$ rpki-client -vvf rpki.apnic.net/member_repository/A91973D2/DA839C94BFC811EBA5B3A67CC4F9AE02/hqs-vXxB5lbM7s21qFDHpLHiZ-M.mft File: hqs-vXxB5lbM7s21qFDHpLHiZ-M.mft (raw, json) Hash identifier: Kgn37icwTtbvZYYGV4qJE3LmD8aCFDu7ThwXiM3mndY= Subject key identifier: 5D:F5:DF:7C:D5:B4:DE:E1:CF:F2:12:02:DD:EE:3F:83:7A:9C:F7:AB Authority key identifier: 86:AB:3E:BD:7C:41:E6:56:CC:EE:CD:B5:A8:50:C7:A4:B1:E2:67:E3 Certificate issuer: /CN=A91973D2/serialNumber=86AB3EBD7C41E656CCEECDB5A850C7A4B1E267E3 Certificate serial: 06B1 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hqs-vXxB5lbM7s21qFDHpLHiZ-M.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91973D2/DA839C94BFC811EBA5B3A67CC4F9AE02/hqs-vXxB5lbM7s21qFDHpLHiZ-M.mft Manifest number: 06A3 Signing time: Wed 22 Jul 2026 23:09:05 +0000 Manifest this update: Wed 22 Jul 2026 23:09:04 +0000 Manifest next update: Wed 29 Jul 2026 23:09:04 +0000 Files and hashes: 1: hqs-vXxB5lbM7s21qFDHpLHiZ-M.crl (hash: eitkwQfBb8wIO6F8LYpXj1FCZ13lc/LQokOpCTJ+3iM=) 2: 6959BDA8C05B11EB9540776AC4F9AE02.roa (hash: OANS4UGotbrHDA32WOeuOB3Wn0ea/AxoJh5y6ulR7SQ=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91973D2/DA839C94BFC811EBA5B3A67CC4F9AE02/hqs-vXxB5lbM7s21qFDHpLHiZ-M.crl rsync://rpki.apnic.net/member_repository/A91973D2/DA839C94BFC811EBA5B3A67CC4F9AE02/hqs-vXxB5lbM7s21qFDHpLHiZ-M.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hqs-vXxB5lbM7s21qFDHpLHiZ-M.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 29 Jul 2026 23:09:03 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1713 (0x6b1) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91973D2, serialNumber=86AB3EBD7C41E656CCEECDB5A850C7A4B1E267E3 Validity Not Before: Jul 22 23:09:04 2026 GMT Not After : Jul 29 23:09:04 2026 GMT Subject: CN=6a614d90-a63c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d7:e9:a5:7f:56:82:4d:f1:ff:a2:7b:de:e3:df: 7a:f7:17:c0:12:d3:18:07:23:0a:00:cb:75:b2:05: a8:ef:2a:72:a1:0f:ec:10:06:19:87:a0:32:b3:ac: 87:ea:80:35:c4:fe:bc:a2:46:bc:4e:90:18:52:3e: 45:cf:50:ad:56:16:13:fe:a6:12:0c:a0:d1:51:c1: d3:1b:0a:3a:b3:18:6e:84:a2:46:e6:c8:7d:cb:42: 23:d6:2f:0b:56:70:85:34:38:99:a2:27:b8:09:c4: 2e:ab:d0:ed:02:3f:5b:21:9a:dc:6b:cc:ad:cb:51: 02:a6:84:67:b5:b4:b7:fd:e3:48:f4:2b:d3:23:52: e8:9c:ce:38:b2:df:4b:a0:53:5f:66:fe:f0:ed:6e: 3c:7a:c9:42:4c:ce:19:d1:44:b1:02:bc:68:55:8d: 4b:d3:10:28:68:6f:15:5d:47:e0:26:35:a6:39:0f: a8:66:2e:3a:7c:d4:1a:00:f1:d7:5f:9b:43:2a:d1: 8e:9c:c4:32:ae:d4:40:6f:ae:63:9b:cd:f6:4a:a2: db:b9:11:24:1b:fc:99:4f:45:8c:85:09:3d:cd:8b: 4e:24:85:22:2a:2a:8e:61:b3:86:ad:fd:5e:05:9b: bf:dd:39:b1:89:7d:51:cc:9d:19:b1:c8:50:6e:3d: 03:53 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5D:F5:DF:7C:D5:B4:DE:E1:CF:F2:12:02:DD:EE:3F:83:7A:9C:F7:AB X509v3 Authority Key Identifier: keyid:86:AB:3E:BD:7C:41:E6:56:CC:EE:CD:B5:A8:50:C7:A4:B1:E2:67:E3 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91973D2/DA839C94BFC811EBA5B3A67CC4F9AE02/hqs-vXxB5lbM7s21qFDHpLHiZ-M.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hqs-vXxB5lbM7s21qFDHpLHiZ-M.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91973D2/DA839C94BFC811EBA5B3A67CC4F9AE02/hqs-vXxB5lbM7s21qFDHpLHiZ-M.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 7e:5d:2d:cd:9f:c8:11:d2:64:62:76:e5:28:2e:2a:17:40:7c: e1:e0:bd:77:f4:3c:27:d2:ea:55:74:d5:e2:f5:10:e6:21:ac: fa:fe:76:81:5c:26:69:97:5f:22:3b:a0:02:7f:ad:93:7a:f9: c2:67:7e:01:2d:ef:14:91:b8:18:18:a1:4a:e8:2e:9a:b5:45: 29:9e:f6:f8:75:5c:b8:bb:eb:3b:e3:3f:2b:a8:d9:3b:dc:87: 30:ff:3a:2d:f8:58:ed:6a:10:6e:a1:c3:ca:57:94:53:1a:a7: 21:70:66:56:74:d6:51:2c:59:cc:13:12:79:08:56:a9:4e:e4: e3:2f:fd:26:2a:4d:93:25:1b:0c:27:01:70:a4:3c:cc:53:d6: 77:88:20:d7:b4:8e:d3:bb:7b:c3:6d:73:3e:6c:22:c7:01:2d: c2:e5:34:04:69:82:1b:c5:b7:81:6a:e3:2a:b3:01:04:2c:a6: dc:d7:bd:46:11:95:df:b0:f4:b8:39:20:1e:3d:bb:33:43:d5: 89:7e:e0:b6:40:0d:21:45:64:c0:be:58:2f:3b:96:ab:22:29: 05:e3:30:36:d4:7d:87:53:34:76:25:6c:80:8a:c1:bc:d8:8d: ea:39:40:3b:e4:ef:18:f6:40:0f:9f:99:88:3f:40:9b:ac:52: 77:6d:c8:cd -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICBrEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OTczRDIxMTAvBgNVBAUTKDg2QUIzRUJEN0M0MUU2NTZDQ0VFQ0RCNUE4NTBDN0E0 QjFFMjY3RTMwHhcNMjYwNzIyMjMwOTA0WhcNMjYwNzI5MjMwOTA0WjAYMRYwFAYD VQQDEw02YTYxNGQ5MC1hNjNjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA1+mlf1aCTfH/onve49969xfAEtMYByMKAMt1sgWo7ypyoQ/sEAYZh6Ays6yH 6oA1xP68oka8TpAYUj5Fz1CtVhYT/qYSDKDRUcHTGwo6sxhuhKJG5sh9y0Ij1i8L VnCFNDiZoie4CcQuq9DtAj9bIZrca8yty1ECpoRntbS3/eNI9CvTI1LonM44st9L oFNfZv7w7W48eslCTM4Z0USxArxoVY1L0xAoaG8VXUfgJjWmOQ+oZi46fNQaAPHX X5tDKtGOnMQyrtRAb65jm832SqLbuREkG/yZT0WMhQk9zYtOJIUiKiqOYbOGrf1e BZu/3TmxiX1RzJ0ZschQbj0DUwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFF3133zV tN7hz/ISAt3uP4N6nPerMB8GA1UdIwQYMBaAFIarPr18QeZWzO7NtahQx6Sx4mfj MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5NzNEMi9EQTgzOUM5NEJG QzgxMUVCQTVCM0E2N0NDNEY5QUUwMi9ocXMtdlh4QjVsYk03czIxcUZESHBMSGla LU0uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2hxcy12WHhCNWxiTTdzMjFxRkRIcExIaVotTS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5 NzNEMi9EQTgzOUM5NEJGQzgxMUVCQTVCM0E2N0NDNEY5QUUwMi9ocXMtdlh4QjVs Yk03czIxcUZESHBMSGlaLU0ubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAfl0tzZ/IEdJkYnblKC4qF0B84eC9d/Q8J9LqVXTV4vUQ5iGs+v52gVwmaZdf IjugAn+tk3r5wmd+AS3vFJG4GBihSugumrVFKZ72+HVcuLvrO+M/K6jZO9yHMP86 LfhY7WoQbqHDyleUUxqnIXBmVnTWUSxZzBMSeQhWqU7k4y/9JipNkyUbDCcBcKQ8 zFPWd4gg17SO07t7w21zPmwixwEtwuU0BGmCG8W3gWrjKrMBBCym3Ne9RhGV37D0 uDkgHj27M0PViX7gtkANIUVkwL5YLzuWqyIpBeMwNtR9h1M0diVsgIrBvNiN6jlA O+TvGPZAD5+ZiD9Am6xSd23IzQ== -----END CERTIFICATE-----Generated at Fri Jul 24 04:04:09 2026 by rpki-client