$ rpki-client -vvvf rpki.sub.apnic.net/repository/A917447B0000/0/BEC716379E148BA880231B055E3B034159DB8697.mft File: BEC716379E148BA880231B055E3B034159DB8697.mft (raw, json) Hash identifier: XsTgbFMb2NdDsGuOXRVOk5s2pGctQHrG88U7ekujH+E= Subject key identifier: DC:87:4A:E2:6A:30:CF:43:02:8F:5F:DE:87:67:73:45:24:BB:E7:7C Authority key identifier: BE:C7:16:37:9E:14:8B:A8:80:23:1B:05:5E:3B:03:41:59:DB:86:97 Certificate issuer: /CN=A917447B0000/serialNumber=BEC716379E148BA880231B055E3B034159DB8697 Certificate serial: 4E8318508FDA646FB2BD29B3DFD432621C6FF48E Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/vscWN54Ui6iAIxsFXjsDQVnbhpc.cer Subject info access: rsync://rpki.sub.apnic.net/repository/A917447B0000/0/BEC716379E148BA880231B055E3B034159DB8697.mft Manifest number: 0222 Signing time: Thu 05 Nov 2026 05:25:18 +0000 Manifest this update: Thu 05 Nov 2026 05:20:18 +0000 Manifest next update: Fri 06 Nov 2026 07:46:18 +0000 Files and hashes: 1: 3136302e3138372e3132342e302f32332d3234203d3e20313533333436.roa (hash: 5zHOEOxJKaIhKLayeVIBDopY9PzfhKKvix+Lfzwib5g=) 2: BEC716379E148BA880231B055E3B034159DB8697.crl (hash: F9nzIFMrek5IW9MQ4SU5veh9InK2+bWNMRwc+ubrGP0=) Validation: OK Signature path: rsync://rpki.sub.apnic.net/repository/A917447B0000/0/BEC716379E148BA880231B055E3B034159DB8697.crl rsync://rpki.sub.apnic.net/repository/A917447B0000/0/BEC716379E148BA880231B055E3B034159DB8697.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/vscWN54Ui6iAIxsFXjsDQVnbhpc.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 06 Nov 2026 07:46:18 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4e:83:18:50:8f:da:64:6f:b2:bd:29:b3:df:d4:32:62:1c:6f:f4:8e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A917447B0000, serialNumber=BEC716379E148BA880231B055E3B034159DB8697 Validity Not Before: Nov 5 05:20:18 2026 GMT Not After : Nov 6 07:46:18 2026 GMT Subject: CN=DC874AE26A30CF43028F5FDE8767734524BBE77C Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a3:52:47:bb:fc:9c:4e:8c:58:cd:0e:6a:be:a2: 22:f9:28:bc:7d:24:9a:2f:77:2f:87:6e:49:2e:dd: 22:63:74:1b:7e:ce:b7:b4:1f:2b:96:dd:3f:21:88: 3a:eb:80:b1:1c:ee:79:57:f9:e4:f5:b8:da:b2:c5: 7a:b4:fe:31:68:e8:8a:8a:99:b8:31:db:d5:39:ef: d0:63:38:0f:9c:0c:93:de:f7:ff:5e:ef:3c:07:fc: fc:d2:a2:38:d5:de:b5:16:91:14:ee:e0:1a:27:50: 01:7b:7f:52:cc:83:f6:f4:40:4f:d2:73:14:b8:7d: fd:42:c5:c3:d3:94:02:17:4c:21:ae:cf:a1:d4:bc: 93:73:8e:ea:5e:9e:ff:ff:80:6d:49:c6:88:3d:50: 16:78:cd:17:71:44:2e:8a:23:85:35:45:35:f2:86: b7:d2:6a:ed:37:52:83:d3:50:4f:86:51:24:57:5f: df:c2:39:d7:7a:08:51:e0:03:48:d9:04:05:ff:1c: 6d:c9:04:55:50:1b:1b:1e:c6:74:6c:e7:9c:f2:0b: 4b:45:8b:df:67:50:50:4c:c8:3b:8b:59:6b:40:1f: 8a:5a:22:97:df:73:21:25:5f:d0:e0:d8:33:66:99: 65:ca:c4:0f:29:3c:bb:68:4e:cc:1e:83:50:64:78: 7e:01 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DC:87:4A:E2:6A:30:CF:43:02:8F:5F:DE:87:67:73:45:24:BB:E7:7C X509v3 Authority Key Identifier: keyid:BE:C7:16:37:9E:14:8B:A8:80:23:1B:05:5E:3B:03:41:59:DB:86:97 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.sub.apnic.net/repository/A917447B0000/0/BEC716379E148BA880231B055E3B034159DB8697.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/vscWN54Ui6iAIxsFXjsDQVnbhpc.cer Subject Information Access: Signed Object - URI:rsync://rpki.sub.apnic.net/repository/A917447B0000/0/BEC716379E148BA880231B055E3B034159DB8697.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 62:8f:2c:fb:2c:e3:37:98:59:db:0a:c9:24:0b:29:fa:19:36: 7f:51:72:b8:e7:5e:38:3c:bd:0a:4f:08:7d:77:7a:0f:d9:3c: c3:1b:ff:67:63:50:21:d3:e1:59:f1:94:7b:74:b9:a9:b8:d3: 18:8a:16:71:58:57:fc:da:63:e2:3f:6b:48:c7:bd:11:90:bf: 07:d0:cd:f5:f1:90:2b:49:b4:f0:6b:d4:77:e1:55:aa:18:f9: ee:67:4a:85:83:f1:96:a4:47:44:76:86:88:8a:eb:18:92:51: 9a:88:2b:ae:8c:d4:df:be:65:b7:b2:ea:bf:37:fb:b6:9d:d6: dc:15:34:db:b9:2e:f0:d1:3a:be:37:bf:e7:15:ac:6c:07:57: 5d:f0:cc:93:6e:7b:36:00:eb:8e:c6:fa:c5:2c:ad:bc:93:f9: 22:d4:2e:89:96:2b:1a:e9:96:4e:6a:f3:27:47:15:fd:cc:69: d9:de:6e:3f:36:90:96:2e:bf:64:09:fd:04:9c:17:b6:6b:2d: 91:33:91:a2:1f:9b:67:f2:d9:b0:c6:55:a9:aa:12:5b:b0:10: 90:df:9b:13:4b:56:56:c8:6b:3d:4a:83:7f:1c:b6:be:83:79: ad:4c:3c:87:94:5f:cb:57:88:93:5a:3f:9e:08:39:39:52:f3: e8:17:8a:7d -----BEGIN CERTIFICATE----- MIIFKDCCBBCgAwIBAgIUToMYUI/aZG+yvSmz39QyYhxv9I4wDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxNzQ0N0IwMDAwMTEwLwYDVQQFEyhCRUM3MTYzNzlF MTQ4QkE4ODAyMzFCMDU1RTNCMDM0MTU5REI4Njk3MB4XDTI2MTEwNTA1MjAxOFoX DTI2MTEwNjA3NDYxOFowMzExMC8GA1UEAxMoREM4NzRBRTI2QTMwQ0Y0MzAyOEY1 RkRFODc2NzczNDUyNEJCRTc3QzCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAKNSR7v8nE6MWM0Oar6iIvkovH0kmi93L4duSS7dImN0G37Ot7QfK5bdPyGI OuuAsRzueVf55PW42rLFerT+MWjoioqZuDHb1Tnv0GM4D5wMk973/17vPAf8/NKi ONXetRaRFO7gGidQAXt/UsyD9vRAT9JzFLh9/ULFw9OUAhdMIa7PodS8k3OO6l6e //+AbUnGiD1QFnjNF3FELoojhTVFNfKGt9Jq7TdSg9NQT4ZRJFdf38I513oIUeAD SNkEBf8cbckEVVAbGx7GdGznnPILS0WL32dQUEzIO4tZa0Afiloil99zISVf0ODY M2aZZcrEDyk8u2hOzB6DUGR4fgECAwEAAaOCAhswggIXMB0GA1UdDgQWBBTch0ri ajDPQwKPX96HZ3NFJLvnfDAfBgNVHSMEGDAWgBS+xxY3nhSLqIAjGwVeOwNBWduG lzAOBgNVHQ8BAf8EBAMCB4AwcgYDVR0fBGswaTBnoGWgY4ZhcnN5bmM6Ly9ycGtp LnN1Yi5hcG5pYy5uZXQvcmVwb3NpdG9yeS9BOTE3NDQ3QjAwMDAvMC9CRUM3MTYz NzlFMTQ4QkE4ODAyMzFCMDU1RTNCMDM0MTU5REI4Njk3LmNybDB+BggrBgEFBQcB AQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVwb3Np dG9yeS9CM0EyNEYyMDFENjYxMUUyOEFDODgzN0M3MkZEMUZGMi92c2NXTjU0VWk2 aUFJeHNGWGpzRFFWbmJocGMuY2VyMH0GCCsGAQUFBwELBHEwbzBtBggrBgEFBQcw C4ZhcnN5bmM6Ly9ycGtpLnN1Yi5hcG5pYy5uZXQvcmVwb3NpdG9yeS9BOTE3NDQ3 QjAwMDAvMC9CRUM3MTYzNzlFMTQ4QkE4ODAyMzFCMDU1RTNCMDM0MTU5REI4Njk3 Lm1mdDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIw EDAGBAIAAQUAMAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG 9w0BAQsFAAOCAQEAYo8s+yzjN5hZ2wrJJAsp+hk2f1FyuOdeODy9Ck8IfXd6D9k8 wxv/Z2NQIdPhWfGUe3S5qbjTGIoWcVhX/Npj4j9rSMe9EZC/B9DN9fGQK0m08GvU d+FVqhj57mdKhYPxlqRHRHaGiIrrGJJRmogrrozU375lt7Lqvzf7tp3W3BU027ku 8NE6vje/5xWsbAdXXfDMk257NgDrjsb6xSytvJP5ItQuiZYrGumWTmrzJ0cV/cxp 2d5uPzaQli6/ZAn9BJwXtmstkTORoh+bZ/LZsMZVqaoSW7AQkN+bE0tWVshrPUqD fxy2voN5rUw8h5Rfy1eIk1o/ngg5OVLz6BeKfQ== -----END CERTIFICATE-----Generated at Thu Nov 5 16:35:39 2026 by rpki-client