$ rpki-client -vvf rpki.sub.apnic.net/repository/A917447B0000/0/BEC716379E148BA880231B055E3B034159DB8697.mft File: BEC716379E148BA880231B055E3B034159DB8697.mft (raw, json) Hash identifier: lKs0Zz4/SzgnXOMq70RIExF+DL58X5icnTxjsryohIA= Subject key identifier: E5:53:0C:85:95:46:B2:E3:CA:0F:61:C3:FD:E6:3B:99:95:57:B2:D0 Authority key identifier: BE:C7:16:37:9E:14:8B:A8:80:23:1B:05:5E:3B:03:41:59:DB:86:97 Certificate issuer: /CN=A917447B0000/serialNumber=BEC716379E148BA880231B055E3B034159DB8697 Certificate serial: 5D6FF36C8B3207ADEA07E2B57F02ADA2A67549FE Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/vscWN54Ui6iAIxsFXjsDQVnbhpc.cer Subject info access: rsync://rpki.sub.apnic.net/repository/A917447B0000/0/BEC716379E148BA880231B055E3B034159DB8697.mft Manifest number: 05 Signing time: Sun 20 Jul 2025 00:03:00 +0000 Manifest this update: Sat 19 Jul 2025 23:58:00 +0000 Manifest next update: Mon 21 Jul 2025 03:21:00 +0000 Files and hashes: 1: 3136302e3138372e3132342e302f32342d3234203d3e20313533333436.roa (hash: cbMDbQFybOhC0G9iTs0qjEoMRd0fCOiZgnIZV0fHXTE=) 2: BEC716379E148BA880231B055E3B034159DB8697.crl (hash: K5Zi4FF3U70WJXiDJ2OSi7nuiR7X1Hsguxv0KOqOhWk=) Validation: OK Signature path: rsync://rpki.sub.apnic.net/repository/A917447B0000/0/BEC716379E148BA880231B055E3B034159DB8697.crl rsync://rpki.sub.apnic.net/repository/A917447B0000/0/BEC716379E148BA880231B055E3B034159DB8697.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/vscWN54Ui6iAIxsFXjsDQVnbhpc.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 21 Jul 2025 03:21:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5d:6f:f3:6c:8b:32:07:ad:ea:07:e2:b5:7f:02:ad:a2:a6:75:49:fe Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A917447B0000, serialNumber=BEC716379E148BA880231B055E3B034159DB8697 Validity Not Before: Jul 19 23:58:00 2025 GMT Not After : Jul 21 03:21:00 2025 GMT Subject: CN=E5530C859546B2E3CA0F61C3FDE63B999557B2D0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:16:28:3a:d1:c7:15:8b:6b:59:38:59:4f:77: ca:2f:b4:70:20:37:eb:4d:78:d6:3a:d7:31:5c:4c: 12:d4:43:92:1a:21:25:70:af:2d:4c:28:7c:e5:9d: 35:21:49:d5:7e:24:0c:44:7a:6c:ac:f5:53:80:1f: 13:a6:27:b8:83:a3:24:63:9c:8f:eb:ab:da:45:85: cb:3b:c0:f1:ce:28:35:f2:65:6a:2f:1b:65:26:86: 86:56:5b:26:d7:2c:d0:5d:31:13:1b:61:6c:f5:cd: ae:33:f1:9b:83:76:50:bd:85:1a:5c:8b:ba:af:3a: c4:16:f6:e6:26:7c:c8:93:89:09:2a:c5:96:f7:e4: ec:f7:ee:29:87:87:b0:9d:de:33:f7:a4:7e:42:2a: ef:04:bf:ad:8d:1c:72:81:18:d5:bd:f6:9a:32:9e: a2:8e:0f:e9:3f:9e:b6:1c:bf:92:1b:d4:aa:52:10: 74:98:69:4a:44:65:57:39:f5:ad:33:98:4d:00:ff: 89:da:13:56:9f:6d:63:38:c8:28:37:99:b8:50:66: 75:18:d7:a7:ec:b9:0e:2e:d9:f2:81:51:8c:93:6d: 89:7b:15:2e:b2:8b:78:da:67:df:44:fe:a5:48:75: 80:b6:79:a1:4d:12:1f:cd:65:09:74:1b:41:8f:91: ba:c1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E5:53:0C:85:95:46:B2:E3:CA:0F:61:C3:FD:E6:3B:99:95:57:B2:D0 X509v3 Authority Key Identifier: keyid:BE:C7:16:37:9E:14:8B:A8:80:23:1B:05:5E:3B:03:41:59:DB:86:97 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.sub.apnic.net/repository/A917447B0000/0/BEC716379E148BA880231B055E3B034159DB8697.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/vscWN54Ui6iAIxsFXjsDQVnbhpc.cer Subject Information Access: Signed Object - URI:rsync://rpki.sub.apnic.net/repository/A917447B0000/0/BEC716379E148BA880231B055E3B034159DB8697.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 25:17:42:45:65:64:73:42:1e:87:38:26:d9:e1:99:09:67:e6: 73:1c:40:2d:e2:ee:a5:54:f7:71:b5:4b:98:bc:65:56:8b:ba: ef:b2:7f:1b:e4:43:73:c9:c3:40:03:38:78:ea:f0:30:ac:45: 2d:d2:af:68:80:e2:2a:9d:c1:b4:40:22:67:c3:14:5c:55:9e: c0:fd:e9:99:3d:00:64:d4:76:d3:7c:48:a4:e8:c7:7e:2d:ce: c9:14:88:f1:07:1d:39:07:21:9b:1f:ae:89:5e:c1:1a:b9:3a: 04:99:ca:a9:aa:ab:88:a2:66:df:fc:0f:c4:25:fd:e2:5e:66: df:2f:a5:c6:8b:c6:ba:d3:ae:ac:ae:09:6e:11:16:79:20:d7: e6:96:f2:d0:ca:00:bb:53:7a:91:49:17:67:fe:2a:4e:0c:26: 6a:3d:f8:17:10:c5:4b:11:a8:50:18:a1:51:d4:5c:c6:dc:e9: 3d:c7:77:a5:33:38:1d:79:3c:a9:bf:40:3e:aa:e2:45:69:52: 13:d6:63:c7:7a:61:7c:62:d3:d3:02:89:c6:f4:2d:a5:54:f2: 6b:6a:af:17:ed:7d:2e:98:34:48:6a:fe:a7:69:38:9f:00:de: 43:b3:34:e9:48:8b:bf:84:40:86:06:51:0d:4d:cf:13:57:07: b7:91:53:ec -----BEGIN CERTIFICATE----- MIIFKDCCBBCgAwIBAgIUXW/zbIsyB63qB+K1fwKtoqZ1Sf4wDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxNzQ0N0IwMDAwMTEwLwYDVQQFEyhCRUM3MTYzNzlF MTQ4QkE4ODAyMzFCMDU1RTNCMDM0MTU5REI4Njk3MB4XDTI1MDcxOTIzNTgwMFoX DTI1MDcyMTAzMjEwMFowMzExMC8GA1UEAxMoRTU1MzBDODU5NTQ2QjJFM0NBMEY2 MUMzRkRFNjNCOTk5NTU3QjJEMDCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBALkWKDrRxxWLa1k4WU93yi+0cCA360141jrXMVxMEtRDkhohJXCvLUwofOWd NSFJ1X4kDER6bKz1U4AfE6YnuIOjJGOcj+ur2kWFyzvA8c4oNfJlai8bZSaGhlZb Jtcs0F0xExthbPXNrjPxm4N2UL2FGlyLuq86xBb25iZ8yJOJCSrFlvfk7PfuKYeH sJ3eM/ekfkIq7wS/rY0ccoEY1b32mjKeoo4P6T+ethy/khvUqlIQdJhpSkRlVzn1 rTOYTQD/idoTVp9tYzjIKDeZuFBmdRjXp+y5Di7Z8oFRjJNtiXsVLrKLeNpn30T+ pUh1gLZ5oU0SH81lCXQbQY+RusECAwEAAaOCAhswggIXMB0GA1UdDgQWBBTlUwyF lUay48oPYcP95juZlVey0DAfBgNVHSMEGDAWgBS+xxY3nhSLqIAjGwVeOwNBWduG lzAOBgNVHQ8BAf8EBAMCB4AwcgYDVR0fBGswaTBnoGWgY4ZhcnN5bmM6Ly9ycGtp LnN1Yi5hcG5pYy5uZXQvcmVwb3NpdG9yeS9BOTE3NDQ3QjAwMDAvMC9CRUM3MTYz NzlFMTQ4QkE4ODAyMzFCMDU1RTNCMDM0MTU5REI4Njk3LmNybDB+BggrBgEFBQcB AQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVwb3Np dG9yeS9CM0EyNEYyMDFENjYxMUUyOEFDODgzN0M3MkZEMUZGMi92c2NXTjU0VWk2 aUFJeHNGWGpzRFFWbmJocGMuY2VyMH0GCCsGAQUFBwELBHEwbzBtBggrBgEFBQcw C4ZhcnN5bmM6Ly9ycGtpLnN1Yi5hcG5pYy5uZXQvcmVwb3NpdG9yeS9BOTE3NDQ3 QjAwMDAvMC9CRUM3MTYzNzlFMTQ4QkE4ODAyMzFCMDU1RTNCMDM0MTU5REI4Njk3 Lm1mdDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIw EDAGBAIAAQUAMAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG 9w0BAQsFAAOCAQEAJRdCRWVkc0Iehzgm2eGZCWfmcxxALeLupVT3cbVLmLxlVou6 77J/G+RDc8nDQAM4eOrwMKxFLdKvaIDiKp3BtEAiZ8MUXFWewP3pmT0AZNR203xI pOjHfi3OyRSI8QcdOQchmx+uiV7BGrk6BJnKqaqriKJm3/wPxCX94l5m3y+lxovG utOurK4JbhEWeSDX5pby0MoAu1N6kUkXZ/4qTgwmaj34FxDFSxGoUBihUdRcxtzp Pcd3pTM4HXk8qb9APqriRWlSE9Zjx3phfGLT0wKJxvQtpVTya2qvF+19Lpg0SGr+ p2k4nwDeQ7M06UiLv4RAhgZRDU3PE1cHt5FT7A== -----END CERTIFICATE-----Generated at Sun Jul 20 18:49:40 2025 by rpki-client