$ rpki-client -vvf rpki.sub.apnic.net/repository/A917447B0000/0/BEC716379E148BA880231B055E3B034159DB8697.mft File: BEC716379E148BA880231B055E3B034159DB8697.mft (raw, json) Hash identifier: 26iiaFO1BzxjP5FB5MYfou0aPIf4UnvFbGKvUUyV0ng= Subject key identifier: A6:DF:36:20:0D:62:E7:51:00:87:CC:90:BD:23:C1:5B:A3:8D:E4:55 Authority key identifier: BE:C7:16:37:9E:14:8B:A8:80:23:1B:05:5E:3B:03:41:59:DB:86:97 Certificate issuer: /CN=A917447B0000/serialNumber=BEC716379E148BA880231B055E3B034159DB8697 Certificate serial: 5582FFFDF862F89728D739D1B328ABF0BA17D953 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/vscWN54Ui6iAIxsFXjsDQVnbhpc.cer Subject info access: rsync://rpki.sub.apnic.net/repository/A917447B0000/0/BEC716379E148BA880231B055E3B034159DB8697.mft Manifest number: 018B Signing time: Thu 23 Jul 2026 10:31:24 +0000 Manifest this update: Thu 23 Jul 2026 10:26:24 +0000 Manifest next update: Fri 24 Jul 2026 13:52:24 +0000 Files and hashes: 1: 3136302e3138372e3132352e302f32342d3234203d3e2039383333.roa (hash: X2xp6uKIsNAWVyJ6WAzD1qj3ichPSAAnt4LFLuMhakA=) 2: 3136302e3138372e3132342e302f32342d3234203d3e20313533333436.roa (hash: NAbzcXI7CIRLEYaSeuu8ld26GBq5ENO+YouoZ+7T5Ys=) 3: BEC716379E148BA880231B055E3B034159DB8697.crl (hash: 0S+cs/EPdxQ7+Co3y/jlEg5Opq5k/fAJrgHxt2eGHeY=) Validation: OK Signature path: rsync://rpki.sub.apnic.net/repository/A917447B0000/0/BEC716379E148BA880231B055E3B034159DB8697.crl rsync://rpki.sub.apnic.net/repository/A917447B0000/0/BEC716379E148BA880231B055E3B034159DB8697.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/vscWN54Ui6iAIxsFXjsDQVnbhpc.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 24 Jul 2026 13:52:24 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 55:82:ff:fd:f8:62:f8:97:28:d7:39:d1:b3:28:ab:f0:ba:17:d9:53 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A917447B0000, serialNumber=BEC716379E148BA880231B055E3B034159DB8697 Validity Not Before: Jul 23 10:26:24 2026 GMT Not After : Jul 24 13:52:24 2026 GMT Subject: CN=A6DF36200D62E7510087CC90BD23C15BA38DE455 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e3:19:d0:f1:aa:0a:9a:d7:e8:a9:0d:45:d2:5c: 45:05:24:88:8c:6c:b5:83:c2:e8:58:e4:eb:fa:3d: b8:08:b0:a2:ca:62:82:d7:3e:8b:ec:6e:8b:27:ab: 47:a9:5f:19:26:6f:97:f6:9d:74:2a:a7:b0:1e:0d: b8:fd:b4:41:3d:61:c8:95:fa:b0:12:c0:8b:65:72: b5:e8:05:2f:cf:62:d1:dd:c3:f0:71:72:c6:a5:1e: a9:31:ce:96:40:0f:b6:e9:1e:a4:6b:ff:3e:06:0a: ba:37:4b:71:d6:d6:80:c9:3b:29:1d:bd:64:d7:43: ce:6f:54:a9:99:a7:8a:cb:7e:5f:e8:14:5c:49:26: 71:dd:79:4c:98:ff:78:8f:5d:bc:96:ac:8b:fe:98: a4:92:9f:16:09:3f:cd:71:db:5d:bd:78:e6:cd:dd: fb:a5:29:ff:da:87:aa:f4:ab:56:c7:b6:1c:8b:31: ba:56:36:05:e5:34:54:06:2e:90:86:09:84:9d:dd: a0:65:3d:81:38:63:bc:0d:a7:7a:56:70:81:35:31: e2:b6:98:23:a2:0a:c2:db:0b:83:36:7a:ed:c4:cc: c4:38:02:ab:31:50:9b:c4:1d:79:a3:82:b3:17:2d: f7:df:29:f8:04:b7:82:58:9a:5a:2e:bc:46:fb:ab: 9c:9d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A6:DF:36:20:0D:62:E7:51:00:87:CC:90:BD:23:C1:5B:A3:8D:E4:55 X509v3 Authority Key Identifier: keyid:BE:C7:16:37:9E:14:8B:A8:80:23:1B:05:5E:3B:03:41:59:DB:86:97 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.sub.apnic.net/repository/A917447B0000/0/BEC716379E148BA880231B055E3B034159DB8697.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/vscWN54Ui6iAIxsFXjsDQVnbhpc.cer Subject Information Access: Signed Object - URI:rsync://rpki.sub.apnic.net/repository/A917447B0000/0/BEC716379E148BA880231B055E3B034159DB8697.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption ab:c3:7a:a4:a3:47:5b:a9:1f:8b:1c:3f:cb:63:85:88:8d:93: d6:65:ee:db:ad:5f:03:48:08:79:95:b0:0a:cd:b8:c7:df:7b: 79:4b:d2:36:2a:dc:12:d3:d9:4d:92:e8:e8:ff:80:3a:3d:35: ad:94:49:23:ed:35:ec:52:16:fa:40:93:99:cc:a8:ea:07:96: ff:d7:bf:31:aa:93:6b:a0:9b:4a:3d:ac:05:02:8b:36:0a:52: 35:99:cf:2c:a1:b6:4d:dc:ba:73:70:4c:fb:7d:43:1d:e7:42: b4:06:c3:05:83:d7:e9:fa:c3:bb:84:a6:b9:f6:85:ff:7a:fb: a5:84:9f:13:d6:2f:63:9b:6f:47:84:e0:bb:9c:ee:2f:8a:a7: 3f:aa:a7:3e:56:89:84:bb:8e:77:e6:60:4e:76:ff:63:b0:a7: 5b:2b:7f:85:73:d3:90:06:bd:96:11:a5:9b:87:a3:b5:81:0d: 36:52:9e:87:64:68:17:43:fa:9a:50:76:ac:06:81:5c:6d:5b: 4b:f5:ea:58:1f:ab:ce:0c:c0:92:4a:0b:c5:28:aa:cc:c9:21: 8f:0e:d5:a8:c7:51:c1:0b:83:27:4a:7d:0e:ea:00:ba:47:04: 78:cf:54:4f:eb:cf:14:2b:a2:0a:64:6b:b2:d7:d6:98:b1:c7: ea:ba:e7:0e -----BEGIN CERTIFICATE----- MIIFKDCCBBCgAwIBAgIUVYL//fhi+Jco1znRsyir8LoX2VMwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxNzQ0N0IwMDAwMTEwLwYDVQQFEyhCRUM3MTYzNzlF MTQ4QkE4ODAyMzFCMDU1RTNCMDM0MTU5REI4Njk3MB4XDTI2MDcyMzEwMjYyNFoX DTI2MDcyNDEzNTIyNFowMzExMC8GA1UEAxMoQTZERjM2MjAwRDYyRTc1MTAwODdD QzkwQkQyM0MxNUJBMzhERTQ1NTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAOMZ0PGqCprX6KkNRdJcRQUkiIxstYPC6Fjk6/o9uAiwospigtc+i+xuiyer R6lfGSZvl/addCqnsB4NuP20QT1hyJX6sBLAi2VytegFL89i0d3D8HFyxqUeqTHO lkAPtukepGv/PgYKujdLcdbWgMk7KR29ZNdDzm9UqZmnist+X+gUXEkmcd15TJj/ eI9dvJasi/6YpJKfFgk/zXHbXb145s3d+6Up/9qHqvSrVse2HIsxulY2BeU0VAYu kIYJhJ3doGU9gThjvA2nelZwgTUx4raYI6IKwtsLgzZ67cTMxDgCqzFQm8QdeaOC sxct998p+AS3gliaWi68RvurnJ0CAwEAAaOCAhswggIXMB0GA1UdDgQWBBSm3zYg DWLnUQCHzJC9I8Fbo43kVTAfBgNVHSMEGDAWgBS+xxY3nhSLqIAjGwVeOwNBWduG lzAOBgNVHQ8BAf8EBAMCB4AwcgYDVR0fBGswaTBnoGWgY4ZhcnN5bmM6Ly9ycGtp LnN1Yi5hcG5pYy5uZXQvcmVwb3NpdG9yeS9BOTE3NDQ3QjAwMDAvMC9CRUM3MTYz NzlFMTQ4QkE4ODAyMzFCMDU1RTNCMDM0MTU5REI4Njk3LmNybDB+BggrBgEFBQcB AQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVwb3Np dG9yeS9CM0EyNEYyMDFENjYxMUUyOEFDODgzN0M3MkZEMUZGMi92c2NXTjU0VWk2 aUFJeHNGWGpzRFFWbmJocGMuY2VyMH0GCCsGAQUFBwELBHEwbzBtBggrBgEFBQcw C4ZhcnN5bmM6Ly9ycGtpLnN1Yi5hcG5pYy5uZXQvcmVwb3NpdG9yeS9BOTE3NDQ3 QjAwMDAvMC9CRUM3MTYzNzlFMTQ4QkE4ODAyMzFCMDU1RTNCMDM0MTU5REI4Njk3 Lm1mdDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIw EDAGBAIAAQUAMAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG 9w0BAQsFAAOCAQEAq8N6pKNHW6kfixw/y2OFiI2T1mXu261fA0gIeZWwCs24x997 eUvSNircEtPZTZLo6P+AOj01rZRJI+017FIW+kCTmcyo6geW/9e/MaqTa6CbSj2s BQKLNgpSNZnPLKG2Tdy6c3BM+31DHedCtAbDBYPX6frDu4SmufaF/3r7pYSfE9Yv Y5tvR4Tgu5zuL4qnP6qnPlaJhLuOd+ZgTnb/Y7CnWyt/hXPTkAa9lhGlm4ejtYEN NlKeh2RoF0P6mlB2rAaBXG1bS/XqWB+rzgzAkkoLxSiqzMkhjw7VqMdRwQuDJ0p9 DuoAukcEeM9UT+vPFCuiCmRrstfWmLHH6rrnDg== -----END CERTIFICATE-----Generated at Fri Jul 24 06:19:27 2026 by rpki-client