$ rpki-client -vvf rpki.apnic.net/member_repository/A91973D2/DA839C94BFC811EBA5B3A67CC4F9AE02/hqs-vXxB5lbM7s21qFDHpLHiZ-M.mft File: hqs-vXxB5lbM7s21qFDHpLHiZ-M.mft (raw, json) Hash identifier: iFGwtF73SkBC7mZXXRZBGOtG8YEfvLU63deos5HQIPA= Subject key identifier: 8F:BA:BC:B2:9C:47:A1:FC:FD:6E:AD:28:86:4E:76:9D:B1:52:C5:5B Authority key identifier: 86:AB:3E:BD:7C:41:E6:56:CC:EE:CD:B5:A8:50:C7:A4:B1:E2:67:E3 Certificate issuer: /CN=A91973D2/serialNumber=86AB3EBD7C41E656CCEECDB5A850C7A4B1E267E3 Certificate serial: 05BD Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hqs-vXxB5lbM7s21qFDHpLHiZ-M.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91973D2/DA839C94BFC811EBA5B3A67CC4F9AE02/hqs-vXxB5lbM7s21qFDHpLHiZ-M.mft Manifest number: 05B7 Signing time: Sat 26 Apr 2025 22:47:28 +0000 Manifest this update: Sat 26 Apr 2025 22:47:27 +0000 Manifest next update: Sat 03 May 2025 22:47:27 +0000 Files and hashes: 1: hqs-vXxB5lbM7s21qFDHpLHiZ-M.crl (hash: LGSxHGW1FkXxrcEgXpkjk2LDcIrAyC8sdzHWnECyeBY=) 2: 6959BDA8C05B11EB9540776AC4F9AE02.roa (hash: 4SABNLVP141mmTSS6gzli1B5PVXlz3wNBkczMbOULL4=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91973D2/DA839C94BFC811EBA5B3A67CC4F9AE02/hqs-vXxB5lbM7s21qFDHpLHiZ-M.crl rsync://rpki.apnic.net/member_repository/A91973D2/DA839C94BFC811EBA5B3A67CC4F9AE02/hqs-vXxB5lbM7s21qFDHpLHiZ-M.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hqs-vXxB5lbM7s21qFDHpLHiZ-M.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 03 May 2025 22:47:27 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1469 (0x5bd) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91973D2, serialNumber=86AB3EBD7C41E656CCEECDB5A850C7A4B1E267E3 Validity Not Before: Apr 26 22:47:27 2025 GMT Not After : May 3 22:47:27 2025 GMT Subject: CN=680d6280-7389 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:51:25:02:60:df:4f:dc:92:a8:fe:99:11:26: 02:47:f5:e8:b2:aa:fb:5d:19:60:7e:9c:40:0c:92: 2f:65:0c:57:28:d5:80:a5:d9:b4:f4:26:24:ec:10: c9:41:d8:72:00:2b:d4:81:19:8b:be:20:78:43:a7: 70:d6:fe:46:f8:1b:95:6e:bf:f5:82:db:96:e3:48: 36:87:75:0f:e1:28:b6:29:09:25:1e:4a:f8:a0:b4: 05:04:63:59:48:02:fd:76:35:8d:53:fa:ee:a9:0a: 56:4e:9a:24:ff:54:51:73:63:95:db:7e:25:ec:0c: 8a:b0:49:6b:03:7a:06:ef:0c:64:f7:7f:c1:0f:35: 9a:01:48:93:d5:40:ac:7f:72:60:45:42:7a:85:25: b3:23:de:77:08:5d:f0:fd:7a:ea:73:4b:0c:0b:3e: 8d:aa:26:16:d0:34:4e:0d:d0:38:b4:10:94:50:7d: ed:18:87:18:a2:c9:b0:c9:65:ae:cc:fc:dc:42:d2: db:b2:ac:ce:66:67:dd:d9:92:5c:f0:65:56:5b:89: d3:53:5a:24:58:a0:cf:25:39:46:a0:cf:d9:9c:e8: ec:5b:1e:9b:28:90:9b:04:1c:51:12:5a:39:e7:2c: 2c:6a:fc:82:f7:4a:aa:f9:f3:9c:48:fd:d7:ff:3f: 3c:4f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8F:BA:BC:B2:9C:47:A1:FC:FD:6E:AD:28:86:4E:76:9D:B1:52:C5:5B X509v3 Authority Key Identifier: keyid:86:AB:3E:BD:7C:41:E6:56:CC:EE:CD:B5:A8:50:C7:A4:B1:E2:67:E3 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91973D2/DA839C94BFC811EBA5B3A67CC4F9AE02/hqs-vXxB5lbM7s21qFDHpLHiZ-M.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hqs-vXxB5lbM7s21qFDHpLHiZ-M.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91973D2/DA839C94BFC811EBA5B3A67CC4F9AE02/hqs-vXxB5lbM7s21qFDHpLHiZ-M.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 04:25:52:0e:de:7e:ba:e4:c8:1a:48:47:62:ec:b1:00:fc:10: 8d:9c:08:2d:ac:fb:61:4d:67:f6:b4:08:d7:89:bf:b9:56:4f: 39:4e:fd:66:b3:1f:72:aa:8b:5b:91:4e:fd:c4:cb:fc:74:d7: be:a6:36:06:43:97:39:be:61:e3:ae:27:81:3e:79:7e:9f:d3: 71:4c:0a:7e:2b:a1:6f:90:82:02:7d:cc:63:f2:c6:f0:c7:72: 63:ad:b8:1d:41:13:aa:cd:b0:ce:7b:31:49:71:84:aa:8f:69: 4a:16:d6:26:6d:5a:4b:5d:4a:69:2c:14:0f:5f:75:82:27:17: 9e:a9:dc:60:dd:cc:a4:8b:24:14:c1:37:8d:ef:89:95:81:1d: a7:0f:aa:ac:db:9d:d0:f8:fd:99:13:0f:26:f3:40:f6:b9:08: 9e:57:9c:f3:1d:e5:5c:bb:6d:15:03:8a:b5:dc:12:be:29:d9: 05:61:03:6f:af:9e:38:30:13:85:78:7c:46:81:db:ea:c1:6e: 13:f7:13:c2:9d:ad:c4:69:09:b5:c3:85:d8:b6:95:55:59:86: 67:01:c8:4f:57:d6:1f:b8:ef:82:04:34:6d:a3:d8:6d:b5:e1: 96:34:36:a0:06:3e:5b:f6:d6:30:8e:2e:5a:1c:f4:01:1a:04: 39:cc:e2:17 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBb0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OTczRDIxMTAvBgNVBAUTKDg2QUIzRUJEN0M0MUU2NTZDQ0VFQ0RCNUE4NTBDN0E0 QjFFMjY3RTMwHhcNMjUwNDI2MjI0NzI3WhcNMjUwNTAzMjI0NzI3WjAYMRYwFAYD VQQDEw02ODBkNjI4MC03Mzg5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAuFElAmDfT9ySqP6ZESYCR/Xosqr7XRlgfpxADJIvZQxXKNWApdm09CYk7BDJ QdhyACvUgRmLviB4Q6dw1v5G+BuVbr/1gtuW40g2h3UP4Si2KQklHkr4oLQFBGNZ SAL9djWNU/ruqQpWTpok/1RRc2OV234l7AyKsElrA3oG7wxk93/BDzWaAUiT1UCs f3JgRUJ6hSWzI953CF3w/Xrqc0sMCz6NqiYW0DRODdA4tBCUUH3tGIcYosmwyWWu zPzcQtLbsqzOZmfd2ZJc8GVWW4nTU1okWKDPJTlGoM/ZnOjsWx6bKJCbBBxRElo5 5ywsavyC90qq+fOcSP3X/z88TwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFI+6vLKc R6H8/W6tKIZOdp2xUsVbMB8GA1UdIwQYMBaAFIarPr18QeZWzO7NtahQx6Sx4mfj MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5NzNEMi9EQTgzOUM5NEJG QzgxMUVCQTVCM0E2N0NDNEY5QUUwMi9ocXMtdlh4QjVsYk03czIxcUZESHBMSGla LU0uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2hxcy12WHhCNWxiTTdzMjFxRkRIcExIaVotTS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5 NzNEMi9EQTgzOUM5NEJGQzgxMUVCQTVCM0E2N0NDNEY5QUUwMi9ocXMtdlh4QjVs Yk03czIxcUZESHBMSGlaLU0ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAEJVIO3n665MgaSEdi7LEA/BCNnAgtrPthTWf2tAjXib+5Vk85Tv1m sx9yqotbkU79xMv8dNe+pjYGQ5c5vmHjrieBPnl+n9NxTAp+K6FvkIICfcxj8sbw x3JjrbgdQROqzbDOezFJcYSqj2lKFtYmbVpLXUppLBQPX3WCJxeeqdxg3cykiyQU wTeN74mVgR2nD6qs253Q+P2ZEw8m80D2uQieV5zzHeVcu20VA4q13BK+KdkFYQNv r544MBOFeHxGgdvqwW4T9xPCna3EaQm1w4XYtpVVWYZnAchPV9YfuO+CBDRto9ht teGWNDagBj5b9tYwji5aHPQBGgQ5zOIX -----END CERTIFICATE-----Generated at Sun Apr 27 05:43:00 2025 by rpki-client on console.sobornost.net