$ rpki-client -vvf rpki.sub.apnic.net/repository/A917447B0000/0/BEC716379E148BA880231B055E3B034159DB8697.mft File: BEC716379E148BA880231B055E3B034159DB8697.mft (raw, json) Hash identifier: 7yvvoOOls8gkqZBOBBY+9eUy0v+aK1S1r0HKQM/kLJ0= Subject key identifier: 6D:B7:3F:A3:F1:5E:B2:E5:9A:7D:DD:85:19:72:67:BF:24:7C:2F:60 Authority key identifier: BE:C7:16:37:9E:14:8B:A8:80:23:1B:05:5E:3B:03:41:59:DB:86:97 Certificate issuer: /CN=A917447B0000/serialNumber=BEC716379E148BA880231B055E3B034159DB8697 Certificate serial: 440F2471B5DB2A8391BE9CCCFD476A7725E4C451 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/vscWN54Ui6iAIxsFXjsDQVnbhpc.cer Subject info access: rsync://rpki.sub.apnic.net/repository/A917447B0000/0/BEC716379E148BA880231B055E3B034159DB8697.mft Manifest number: 010F Signing time: Sun 01 Mar 2026 13:13:57 +0000 Manifest this update: Sun 01 Mar 2026 13:08:57 +0000 Manifest next update: Mon 02 Mar 2026 14:15:57 +0000 Files and hashes: 1: 3136302e3138372e3132342e302f32342d3234203d3e20313533333436.roa (hash: NAbzcXI7CIRLEYaSeuu8ld26GBq5ENO+YouoZ+7T5Ys=) 2: 3136302e3138372e3132352e302f32342d3234203d3e2039383333.roa (hash: X2xp6uKIsNAWVyJ6WAzD1qj3ichPSAAnt4LFLuMhakA=) 3: BEC716379E148BA880231B055E3B034159DB8697.crl (hash: ccXMX2T6afdKObCOjLbbKnz452CCrakSzHxsLhLYOO4=) Validation: OK Signature path: rsync://rpki.sub.apnic.net/repository/A917447B0000/0/BEC716379E148BA880231B055E3B034159DB8697.crl rsync://rpki.sub.apnic.net/repository/A917447B0000/0/BEC716379E148BA880231B055E3B034159DB8697.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/vscWN54Ui6iAIxsFXjsDQVnbhpc.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 02 Mar 2026 14:15:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 44:0f:24:71:b5:db:2a:83:91:be:9c:cc:fd:47:6a:77:25:e4:c4:51 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A917447B0000, serialNumber=BEC716379E148BA880231B055E3B034159DB8697 Validity Not Before: Mar 1 13:08:57 2026 GMT Not After : Mar 2 14:15:57 2026 GMT Subject: CN=6DB73FA3F15EB2E59A7DDD85197267BF247C2F60 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dd:06:b1:60:06:6f:68:6e:2f:95:fa:d3:1d:47: 3b:80:77:1f:08:c7:58:df:1f:56:57:c6:c6:20:c8: 23:c5:06:41:20:4e:13:2d:f9:33:29:44:18:74:67: a2:9f:a0:0d:7c:fb:f9:85:3d:c2:20:7c:66:f0:d3: 49:8b:0e:19:34:ee:47:a4:fb:5b:86:33:2f:69:ba: d9:c1:4d:2a:0e:ec:c7:0a:30:41:ca:8d:60:bd:34: 56:b2:4e:72:a3:0f:62:7e:1a:6a:b5:95:5a:48:cc: 70:ca:1d:d5:61:e8:da:5b:c6:60:10:5c:67:2b:84: 68:1a:5f:bc:c2:bb:9c:a2:ab:b4:b8:53:f1:81:2c: 2c:56:a5:d4:ad:0b:60:82:20:12:c6:1e:5f:2f:c8: 8b:94:66:5a:93:04:79:ac:40:98:3e:17:4f:32:67: d0:6c:20:e8:ef:b3:5c:59:7b:24:9b:7c:02:ee:0b: 7d:8e:21:19:88:5d:14:ce:07:25:13:86:ec:21:15: 61:39:1f:df:e6:f5:a7:da:1d:6f:03:d0:a4:49:ad: cf:d2:de:3c:90:f7:9f:ef:40:a1:d7:d5:f4:12:b9: df:ad:92:c4:bb:3a:14:47:1b:4c:d4:4d:ed:c8:c0: a7:fa:d3:9d:ed:05:24:09:65:f3:d2:46:98:e6:ee: 7c:a7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6D:B7:3F:A3:F1:5E:B2:E5:9A:7D:DD:85:19:72:67:BF:24:7C:2F:60 X509v3 Authority Key Identifier: keyid:BE:C7:16:37:9E:14:8B:A8:80:23:1B:05:5E:3B:03:41:59:DB:86:97 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.sub.apnic.net/repository/A917447B0000/0/BEC716379E148BA880231B055E3B034159DB8697.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/vscWN54Ui6iAIxsFXjsDQVnbhpc.cer Subject Information Access: Signed Object - URI:rsync://rpki.sub.apnic.net/repository/A917447B0000/0/BEC716379E148BA880231B055E3B034159DB8697.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 2a:59:79:1c:f5:25:e4:b3:e6:5f:3e:11:ba:ec:b1:91:e6:b2: f6:02:16:7a:f4:7c:08:12:a5:d1:84:cb:ac:77:6e:60:1a:7c: b4:3f:52:4f:11:9f:0b:ca:70:a0:22:bc:a1:ed:d1:dd:dd:92: ad:2f:50:bc:f9:08:bc:0d:2f:bf:5c:42:8b:bf:01:5a:45:05: 28:ba:96:60:e0:82:7c:3f:ca:58:e5:0d:3a:c7:e7:d7:c0:ea: c2:ca:22:99:81:f3:07:a0:26:11:a7:3f:e7:c4:80:af:b2:ca: f1:40:11:07:ac:cc:18:48:53:b9:81:0e:af:b5:1e:3d:25:fe: 43:6f:13:d0:a4:86:67:fe:b0:31:45:c2:16:c8:1b:fe:7e:e9: db:2a:fa:8b:d5:28:9d:d5:ac:38:66:be:ab:21:2f:ee:a0:3a: 45:09:d2:4c:ca:a7:ad:68:0c:6e:91:e5:2c:6b:4f:c2:5e:06: 93:14:e2:ec:f5:9a:70:19:2e:08:c7:6b:f7:85:04:22:15:ee: bc:71:19:72:e6:05:6e:f3:d1:3c:4c:be:b7:d9:1c:eb:e8:3e: bd:23:a1:59:6f:54:17:22:e3:69:76:56:b0:99:06:60:8e:1a: d2:e7:65:b2:72:78:ea:d6:cf:2f:23:61:e3:f2:71:46:94:06: 8e:e7:73:02 -----BEGIN CERTIFICATE----- MIIFKDCCBBCgAwIBAgIURA8kcbXbKoORvpzM/UdqdyXkxFEwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxNzQ0N0IwMDAwMTEwLwYDVQQFEyhCRUM3MTYzNzlF MTQ4QkE4ODAyMzFCMDU1RTNCMDM0MTU5REI4Njk3MB4XDTI2MDMwMTEzMDg1N1oX DTI2MDMwMjE0MTU1N1owMzExMC8GA1UEAxMoNkRCNzNGQTNGMTVFQjJFNTlBN0RE RDg1MTk3MjY3QkYyNDdDMkY2MDCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAN0GsWAGb2huL5X60x1HO4B3HwjHWN8fVlfGxiDII8UGQSBOEy35MylEGHRn op+gDXz7+YU9wiB8ZvDTSYsOGTTuR6T7W4YzL2m62cFNKg7sxwowQcqNYL00VrJO cqMPYn4aarWVWkjMcMod1WHo2lvGYBBcZyuEaBpfvMK7nKKrtLhT8YEsLFal1K0L YIIgEsYeXy/Ii5RmWpMEeaxAmD4XTzJn0Gwg6O+zXFl7JJt8Au4LfY4hGYhdFM4H JROG7CEVYTkf3+b1p9odbwPQpEmtz9LePJD3n+9AodfV9BK5362SxLs6FEcbTNRN 7cjAp/rTne0FJAll89JGmObufKcCAwEAAaOCAhswggIXMB0GA1UdDgQWBBRttz+j 8V6y5Zp93YUZcme/JHwvYDAfBgNVHSMEGDAWgBS+xxY3nhSLqIAjGwVeOwNBWduG lzAOBgNVHQ8BAf8EBAMCB4AwcgYDVR0fBGswaTBnoGWgY4ZhcnN5bmM6Ly9ycGtp LnN1Yi5hcG5pYy5uZXQvcmVwb3NpdG9yeS9BOTE3NDQ3QjAwMDAvMC9CRUM3MTYz NzlFMTQ4QkE4ODAyMzFCMDU1RTNCMDM0MTU5REI4Njk3LmNybDB+BggrBgEFBQcB AQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVwb3Np dG9yeS9CM0EyNEYyMDFENjYxMUUyOEFDODgzN0M3MkZEMUZGMi92c2NXTjU0VWk2 aUFJeHNGWGpzRFFWbmJocGMuY2VyMH0GCCsGAQUFBwELBHEwbzBtBggrBgEFBQcw C4ZhcnN5bmM6Ly9ycGtpLnN1Yi5hcG5pYy5uZXQvcmVwb3NpdG9yeS9BOTE3NDQ3 QjAwMDAvMC9CRUM3MTYzNzlFMTQ4QkE4ODAyMzFCMDU1RTNCMDM0MTU5REI4Njk3 Lm1mdDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIw EDAGBAIAAQUAMAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG 9w0BAQsFAAOCAQEAKll5HPUl5LPmXz4Ruuyxkeay9gIWevR8CBKl0YTLrHduYBp8 tD9STxGfC8pwoCK8oe3R3d2SrS9QvPkIvA0vv1xCi78BWkUFKLqWYOCCfD/KWOUN Osfn18DqwsoimYHzB6AmEac/58SAr7LK8UARB6zMGEhTuYEOr7UePSX+Q28T0KSG Z/6wMUXCFsgb/n7p2yr6i9UondWsOGa+qyEv7qA6RQnSTMqnrWgMbpHlLGtPwl4G kxTi7PWacBkuCMdr94UEIhXuvHEZcuYFbvPRPEy+t9kc6+g+vSOhWW9UFyLjaXZW sJkGYI4a0udlsnJ46tbPLyNh4/JxRpQGjudzAg== -----END CERTIFICATE-----Generated at Mon Mar 2 03:43:42 2026 by rpki-client