Document integrity record · 文件完整性记录

Certificate PDF signature verification

A reproducible, local check of the embedded CMS signature in the original Hong Kong Certificate of Incorporation PDF for AstroBridge Technology Limited. / 对 AstroBridge Technology Limited 香港公司注册证明书原始 PDF 内嵌 CMS 签名进行的可重复本地核验。

CMS content integrity verified · CMS 内容完整性核验成功

Observed evidence · 观测证据

File and signer metadata

Verification date: 27 September 2026 / 2026年9月27日
PDF SHA-256: 50d3f6c714b862706de19aaf35af19f229ca8e142f18ea86094c2f56e8948ee7
PDF size: 236,896 bytes
Signature format: /adbe.pkcs7.detached CMS signature
ByteRange: [0, 214955, 231341, 5555]
Signer subject: CN=Companies Registry; organizational units include Hong Kong SAR Government and Companies Registry
Certificate issuer: Hongkong Post e-Cert CA 2 - 17
Verification output: CMS Verification successful; verified output matched the reconstructed signed bytes

Verification command · 核验命令

Verification method

The PDF signature field was read without altering the source file. Its /ByteRange was reconstructed, the DER CMS object was extracted, and OpenSSL checked the detached signature against those exact bytes. / 核验过程只读访问原文件：重建签名字段的 /ByteRange，提取 DER CMS 对象，再由 OpenSSL 对这些原始字节核验分离式签名。

openssl cms -verify -binary -inform DER \
  -in astro-ci-signature.p7s \
  -content astro-ci-signed.bin \
  -noverify \
  -out astro-ci-verified-content.bin

cmp -s astro-ci-signed.bin astro-ci-verified-content.bin \
  && echo 'verified_output_matches_reconstructed_signed_bytes=yes'

The signed CMS messageDigest matched the independently calculated digest of the reconstructed content. The existing government PDF uses SHA-1 for this CMS content digest; the public PDF itself is identified here with SHA-256. / CMS 中已签名的 messageDigest 与重建内容的独立摘要计算结果一致。该政府 PDF 的现有 CMS 内容摘要采用 SHA-1；本页另以 SHA-256 标识公开 PDF 文件。

Scope and limitation / 范围与限制This check confirms that the PDF bytes covered by the embedded CMS signature are cryptographically consistent with that signature. It used OpenSSL -noverify and did not validate a complete trust chain, current certificate policy, OCSP/CRL revocation status, or an independent trusted timestamp. This cryptographic check does not establish current company-register or business-registration status; verify current status through the Hong Kong Companies Registry. It is not a financial-services licence, security audit, legal opinion, or additional compliance certification. / 本次核验确认 PDF 中被嵌入式 CMS 签名覆盖的字节与签名在密码学上一致。核验使用 OpenSSL -noverify，没有验证完整信任链、当前证书策略、OCSP/CRL 吊销状态或独立可信时间戳。本次密码学核验不证明公司当前登记状态或商业登记状态；当前状态应通过香港公司注册处复核。它不属于金融牌照、安全审计、法律意见或额外合规认证。

Original certificate PDF / 原始证书 Official weekly record / 官方周报 ↗ Registry search / 注册处查询 ↗ Trust Center / 可信中心