$ rpki-client -vvf rpki.apnic.net/member_repository/A91973D2/DA839C94BFC811EBA5B3A67CC4F9AE02/hqs-vXxB5lbM7s21qFDHpLHiZ-M.mft File: hqs-vXxB5lbM7s21qFDHpLHiZ-M.mft (raw, json) Hash identifier: nhHmSP+AWX+ABoCAlzBMWgpCR96I85HlzAJgDcxnUoU= Subject key identifier: 6B:BB:05:D9:12:BF:1B:7D:CB:D0:DD:D9:69:BF:8C:35:63:6A:35:7B Authority key identifier: 86:AB:3E:BD:7C:41:E6:56:CC:EE:CD:B5:A8:50:C7:A4:B1:E2:67:E3 Certificate issuer: /CN=A91973D2/serialNumber=86AB3EBD7C41E656CCEECDB5A850C7A4B1E267E3 Certificate serial: 05B2 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hqs-vXxB5lbM7s21qFDHpLHiZ-M.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91973D2/DA839C94BFC811EBA5B3A67CC4F9AE02/hqs-vXxB5lbM7s21qFDHpLHiZ-M.mft Manifest number: 05AC Signing time: Fri 04 Apr 2025 23:16:41 +0000 Manifest this update: Fri 04 Apr 2025 23:16:40 +0000 Manifest next update: Fri 11 Apr 2025 23:16:40 +0000 Files and hashes: 1: hqs-vXxB5lbM7s21qFDHpLHiZ-M.crl (hash: lqIYMcKrFxiYva+m1MHQ5beFZXKfn5kTkdBl81wMOwY=) 2: 6959BDA8C05B11EB9540776AC4F9AE02.roa (hash: 4SABNLVP141mmTSS6gzli1B5PVXlz3wNBkczMbOULL4=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91973D2/DA839C94BFC811EBA5B3A67CC4F9AE02/hqs-vXxB5lbM7s21qFDHpLHiZ-M.crl rsync://rpki.apnic.net/member_repository/A91973D2/DA839C94BFC811EBA5B3A67CC4F9AE02/hqs-vXxB5lbM7s21qFDHpLHiZ-M.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hqs-vXxB5lbM7s21qFDHpLHiZ-M.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 11 Apr 2025 23:16:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1458 (0x5b2) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91973D2 Validity Not Before: Apr 4 23:16:40 2025 GMT Not After : Apr 11 23:16:40 2025 GMT Subject: CN=67f06859-99fa Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9f:ec:e4:08:67:55:42:96:1b:71:03:2b:c0:f0: 68:13:ef:5d:a8:c6:04:57:8e:20:79:2c:3b:1f:c6: 3b:3a:3a:31:76:99:f6:f6:41:28:2a:ed:e3:ba:9f: ae:e6:82:ea:ee:d9:3b:b2:04:61:22:55:d8:c6:9e: cf:d4:83:95:1e:6b:c9:b6:9b:db:fb:35:a9:c7:89: b6:d2:6d:68:d7:c7:ce:21:16:6c:67:89:b7:b5:30: 39:72:1e:1b:a2:ba:bc:af:9c:b2:ff:ef:a7:87:89: 6b:d6:b5:94:60:99:3e:e5:5e:2e:da:f1:48:fe:c2: 26:4d:4b:4c:d3:2f:89:ff:ae:56:44:44:14:0f:c9: 5a:f4:67:d8:17:4d:da:c7:ab:28:58:23:df:45:a2: 37:a7:5e:d3:ed:47:dd:0c:56:2c:5b:fc:77:77:c6: 8b:c3:b4:00:a9:45:94:a1:fd:e1:be:d0:b5:27:53: 9b:f7:ec:24:6c:f2:4d:bf:5d:60:95:40:b9:3f:a5: 06:75:91:3e:55:99:9b:7d:e4:e4:8d:df:a9:32:54: 97:ad:5f:0a:b2:83:b8:df:27:27:8e:1a:fe:92:80: 5e:59:e1:d4:7f:31:aa:e3:21:e1:b7:62:2b:ba:30: 07:6b:b3:75:d6:9d:fb:9c:8b:04:0d:2a:f0:22:3d: f4:8b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6B:BB:05:D9:12:BF:1B:7D:CB:D0:DD:D9:69:BF:8C:35:63:6A:35:7B X509v3 Authority Key Identifier: keyid:86:AB:3E:BD:7C:41:E6:56:CC:EE:CD:B5:A8:50:C7:A4:B1:E2:67:E3 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91973D2/DA839C94BFC811EBA5B3A67CC4F9AE02/hqs-vXxB5lbM7s21qFDHpLHiZ-M.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hqs-vXxB5lbM7s21qFDHpLHiZ-M.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91973D2/DA839C94BFC811EBA5B3A67CC4F9AE02/hqs-vXxB5lbM7s21qFDHpLHiZ-M.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 7a:7c:ad:2a:1a:ca:3a:09:4d:46:64:05:6a:d4:09:43:ea:a1: ee:fc:6a:c6:01:96:c0:79:5a:2b:5e:8d:2a:b7:65:c8:34:0f: ae:86:12:58:c0:e2:73:69:82:fd:b3:71:75:db:c3:fe:79:2d: 73:8b:8f:cd:7e:08:25:23:15:9f:6a:85:28:09:cf:ef:18:65: 38:2e:eb:61:74:0b:9e:39:ab:8d:66:08:59:8d:5a:f0:33:21: a1:3c:c8:52:b7:80:19:7f:a4:2c:21:cf:2a:1a:12:e1:b0:12: 28:29:ad:06:b5:0b:53:fa:69:d5:c2:70:ee:1b:3e:2f:d0:ae: 02:a2:db:05:d4:ed:1b:ce:35:2e:83:43:f0:c4:2b:ad:db:b3: ee:63:34:6b:b1:65:bd:9e:5b:0c:e7:a6:2f:4b:7b:52:c3:9b: 58:06:66:0e:9c:b7:de:cd:77:f7:75:b5:ac:bb:09:e6:e0:19: 60:07:f7:f4:3d:b9:e3:ff:79:8c:ad:ef:df:7e:87:76:ea:7d: 7c:f0:1c:09:b3:37:4b:2b:c0:a2:9e:f3:d0:19:13:95:53:9c: 2e:b8:b6:4b:13:8d:b3:49:79:0b:09:10:20:2b:cb:61:4b:17: b0:eb:9e:e1:5a:a6:a1:e4:6c:da:56:f5:27:64:2a:6a:ad:a7: 62:31:81:60 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBbIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OTczRDIxMTAvBgNVBAUTKDg2QUIzRUJEN0M0MUU2NTZDQ0VFQ0RCNUE4NTBDN0E0 QjFFMjY3RTMwHhcNMjUwNDA0MjMxNjQwWhcNMjUwNDExMjMxNjQwWjAYMRYwFAYD VQQDEw02N2YwNjg1OS05OWZhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAn+zkCGdVQpYbcQMrwPBoE+9dqMYEV44geSw7H8Y7Ojoxdpn29kEoKu3jup+u 5oLq7tk7sgRhIlXYxp7P1IOVHmvJtpvb+zWpx4m20m1o18fOIRZsZ4m3tTA5ch4b orq8r5yy/++nh4lr1rWUYJk+5V4u2vFI/sImTUtM0y+J/65WREQUD8la9GfYF03a x6soWCPfRaI3p17T7UfdDFYsW/x3d8aLw7QAqUWUof3hvtC1J1Ob9+wkbPJNv11g lUC5P6UGdZE+VZmbfeTkjd+pMlSXrV8KsoO43ycnjhr+koBeWeHUfzGq4yHht2Ir ujAHa7N11p37nIsEDSrwIj30iwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFGu7BdkS vxt9y9Dd2Wm/jDVjajV7MB8GA1UdIwQYMBaAFIarPr18QeZWzO7NtahQx6Sx4mfj MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5NzNEMi9EQTgzOUM5NEJG QzgxMUVCQTVCM0E2N0NDNEY5QUUwMi9ocXMtdlh4QjVsYk03czIxcUZESHBMSGla LU0uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2hxcy12WHhCNWxiTTdzMjFxRkRIcExIaVotTS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5 NzNEMi9EQTgzOUM5NEJGQzgxMUVCQTVCM0E2N0NDNEY5QUUwMi9ocXMtdlh4QjVs Yk03czIxcUZESHBMSGlaLU0ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQB6fK0qGso6CU1GZAVq1AlD6qHu/GrGAZbAeVorXo0qt2XINA+uhhJY wOJzaYL9s3F128P+eS1zi4/NfgglIxWfaoUoCc/vGGU4LuthdAueOauNZghZjVrw MyGhPMhSt4AZf6QsIc8qGhLhsBIoKa0GtQtT+mnVwnDuGz4v0K4CotsF1O0bzjUu g0PwxCut27PuYzRrsWW9nlsM56YvS3tSw5tYBmYOnLfezXf3dbWsuwnm4BlgB/f0 Pbnj/3mMre/ffod26n188BwJszdLK8CinvPQGROVU5wuuLZLE42zSXkLCRAgK8th Sxew657hWqah5GzaVvUnZCpqradiMYFg -----END CERTIFICATE-----Generated at Sat Apr 5 05:43:01 2025 by rpki-client