$ rpki-client -vvf rpki.apnic.net/member_repository/A91973D2/DA839C94BFC811EBA5B3A67CC4F9AE02/hqs-vXxB5lbM7s21qFDHpLHiZ-M.mft File: hqs-vXxB5lbM7s21qFDHpLHiZ-M.mft (raw, json) Hash identifier: +grTq3iBIy3OHdIBd6PJBErTzvud5KpLoAtBzgD4HkM= Subject key identifier: B5:E7:AC:FA:08:3F:47:8E:4A:EE:45:F1:B1:70:31:0A:B3:80:7E:AA Authority key identifier: 86:AB:3E:BD:7C:41:E6:56:CC:EE:CD:B5:A8:50:C7:A4:B1:E2:67:E3 Certificate issuer: /CN=A91973D2/serialNumber=86AB3EBD7C41E656CCEECDB5A850C7A4B1E267E3 Certificate serial: 06B3 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hqs-vXxB5lbM7s21qFDHpLHiZ-M.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91973D2/DA839C94BFC811EBA5B3A67CC4F9AE02/hqs-vXxB5lbM7s21qFDHpLHiZ-M.mft Manifest number: 06A5 Signing time: Sun 26 Jul 2026 23:16:02 +0000 Manifest this update: Sun 26 Jul 2026 23:16:01 +0000 Manifest next update: Sun 02 Aug 2026 23:16:01 +0000 Files and hashes: 1: hqs-vXxB5lbM7s21qFDHpLHiZ-M.crl (hash: kXbAWbatp3s2w6uz8ZAehYuQEyaBHsnUdXGoGiUTp6k=) 2: 6959BDA8C05B11EB9540776AC4F9AE02.roa (hash: OANS4UGotbrHDA32WOeuOB3Wn0ea/AxoJh5y6ulR7SQ=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91973D2/DA839C94BFC811EBA5B3A67CC4F9AE02/hqs-vXxB5lbM7s21qFDHpLHiZ-M.crl rsync://rpki.apnic.net/member_repository/A91973D2/DA839C94BFC811EBA5B3A67CC4F9AE02/hqs-vXxB5lbM7s21qFDHpLHiZ-M.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hqs-vXxB5lbM7s21qFDHpLHiZ-M.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 02 Aug 2026 23:16:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1715 (0x6b3) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91973D2, serialNumber=86AB3EBD7C41E656CCEECDB5A850C7A4B1E267E3 Validity Not Before: Jul 26 23:16:01 2026 GMT Not After : Aug 2 23:16:01 2026 GMT Subject: CN=6a669532-eab3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f9:96:b7:5b:ef:9f:c5:5a:9f:e6:63:2b:8b:28: db:76:fe:5b:9c:95:83:59:2e:0b:57:5c:ff:66:11: 2d:c6:b6:2c:a7:4f:d2:61:8e:07:44:eb:54:b8:79: 9d:59:61:e1:7f:70:ac:83:a5:88:10:5b:a5:e6:38: 6a:be:2f:ae:aa:d2:41:da:4c:d4:4a:62:4b:f3:41: bb:7c:a3:11:4f:8d:78:12:49:f3:60:2a:48:7b:f7: 50:0f:9b:4d:ab:d8:f5:a3:92:48:1b:29:b7:e1:81: f5:9e:b9:9a:10:d6:bf:db:67:62:66:72:9e:41:6f: 51:12:cb:29:41:0d:66:7a:a3:46:f7:6a:44:ee:90: 74:98:05:8a:aa:3f:2a:3b:45:63:7a:29:2f:35:c1: 8b:ff:11:21:a6:59:6b:c7:9d:b6:18:c3:fc:d7:5d: 1e:df:97:7f:9d:73:d5:0d:54:80:29:30:43:39:41: 4f:f6:74:c6:29:08:75:d6:50:b7:08:20:dd:8a:64: 26:a3:75:15:99:fc:39:73:3d:e9:8f:a9:6a:ed:f8: 93:49:1c:86:e6:5d:67:e4:53:c6:2a:dc:c5:b9:f4: ce:bf:bf:29:34:64:e7:4c:67:61:7d:ef:36:bc:14: 93:80:d5:19:eb:dc:46:9e:86:92:03:6f:d6:17:1f: 22:1f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B5:E7:AC:FA:08:3F:47:8E:4A:EE:45:F1:B1:70:31:0A:B3:80:7E:AA X509v3 Authority Key Identifier: keyid:86:AB:3E:BD:7C:41:E6:56:CC:EE:CD:B5:A8:50:C7:A4:B1:E2:67:E3 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91973D2/DA839C94BFC811EBA5B3A67CC4F9AE02/hqs-vXxB5lbM7s21qFDHpLHiZ-M.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hqs-vXxB5lbM7s21qFDHpLHiZ-M.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91973D2/DA839C94BFC811EBA5B3A67CC4F9AE02/hqs-vXxB5lbM7s21qFDHpLHiZ-M.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 08:09:a4:89:71:7f:c1:40:e8:bc:ea:88:bd:4a:dd:aa:8a:09: d1:66:84:c7:0e:2c:8d:d7:07:5d:77:4e:5e:28:91:50:a8:14: 42:4d:b3:7e:f1:dd:5b:bc:e4:63:6c:6a:e5:bb:be:b8:58:17: 9c:e7:50:db:4b:92:99:97:8c:62:33:29:67:7d:08:4f:93:af: 43:9d:6b:57:39:59:3e:48:2e:f4:02:be:76:25:0f:e2:ac:ae: ad:69:73:fb:28:6b:44:0e:bb:46:2c:06:a3:5d:cd:a3:9a:9c: f0:25:5e:60:33:35:58:8a:a7:f2:83:a3:01:01:70:fd:3d:11: 92:6b:9d:b2:88:79:26:64:82:0d:66:56:45:5d:c8:ca:d2:d1: ad:04:80:af:4a:2b:1a:ae:07:0c:2d:51:86:bd:38:18:48:c6: dc:3d:9d:04:c0:62:1e:eb:ad:07:10:da:a1:e7:d0:98:16:c8: 5c:a3:c3:36:07:b6:02:be:ac:17:e5:94:eb:be:e0:f3:75:fa: 4f:99:9d:c1:a8:ba:b6:db:ef:ef:c5:a7:f3:08:89:83:66:48: f0:e4:1b:d1:a8:53:14:5c:fd:cc:68:d8:8f:09:7c:15:dc:bd: 65:ea:0b:0a:2f:ff:95:6e:ba:65:70:c9:0e:ee:dd:bd:df:95: 80:a5:9b:e1 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICBrMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OTczRDIxMTAvBgNVBAUTKDg2QUIzRUJEN0M0MUU2NTZDQ0VFQ0RCNUE4NTBDN0E0 QjFFMjY3RTMwHhcNMjYwNzI2MjMxNjAxWhcNMjYwODAyMjMxNjAxWjAYMRYwFAYD VQQDEw02YTY2OTUzMi1lYWIzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA+Za3W++fxVqf5mMriyjbdv5bnJWDWS4LV1z/ZhEtxrYsp0/SYY4HROtUuHmd WWHhf3Csg6WIEFul5jhqvi+uqtJB2kzUSmJL80G7fKMRT414EknzYCpIe/dQD5tN q9j1o5JIGym34YH1nrmaENa/22diZnKeQW9REsspQQ1meqNG92pE7pB0mAWKqj8q O0VjeikvNcGL/xEhpllrx522GMP8110e35d/nXPVDVSAKTBDOUFP9nTGKQh11lC3 CCDdimQmo3UVmfw5cz3pj6lq7fiTSRyG5l1n5FPGKtzFufTOv78pNGTnTGdhfe82 vBSTgNUZ69xGnoaSA2/WFx8iHwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFLXnrPoI P0eOSu5F8bFwMQqzgH6qMB8GA1UdIwQYMBaAFIarPr18QeZWzO7NtahQx6Sx4mfj MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5NzNEMi9EQTgzOUM5NEJG QzgxMUVCQTVCM0E2N0NDNEY5QUUwMi9ocXMtdlh4QjVsYk03czIxcUZESHBMSGla LU0uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2hxcy12WHhCNWxiTTdzMjFxRkRIcExIaVotTS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5 NzNEMi9EQTgzOUM5NEJGQzgxMUVCQTVCM0E2N0NDNEY5QUUwMi9ocXMtdlh4QjVs Yk03czIxcUZESHBMSGlaLU0ubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEACAmkiXF/wUDovOqIvUrdqooJ0WaExw4sjdcHXXdOXiiRUKgUQk2zfvHdW7zk Y2xq5bu+uFgXnOdQ20uSmZeMYjMpZ30IT5OvQ51rVzlZPkgu9AK+diUP4qyurWlz +yhrRA67RiwGo13No5qc8CVeYDM1WIqn8oOjAQFw/T0Rkmudsoh5JmSCDWZWRV3I ytLRrQSAr0orGq4HDC1Rhr04GEjG3D2dBMBiHuutBxDaoefQmBbIXKPDNge2Ar6s F+WU677g83X6T5mdwai6ttvv78Wn8wiJg2ZI8OQb0ahTFFz9zGjYjwl8Fdy9ZeoL Ci//lW66ZXDJDu7dvd+VgKWb4Q== -----END CERTIFICATE-----Generated at Tue Jul 28 19:06:53 2026 by rpki-client