$ rpki-client -vvf rpki.apnic.net/member_repository/A91973D2/DA839C94BFC811EBA5B3A67CC4F9AE02/hqs-vXxB5lbM7s21qFDHpLHiZ-M.mft File: hqs-vXxB5lbM7s21qFDHpLHiZ-M.mft (raw, json) Hash identifier: uECsC9iUYmA4DvtDXxTcxiBtgiZErWS/dGthT4uHv+8= Subject key identifier: D6:E5:6D:3B:39:C8:69:D4:C0:E7:A3:5F:4E:1C:DF:6D:3C:15:91:59 Authority key identifier: 86:AB:3E:BD:7C:41:E6:56:CC:EE:CD:B5:A8:50:C7:A4:B1:E2:67:E3 Certificate issuer: /CN=A91973D2/serialNumber=86AB3EBD7C41E656CCEECDB5A850C7A4B1E267E3 Certificate serial: 05F3 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hqs-vXxB5lbM7s21qFDHpLHiZ-M.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91973D2/DA839C94BFC811EBA5B3A67CC4F9AE02/hqs-vXxB5lbM7s21qFDHpLHiZ-M.mft Manifest number: 05EC Signing time: Wed 06 Aug 2025 23:23:07 +0000 Manifest this update: Wed 06 Aug 2025 23:23:07 +0000 Manifest next update: Wed 13 Aug 2025 23:23:07 +0000 Files and hashes: 1: hqs-vXxB5lbM7s21qFDHpLHiZ-M.crl (hash: l2vYEhBX21pnR4wqqJVdpk+mSy5vhIum0FWT6NtEXBY=) 2: 6959BDA8C05B11EB9540776AC4F9AE02.roa (hash: an7WXAxX+jv7oF31g7hZpPAQEGzXt/L0AOIi2ZabL2I=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91973D2/DA839C94BFC811EBA5B3A67CC4F9AE02/hqs-vXxB5lbM7s21qFDHpLHiZ-M.crl rsync://rpki.apnic.net/member_repository/A91973D2/DA839C94BFC811EBA5B3A67CC4F9AE02/hqs-vXxB5lbM7s21qFDHpLHiZ-M.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hqs-vXxB5lbM7s21qFDHpLHiZ-M.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 13 Aug 2025 23:23:06 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1523 (0x5f3) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91973D2, serialNumber=86AB3EBD7C41E656CCEECDB5A850C7A4B1E267E3 Validity Not Before: Aug 6 23:23:07 2025 GMT Not After : Aug 13 23:23:07 2025 GMT Subject: CN=6893e3db-b238 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:8c:4e:51:e7:2c:65:a1:bc:4c:c9:03:99:41: 2e:73:f5:d9:4a:81:f3:e7:4d:ea:cb:7a:2c:a7:8d: c0:6c:d9:d8:70:e4:8c:51:9c:79:de:90:e7:01:4a: 2c:e0:21:2b:15:73:75:e3:11:e1:08:77:0a:00:e7: 75:d6:a3:0a:ea:ea:1f:6d:56:f2:86:7f:05:f8:52: 58:3a:a5:81:4e:a7:de:95:16:d0:35:68:fc:86:68: 50:83:76:91:48:b4:b7:8a:a5:24:08:24:87:17:dc: 48:82:97:32:be:3e:15:01:93:bd:ba:98:72:b5:f3: 26:34:1c:50:3a:2c:5f:03:20:a0:79:e6:7c:f7:90: 5f:13:3e:f3:22:18:ed:f9:e2:fd:70:c4:38:6b:1c: a5:8f:2f:cf:c2:04:03:b3:46:ce:2d:2e:35:af:dd: c6:45:6c:46:32:09:46:72:8f:4c:ed:3e:11:81:e9: d4:7b:ef:0f:65:6c:c2:63:17:1b:3f:22:0c:6d:b2: ff:91:2a:69:6f:cf:3b:0f:e7:4c:07:bd:c9:1b:35: 4d:bc:cc:30:a6:25:3f:1e:b2:c1:4c:c4:68:2f:fe: 42:d0:aa:a8:50:dc:26:c6:3a:02:61:60:92:b5:e1: 0f:c8:b8:63:86:47:1c:27:fb:6f:03:6b:53:6c:80: 5a:b1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D6:E5:6D:3B:39:C8:69:D4:C0:E7:A3:5F:4E:1C:DF:6D:3C:15:91:59 X509v3 Authority Key Identifier: keyid:86:AB:3E:BD:7C:41:E6:56:CC:EE:CD:B5:A8:50:C7:A4:B1:E2:67:E3 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91973D2/DA839C94BFC811EBA5B3A67CC4F9AE02/hqs-vXxB5lbM7s21qFDHpLHiZ-M.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hqs-vXxB5lbM7s21qFDHpLHiZ-M.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91973D2/DA839C94BFC811EBA5B3A67CC4F9AE02/hqs-vXxB5lbM7s21qFDHpLHiZ-M.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 4a:b1:2c:07:8f:a0:fe:59:4b:40:4a:58:10:f4:31:9e:69:f8: d3:43:2e:21:42:21:17:b3:f6:66:ca:97:f7:c8:c1:cf:7a:18: aa:4c:e2:ea:f9:90:49:95:9b:31:d1:f9:e3:e7:99:83:92:06: a7:9f:ac:12:8d:38:fc:ef:01:86:bf:18:06:49:2b:ea:5e:7a: 8d:a4:c7:6c:0b:3b:c1:80:5c:0a:0f:5f:f4:df:8e:fb:23:58: 17:8b:10:e0:6b:b2:45:c0:05:da:6b:cb:d4:d5:78:ea:e1:d1: 27:a0:4f:29:4c:b4:a4:80:81:7d:f1:80:c2:8f:60:4e:38:75: c0:0f:4e:a3:0f:7e:c2:c8:f3:19:3d:ee:80:cb:e7:0b:c1:dc: 08:48:9e:9d:d4:b1:ec:46:ab:a7:dc:ac:44:58:81:6c:73:d1: b7:d4:a3:3b:d2:9a:a2:db:70:10:c0:c4:46:4a:ce:a4:1d:a2: 41:1d:0e:c0:9f:09:c6:67:06:9a:39:64:36:c6:fe:46:f8:a4: 49:e6:ed:d8:60:51:1f:cf:82:4a:8b:fc:2c:48:cc:d7:29:f3: d0:ce:86:4f:03:4a:5c:ea:63:ed:31:85:1a:b3:dd:c0:38:61: 4c:4c:1a:46:53:4b:c9:16:4f:28:45:93:36:ac:dc:55:e3:98: 2d:5a:5b:9f -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBfMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OTczRDIxMTAvBgNVBAUTKDg2QUIzRUJEN0M0MUU2NTZDQ0VFQ0RCNUE4NTBDN0E0 QjFFMjY3RTMwHhcNMjUwODA2MjMyMzA3WhcNMjUwODEzMjMyMzA3WjAYMRYwFAYD VQQDEw02ODkzZTNkYi1iMjM4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAuIxOUecsZaG8TMkDmUEuc/XZSoHz503qy3osp43AbNnYcOSMUZx53pDnAUos 4CErFXN14xHhCHcKAOd11qMK6uofbVbyhn8F+FJYOqWBTqfelRbQNWj8hmhQg3aR SLS3iqUkCCSHF9xIgpcyvj4VAZO9uphytfMmNBxQOixfAyCgeeZ895BfEz7zIhjt +eL9cMQ4axyljy/PwgQDs0bOLS41r93GRWxGMglGco9M7T4RgenUe+8PZWzCYxcb PyIMbbL/kSppb887D+dMB73JGzVNvMwwpiU/HrLBTMRoL/5C0KqoUNwmxjoCYWCS teEPyLhjhkccJ/tvA2tTbIBasQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFNblbTs5 yGnUwOejX04c3208FZFZMB8GA1UdIwQYMBaAFIarPr18QeZWzO7NtahQx6Sx4mfj MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5NzNEMi9EQTgzOUM5NEJG QzgxMUVCQTVCM0E2N0NDNEY5QUUwMi9ocXMtdlh4QjVsYk03czIxcUZESHBMSGla LU0uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2hxcy12WHhCNWxiTTdzMjFxRkRIcExIaVotTS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5 NzNEMi9EQTgzOUM5NEJGQzgxMUVCQTVCM0E2N0NDNEY5QUUwMi9ocXMtdlh4QjVs Yk03czIxcUZESHBMSGlaLU0ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBKsSwHj6D+WUtASlgQ9DGeafjTQy4hQiEXs/Zmypf3yMHPehiqTOLq +ZBJlZsx0fnj55mDkgann6wSjTj87wGGvxgGSSvqXnqNpMdsCzvBgFwKD1/03477 I1gXixDga7JFwAXaa8vU1Xjq4dEnoE8pTLSkgIF98YDCj2BOOHXAD06jD37CyPMZ Pe6Ay+cLwdwISJ6d1LHsRqun3KxEWIFsc9G31KM70pqi23AQwMRGSs6kHaJBHQ7A nwnGZwaaOWQ2xv5G+KRJ5u3YYFEfz4JKi/wsSMzXKfPQzoZPA0pc6mPtMYUas93A OGFMTBpGU0vJFk8oRZM2rNxV45gtWluf -----END CERTIFICATE-----Generated at Thu Aug 7 05:16:14 2025 by rpki-client