11EB9540776AC4F9AE02.roa (hash: OANS4UGotbrHDA32WOeuOB3Wn0ea/AxoJh5y6ulR7SQ=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91973D2/DA839C94BFC811EBA5B3A67CC4F9AE02/hqs-vXxB5lbM7s21qFDHpLHiZ-M.crl
rsync://rpki.apnic.net/member_repository/A91973D2/DA839C94BFC811EBA5B3A67CC4F9AE02/hqs-vXxB5lbM7s21qFDHpLHiZ-M.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hqs-vXxB5lbM7s21qFDHpLHiZ-M.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 03 Oct 2026 22:26:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1747 (0x6d3)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91973D2, serialNumber=86AB3EBD7C41E656CCEECDB5A850C7A4B1E267E3
Validity
Not Before: Sep 26 22:26:11 2026 GMT
Not After : Oct 3 22:26:11 2026 GMT
Subject: CN=6ab84684-f289
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:d0:92:a7:2b:85:9f:4d:55:28:a9:8f:30:5e:
af:7f:f9:83:56:c3:97:95:5c:75:d8:66:d9:7f:0f:
a9:d6:a2:3c:33:52:dd:ef:41:58:68:a1:b3:6d:a2:
00:41:ab:dd:39:0b:c9:f6:d7:99:a2:85:fb:50:32:
0c:c2:4a:08:83:fd:f6:84:db:89:71:f8:96:6e:44:
07:12:91:b6:55:e4:b9:62:fa:5e:32:d7:98:6a:77:
15:c7:45:b7:99:fb:3b:1e:2a:86:48:f9:bf:14:d4:
5d:b9:21:0e:a5:07:4a:fb:fb:b4:3c:e3:35:aa:89:
43:0f:44:49:8a:cd:84:6f:55:e1:df:ec:85:ac:28:
08:f1:cc:73:2f:fb:ba:cc:18:6a:b8:d2:13:3a:47:
7c:f6:e3:b5:f2:48:19:3b:45:a3:99:27:3f:e1:13:
00:cd:16:03:de:f2:de:8d:b2:46:17:f4:2e:73:21:
8d:76:60:d6:a4:df:20:0f:da:20:00:76:d3:de:b6:
1c:23:3c:21:cb:9d:95:d8:d4:95:71:b2:f2:b9:52:
50:49:16:6f:a1:02:33:30:65:45:af:08:95:54:25:
0e:d7:cb:3d:87:91:95:58:7d:f3:33:fc:c6:36:c4:
f3:6e:c7:86:31:0f:4b:65:fd:56:e9:7d:c9:61:f9:
06:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9F:27:1D:2C:95:1C:5D:87:FB:B2:70:3C:01:59:C6:2E:46:5E:0F:A4
X509v3 Authority Key Identifier:
keyid:86:AB:3E:BD:7C:41:E6:56:CC:EE:CD:B5:A8:50:C7:A4:B1:E2:67:E3
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91973D2/DA839C94BFC811EBA5B3A67CC4F9AE02/hqs-vXxB5lbM7s21qFDHpLHiZ-M.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hqs-vXxB5lbM7s21qFDHpLHiZ-M.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91973D2/DA839C94BFC811EBA5B3A67CC4F9AE02/hqs-vXxB5lbM7s21qFDHpLHiZ-M.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
37:71:14:cf:ab:3a:05:bb:db:e4:be:9d:1b:aa:2b:1e:79:f9:
ec:2c:c5:2d:8f:9c:66:3b:00:cc:fe:db:cc:df:bc:20:e8:7b:
1f:e1:a1:73:f3:00:5b:99:27:6d:29:fe:40:f1:19:d2:02:fa:
d5:d1:41:ae:0a:c7:61:db:51:7e:5c:84:02:a1:19:15:84:e7:
5a:1e:5c:f6:f3:3a:d5:5a:42:a6:3c:b9:ae:f2:11:5f:45:a7:
1b:72:71:86:9f:9d:c9:2a:62:c5:b8:c1:0a:fc:84:41:d6:47:
8d:b2:59:86:36:60:a8:6e:57:c5:55:ec:ab:e6:3e:7d:26:0c:
e3:16:41:20:a2:17:e0:22:70:0b:89:d6:b4:c0:fe:7d:73:4b:
95:e4:cd:10:9f:fe:b2:fe:b7:2f:fb:19:d3:4d:dd:59:2f:9a:
7f:8c:fc:c5:6d:aa:d2:d6:3d:9e:9a:47:79:28:35:ef:fc:15:
c3:2c:fa:37:e1:d2:db:1e:19:97:0d:6a:aa:a9:51:f9:10:75:
ca:d6:f8:4e:e6:44:cb:bb:40:cf:12:ff:e6:7d:65:cf:0b:d5:
1b:68:b2:05:ba:76:7e:d7:de:fd:91:13:92:d1:4d:d3:d3:d9:
fe:f1:81:d1:64:b7:c3:90:b3:ef:8b:f9:c5:0a:35:d6:ea:3d:
b3:0f:3f:b2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 28 03:33:25 2026 by rpki-client