
$ rpki-client -vvf rpki.sub.apnic.net/repository/A917447B0000/0/BEC716379E148BA880231B055E3B034159DB8697.mft
File: BEC716379E148BA880231B055E3B034159DB8697.mft (raw, json)
Hash identifier: HNDbVPcoBj3dXmjd5w64ZBlJNYXSV8ZF+t6lCxfGjbA=
Subject key identifier: 51:DF:CB:DC:C8:F4:6F:09:B1:60:66:A3:AA:DE:7D:C2:96:09:68:F2
Authority key identifier: BE:C7:16:37:9E:14:8B:A8:80:23:1B:05:5E:3B:03:41:59:DB:86:97
Certificate issuer: /CN=A917447B0000/serialNumber=BEC716379E148BA880231B055E3B034159DB8697
Certificate serial: 6BF4F8501A8B3D7CCA4B81FC598EA6FA773A7212
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/vscWN54Ui6iAIxsFXjsDQVnbhpc.cer
Subject info access: rsync://rpki.sub.apnic.net/repository/A917447B0000/0/BEC716379E148BA880231B055E3B034159DB8697.mft
Manifest number: 0192
Signing time: Tue 28 Jul 2026 22:12:13 +0000
Manifest this update: Tue 28 Jul 2026 22:07:13 +0000
Manifest next update: Thu 30 Jul 2026 01:01:13 +0000
Files and hashes: 1: 3136302e3138372e3132352e302f32342d3234203d3e2039383333.roa (hash: X2xp6uKIsNAWVyJ6WAzD1qj3ichPSAAnt4LFLuMhakA=)
2: 3136302e3138372e3132342e302f32342d3234203d3e20313533333436.roa (hash: NAbzcXI7CIRLEYaSeuu8ld26GBq5ENO+YouoZ+7T5Ys=)
3: BEC716379E148BA880231B055E3B034159DB8697.crl (hash: /oQ5KrRJNgQpgDiOXSGussZMmPUdejJuEuiALfCLNs8=)
Validation: OK
Signature path: rsync://rpki.sub.apnic.net/repository/A917447B0000/0/BEC716379E148BA880231B055E3B034159DB8697.crl
rsync://rpki.sub.apnic.net/repository/A917447B0000/0/BEC716379E148BA880231B055E3B034159DB8697.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/vscWN54Ui6iAIxsFXjsDQVnbhpc.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 30 Jul 2026 01:01:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
6b:f4:f8:50:1a:8b:3d:7c:ca:4b:81:fc:59:8e:a6:fa:77:3a:72:12
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A917447B0000, serialNumber=BEC716379E148BA880231B055E3B034159DB8697
Validity
Not Before: Jul 28 22:07:13 2026 GMT
Not After : Jul 30 01:01:13 2026 GMT
Subject: CN=51DFCBDCC8F46F09B16066A3AADE7DC2960968F2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:a0:d2:d9:3a:46:75:fa:56:d7:d7:ba:58:5e:
fc:c8:21:f0:95:f8:36:06:c7:3d:ab:09:0d:bc:5e:
cd:63:0e:bf:2a:45:00:b3:28:7c:ec:e1:cf:24:72:
43:de:66:9d:2b:3d:8d:be:06:89:98:6a:0e:c8:71:
0d:39:66:30:1e:a8:c5:7b:91:c8:a7:c5:f1:ed:08:
55:41:cc:95:a9:a6:cd:6e:8e:c7:d1:29:ea:51:4b:
84:65:f5:4d:dd:28:1e:dd:e9:e5:c8:27:b1:d7:5e:
cf:8a:7e:b7:e4:40:26:18:3c:28:e6:b2:89:f8:49:
48:e6:65:63:49:56:b1:02:bd:59:95:a9:fd:ef:2e:
f0:d1:17:34:e8:ff:f1:f5:09:9e:e5:11:c9:96:f9:
a3:e0:49:bd:1e:bd:91:22:7c:11:bd:14:b6:8c:b1:
8b:6c:23:2b:d0:71:75:d9:0a:f3:b5:ea:56:30:5e:
c0:7f:e7:ca:e7:e0:33:d9:63:73:ea:d8:55:39:ad:
40:1d:34:d4:a7:63:6b:db:76:2d:e5:39:26:96:19:
f9:06:cd:f4:50:57:0a:b2:16:1d:91:3a:92:81:71:
36:23:b3:a5:fe:e0:48:b4:35:83:17:69:92:ce:22:
f6:94:9f:4d:28:5f:4a:3e:5c:f6:da:b0:d7:26:37:
ff:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
51:DF:CB:DC:C8:F4:6F:09:B1:60:66:A3:AA:DE:7D:C2:96:09:68:F2
X509v3 Authority Key Identifier:
keyid:BE:C7:16:37:9E:14:8B:A8:80:23:1B:05:5E:3B:03:41:59:DB:86:97
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.sub.apnic.net/repository/A917447B0000/0/BEC716379E148BA880231B055E3B034159DB8697.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/vscWN54Ui6iAIxsFXjsDQVnbhpc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.sub.apnic.net/repository/A917447B0000/0/BEC716379E148BA880231B055E3B034159DB8697.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b5:fc:cd:68:41:1a:15:0b:6d:8e:1a:2a:03:a9:59:bb:10:02:
56:c4:b9:13:54:27:f5:f0:a8:c6:6d:84:d0:79:41:19:5a:a1:
10:e0:94:b0:bd:ed:6d:e2:ea:03:52:0e:aa:9c:cc:db:21:05:
92:5f:ce:b5:7e:5a:77:29:a8:b5:8e:4e:0d:77:41:b3:21:bb:
2b:6f:9d:b5:e8:b6:11:39:f5:5d:8e:d4:01:96:d1:3b:d9:41:
5c:2d:fd:8d:f2:30:83:db:af:5c:63:c9:45:0a:dd:0a:92:95:
55:fb:74:b7:b7:d4:31:ee:b7:bb:09:e9:8d:af:37:bf:83:66:
b0:cd:a3:c9:75:bf:b8:60:28:6d:76:86:87:a8:c8:a8:01:d8:
aa:68:10:85:1f:29:0f:bb:26:30:1e:f0:fd:a5:19:52:64:7d:
52:7e:5c:bc:43:29:7e:01:cb:63:64:3a:41:6e:13:52:09:40:
73:3b:2a:9b:ba:9d:95:76:ed:4b:fa:28:b0:22:60:60:95:d0:
99:26:aa:97:09:fc:52:9f:ca:81:69:d0:1f:58:f1:b5:b9:b0:
fd:70:4a:8e:13:7e:94:3f:38:70:80:0d:c3:ad:f7:76:23:7a:
d2:c4:d4:a9:ec:72:73:fc:3b:14:00:2d:06:99:25:42:da:2f:
13:29:6f:1f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 05:35:14 2026 by rpki-client