$ rpki-client -vvf rpki.apnic.net/member_repository/A91973D2/DA839C94BFC811EBA5B3A67CC4F9AE02/hqs-vXxB5lbM7s21qFDHpLHiZ-M.mft File: hqs-vXxB5lbM7s21qFDHpLHiZ-M.mft (raw, json) Hash identifier: mYM5p2MBKSMK/CeMdlVdGrvugGPPBmRR8tsXrHjSM6o= Subject key identifier: AF:EA:14:FC:AB:EB:CE:D0:77:CB:37:28:27:EF:CD:08:BE:5D:C0:FE Authority key identifier: 86:AB:3E:BD:7C:41:E6:56:CC:EE:CD:B5:A8:50:C7:A4:B1:E2:67:E3 Certificate issuer: /CN=A91973D2/serialNumber=86AB3EBD7C41E656CCEECDB5A850C7A4B1E267E3 Certificate serial: 067D Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hqs-vXxB5lbM7s21qFDHpLHiZ-M.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91973D2/DA839C94BFC811EBA5B3A67CC4F9AE02/hqs-vXxB5lbM7s21qFDHpLHiZ-M.mft Manifest number: 0670 Signing time: Thu 16 Apr 2026 22:30:39 +0000 Manifest this update: Thu 16 Apr 2026 22:30:38 +0000 Manifest next update: Thu 23 Apr 2026 22:30:38 +0000 Files and hashes: 1: hqs-vXxB5lbM7s21qFDHpLHiZ-M.crl (hash: NoqtHiBrxKxpK2K4IJNoCiMX7sVwrSDOMYMLd7xsXiY=) 2: 6959BDA8C05B11EB9540776AC4F9AE02.roa (hash: o9LJvDAWoOpgjlM3ZhhTsc5yhOvJHm6q+nsIvmgifUo=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91973D2/DA839C94BFC811EBA5B3A67CC4F9AE02/hqs-vXxB5lbM7s21qFDHpLHiZ-M.crl rsync://rpki.apnic.net/member_repository/A91973D2/DA839C94BFC811EBA5B3A67CC4F9AE02/hqs-vXxB5lbM7s21qFDHpLHiZ-M.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hqs-vXxB5lbM7s21qFDHpLHiZ-M.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 23 Apr 2026 22:30:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1661 (0x67d) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91973D2, serialNumber=86AB3EBD7C41E656CCEECDB5A850C7A4B1E267E3 Validity Not Before: Apr 16 22:30:38 2026 GMT Not After : Apr 23 22:30:38 2026 GMT Subject: CN=69e1630f-88d8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:a0:58:44:a4:0b:17:93:0b:3f:e8:1b:b1:4d: 2c:a5:79:d6:5a:e4:fc:d1:7e:01:c3:33:f8:cb:57: 71:62:4b:f3:f8:57:7a:77:0e:e9:19:8d:ff:2a:22: 33:95:ce:19:82:49:6f:29:ec:03:81:e1:e8:10:ad: 57:cb:f2:7a:7a:51:af:aa:0e:ec:e1:80:c7:65:2d: f9:e2:3d:f9:26:e9:41:ba:b7:d4:4f:2b:c7:e1:49: 90:73:e1:20:5a:80:b4:72:d3:de:95:72:cc:80:57: b5:13:74:a2:27:60:fa:77:58:2c:8b:0f:9c:f9:b6: 16:24:2d:5a:bf:8d:fa:95:63:5e:a3:ea:17:f7:80: 99:ee:ab:12:75:f1:cf:e6:5f:42:8c:04:17:47:bd: d3:42:d4:c2:e3:a8:d8:af:86:2d:c3:fd:ea:08:d4: 35:bd:12:58:44:77:1b:cb:e9:84:ac:be:9f:cd:b0: c1:b4:9a:bf:6c:bf:bf:cd:66:bc:05:3c:10:58:4f: fc:eb:e4:71:ae:1f:e8:d7:57:19:cf:b3:5d:e6:44: ad:b4:46:7a:b0:dd:19:72:c8:55:d5:4b:7f:6e:0c: dc:49:86:0e:b1:e4:18:93:44:2d:09:8d:46:97:fa: 1b:13:b2:c4:0d:8a:2c:8b:67:94:c8:3f:4b:1c:c7: 69:9f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AF:EA:14:FC:AB:EB:CE:D0:77:CB:37:28:27:EF:CD:08:BE:5D:C0:FE X509v3 Authority Key Identifier: keyid:86:AB:3E:BD:7C:41:E6:56:CC:EE:CD:B5:A8:50:C7:A4:B1:E2:67:E3 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91973D2/DA839C94BFC811EBA5B3A67CC4F9AE02/hqs-vXxB5lbM7s21qFDHpLHiZ-M.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hqs-vXxB5lbM7s21qFDHpLHiZ-M.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91973D2/DA839C94BFC811EBA5B3A67CC4F9AE02/hqs-vXxB5lbM7s21qFDHpLHiZ-M.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 56:c6:79:5b:0b:d1:6b:6a:84:37:a1:a0:9b:5d:80:ab:d6:de: 0e:44:cb:ad:a7:94:e1:e2:73:c8:2d:4c:58:b0:b3:e6:1f:b5: ec:a6:f0:cd:58:4d:35:27:19:3c:e0:4b:c7:8e:78:46:d3:d9: e3:20:4a:40:e5:02:f9:eb:e2:94:3f:b9:f5:86:70:d6:07:e9: 2a:fc:4a:b5:92:04:e6:82:db:b3:9e:5a:4d:32:92:df:af:04: de:24:13:79:2e:4d:90:f1:4b:db:b8:62:4e:64:2c:40:1d:00: f2:63:7e:d4:93:5c:41:36:53:0a:26:07:8e:1a:93:5a:f3:7b: 75:7c:76:32:21:1d:e0:38:0d:5e:32:fb:b7:81:a0:30:57:ca: 9a:00:ae:96:27:2f:80:e6:22:13:c9:57:ed:25:34:0b:34:0c: d0:55:46:ae:2d:5b:25:03:9c:b2:5c:6c:c5:e3:b8:17:ba:aa: 51:45:6c:fd:e2:a5:91:10:a8:9f:71:51:16:3e:13:53:df:a2: 8a:d1:6e:6c:66:b1:20:fe:18:d5:ac:29:07:13:f6:77:c9:b6: a9:dc:f7:db:a9:ac:72:ba:2b:9d:4e:82:e4:e6:89:8d:ec:be: f4:24:31:b8:3a:7a:30:ed:e8:7e:a2:ec:4d:b8:1f:df:13:89: f3:68:4c:87 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICBn0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OTczRDIxMTAvBgNVBAUTKDg2QUIzRUJEN0M0MUU2NTZDQ0VFQ0RCNUE4NTBDN0E0 QjFFMjY3RTMwHhcNMjYwNDE2MjIzMDM4WhcNMjYwNDIzMjIzMDM4WjAYMRYwFAYD VQQDEw02OWUxNjMwZi04OGQ4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAxqBYRKQLF5MLP+gbsU0spXnWWuT80X4BwzP4y1dxYkvz+Fd6dw7pGY3/KiIz lc4ZgklvKewDgeHoEK1Xy/J6elGvqg7s4YDHZS354j35JulBurfUTyvH4UmQc+Eg WoC0ctPelXLMgFe1E3SiJ2D6d1gsiw+c+bYWJC1av436lWNeo+oX94CZ7qsSdfHP 5l9CjAQXR73TQtTC46jYr4Ytw/3qCNQ1vRJYRHcby+mErL6fzbDBtJq/bL+/zWa8 BTwQWE/86+Rxrh/o11cZz7Nd5kSttEZ6sN0ZcshV1Ut/bgzcSYYOseQYk0QtCY1G l/obE7LEDYosi2eUyD9LHMdpnwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFK/qFPyr 687Qd8s3KCfvzQi+XcD+MB8GA1UdIwQYMBaAFIarPr18QeZWzO7NtahQx6Sx4mfj MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5NzNEMi9EQTgzOUM5NEJG QzgxMUVCQTVCM0E2N0NDNEY5QUUwMi9ocXMtdlh4QjVsYk03czIxcUZESHBMSGla LU0uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2hxcy12WHhCNWxiTTdzMjFxRkRIcExIaVotTS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5 NzNEMi9EQTgzOUM5NEJGQzgxMUVCQTVCM0E2N0NDNEY5QUUwMi9ocXMtdlh4QjVs Yk03czIxcUZESHBMSGlaLU0ubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAVsZ5WwvRa2qEN6Ggm12Aq9beDkTLraeU4eJzyC1MWLCz5h+17KbwzVhNNScZ POBLx454RtPZ4yBKQOUC+evilD+59YZw1gfpKvxKtZIE5oLbs55aTTKS368E3iQT eS5NkPFL27hiTmQsQB0A8mN+1JNcQTZTCiYHjhqTWvN7dXx2MiEd4DgNXjL7t4Gg MFfKmgCulicvgOYiE8lX7SU0CzQM0FVGri1bJQOcslxsxeO4F7qqUUVs/eKlkRCo n3FRFj4TU9+iitFubGaxIP4Y1awpBxP2d8m2qdz326mscrornU6C5OaJjey+9CQx uDp6MO3ofqLsTbgf3xOJ82hMhw== -----END CERTIFICATE-----Generated at Fri Apr 17 08:01:58 2026 by rpki-client