$ rpki-client -vvf rpki.sub.apnic.net/repository/A917447B0000/0/BEC716379E148BA880231B055E3B034159DB8697.mft File: BEC716379E148BA880231B055E3B034159DB8697.mft (raw, json) Hash identifier: TO+TfLExaTNrcTnQAhxLPPOyKB06+1oMCbs5RQc5RMc= Subject key identifier: 89:D9:2C:E6:A1:4D:6D:FC:22:60:33:5E:66:54:4F:46:21:07:7F:A2 Authority key identifier: BE:C7:16:37:9E:14:8B:A8:80:23:1B:05:5E:3B:03:41:59:DB:86:97 Certificate issuer: /CN=A917447B0000/serialNumber=BEC716379E148BA880231B055E3B034159DB8697 Certificate serial: 7CFADF8AC5E3B2BEBE33DF57132831EABA4D3B05 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/vscWN54Ui6iAIxsFXjsDQVnbhpc.cer Subject info access: rsync://rpki.sub.apnic.net/repository/A917447B0000/0/BEC716379E148BA880231B055E3B034159DB8697.mft Manifest number: 8C Signing time: Tue 04 Nov 2025 20:30:20 +0000 Manifest this update: Tue 04 Nov 2025 20:25:20 +0000 Manifest next update: Wed 05 Nov 2025 21:37:20 +0000 Files and hashes: 1: BEC716379E148BA880231B055E3B034159DB8697.crl (hash: q4nqZxx16l/I/+SKGlifUs8+bjINc30mVvomkTX6N9E=) 2: 3136302e3138372e3132342e302f32332d3234203d3e20313533333436.roa (hash: lt8UIG15p3kUFo1J40t+NeYpM4QkHXYfBc0bEGxMbK0=) Validation: OK Signature path: rsync://rpki.sub.apnic.net/repository/A917447B0000/0/BEC716379E148BA880231B055E3B034159DB8697.crl rsync://rpki.sub.apnic.net/repository/A917447B0000/0/BEC716379E148BA880231B055E3B034159DB8697.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/vscWN54Ui6iAIxsFXjsDQVnbhpc.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 05 Nov 2025 21:37:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7c:fa:df:8a:c5:e3:b2:be:be:33:df:57:13:28:31:ea:ba:4d:3b:05 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A917447B0000, serialNumber=BEC716379E148BA880231B055E3B034159DB8697 Validity Not Before: Nov 4 20:25:20 2025 GMT Not After : Nov 5 21:37:20 2025 GMT Subject: CN=89D92CE6A14D6DFC2260335E66544F4621077FA2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d5:94:f2:d2:08:ca:ff:b9:62:1d:fe:b9:4e:17: 83:c4:bb:69:f4:5c:3a:cd:66:02:22:01:36:8e:73: 7a:b8:e5:07:d3:70:81:0e:e3:7c:01:af:9a:53:4b: f4:11:ed:8e:5b:7d:20:c2:85:db:e2:7d:6a:f6:dd: a3:d8:14:46:c0:da:6a:c4:1d:b1:87:c8:30:77:48: 46:09:3e:38:f0:52:8b:8a:d4:fc:64:96:3f:bf:5d: 03:50:87:5d:86:aa:ac:53:6e:c9:1c:31:39:60:82: 84:33:85:ca:b4:9c:c7:1e:31:82:32:8f:e6:b9:df: 44:16:d4:0e:f6:c0:ec:be:3e:3c:04:80:78:1b:77: dd:06:0a:13:55:de:94:2c:f2:5f:11:fe:ed:6d:3b: 83:1e:75:ab:03:0f:70:7a:5b:f8:3d:ea:a3:47:03: c2:35:a2:fe:72:87:c6:5c:4a:de:7d:9b:28:d9:4d: fb:df:a1:b3:9c:af:16:f3:60:ff:da:c5:c8:23:c1: c6:9b:3a:95:1a:ba:a9:d3:81:85:3a:81:67:79:f3: d1:34:ce:40:f4:d4:cf:be:ff:9d:7f:fc:4c:7a:69: fb:5f:f7:9a:1f:f1:f4:cf:22:8f:94:56:9b:6e:3c: 85:fb:2f:d7:1d:c5:4b:6e:6c:29:01:f7:76:ed:76: e9:a9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 89:D9:2C:E6:A1:4D:6D:FC:22:60:33:5E:66:54:4F:46:21:07:7F:A2 X509v3 Authority Key Identifier: keyid:BE:C7:16:37:9E:14:8B:A8:80:23:1B:05:5E:3B:03:41:59:DB:86:97 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.sub.apnic.net/repository/A917447B0000/0/BEC716379E148BA880231B055E3B034159DB8697.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/vscWN54Ui6iAIxsFXjsDQVnbhpc.cer Subject Information Access: Signed Object - URI:rsync://rpki.sub.apnic.net/repository/A917447B0000/0/BEC716379E148BA880231B055E3B034159DB8697.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 1b:71:b8:3d:84:9d:3b:e7:09:5a:4f:24:d0:49:c9:96:95:28: e3:fd:5f:c3:da:33:42:5a:a7:0f:5f:5b:a4:21:90:06:d7:ee: 8b:3a:f5:44:d0:59:33:32:6c:3e:17:f3:90:b3:e3:d8:01:7e: c8:26:1f:59:17:22:72:e1:ac:45:d3:f7:7f:fd:5c:d4:58:ea: 02:2c:fa:1e:4c:21:1e:e3:78:53:4e:8e:f5:4c:41:50:fb:5d: 7c:07:6e:67:ce:bb:8b:92:be:3f:05:86:5b:d5:e5:a8:b8:83: fb:60:cd:47:10:85:7d:93:4d:90:92:fe:06:91:2e:10:05:b6: 27:e8:c2:c3:9d:e9:bb:72:4b:ee:ad:ee:bd:f1:ae:60:57:13: 22:3b:64:94:32:4f:8c:eb:50:79:00:03:6c:bf:01:56:a7:48: b2:c7:6e:23:29:8a:5b:72:21:11:9d:3b:8e:01:68:6f:a8:19: 9d:6e:e3:75:ba:d0:d1:9d:1a:f1:b6:04:15:5d:6e:21:5f:05: 08:00:4b:6a:d3:7e:8e:cc:25:61:6c:2a:56:43:77:74:40:75: d8:36:68:59:c6:4c:b3:9c:5a:a4:a2:e6:e3:3d:4b:41:33:14: f9:d9:fd:5d:97:50:da:c7:3a:76:71:fc:b7:ed:fe:9f:d4:c9: 3f:2e:0a:bc -----BEGIN CERTIFICATE----- MIIFKDCCBBCgAwIBAgIUfPrfisXjsr6+M99XEygx6rpNOwUwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxNzQ0N0IwMDAwMTEwLwYDVQQFEyhCRUM3MTYzNzlF MTQ4QkE4ODAyMzFCMDU1RTNCMDM0MTU5REI4Njk3MB4XDTI1MTEwNDIwMjUyMFoX DTI1MTEwNTIxMzcyMFowMzExMC8GA1UEAxMoODlEOTJDRTZBMTRENkRGQzIyNjAz MzVFNjY1NDRGNDYyMTA3N0ZBMjCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBANWU8tIIyv+5Yh3+uU4Xg8S7afRcOs1mAiIBNo5zerjlB9NwgQ7jfAGvmlNL 9BHtjlt9IMKF2+J9avbdo9gURsDaasQdsYfIMHdIRgk+OPBSi4rU/GSWP79dA1CH XYaqrFNuyRwxOWCChDOFyrScxx4xgjKP5rnfRBbUDvbA7L4+PASAeBt33QYKE1Xe lCzyXxH+7W07gx51qwMPcHpb+D3qo0cDwjWi/nKHxlxK3n2bKNlN+9+hs5yvFvNg /9rFyCPBxps6lRq6qdOBhTqBZ3nz0TTOQPTUz77/nX/8THpp+1/3mh/x9M8ij5RW m248hfsv1x3FS25sKQH3du126akCAwEAAaOCAhswggIXMB0GA1UdDgQWBBSJ2Szm oU1t/CJgM15mVE9GIQd/ojAfBgNVHSMEGDAWgBS+xxY3nhSLqIAjGwVeOwNBWduG lzAOBgNVHQ8BAf8EBAMCB4AwcgYDVR0fBGswaTBnoGWgY4ZhcnN5bmM6Ly9ycGtp LnN1Yi5hcG5pYy5uZXQvcmVwb3NpdG9yeS9BOTE3NDQ3QjAwMDAvMC9CRUM3MTYz NzlFMTQ4QkE4ODAyMzFCMDU1RTNCMDM0MTU5REI4Njk3LmNybDB+BggrBgEFBQcB AQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVwb3Np dG9yeS9CM0EyNEYyMDFENjYxMUUyOEFDODgzN0M3MkZEMUZGMi92c2NXTjU0VWk2 aUFJeHNGWGpzRFFWbmJocGMuY2VyMH0GCCsGAQUFBwELBHEwbzBtBggrBgEFBQcw C4ZhcnN5bmM6Ly9ycGtpLnN1Yi5hcG5pYy5uZXQvcmVwb3NpdG9yeS9BOTE3NDQ3 QjAwMDAvMC9CRUM3MTYzNzlFMTQ4QkE4ODAyMzFCMDU1RTNCMDM0MTU5REI4Njk3 Lm1mdDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIw EDAGBAIAAQUAMAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG 9w0BAQsFAAOCAQEAG3G4PYSdO+cJWk8k0EnJlpUo4/1fw9ozQlqnD19bpCGQBtfu izr1RNBZMzJsPhfzkLPj2AF+yCYfWRcicuGsRdP3f/1c1FjqAiz6HkwhHuN4U06O 9UxBUPtdfAduZ867i5K+PwWGW9XlqLiD+2DNRxCFfZNNkJL+BpEuEAW2J+jCw53p u3JL7q3uvfGuYFcTIjtklDJPjOtQeQADbL8BVqdIssduIymKW3IhEZ07jgFob6gZ nW7jdbrQ0Z0a8bYEFV1uIV8FCABLatN+jswlYWwqVkN3dEB12DZoWcZMs5xapKLm 4z1LQTMU+dn9XZdQ2sc6dnH8t+3+n9TJPy4KvA== -----END CERTIFICATE-----Generated at Wed Nov 5 12:24:33 2025 by rpki-client