$ rpki-client -vvf rpki.sub.apnic.net/repository/A917447B0000/0/BEC716379E148BA880231B055E3B034159DB8697.mft File: BEC716379E148BA880231B055E3B034159DB8697.mft (raw, json) Hash identifier: B0N2O8Lm+xAt112WdQG+hDbN/sMZhJoKITnBB2IBRck= Subject key identifier: 84:3B:91:87:1E:63:60:97:09:AB:9D:61:04:54:6D:3A:33:DE:53:1C Authority key identifier: BE:C7:16:37:9E:14:8B:A8:80:23:1B:05:5E:3B:03:41:59:DB:86:97 Certificate issuer: /CN=A917447B0000/serialNumber=BEC716379E148BA880231B055E3B034159DB8697 Certificate serial: 783DC90C0C8674AAF91CF5135BBCC1712BFA7577 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/vscWN54Ui6iAIxsFXjsDQVnbhpc.cer Subject info access: rsync://rpki.sub.apnic.net/repository/A917447B0000/0/BEC716379E148BA880231B055E3B034159DB8697.mft Manifest number: 32 Signing time: Fri 22 Aug 2025 21:29:55 +0000 Manifest this update: Fri 22 Aug 2025 21:24:55 +0000 Manifest next update: Sun 24 Aug 2025 00:18:55 +0000 Files and hashes: 1: BEC716379E148BA880231B055E3B034159DB8697.crl (hash: oArf4Xznj5Uf0tEnJDoSsnpFXvOXbsA63XfGOu/yWZw=) 2: 3136302e3138372e3132342e302f32342d3234203d3e20313533333436.roa (hash: cbMDbQFybOhC0G9iTs0qjEoMRd0fCOiZgnIZV0fHXTE=) Validation: OK Signature path: rsync://rpki.sub.apnic.net/repository/A917447B0000/0/BEC716379E148BA880231B055E3B034159DB8697.crl rsync://rpki.sub.apnic.net/repository/A917447B0000/0/BEC716379E148BA880231B055E3B034159DB8697.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/vscWN54Ui6iAIxsFXjsDQVnbhpc.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 24 Aug 2025 00:18:55 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 78:3d:c9:0c:0c:86:74:aa:f9:1c:f5:13:5b:bc:c1:71:2b:fa:75:77 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A917447B0000, serialNumber=BEC716379E148BA880231B055E3B034159DB8697 Validity Not Before: Aug 22 21:24:55 2025 GMT Not After : Aug 24 00:18:55 2025 GMT Subject: CN=843B91871E63609709AB9D6104546D3A33DE531C Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9d:bf:48:22:c1:8b:03:5d:40:b5:bc:24:11:8a: 4f:95:cf:af:19:ff:05:71:a0:09:f8:e2:9e:2a:35: 7b:77:5d:35:de:e2:e1:bb:83:16:4f:55:1c:2b:89: 91:36:ca:4e:0a:d3:53:84:90:63:85:e0:ab:61:35: b7:9a:56:12:a1:a2:e5:07:14:7b:91:8c:17:11:51: b7:a6:dc:b8:65:bb:8c:83:25:f6:26:5b:67:d9:b1: ff:d7:2f:2a:82:49:0b:0b:2a:59:ed:1a:74:77:58: 23:11:cb:80:22:43:21:3e:41:8f:5d:a1:9e:9a:d1: 64:cb:f5:42:dd:07:9a:32:1a:0c:78:2b:11:76:58: a3:84:63:d0:bf:8f:4e:8d:2e:93:51:17:76:8b:3b: 2d:64:e8:d5:1c:06:85:ec:be:14:c9:05:71:50:75: 35:d0:e0:8e:96:98:62:b3:e8:0d:67:2a:e3:04:18: 85:a8:41:fb:a6:45:e2:68:58:23:d4:73:a4:a5:91: 41:28:d8:30:ae:77:9d:c4:f8:c3:d2:a2:73:5a:8f: 1d:0d:c0:e9:9a:92:aa:02:97:bd:0f:e3:d8:12:9c: 8b:a2:c3:3c:49:bf:e3:0e:35:f9:1b:76:e8:d0:11: 0f:11:4c:25:d8:21:cc:5a:18:8f:31:92:ef:29:0c: ff:31 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 84:3B:91:87:1E:63:60:97:09:AB:9D:61:04:54:6D:3A:33:DE:53:1C X509v3 Authority Key Identifier: keyid:BE:C7:16:37:9E:14:8B:A8:80:23:1B:05:5E:3B:03:41:59:DB:86:97 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.sub.apnic.net/repository/A917447B0000/0/BEC716379E148BA880231B055E3B034159DB8697.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/vscWN54Ui6iAIxsFXjsDQVnbhpc.cer Subject Information Access: Signed Object - URI:rsync://rpki.sub.apnic.net/repository/A917447B0000/0/BEC716379E148BA880231B055E3B034159DB8697.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption b9:57:e5:3e:74:42:c5:16:8b:89:58:d4:af:75:ff:bb:da:c3: 6a:09:93:5e:b2:25:f0:f3:37:27:84:5f:51:94:65:27:a5:9d: 96:79:f2:f8:7d:8a:fa:d4:86:8a:c6:b9:cf:28:2e:ed:a9:3f: 62:15:59:ab:fd:84:f9:8f:f8:66:3c:db:c0:b7:9e:ab:b9:41: f3:07:cb:af:44:4f:02:a0:f0:96:1d:99:0a:21:22:b8:f7:bb: b5:9b:f5:cb:9b:d0:7c:71:95:6c:0c:80:5f:ba:63:14:3f:76: 57:8b:38:33:22:56:9c:c5:98:dc:a9:fb:e9:01:52:67:3f:70: 63:ab:65:fc:03:69:30:66:ea:59:df:da:20:ff:67:44:89:80: 44:29:ac:89:24:1e:44:87:a7:5b:a3:e1:74:6e:ef:dc:c5:55: 40:20:79:45:8c:5b:4a:cd:ff:7d:91:84:c1:89:ab:dc:3d:3d: b9:c1:8b:80:80:80:a5:ca:e0:29:01:4c:bc:df:6f:7d:1a:5b: 52:ba:f8:4c:b3:53:1a:6a:a8:cd:70:b7:75:d1:c6:45:4b:fc: 1d:b0:e2:11:5f:9e:24:63:cf:07:df:16:16:d5:44:02:c4:89: fd:5e:c7:d9:72:ce:f6:25:0d:44:ac:c2:02:85:0f:57:1b:26: b4:5f:2f:a0 -----BEGIN CERTIFICATE----- MIIFKDCCBBCgAwIBAgIUeD3JDAyGdKr5HPUTW7zBcSv6dXcwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxNzQ0N0IwMDAwMTEwLwYDVQQFEyhCRUM3MTYzNzlF MTQ4QkE4ODAyMzFCMDU1RTNCMDM0MTU5REI4Njk3MB4XDTI1MDgyMjIxMjQ1NVoX DTI1MDgyNDAwMTg1NVowMzExMC8GA1UEAxMoODQzQjkxODcxRTYzNjA5NzA5QUI5 RDYxMDQ1NDZEM0EzM0RFNTMxQzCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAJ2/SCLBiwNdQLW8JBGKT5XPrxn/BXGgCfjinio1e3ddNd7i4buDFk9VHCuJ kTbKTgrTU4SQY4Xgq2E1t5pWEqGi5QcUe5GMFxFRt6bcuGW7jIMl9iZbZ9mx/9cv KoJJCwsqWe0adHdYIxHLgCJDIT5Bj12hnprRZMv1Qt0HmjIaDHgrEXZYo4Rj0L+P To0uk1EXdos7LWTo1RwGhey+FMkFcVB1NdDgjpaYYrPoDWcq4wQYhahB+6ZF4mhY I9RzpKWRQSjYMK53ncT4w9Kic1qPHQ3A6ZqSqgKXvQ/j2BKci6LDPEm/4w41+Rt2 6NARDxFMJdghzFoYjzGS7ykM/zECAwEAAaOCAhswggIXMB0GA1UdDgQWBBSEO5GH HmNglwmrnWEEVG06M95THDAfBgNVHSMEGDAWgBS+xxY3nhSLqIAjGwVeOwNBWduG lzAOBgNVHQ8BAf8EBAMCB4AwcgYDVR0fBGswaTBnoGWgY4ZhcnN5bmM6Ly9ycGtp LnN1Yi5hcG5pYy5uZXQvcmVwb3NpdG9yeS9BOTE3NDQ3QjAwMDAvMC9CRUM3MTYz NzlFMTQ4QkE4ODAyMzFCMDU1RTNCMDM0MTU5REI4Njk3LmNybDB+BggrBgEFBQcB AQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVwb3Np dG9yeS9CM0EyNEYyMDFENjYxMUUyOEFDODgzN0M3MkZEMUZGMi92c2NXTjU0VWk2 aUFJeHNGWGpzRFFWbmJocGMuY2VyMH0GCCsGAQUFBwELBHEwbzBtBggrBgEFBQcw C4ZhcnN5bmM6Ly9ycGtpLnN1Yi5hcG5pYy5uZXQvcmVwb3NpdG9yeS9BOTE3NDQ3 QjAwMDAvMC9CRUM3MTYzNzlFMTQ4QkE4ODAyMzFCMDU1RTNCMDM0MTU5REI4Njk3 Lm1mdDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIw EDAGBAIAAQUAMAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG 9w0BAQsFAAOCAQEAuVflPnRCxRaLiVjUr3X/u9rDagmTXrIl8PM3J4RfUZRlJ6Wd lnny+H2K+tSGisa5zygu7ak/YhVZq/2E+Y/4ZjzbwLeeq7lB8wfLr0RPAqDwlh2Z CiEiuPe7tZv1y5vQfHGVbAyAX7pjFD92V4s4MyJWnMWY3Kn76QFSZz9wY6tl/ANp MGbqWd/aIP9nRImARCmsiSQeRIenW6PhdG7v3MVVQCB5RYxbSs3/fZGEwYmr3D09 ucGLgICApcrgKQFMvN9vfRpbUrr4TLNTGmqozXC3ddHGRUv8HbDiEV+eJGPPB98W FtVEAsSJ/V7H2XLO9iUNRKzCAoUPVxsmtF8voA== -----END CERTIFICATE-----Generated at Sat Aug 23 12:40:45 2025 by rpki-client