$ rpki-client -vvf rpki.apnic.net/member_repository/A91973D2/DA839C94BFC811EBA5B3A67CC4F9AE02/hqs-vXxB5lbM7s21qFDHpLHiZ-M.mft File: hqs-vXxB5lbM7s21qFDHpLHiZ-M.mft (raw, json) Hash identifier: RnmMxXGqU++oD2Xj0XsA0gEIc/zcH9s4yhU4tO2ZPKE= Subject key identifier: D4:D8:9C:DD:98:A1:26:7A:EA:4D:DA:67:E9:F7:4E:34:8C:DC:B1:4F Authority key identifier: 86:AB:3E:BD:7C:41:E6:56:CC:EE:CD:B5:A8:50:C7:A4:B1:E2:67:E3 Certificate issuer: /CN=A91973D2/serialNumber=86AB3EBD7C41E656CCEECDB5A850C7A4B1E267E3 Certificate serial: 05D4 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hqs-vXxB5lbM7s21qFDHpLHiZ-M.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91973D2/DA839C94BFC811EBA5B3A67CC4F9AE02/hqs-vXxB5lbM7s21qFDHpLHiZ-M.mft Manifest number: 05CE Signing time: Thu 12 Jun 2025 22:40:49 +0000 Manifest this update: Thu 12 Jun 2025 22:40:48 +0000 Manifest next update: Thu 19 Jun 2025 22:40:48 +0000 Files and hashes: 1: hqs-vXxB5lbM7s21qFDHpLHiZ-M.crl (hash: mxEDKsH/vHgzDongfSQwRs8ltwtpDa/yA82mvURr3tg=) 2: 6959BDA8C05B11EB9540776AC4F9AE02.roa (hash: 4SABNLVP141mmTSS6gzli1B5PVXlz3wNBkczMbOULL4=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91973D2/DA839C94BFC811EBA5B3A67CC4F9AE02/hqs-vXxB5lbM7s21qFDHpLHiZ-M.crl rsync://rpki.apnic.net/member_repository/A91973D2/DA839C94BFC811EBA5B3A67CC4F9AE02/hqs-vXxB5lbM7s21qFDHpLHiZ-M.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hqs-vXxB5lbM7s21qFDHpLHiZ-M.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 19 Jun 2025 22:40:47 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1492 (0x5d4) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91973D2, serialNumber=86AB3EBD7C41E656CCEECDB5A850C7A4B1E267E3 Validity Not Before: Jun 12 22:40:48 2025 GMT Not After : Jun 19 22:40:48 2025 GMT Subject: CN=684b5770-8716 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9d:23:c0:06:e9:b8:f5:86:78:5f:2b:36:46:81: 48:fb:06:8e:0d:f3:25:b7:36:c1:4c:45:18:e4:3a: 17:0a:70:07:d2:30:b9:5b:c8:e8:f1:9f:a7:e9:56: 23:8d:7b:7e:db:12:52:c3:68:47:c5:92:c4:60:31: fc:ad:48:61:c0:6e:ae:62:0c:e6:9f:eb:db:3e:aa: 79:26:8e:5b:3c:da:e1:e2:2d:20:5c:5e:45:81:f2: 17:40:3c:33:f7:8c:5d:ac:b4:3e:32:15:a8:2c:c3: 97:86:6e:77:1a:05:81:be:b9:c3:74:fe:3e:bc:c9: 75:1d:2f:fc:06:3f:36:ec:2f:3f:d1:02:ef:f1:41: 87:64:13:77:5a:ce:92:87:10:b8:f2:8c:ef:ec:0b: f5:4f:25:0a:cb:f3:69:1f:39:79:ff:fb:f3:4a:40: 51:8b:72:f8:6f:ea:76:09:14:78:9b:cc:c1:83:05: 7a:b7:c9:e1:9a:78:f1:23:71:84:27:9e:f2:0e:b3: 82:d7:1a:c1:3c:48:eb:20:63:6c:0e:bf:95:e3:7d: cb:af:51:a8:32:db:fe:74:03:43:c9:f5:e1:b4:59: 53:36:cb:b3:77:47:65:37:c9:2a:b0:3b:bc:bb:22: d6:a0:db:b8:6b:92:b6:69:05:ef:6d:48:b6:61:5d: 45:15 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D4:D8:9C:DD:98:A1:26:7A:EA:4D:DA:67:E9:F7:4E:34:8C:DC:B1:4F X509v3 Authority Key Identifier: keyid:86:AB:3E:BD:7C:41:E6:56:CC:EE:CD:B5:A8:50:C7:A4:B1:E2:67:E3 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91973D2/DA839C94BFC811EBA5B3A67CC4F9AE02/hqs-vXxB5lbM7s21qFDHpLHiZ-M.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hqs-vXxB5lbM7s21qFDHpLHiZ-M.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91973D2/DA839C94BFC811EBA5B3A67CC4F9AE02/hqs-vXxB5lbM7s21qFDHpLHiZ-M.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 07:61:01:bd:ae:92:c7:ba:12:4e:bb:2c:55:1d:74:c9:df:f6: ec:59:24:b5:13:ed:22:80:ab:66:75:a7:1a:22:df:d5:0d:07: 3d:a4:7d:05:f1:03:1b:b2:02:91:93:de:f7:1d:34:40:f7:bf: aa:ec:95:6d:06:e7:9b:c2:ac:58:eb:6a:f4:0e:e5:59:be:30: bb:ae:37:26:18:9b:39:13:1c:f2:66:df:76:4e:bf:16:65:2b: 80:6a:97:68:07:19:34:bf:64:68:d3:9d:33:d6:1b:ec:3e:c8: d8:94:c0:cc:8c:9b:95:dd:b7:96:62:b3:65:f2:25:e7:ea:ab: c6:37:7f:a4:81:00:c0:dc:ba:a9:41:31:a7:48:77:64:95:bf: b7:57:87:a1:51:60:c6:c4:e5:79:85:11:3c:39:21:97:06:ca: e8:8d:4f:de:62:d6:23:57:3a:7e:77:5d:b7:bc:10:60:61:21: 8c:25:c2:74:1d:df:eb:e6:b3:da:65:29:f1:5c:a1:96:66:b9: ff:31:ce:5b:02:73:00:2c:d5:c3:d8:ec:7b:14:d8:ef:fd:d4: 6f:4c:b0:5f:48:ec:ad:63:12:f4:58:e9:6c:31:a3:79:c1:66: d5:8e:7b:c0:ae:37:94:1e:b3:81:6d:34:0e:1f:ed:fe:0d:a0: d7:22:c1:ca -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBdQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OTczRDIxMTAvBgNVBAUTKDg2QUIzRUJEN0M0MUU2NTZDQ0VFQ0RCNUE4NTBDN0E0 QjFFMjY3RTMwHhcNMjUwNjEyMjI0MDQ4WhcNMjUwNjE5MjI0MDQ4WjAYMRYwFAYD VQQDEw02ODRiNTc3MC04NzE2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAnSPABum49YZ4Xys2RoFI+waODfMltzbBTEUY5DoXCnAH0jC5W8jo8Z+n6VYj jXt+2xJSw2hHxZLEYDH8rUhhwG6uYgzmn+vbPqp5Jo5bPNrh4i0gXF5FgfIXQDwz 94xdrLQ+MhWoLMOXhm53GgWBvrnDdP4+vMl1HS/8Bj827C8/0QLv8UGHZBN3Ws6S hxC48ozv7Av1TyUKy/NpHzl5//vzSkBRi3L4b+p2CRR4m8zBgwV6t8nhmnjxI3GE J57yDrOC1xrBPEjrIGNsDr+V433Lr1GoMtv+dANDyfXhtFlTNsuzd0dlN8kqsDu8 uyLWoNu4a5K2aQXvbUi2YV1FFQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFNTYnN2Y oSZ66k3aZ+n3TjSM3LFPMB8GA1UdIwQYMBaAFIarPr18QeZWzO7NtahQx6Sx4mfj MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5NzNEMi9EQTgzOUM5NEJG QzgxMUVCQTVCM0E2N0NDNEY5QUUwMi9ocXMtdlh4QjVsYk03czIxcUZESHBMSGla LU0uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2hxcy12WHhCNWxiTTdzMjFxRkRIcExIaVotTS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5 NzNEMi9EQTgzOUM5NEJGQzgxMUVCQTVCM0E2N0NDNEY5QUUwMi9ocXMtdlh4QjVs Yk03czIxcUZESHBMSGlaLU0ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAHYQG9rpLHuhJOuyxVHXTJ3/bsWSS1E+0igKtmdacaIt/VDQc9pH0F 8QMbsgKRk973HTRA97+q7JVtBuebwqxY62r0DuVZvjC7rjcmGJs5ExzyZt92Tr8W ZSuAapdoBxk0v2Ro050z1hvsPsjYlMDMjJuV3beWYrNl8iXn6qvGN3+kgQDA3Lqp QTGnSHdklb+3V4ehUWDGxOV5hRE8OSGXBsrojU/eYtYjVzp+d123vBBgYSGMJcJ0 Hd/r5rPaZSnxXKGWZrn/Mc5bAnMALNXD2Ox7FNjv/dRvTLBfSOytYxL0WOlsMaN5 wWbVjnvArjeUHrOBbTQOH+3+DaDXIsHK -----END CERTIFICATE-----Generated at Sat Jun 14 18:56:39 2025 by rpki-client