$ rpki-client -vvf rpki.sub.apnic.net/repository/A917447B0000/0/BEC716379E148BA880231B055E3B034159DB8697.mft File: BEC716379E148BA880231B055E3B034159DB8697.mft (raw, json) Hash identifier: MX+mFShY9OrPyF9TUzf6KpQxka77GcnYTvK3KUkQg+8= Subject key identifier: 15:EF:61:A8:90:1B:7E:38:8D:B1:FA:7C:AC:DF:67:12:9B:8A:62:B8 Authority key identifier: BE:C7:16:37:9E:14:8B:A8:80:23:1B:05:5E:3B:03:41:59:DB:86:97 Certificate issuer: /CN=A917447B0000/serialNumber=BEC716379E148BA880231B055E3B034159DB8697 Certificate serial: 32EFD858E3B96F21235371BCDA0E9C68A0DCA2E7 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/vscWN54Ui6iAIxsFXjsDQVnbhpc.cer Subject info access: rsync://rpki.sub.apnic.net/repository/A917447B0000/0/BEC716379E148BA880231B055E3B034159DB8697.mft Manifest number: 0138 Signing time: Tue 12 May 2026 11:19:52 +0000 Manifest this update: Tue 12 May 2026 11:14:52 +0000 Manifest next update: Wed 13 May 2026 12:20:52 +0000 Files and hashes: 1: BEC716379E148BA880231B055E3B034159DB8697.crl (hash: cRejstX9lRh5MLQQDCkuU2Gk7JDOcCO2sZihk8f2IQs=) 2: 3136302e3138372e3132352e302f32342d3234203d3e2039383333.roa (hash: X2xp6uKIsNAWVyJ6WAzD1qj3ichPSAAnt4LFLuMhakA=) 3: 3136302e3138372e3132342e302f32342d3234203d3e20313533333436.roa (hash: NAbzcXI7CIRLEYaSeuu8ld26GBq5ENO+YouoZ+7T5Ys=) Validation: OK Signature path: rsync://rpki.sub.apnic.net/repository/A917447B0000/0/BEC716379E148BA880231B055E3B034159DB8697.crl rsync://rpki.sub.apnic.net/repository/A917447B0000/0/BEC716379E148BA880231B055E3B034159DB8697.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/vscWN54Ui6iAIxsFXjsDQVnbhpc.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 13 May 2026 12:20:52 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 32:ef:d8:58:e3:b9:6f:21:23:53:71:bc:da:0e:9c:68:a0:dc:a2:e7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A917447B0000, serialNumber=BEC716379E148BA880231B055E3B034159DB8697 Validity Not Before: May 12 11:14:52 2026 GMT Not After : May 13 12:20:52 2026 GMT Subject: CN=15EF61A8901B7E388DB1FA7CACDF67129B8A62B8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8b:65:c9:4a:74:81:ae:fc:67:8b:cd:fe:4c:22: 8a:87:01:84:6e:17:1f:b5:d8:7a:d9:c7:ce:21:b5: 00:8b:f1:c2:b3:d4:07:78:b5:b1:69:4c:e1:33:19: 6c:2d:51:90:14:e5:0a:86:a0:1f:f5:0b:e8:e3:ba: 86:81:f4:12:5f:84:a1:5b:1d:06:39:8f:16:d1:d5: 2d:2d:1e:46:25:cb:11:d8:f8:8f:b0:ea:f0:0f:b8: 39:9f:78:1f:0b:a4:c7:19:c2:47:6d:3f:99:21:67: 7c:fe:e8:61:4b:f1:df:e8:ab:3f:b9:9e:39:78:c1: 52:e3:bd:0d:bf:60:c6:cf:a2:d9:b6:e6:78:b8:21: 0e:07:15:6b:3d:ec:1e:16:03:07:69:bd:a5:3a:d1: 25:51:8e:0c:3d:45:2b:45:44:f1:67:ee:5f:d1:10: 39:1f:21:aa:db:3a:c9:ea:80:b6:a4:62:3c:23:f7: 46:a3:9d:8f:40:af:1b:93:56:a1:43:2b:51:54:0f: 64:9c:ef:1d:47:05:59:9c:ac:02:3a:ff:4d:93:0e: a3:45:bd:03:4a:97:2e:a5:f7:46:3d:69:da:e3:14: bf:02:45:6a:94:8a:dc:71:11:84:2e:31:65:77:61: 57:41:53:63:b8:ad:ca:95:c9:3f:64:4b:db:8e:9b: 84:7f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 15:EF:61:A8:90:1B:7E:38:8D:B1:FA:7C:AC:DF:67:12:9B:8A:62:B8 X509v3 Authority Key Identifier: keyid:BE:C7:16:37:9E:14:8B:A8:80:23:1B:05:5E:3B:03:41:59:DB:86:97 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.sub.apnic.net/repository/A917447B0000/0/BEC716379E148BA880231B055E3B034159DB8697.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/vscWN54Ui6iAIxsFXjsDQVnbhpc.cer Subject Information Access: Signed Object - URI:rsync://rpki.sub.apnic.net/repository/A917447B0000/0/BEC716379E148BA880231B055E3B034159DB8697.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 74:07:67:fd:e5:9d:be:3b:91:4c:af:72:28:62:36:3d:21:26: 3a:fc:62:6e:9a:2f:45:37:71:a9:86:a3:57:18:b9:1f:59:4e: ff:74:f3:14:a5:ec:f8:7f:52:da:6f:8a:2c:9f:22:60:4a:f6: 65:ce:d3:4b:2f:22:88:38:0c:f7:02:f4:c8:c0:1f:55:ee:1c: 4c:66:a4:40:eb:ec:c0:7d:70:9e:f5:63:b3:f0:1d:3b:2a:e1: 9a:fe:e0:eb:52:dd:5f:b3:0a:20:b2:a5:b1:20:69:9f:ff:2e: e5:cb:9e:36:e5:cc:e4:c1:92:cd:97:f0:bb:56:b4:86:c7:ec: eb:c9:41:8a:c7:cc:2c:fe:ec:cf:5e:56:98:70:43:3a:ab:60: b5:d9:a6:72:65:59:20:7b:85:8e:19:2e:2e:84:15:c5:b4:bf: 82:8a:a0:bf:b4:e2:af:a8:34:5f:db:ff:50:60:42:76:ce:5b: a6:cf:e4:c9:de:99:f4:55:16:d4:25:29:65:ac:76:93:ca:6b: 23:16:5f:16:c8:04:6a:c3:df:1d:b7:16:8f:3d:5b:73:68:15: 8f:c5:ce:4e:99:00:28:b8:1f:e9:dc:1b:4c:81:8d:2f:cd:40: 86:d6:6f:fa:17:1f:4c:a2:c7:f4:20:0e:b1:c3:c9:3b:39:f0: 0d:90:e4:f3 -----BEGIN CERTIFICATE----- MIIFKDCCBBCgAwIBAgIUMu/YWOO5byEjU3G82g6caKDcoucwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxNzQ0N0IwMDAwMTEwLwYDVQQFEyhCRUM3MTYzNzlF MTQ4QkE4ODAyMzFCMDU1RTNCMDM0MTU5REI4Njk3MB4XDTI2MDUxMjExMTQ1MloX DTI2MDUxMzEyMjA1MlowMzExMC8GA1UEAxMoMTVFRjYxQTg5MDFCN0UzODhEQjFG QTdDQUNERjY3MTI5QjhBNjJCODCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAItlyUp0ga78Z4vN/kwiiocBhG4XH7XYetnHziG1AIvxwrPUB3i1sWlM4TMZ bC1RkBTlCoagH/UL6OO6hoH0El+EoVsdBjmPFtHVLS0eRiXLEdj4j7Dq8A+4OZ94 HwukxxnCR20/mSFnfP7oYUvx3+irP7meOXjBUuO9Db9gxs+i2bbmeLghDgcVaz3s HhYDB2m9pTrRJVGODD1FK0VE8WfuX9EQOR8hqts6yeqAtqRiPCP3RqOdj0CvG5NW oUMrUVQPZJzvHUcFWZysAjr/TZMOo0W9A0qXLqX3Rj1p2uMUvwJFapSK3HERhC4x ZXdhV0FTY7itypXJP2RL246bhH8CAwEAAaOCAhswggIXMB0GA1UdDgQWBBQV72Go kBt+OI2x+nys32cSm4piuDAfBgNVHSMEGDAWgBS+xxY3nhSLqIAjGwVeOwNBWduG lzAOBgNVHQ8BAf8EBAMCB4AwcgYDVR0fBGswaTBnoGWgY4ZhcnN5bmM6Ly9ycGtp LnN1Yi5hcG5pYy5uZXQvcmVwb3NpdG9yeS9BOTE3NDQ3QjAwMDAvMC9CRUM3MTYz NzlFMTQ4QkE4ODAyMzFCMDU1RTNCMDM0MTU5REI4Njk3LmNybDB+BggrBgEFBQcB AQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVwb3Np dG9yeS9CM0EyNEYyMDFENjYxMUUyOEFDODgzN0M3MkZEMUZGMi92c2NXTjU0VWk2 aUFJeHNGWGpzRFFWbmJocGMuY2VyMH0GCCsGAQUFBwELBHEwbzBtBggrBgEFBQcw C4ZhcnN5bmM6Ly9ycGtpLnN1Yi5hcG5pYy5uZXQvcmVwb3NpdG9yeS9BOTE3NDQ3 QjAwMDAvMC9CRUM3MTYzNzlFMTQ4QkE4ODAyMzFCMDU1RTNCMDM0MTU5REI4Njk3 Lm1mdDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIw EDAGBAIAAQUAMAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG 9w0BAQsFAAOCAQEAdAdn/eWdvjuRTK9yKGI2PSEmOvxibpovRTdxqYajVxi5H1lO /3TzFKXs+H9S2m+KLJ8iYEr2Zc7TSy8iiDgM9wL0yMAfVe4cTGakQOvswH1wnvVj s/AdOyrhmv7g61LdX7MKILKlsSBpn/8u5cueNuXM5MGSzZfwu1a0hsfs68lBisfM LP7sz15WmHBDOqtgtdmmcmVZIHuFjhkuLoQVxbS/goqgv7Tir6g0X9v/UGBCds5b ps/kyd6Z9FUW1CUpZax2k8prIxZfFsgEasPfHbcWjz1bc2gVj8XOTpkAKLgf6dwb TIGNL81AhtZv+hcfTKLH9CAOscPJOznwDZDk8w== -----END CERTIFICATE-----Generated at Wed May 13 02:44:33 2026 by rpki-client