$ rpki-client -vvf rpki.sub.apnic.net/repository/A917447B0000/0/BEC716379E148BA880231B055E3B034159DB8697.mft File: BEC716379E148BA880231B055E3B034159DB8697.mft (raw, json) Hash identifier: WV10tolW03y85xaDSScB2SbbaJMDVPQcyinbyt8rNQ4= Subject key identifier: 71:9D:4D:69:E2:F3:14:E5:C3:15:77:8F:0B:F6:63:60:E4:AE:DC:87 Authority key identifier: BE:C7:16:37:9E:14:8B:A8:80:23:1B:05:5E:3B:03:41:59:DB:86:97 Certificate issuer: /CN=A917447B0000/serialNumber=BEC716379E148BA880231B055E3B034159DB8697 Certificate serial: 4AFFD0261EFD57DE50CA510E31D983B679A4116A Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/vscWN54Ui6iAIxsFXjsDQVnbhpc.cer Subject info access: rsync://rpki.sub.apnic.net/repository/A917447B0000/0/BEC716379E148BA880231B055E3B034159DB8697.mft Manifest number: 78 Signing time: Mon 20 Oct 2025 18:56:58 +0000 Manifest this update: Mon 20 Oct 2025 18:51:58 +0000 Manifest next update: Tue 21 Oct 2025 22:00:58 +0000 Files and hashes: 1: 3136302e3138372e3132342e302f32332d3234203d3e20313533333436.roa (hash: lt8UIG15p3kUFo1J40t+NeYpM4QkHXYfBc0bEGxMbK0=) 2: BEC716379E148BA880231B055E3B034159DB8697.crl (hash: GQbaaZ6d9IwQZfQBR+gia8YkuTIXwzlnNvL39+TJo1U=) Validation: OK Signature path: rsync://rpki.sub.apnic.net/repository/A917447B0000/0/BEC716379E148BA880231B055E3B034159DB8697.crl rsync://rpki.sub.apnic.net/repository/A917447B0000/0/BEC716379E148BA880231B055E3B034159DB8697.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/vscWN54Ui6iAIxsFXjsDQVnbhpc.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 21 Oct 2025 22:00:58 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4a:ff:d0:26:1e:fd:57:de:50:ca:51:0e:31:d9:83:b6:79:a4:11:6a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A917447B0000, serialNumber=BEC716379E148BA880231B055E3B034159DB8697 Validity Not Before: Oct 20 18:51:58 2025 GMT Not After : Oct 21 22:00:58 2025 GMT Subject: CN=719D4D69E2F314E5C315778F0BF66360E4AEDC87 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:eb:c4:ac:fa:2a:3b:bd:91:5a:cc:59:8c:2e:6c: c2:25:65:75:58:c2:62:67:e5:e6:c3:e3:c9:b2:b8: 2a:c7:c2:af:61:56:24:c1:5c:29:20:80:d0:4f:24: 5d:c6:6a:d9:3e:4b:b7:9d:30:21:e7:c5:93:2d:ef: bb:ab:01:dd:64:fc:41:01:01:a3:54:a4:68:2b:4a: f5:5f:ef:b5:2c:1a:80:64:69:d2:bd:bf:b4:35:dd: d4:0e:6a:38:a6:6f:2d:f9:41:a8:76:13:c4:58:dc: 90:5f:8a:82:db:17:ce:f5:b3:75:81:18:ec:f7:f1: ec:40:2d:7c:f6:18:94:d4:49:e5:2a:1f:5a:f1:a1: 97:c9:3b:ea:fb:72:1e:bb:40:13:3c:97:8e:0c:14: 95:24:c5:e3:c0:08:78:0d:9f:9f:26:02:97:91:e3: d7:69:a3:e2:84:bb:3a:d0:3d:4d:7d:d6:dc:f9:00: d8:d6:0b:c4:ec:c7:45:1c:4a:66:7f:4c:97:f2:0f: dc:f8:24:0c:35:36:48:3a:c0:a4:96:2a:a5:21:85: 95:1e:35:6d:bc:3b:be:48:53:5d:0d:0e:53:ea:ab: 75:d9:16:4c:8a:8d:ea:0d:5d:a2:f0:be:a5:ee:7d: eb:1b:44:0f:7a:72:cd:20:92:26:49:fe:93:38:7a: de:63 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 71:9D:4D:69:E2:F3:14:E5:C3:15:77:8F:0B:F6:63:60:E4:AE:DC:87 X509v3 Authority Key Identifier: keyid:BE:C7:16:37:9E:14:8B:A8:80:23:1B:05:5E:3B:03:41:59:DB:86:97 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.sub.apnic.net/repository/A917447B0000/0/BEC716379E148BA880231B055E3B034159DB8697.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/vscWN54Ui6iAIxsFXjsDQVnbhpc.cer Subject Information Access: Signed Object - URI:rsync://rpki.sub.apnic.net/repository/A917447B0000/0/BEC716379E148BA880231B055E3B034159DB8697.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption b0:37:d6:e6:eb:c7:24:ec:8b:6d:79:6c:70:1d:fc:24:57:50: d2:1f:e9:b3:1e:24:bc:b5:d9:4f:b1:d7:c1:60:92:f6:d1:63: bb:d2:4e:15:1e:31:35:ed:23:89:98:81:e7:82:9a:17:fb:be: 95:e9:da:d4:a9:bd:61:12:57:f9:e3:44:ba:3d:86:c2:fe:2f: 6d:93:fd:3a:d3:16:bc:c4:be:4b:c4:83:82:92:65:48:fd:b3: 4c:b7:86:b1:8f:97:11:18:11:04:0f:53:f3:7f:75:e7:be:47: dc:e8:dc:e2:9f:47:1b:9a:dc:0a:05:69:d4:3d:17:a9:02:2e: f5:23:23:92:42:dd:d8:e0:c4:bb:bd:9b:00:39:76:23:19:af: 0e:60:7e:13:ab:92:af:d0:6d:e0:45:26:a5:a3:e3:4a:2f:9c: 8b:8e:db:27:71:e0:f2:6a:2a:d9:19:bc:a7:9f:f3:bf:c6:57: 52:f5:5c:89:ae:57:b3:7a:7a:c4:3d:bb:0d:08:3b:f7:d5:46: 61:d6:ec:9a:50:bb:a3:60:51:da:2b:8e:e4:87:b2:75:c3:7b: 1a:29:e3:30:90:ef:a9:6d:70:aa:4e:c4:5c:dc:5b:10:4b:a2: 1d:b0:cf:18:71:51:c1:1c:87:c6:22:81:c2:70:bd:d2:d6:96: 4d:19:2e:5f -----BEGIN CERTIFICATE----- MIIFKDCCBBCgAwIBAgIUSv/QJh79V95QylEOMdmDtnmkEWowDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxNzQ0N0IwMDAwMTEwLwYDVQQFEyhCRUM3MTYzNzlF MTQ4QkE4ODAyMzFCMDU1RTNCMDM0MTU5REI4Njk3MB4XDTI1MTAyMDE4NTE1OFoX DTI1MTAyMTIyMDA1OFowMzExMC8GA1UEAxMoNzE5RDRENjlFMkYzMTRFNUMzMTU3 NzhGMEJGNjYzNjBFNEFFREM4NzCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAOvErPoqO72RWsxZjC5swiVldVjCYmfl5sPjybK4KsfCr2FWJMFcKSCA0E8k XcZq2T5Lt50wIefFky3vu6sB3WT8QQEBo1SkaCtK9V/vtSwagGRp0r2/tDXd1A5q OKZvLflBqHYTxFjckF+KgtsXzvWzdYEY7Pfx7EAtfPYYlNRJ5SofWvGhl8k76vty HrtAEzyXjgwUlSTF48AIeA2fnyYCl5Hj12mj4oS7OtA9TX3W3PkA2NYLxOzHRRxK Zn9Ml/IP3PgkDDU2SDrApJYqpSGFlR41bbw7vkhTXQ0OU+qrddkWTIqN6g1dovC+ pe596xtED3pyzSCSJkn+kzh63mMCAwEAAaOCAhswggIXMB0GA1UdDgQWBBRxnU1p 4vMU5cMVd48L9mNg5K7chzAfBgNVHSMEGDAWgBS+xxY3nhSLqIAjGwVeOwNBWduG lzAOBgNVHQ8BAf8EBAMCB4AwcgYDVR0fBGswaTBnoGWgY4ZhcnN5bmM6Ly9ycGtp LnN1Yi5hcG5pYy5uZXQvcmVwb3NpdG9yeS9BOTE3NDQ3QjAwMDAvMC9CRUM3MTYz NzlFMTQ4QkE4ODAyMzFCMDU1RTNCMDM0MTU5REI4Njk3LmNybDB+BggrBgEFBQcB AQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVwb3Np dG9yeS9CM0EyNEYyMDFENjYxMUUyOEFDODgzN0M3MkZEMUZGMi92c2NXTjU0VWk2 aUFJeHNGWGpzRFFWbmJocGMuY2VyMH0GCCsGAQUFBwELBHEwbzBtBggrBgEFBQcw C4ZhcnN5bmM6Ly9ycGtpLnN1Yi5hcG5pYy5uZXQvcmVwb3NpdG9yeS9BOTE3NDQ3 QjAwMDAvMC9CRUM3MTYzNzlFMTQ4QkE4ODAyMzFCMDU1RTNCMDM0MTU5REI4Njk3 Lm1mdDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIw EDAGBAIAAQUAMAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG 9w0BAQsFAAOCAQEAsDfW5uvHJOyLbXlscB38JFdQ0h/psx4kvLXZT7HXwWCS9tFj u9JOFR4xNe0jiZiB54KaF/u+lena1Km9YRJX+eNEuj2Gwv4vbZP9OtMWvMS+S8SD gpJlSP2zTLeGsY+XERgRBA9T8391575H3Ojc4p9HG5rcCgVp1D0XqQIu9SMjkkLd 2ODEu72bADl2IxmvDmB+E6uSr9Bt4EUmpaPjSi+ci47bJ3Hg8moq2Rm8p5/zv8ZX UvVcia5Xs3p6xD27DQg799VGYdbsmlC7o2BR2iuO5IeydcN7GinjMJDvqW1wqk7E XNxbEEuiHbDPGHFRwRyHxiKBwnC90taWTRkuXw== -----END CERTIFICATE-----Generated at Tue Oct 21 15:14:07 2025 by rpki-client