$ rpki-client -vvf rpki.sub.apnic.net/repository/A917447B0000/0/BEC716379E148BA880231B055E3B034159DB8697.mft File: BEC716379E148BA880231B055E3B034159DB8697.mft (raw, json) Hash identifier: AsdYW8FhOYznPELYft0T5DHEF3n1b4cPgdqyfQCG99w= Subject key identifier: 39:69:DB:69:E4:26:3F:75:01:FD:F6:76:F4:C5:06:40:4A:79:3D:39 Authority key identifier: BE:C7:16:37:9E:14:8B:A8:80:23:1B:05:5E:3B:03:41:59:DB:86:97 Certificate issuer: /CN=A917447B0000/serialNumber=BEC716379E148BA880231B055E3B034159DB8697 Certificate serial: 357B4C7AD75C53170723880359681FE2951F48AD Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/vscWN54Ui6iAIxsFXjsDQVnbhpc.cer Subject info access: rsync://rpki.sub.apnic.net/repository/A917447B0000/0/BEC716379E148BA880231B055E3B034159DB8697.mft Manifest number: 20 Signing time: Sat 09 Aug 2025 11:28:02 +0000 Manifest this update: Sat 09 Aug 2025 11:23:02 +0000 Manifest next update: Sun 10 Aug 2025 13:41:02 +0000 Files and hashes: 1: BEC716379E148BA880231B055E3B034159DB8697.crl (hash: oAWY3r4ybYTaaNR+V+TugAsHashHajsMjiI/52V8LJ0=) 2: 3136302e3138372e3132342e302f32342d3234203d3e20313533333436.roa (hash: cbMDbQFybOhC0G9iTs0qjEoMRd0fCOiZgnIZV0fHXTE=) Validation: OK Signature path: rsync://rpki.sub.apnic.net/repository/A917447B0000/0/BEC716379E148BA880231B055E3B034159DB8697.crl rsync://rpki.sub.apnic.net/repository/A917447B0000/0/BEC716379E148BA880231B055E3B034159DB8697.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/vscWN54Ui6iAIxsFXjsDQVnbhpc.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 10 Aug 2025 13:41:02 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 35:7b:4c:7a:d7:5c:53:17:07:23:88:03:59:68:1f:e2:95:1f:48:ad Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A917447B0000, serialNumber=BEC716379E148BA880231B055E3B034159DB8697 Validity Not Before: Aug 9 11:23:02 2025 GMT Not After : Aug 10 13:41:02 2025 GMT Subject: CN=3969DB69E4263F7501FDF676F4C506404A793D39 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:8b:1d:2b:49:a6:50:44:1f:13:f4:c3:e0:ad: 90:22:44:2a:52:a1:a6:18:9e:a7:25:ad:48:00:3a: dd:98:3f:d1:8a:3d:c6:ae:8e:ea:04:f4:1b:2d:7c: ad:45:2e:b7:27:9d:9f:21:68:e8:80:84:e5:ed:10: ce:b4:73:eb:12:7d:9e:a6:b4:a8:30:69:f2:7d:cb: 61:3a:16:27:cd:5e:3d:a2:b1:0d:64:e5:cf:36:7d: f7:12:18:8b:cc:88:f8:ad:02:c7:18:75:91:71:8e: 0a:9f:6c:6f:32:65:82:67:e7:f1:59:da:d7:56:af: 71:2d:2c:25:8d:72:fb:11:5c:9d:97:fc:a8:9e:64: 7e:ca:1a:cf:9e:0a:44:68:ae:8a:ad:31:70:02:af: cc:37:53:ec:98:c1:af:db:27:ea:77:cd:99:af:83: d4:25:a6:f2:55:ae:67:9d:70:c1:db:5c:fb:74:fe: e3:42:78:89:31:25:f8:af:1b:23:e7:22:8b:1f:ac: d8:ec:fb:5b:d6:f8:04:d8:59:86:2f:66:5e:32:d9: fa:63:8b:ff:3f:a4:12:0f:4d:fb:9a:79:46:02:3f: c7:8e:b4:ba:d9:ea:e2:8f:94:5c:23:0b:bb:f9:4f: 96:90:53:8c:50:1d:e3:01:1d:92:e0:a5:08:dd:21: 6d:fd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 39:69:DB:69:E4:26:3F:75:01:FD:F6:76:F4:C5:06:40:4A:79:3D:39 X509v3 Authority Key Identifier: keyid:BE:C7:16:37:9E:14:8B:A8:80:23:1B:05:5E:3B:03:41:59:DB:86:97 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.sub.apnic.net/repository/A917447B0000/0/BEC716379E148BA880231B055E3B034159DB8697.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/vscWN54Ui6iAIxsFXjsDQVnbhpc.cer Subject Information Access: Signed Object - URI:rsync://rpki.sub.apnic.net/repository/A917447B0000/0/BEC716379E148BA880231B055E3B034159DB8697.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a9:8d:44:36:bc:bf:fb:b7:e1:3c:e1:75:af:8c:b0:32:7c:16: c4:33:3e:87:4e:47:df:e5:c1:04:ab:f4:8a:65:3f:31:d4:35: fa:a1:71:d8:8e:e9:a3:07:77:8d:6a:3e:4f:6c:0f:c9:ff:b1: 2a:cd:c4:ea:ed:25:05:27:95:74:52:6e:c5:e4:9f:3a:4e:45: 40:9d:87:a6:e6:57:59:26:ee:5e:93:8f:fd:02:14:fe:5f:f6: 2d:f6:66:0b:b8:54:48:1a:05:0a:95:bb:34:14:3e:9d:e5:1b: a5:f6:a0:cc:e6:ec:0c:88:5f:82:4f:f0:5a:2e:53:a0:b1:44: e7:36:c1:8d:bb:de:d6:b8:3d:d0:6a:28:c4:44:c0:bd:16:4a: a0:26:53:34:97:9b:8e:3b:0d:7d:50:42:18:05:2b:cd:21:e0: 9b:cf:5b:d0:80:e5:4e:cc:73:a6:6e:90:85:d4:bc:c1:46:a7: 03:90:05:d4:e8:ed:e2:01:66:d6:0c:82:10:e6:d3:c8:77:0f: b0:b8:ad:31:12:98:32:bd:84:0a:7c:1b:46:1e:20:e5:4b:7e: c9:fe:a7:94:4a:18:f0:1c:35:e4:68:22:10:16:a0:84:5d:be: b3:6c:52:82:46:8b:06:a7:c8:91:f8:d9:33:7d:97:0e:ff:71: 03:46:74:14 -----BEGIN CERTIFICATE----- MIIFKDCCBBCgAwIBAgIUNXtMetdcUxcHI4gDWWgf4pUfSK0wDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxNzQ0N0IwMDAwMTEwLwYDVQQFEyhCRUM3MTYzNzlF MTQ4QkE4ODAyMzFCMDU1RTNCMDM0MTU5REI4Njk3MB4XDTI1MDgwOTExMjMwMloX DTI1MDgxMDEzNDEwMlowMzExMC8GA1UEAxMoMzk2OURCNjlFNDI2M0Y3NTAxRkRG Njc2RjRDNTA2NDA0QTc5M0QzOTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAMCLHStJplBEHxP0w+CtkCJEKlKhphiepyWtSAA63Zg/0Yo9xq6O6gT0Gy18 rUUutyednyFo6ICE5e0QzrRz6xJ9nqa0qDBp8n3LYToWJ81ePaKxDWTlzzZ99xIY i8yI+K0Cxxh1kXGOCp9sbzJlgmfn8Vna11avcS0sJY1y+xFcnZf8qJ5kfsoaz54K RGiuiq0xcAKvzDdT7JjBr9sn6nfNma+D1CWm8lWuZ51wwdtc+3T+40J4iTEl+K8b I+ciix+s2Oz7W9b4BNhZhi9mXjLZ+mOL/z+kEg9N+5p5RgI/x460utnq4o+UXCML u/lPlpBTjFAd4wEdkuClCN0hbf0CAwEAAaOCAhswggIXMB0GA1UdDgQWBBQ5adtp 5CY/dQH99nb0xQZASnk9OTAfBgNVHSMEGDAWgBS+xxY3nhSLqIAjGwVeOwNBWduG lzAOBgNVHQ8BAf8EBAMCB4AwcgYDVR0fBGswaTBnoGWgY4ZhcnN5bmM6Ly9ycGtp LnN1Yi5hcG5pYy5uZXQvcmVwb3NpdG9yeS9BOTE3NDQ3QjAwMDAvMC9CRUM3MTYz NzlFMTQ4QkE4ODAyMzFCMDU1RTNCMDM0MTU5REI4Njk3LmNybDB+BggrBgEFBQcB AQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVwb3Np dG9yeS9CM0EyNEYyMDFENjYxMUUyOEFDODgzN0M3MkZEMUZGMi92c2NXTjU0VWk2 aUFJeHNGWGpzRFFWbmJocGMuY2VyMH0GCCsGAQUFBwELBHEwbzBtBggrBgEFBQcw C4ZhcnN5bmM6Ly9ycGtpLnN1Yi5hcG5pYy5uZXQvcmVwb3NpdG9yeS9BOTE3NDQ3 QjAwMDAvMC9CRUM3MTYzNzlFMTQ4QkE4ODAyMzFCMDU1RTNCMDM0MTU5REI4Njk3 Lm1mdDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIw EDAGBAIAAQUAMAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG 9w0BAQsFAAOCAQEAqY1ENry/+7fhPOF1r4ywMnwWxDM+h05H3+XBBKv0imU/MdQ1 +qFx2I7powd3jWo+T2wPyf+xKs3E6u0lBSeVdFJuxeSfOk5FQJ2HpuZXWSbuXpOP /QIU/l/2LfZmC7hUSBoFCpW7NBQ+neUbpfagzObsDIhfgk/wWi5ToLFE5zbBjbve 1rg90GooxETAvRZKoCZTNJebjjsNfVBCGAUrzSHgm89b0IDlTsxzpm6QhdS8wUan A5AF1Ojt4gFm1gyCEObTyHcPsLitMRKYMr2ECnwbRh4g5Ut+yf6nlEoY8Bw15Ggi EBaghF2+s2xSgkaLBqfIkfjZM32XDv9xA0Z0FA== -----END CERTIFICATE-----Generated at Sat Aug 9 15:14:20 2025 by rpki-client