$ rpki-client -vvvf rpki.sub.apnic.net/repository/A917447B0000/0/BEC716379E148BA880231B055E3B034159DB8697.mft File: BEC716379E148BA880231B055E3B034159DB8697.mft (raw, json) Hash identifier: MOHQ9ZbIsbgDeIAV4hLPB/ppEm5+UEsO2FRp0PnB950= Subject key identifier: 67:53:E3:C9:9D:C0:FC:E0:4D:43:82:FD:2E:B5:DB:C7:C3:0F:45:A8 Authority key identifier: BE:C7:16:37:9E:14:8B:A8:80:23:1B:05:5E:3B:03:41:59:DB:86:97 Certificate issuer: /CN=A917447B0000/serialNumber=BEC716379E148BA880231B055E3B034159DB8697 Certificate serial: 24124827C3B53EE254318B1D5DB76AC88068B9A2 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/vscWN54Ui6iAIxsFXjsDQVnbhpc.cer Subject info access: rsync://rpki.sub.apnic.net/repository/A917447B0000/0/BEC716379E148BA880231B055E3B034159DB8697.mft Manifest number: 01E8 Signing time: Wed 23 Sep 2026 00:56:40 +0000 Manifest this update: Wed 23 Sep 2026 00:51:40 +0000 Manifest next update: Thu 24 Sep 2026 02:07:40 +0000 Files and hashes: 1: BEC716379E148BA880231B055E3B034159DB8697.crl (hash: 8dbBO4pINBDiAIbHGm68TuIepnVgzzorXpM1cxn3iBU=) 2: 3136302e3138372e3132342e302f32332d3234203d3e20313533333436.roa (hash: 5zHOEOxJKaIhKLayeVIBDopY9PzfhKKvix+Lfzwib5g=) Validation: OK Signature path: rsync://rpki.sub.apnic.net/repository/A917447B0000/0/BEC716379E148BA880231B055E3B034159DB8697.crl rsync://rpki.sub.apnic.net/repository/A917447B0000/0/BEC716379E148BA880231B055E3B034159DB8697.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/vscWN54Ui6iAIxsFXjsDQVnbhpc.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 24 Sep 2026 02:07:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 24:12:48:27:c3:b5:3e:e2:54:31:8b:1d:5d:b7:6a:c8:80:68:b9:a2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A917447B0000, serialNumber=BEC716379E148BA880231B055E3B034159DB8697 Validity Not Before: Sep 23 00:51:40 2026 GMT Not After : Sep 24 02:07:40 2026 GMT Subject: CN=6753E3C99DC0FCE04D4382FD2EB5DBC7C30F45A8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:c1:83:e9:25:cc:e0:38:7f:0b:9f:7b:a3:7a: d8:40:73:fd:69:e0:e7:4e:69:1c:28:30:ba:36:7e: bc:c6:2a:d0:35:26:56:51:26:db:fc:af:dd:d4:67: bb:68:2e:ae:d7:1a:7a:d5:bd:a6:ed:71:24:52:02: 40:7c:37:af:64:7f:8c:5b:04:f2:5c:f5:b1:80:b2: 39:e3:41:4f:ef:93:de:c3:40:09:97:b6:0e:29:f6: 57:4e:59:e4:f2:d8:e9:91:99:b1:d0:81:d4:69:69: 3f:8f:40:22:cb:f2:a5:3d:94:3d:d3:cb:79:45:08: 50:53:d4:52:34:e3:1d:3f:bb:3e:24:44:11:87:45: b7:3c:29:a2:8c:03:c5:5b:2b:9a:31:9e:3e:bc:e8: 3b:40:bd:98:f2:f6:d6:5e:7e:f3:3b:c6:6b:03:0e: ee:e4:ab:1d:12:e0:cb:73:43:b9:3f:f2:3b:10:20: 36:f9:f1:24:f7:7b:9b:c1:1d:ff:c1:09:7b:e0:a2: b8:5e:73:d8:22:34:5d:0c:a2:59:d7:5a:0e:48:69: a2:bb:40:64:c5:ed:1b:df:9e:e6:74:37:a4:17:5c: 2c:13:8d:cc:d2:88:de:de:98:85:9b:b2:a8:aa:24: c4:3a:9a:b7:28:5d:82:6a:ad:f1:77:d6:13:e4:ba: e2:43 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 67:53:E3:C9:9D:C0:FC:E0:4D:43:82:FD:2E:B5:DB:C7:C3:0F:45:A8 X509v3 Authority Key Identifier: keyid:BE:C7:16:37:9E:14:8B:A8:80:23:1B:05:5E:3B:03:41:59:DB:86:97 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.sub.apnic.net/repository/A917447B0000/0/BEC716379E148BA880231B055E3B034159DB8697.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/vscWN54Ui6iAIxsFXjsDQVnbhpc.cer Subject Information Access: Signed Object - URI:rsync://rpki.sub.apnic.net/repository/A917447B0000/0/BEC716379E148BA880231B055E3B034159DB8697.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption b3:9b:eb:d5:03:cf:78:0e:69:fe:85:00:7a:66:f0:98:be:48: 87:bf:eb:7c:f6:c1:ad:c8:8b:32:c8:ef:43:74:80:bf:b6:d3: ee:83:ea:52:2d:38:e9:08:b4:a9:65:e6:9a:83:f2:28:19:aa: d3:a8:37:de:8b:a2:92:1d:56:d7:86:a7:04:f1:c0:19:f4:aa: ac:86:04:06:d2:17:07:7c:31:14:56:09:65:c9:1d:b1:45:8f: 42:8e:d7:33:e0:d9:14:9b:73:36:c2:08:35:a8:1a:f9:38:fd: 0b:d1:bf:0a:5e:bc:6e:a1:92:a1:c5:ec:32:2d:ec:0f:80:0e: 7e:ff:61:c7:42:68:c4:26:89:92:45:34:de:f7:6d:9c:48:a5: c3:4c:6b:6a:39:69:c3:2f:5a:d8:82:ef:0a:32:c4:b4:e2:10: 0e:d0:c4:c3:4d:a7:3a:72:5d:bf:08:86:e8:0d:fd:71:32:a8: e5:1e:bb:ed:4a:bb:13:f4:58:03:11:ef:05:92:7b:fd:66:aa: 1b:29:b7:27:a7:e3:e9:22:9a:a3:48:f6:c2:7d:fd:69:a6:15: cb:93:cc:4c:6a:58:06:f2:82:87:ed:6e:f9:ab:a7:b6:39:bb: 3e:e8:90:02:95:e6:8d:8e:f5:de:38:69:ea:f0:0d:84:df:15: bd:42:f5:bd -----BEGIN CERTIFICATE----- MIIFKDCCBBCgAwIBAgIUJBJIJ8O1PuJUMYsdXbdqyIBouaIwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxNzQ0N0IwMDAwMTEwLwYDVQQFEyhCRUM3MTYzNzlF MTQ4QkE4ODAyMzFCMDU1RTNCMDM0MTU5REI4Njk3MB4XDTI2MDkyMzAwNTE0MFoX DTI2MDkyNDAyMDc0MFowMzExMC8GA1UEAxMoNjc1M0UzQzk5REMwRkNFMDRENDM4 MkZEMkVCNURCQzdDMzBGNDVBODCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBALTBg+klzOA4fwufe6N62EBz/Wng505pHCgwujZ+vMYq0DUmVlEm2/yv3dRn u2gurtcaetW9pu1xJFICQHw3r2R/jFsE8lz1sYCyOeNBT++T3sNACZe2Din2V05Z 5PLY6ZGZsdCB1GlpP49AIsvypT2UPdPLeUUIUFPUUjTjHT+7PiREEYdFtzwpoowD xVsrmjGePrzoO0C9mPL21l5+8zvGawMO7uSrHRLgy3NDuT/yOxAgNvnxJPd7m8Ed /8EJe+CiuF5z2CI0XQyiWddaDkhportAZMXtG9+e5nQ3pBdcLBONzNKI3t6YhZuy qKokxDqatyhdgmqt8XfWE+S64kMCAwEAAaOCAhswggIXMB0GA1UdDgQWBBRnU+PJ ncD84E1Dgv0utdvHww9FqDAfBgNVHSMEGDAWgBS+xxY3nhSLqIAjGwVeOwNBWduG lzAOBgNVHQ8BAf8EBAMCB4AwcgYDVR0fBGswaTBnoGWgY4ZhcnN5bmM6Ly9ycGtp LnN1Yi5hcG5pYy5uZXQvcmVwb3NpdG9yeS9BOTE3NDQ3QjAwMDAvMC9CRUM3MTYz NzlFMTQ4QkE4ODAyMzFCMDU1RTNCMDM0MTU5REI4Njk3LmNybDB+BggrBgEFBQcB AQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVwb3Np dG9yeS9CM0EyNEYyMDFENjYxMUUyOEFDODgzN0M3MkZEMUZGMi92c2NXTjU0VWk2 aUFJeHNGWGpzRFFWbmJocGMuY2VyMH0GCCsGAQUFBwELBHEwbzBtBggrBgEFBQcw C4ZhcnN5bmM6Ly9ycGtpLnN1Yi5hcG5pYy5uZXQvcmVwb3NpdG9yeS9BOTE3NDQ3 QjAwMDAvMC9CRUM3MTYzNzlFMTQ4QkE4ODAyMzFCMDU1RTNCMDM0MTU5REI4Njk3 Lm1mdDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIw EDAGBAIAAQUAMAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG 9w0BAQsFAAOCAQEAs5vr1QPPeA5p/oUAembwmL5Ih7/rfPbBrciLMsjvQ3SAv7bT 7oPqUi046Qi0qWXmmoPyKBmq06g33ouikh1W14anBPHAGfSqrIYEBtIXB3wxFFYJ ZckdsUWPQo7XM+DZFJtzNsIINaga+Tj9C9G/Cl68bqGSocXsMi3sD4AOfv9hx0Jo xCaJkkU03vdtnEilw0xrajlpwy9a2ILvCjLEtOIQDtDEw02nOnJdvwiG6A39cTKo 5R677Uq7E/RYAxHvBZJ7/WaqGym3J6fj6SKao0j2wn39aaYVy5PMTGpYBvKCh+1u +auntjm7PuiQApXmjY713jhp6vANhN8VvUL1vQ== -----END CERTIFICATE-----Generated at Wed Sep 23 18:59:28 2026 by rpki-client