$ rpki-client -vvf rpki.apnic.net/member_repository/A91973D2/DA839C94BFC811EBA5B3A67CC4F9AE02/hqs-vXxB5lbM7s21qFDHpLHiZ-M.mft File: hqs-vXxB5lbM7s21qFDHpLHiZ-M.mft (raw, json) Hash identifier: ipkfShS44sacdTPc66LEW/qI5v8ChIjZtEOtrw3iW1A= Subject key identifier: 35:D9:B1:4A:52:B8:0D:8F:89:F3:6C:B5:DF:0D:D6:62:14:78:84:1C Authority key identifier: 86:AB:3E:BD:7C:41:E6:56:CC:EE:CD:B5:A8:50:C7:A4:B1:E2:67:E3 Certificate issuer: /CN=A91973D2/serialNumber=86AB3EBD7C41E656CCEECDB5A850C7A4B1E267E3 Certificate serial: 0620 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hqs-vXxB5lbM7s21qFDHpLHiZ-M.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91973D2/DA839C94BFC811EBA5B3A67CC4F9AE02/hqs-vXxB5lbM7s21qFDHpLHiZ-M.mft Manifest number: 0619 Signing time: Tue 04 Nov 2025 22:55:16 +0000 Manifest this update: Tue 04 Nov 2025 22:55:15 +0000 Manifest next update: Tue 11 Nov 2025 22:55:15 +0000 Files and hashes: 1: hqs-vXxB5lbM7s21qFDHpLHiZ-M.crl (hash: K0FfV7i51JD1Mv6c8+Z06WtS2GI0YUhRyvTkOOek5Og=) 2: 6959BDA8C05B11EB9540776AC4F9AE02.roa (hash: an7WXAxX+jv7oF31g7hZpPAQEGzXt/L0AOIi2ZabL2I=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91973D2/DA839C94BFC811EBA5B3A67CC4F9AE02/hqs-vXxB5lbM7s21qFDHpLHiZ-M.crl rsync://rpki.apnic.net/member_repository/A91973D2/DA839C94BFC811EBA5B3A67CC4F9AE02/hqs-vXxB5lbM7s21qFDHpLHiZ-M.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hqs-vXxB5lbM7s21qFDHpLHiZ-M.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 11 Nov 2025 22:55:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1568 (0x620) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91973D2, serialNumber=86AB3EBD7C41E656CCEECDB5A850C7A4B1E267E3 Validity Not Before: Nov 4 22:55:15 2025 GMT Not After : Nov 11 22:55:15 2025 GMT Subject: CN=690a8453-c041 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:41:e8:e3:a8:63:ad:ef:87:8a:a9:71:35:c2: 9d:08:1e:e7:69:36:0d:64:db:f2:2f:7b:77:4b:df: de:4c:07:70:9f:c0:60:ad:b4:b4:e6:e7:6c:cc:31: 8b:84:49:fd:7a:dd:f6:9b:53:0a:78:fd:a7:42:79: 5c:58:ad:f6:e7:bb:38:66:2f:dd:ea:9e:42:5b:c2: 13:22:75:6b:f5:2d:92:98:e0:ad:cb:88:6b:b4:47: 45:a9:4f:2c:f1:4f:75:e9:95:d4:a3:a1:02:8a:3f: b7:ae:49:18:68:c0:65:98:6a:1c:b1:ed:67:70:c9: 52:ac:db:9c:1c:3c:61:fc:88:a2:71:c8:b8:1e:df: 36:3f:a4:32:4b:ce:74:94:7b:34:5f:46:50:db:0c: c2:bf:c4:a4:7f:ba:15:d7:b8:cc:cf:c2:10:2d:51: be:1d:ff:67:03:92:c5:6d:7b:4f:4e:0d:0d:58:a6: 03:06:8b:88:77:11:8a:28:78:ec:52:a5:5d:04:53: aa:10:7d:82:0a:51:de:f7:94:6a:e1:3d:11:36:61: a8:0b:e3:d8:c3:c4:f1:27:1c:62:ca:09:a4:ba:4b: ff:c0:50:1e:20:84:a4:7e:0a:f8:76:ec:f5:62:50: 88:7d:4e:fe:06:8d:a4:a4:ab:f0:de:a1:63:a1:52: d2:0b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 35:D9:B1:4A:52:B8:0D:8F:89:F3:6C:B5:DF:0D:D6:62:14:78:84:1C X509v3 Authority Key Identifier: keyid:86:AB:3E:BD:7C:41:E6:56:CC:EE:CD:B5:A8:50:C7:A4:B1:E2:67:E3 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91973D2/DA839C94BFC811EBA5B3A67CC4F9AE02/hqs-vXxB5lbM7s21qFDHpLHiZ-M.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hqs-vXxB5lbM7s21qFDHpLHiZ-M.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91973D2/DA839C94BFC811EBA5B3A67CC4F9AE02/hqs-vXxB5lbM7s21qFDHpLHiZ-M.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 63:c0:34:de:93:55:6c:ff:b7:30:c0:e4:bd:0f:e5:dc:dd:47: a6:3b:e7:a4:47:92:9d:98:68:19:1b:2a:3a:9a:eb:b5:75:53: 23:cc:5d:a6:be:60:02:fb:e2:4e:a4:bf:c9:42:43:05:38:4d: 89:c5:88:4d:1b:3b:24:00:2c:eb:c9:f8:b6:82:96:6b:31:c6: 28:e8:ff:fe:92:9a:5c:54:60:41:f2:cc:10:00:82:68:37:00: a8:ea:88:40:6b:a6:33:8a:42:64:72:c6:23:9e:3b:e6:c9:ec: 3b:2c:f2:a2:08:3f:2b:34:65:3a:67:c3:15:ce:0d:d3:61:c9: 5a:90:bc:72:2b:1b:1d:6e:9c:b7:21:6a:2f:c4:4e:62:b4:8f: 29:31:8c:71:e5:d6:e3:7c:26:e6:82:c2:c6:af:95:9e:de:29: 4d:bd:db:53:9f:59:de:88:f2:b2:e6:5c:82:80:00:cf:c5:ba: 73:27:4d:f2:56:1f:a9:05:02:51:4d:f4:b3:d6:c4:a5:b8:e9: cd:9e:f5:53:83:e0:b8:a6:50:e4:96:d3:33:c8:5d:a4:5c:93: fb:e3:2c:51:3e:04:0d:75:ce:b4:59:44:37:2e:2d:c6:0d:d3: 79:cf:6f:e7:39:c2:77:27:ce:a0:d5:88:e3:09:45:20:3e:d0: 30:28:6e:75 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBiAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OTczRDIxMTAvBgNVBAUTKDg2QUIzRUJEN0M0MUU2NTZDQ0VFQ0RCNUE4NTBDN0E0 QjFFMjY3RTMwHhcNMjUxMTA0MjI1NTE1WhcNMjUxMTExMjI1NTE1WjAYMRYwFAYD VQQDEw02OTBhODQ1My1jMDQxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAqkHo46hjre+HiqlxNcKdCB7naTYNZNvyL3t3S9/eTAdwn8BgrbS05udszDGL hEn9et32m1MKeP2nQnlcWK3257s4Zi/d6p5CW8ITInVr9S2SmOCty4hrtEdFqU8s 8U916ZXUo6ECij+3rkkYaMBlmGocse1ncMlSrNucHDxh/Iiicci4Ht82P6QyS850 lHs0X0ZQ2wzCv8Skf7oV17jMz8IQLVG+Hf9nA5LFbXtPTg0NWKYDBouIdxGKKHjs UqVdBFOqEH2CClHe95Rq4T0RNmGoC+PYw8TxJxxiygmkukv/wFAeIISkfgr4duz1 YlCIfU7+Bo2kpKvw3qFjoVLSCwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFDXZsUpS uA2PifNstd8N1mIUeIQcMB8GA1UdIwQYMBaAFIarPr18QeZWzO7NtahQx6Sx4mfj MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5NzNEMi9EQTgzOUM5NEJG QzgxMUVCQTVCM0E2N0NDNEY5QUUwMi9ocXMtdlh4QjVsYk03czIxcUZESHBMSGla LU0uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2hxcy12WHhCNWxiTTdzMjFxRkRIcExIaVotTS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5 NzNEMi9EQTgzOUM5NEJGQzgxMUVCQTVCM0E2N0NDNEY5QUUwMi9ocXMtdlh4QjVs Yk03czIxcUZESHBMSGlaLU0ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBjwDTek1Vs/7cwwOS9D+Xc3UemO+ekR5KdmGgZGyo6muu1dVMjzF2m vmAC++JOpL/JQkMFOE2JxYhNGzskACzryfi2gpZrMcYo6P/+kppcVGBB8swQAIJo NwCo6ohAa6YzikJkcsYjnjvmyew7LPKiCD8rNGU6Z8MVzg3TYclakLxyKxsdbpy3 IWovxE5itI8pMYxx5dbjfCbmgsLGr5We3ilNvdtTn1neiPKy5lyCgADPxbpzJ03y Vh+pBQJRTfSz1sSluOnNnvVTg+C4plDkltMzyF2kXJP74yxRPgQNdc60WUQ3Li3G DdN5z2/nOcJ3J86g1YjjCUUgPtAwKG51 -----END CERTIFICATE-----Generated at Wed Nov 5 10:27:00 2025 by rpki-client