$ rpki-client -vvf rpki.apnic.net/member_repository/A91973D2/DA839C94BFC811EBA5B3A67CC4F9AE02/hqs-vXxB5lbM7s21qFDHpLHiZ-M.mft File: hqs-vXxB5lbM7s21qFDHpLHiZ-M.mft (raw, json) Hash identifier: Nr4b3ExCp4wO8JbKd9H8BJlt1BZOrv+qOAhpw4l02fM= Subject key identifier: C6:DC:B8:CC:18:49:F5:CB:B6:20:58:E6:6E:B8:E4:0F:AD:60:37:3E Authority key identifier: 86:AB:3E:BD:7C:41:E6:56:CC:EE:CD:B5:A8:50:C7:A4:B1:E2:67:E3 Certificate issuer: /CN=A91973D2/serialNumber=86AB3EBD7C41E656CCEECDB5A850C7A4B1E267E3 Certificate serial: 05BC Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hqs-vXxB5lbM7s21qFDHpLHiZ-M.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91973D2/DA839C94BFC811EBA5B3A67CC4F9AE02/hqs-vXxB5lbM7s21qFDHpLHiZ-M.mft Manifest number: 05B6 Signing time: Thu 24 Apr 2025 22:55:25 +0000 Manifest this update: Thu 24 Apr 2025 22:55:25 +0000 Manifest next update: Thu 01 May 2025 22:55:25 +0000 Files and hashes: 1: hqs-vXxB5lbM7s21qFDHpLHiZ-M.crl (hash: znGHgHOrwdMkrnj9FUzN3PjkZ4BWVCmvk7FvcqNmeDs=) 2: 6959BDA8C05B11EB9540776AC4F9AE02.roa (hash: 4SABNLVP141mmTSS6gzli1B5PVXlz3wNBkczMbOULL4=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91973D2/DA839C94BFC811EBA5B3A67CC4F9AE02/hqs-vXxB5lbM7s21qFDHpLHiZ-M.crl rsync://rpki.apnic.net/member_repository/A91973D2/DA839C94BFC811EBA5B3A67CC4F9AE02/hqs-vXxB5lbM7s21qFDHpLHiZ-M.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hqs-vXxB5lbM7s21qFDHpLHiZ-M.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 01 May 2025 22:55:24 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1468 (0x5bc) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91973D2, serialNumber=86AB3EBD7C41E656CCEECDB5A850C7A4B1E267E3 Validity Not Before: Apr 24 22:55:25 2025 GMT Not After : May 1 22:55:25 2025 GMT Subject: CN=680ac15d-d462 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:e5:70:bb:d1:f9:7e:38:ab:df:f0:7f:bb:b4: f3:93:e9:72:64:d1:b9:86:e9:a0:0c:b8:1b:50:b5: a4:aa:30:7a:59:73:c3:03:c5:ac:09:6a:0e:7a:a9: fb:e3:1a:38:4e:fb:03:4b:d9:53:2d:24:c9:a4:d9: f5:b3:c4:1e:b6:a4:7d:9a:35:3c:b6:85:67:20:d2: ce:1e:51:53:e5:e8:66:de:05:10:b4:da:ba:61:e8: d8:a2:08:4b:86:c3:0d:25:0e:e3:1a:8b:e3:32:9d: 07:13:fc:39:43:34:37:ed:42:58:dc:5b:55:e6:32: 61:36:15:57:d2:a4:2b:22:f1:20:54:74:d1:f2:ea: 1d:c4:bb:a3:af:fa:d9:db:6f:3b:1f:c0:a3:60:e5: 88:b6:b4:a8:43:5d:b3:17:f7:1a:20:cb:1f:de:68: 67:45:51:cf:58:6d:3a:13:74:ad:74:fe:ec:c0:cd: 6a:d7:1e:47:b4:d8:68:e8:2e:57:b9:a9:82:09:84: 40:1f:82:3c:ae:69:08:8b:5a:65:1f:cc:ba:70:0c: 96:b5:b9:88:a9:f3:e7:a6:43:09:81:dc:d3:62:71: 9f:c3:93:ef:3d:04:d9:f2:3b:3a:c7:7f:eb:ed:ae: 68:48:fd:49:e6:26:0b:0a:5a:b8:3f:1b:d9:ed:73: 80:8d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C6:DC:B8:CC:18:49:F5:CB:B6:20:58:E6:6E:B8:E4:0F:AD:60:37:3E X509v3 Authority Key Identifier: keyid:86:AB:3E:BD:7C:41:E6:56:CC:EE:CD:B5:A8:50:C7:A4:B1:E2:67:E3 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91973D2/DA839C94BFC811EBA5B3A67CC4F9AE02/hqs-vXxB5lbM7s21qFDHpLHiZ-M.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hqs-vXxB5lbM7s21qFDHpLHiZ-M.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91973D2/DA839C94BFC811EBA5B3A67CC4F9AE02/hqs-vXxB5lbM7s21qFDHpLHiZ-M.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 19:84:10:4a:dd:69:bb:8e:11:66:4b:3e:ce:85:fd:6a:46:5e: ee:72:ea:ed:9a:d4:28:c3:47:93:53:03:37:9e:e6:4d:70:48: a7:68:d5:8f:f6:52:c1:cd:32:9b:b9:d3:d6:3e:40:47:bb:fe: 0b:0c:c4:fa:31:37:f9:a3:8e:5e:ab:ed:e6:ae:cd:a2:27:0c: 65:c8:33:9f:1b:26:5a:ad:c3:12:f6:e0:97:8d:3e:8b:69:dd: ef:fc:6b:68:a1:f1:27:dc:da:f6:7e:2e:fb:fb:65:5a:44:ff: 1b:5b:04:83:dc:25:7d:2b:69:4b:a7:b2:e2:e1:38:36:57:03: d2:e5:21:47:3c:34:87:7e:30:df:e5:b1:d0:74:d2:92:b4:73: 56:ee:af:7e:cb:18:fc:06:a7:6e:79:df:2b:7a:32:09:14:52: 6a:5d:dc:d5:3c:e8:bf:41:68:fe:85:5a:5b:55:f8:1b:de:28: 00:68:04:b3:f6:4d:5f:7a:ba:0f:4f:f4:d7:65:14:ef:e5:d2: 3c:b8:eb:92:a5:a7:27:cd:ec:91:a3:3d:05:bd:40:3a:2d:7a: 8f:72:99:8a:23:54:d0:8f:c2:0d:df:8d:93:09:94:32:73:56: 57:fe:d3:04:dd:69:d6:c6:81:a9:09:da:b3:9b:23:6c:73:33: ad:ed:04:64 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBbwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OTczRDIxMTAvBgNVBAUTKDg2QUIzRUJEN0M0MUU2NTZDQ0VFQ0RCNUE4NTBDN0E0 QjFFMjY3RTMwHhcNMjUwNDI0MjI1NTI1WhcNMjUwNTAxMjI1NTI1WjAYMRYwFAYD VQQDEw02ODBhYzE1ZC1kNDYyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAt+Vwu9H5fjir3/B/u7Tzk+lyZNG5humgDLgbULWkqjB6WXPDA8WsCWoOeqn7 4xo4TvsDS9lTLSTJpNn1s8QetqR9mjU8toVnINLOHlFT5ehm3gUQtNq6YejYoghL hsMNJQ7jGovjMp0HE/w5QzQ37UJY3FtV5jJhNhVX0qQrIvEgVHTR8uodxLujr/rZ 2287H8CjYOWItrSoQ12zF/caIMsf3mhnRVHPWG06E3StdP7swM1q1x5HtNho6C5X uamCCYRAH4I8rmkIi1plH8y6cAyWtbmIqfPnpkMJgdzTYnGfw5PvPQTZ8js6x3/r 7a5oSP1J5iYLClq4PxvZ7XOAjQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFMbcuMwY SfXLtiBY5m645A+tYDc+MB8GA1UdIwQYMBaAFIarPr18QeZWzO7NtahQx6Sx4mfj MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5NzNEMi9EQTgzOUM5NEJG QzgxMUVCQTVCM0E2N0NDNEY5QUUwMi9ocXMtdlh4QjVsYk03czIxcUZESHBMSGla LU0uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2hxcy12WHhCNWxiTTdzMjFxRkRIcExIaVotTS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5 NzNEMi9EQTgzOUM5NEJGQzgxMUVCQTVCM0E2N0NDNEY5QUUwMi9ocXMtdlh4QjVs Yk03czIxcUZESHBMSGlaLU0ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAZhBBK3Wm7jhFmSz7Ohf1qRl7ucurtmtQow0eTUwM3nuZNcEinaNWP 9lLBzTKbudPWPkBHu/4LDMT6MTf5o45eq+3mrs2iJwxlyDOfGyZarcMS9uCXjT6L ad3v/GtoofEn3Nr2fi77+2VaRP8bWwSD3CV9K2lLp7Li4Tg2VwPS5SFHPDSHfjDf 5bHQdNKStHNW7q9+yxj8Bqdued8rejIJFFJqXdzVPOi/QWj+hVpbVfgb3igAaASz 9k1feroPT/TXZRTv5dI8uOuSpacnzeyRoz0FvUA6LXqPcpmKI1TQj8IN342TCZQy c1ZX/tME3WnWxoGpCdqzmyNsczOt7QRk -----END CERTIFICATE-----Generated at Sat Apr 26 03:39:35 2025 by rpki-client