$ rpki-client -vvf rpki.sub.apnic.net/repository/A917447B0000/0/BEC716379E148BA880231B055E3B034159DB8697.mft File: BEC716379E148BA880231B055E3B034159DB8697.mft (raw, json) Hash identifier: f9simBLNYz1629XTkiXJtiGEJcniwrZL59trAINNqO8= Subject key identifier: 8A:98:75:88:E3:81:54:7E:EC:A0:FE:AE:52:B6:F8:AF:1D:96:08:62 Authority key identifier: BE:C7:16:37:9E:14:8B:A8:80:23:1B:05:5E:3B:03:41:59:DB:86:97 Certificate issuer: /CN=A917447B0000/serialNumber=BEC716379E148BA880231B055E3B034159DB8697 Certificate serial: 15DF4CE0FE0E5BFA258096AEB879D5293AC00288 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/vscWN54Ui6iAIxsFXjsDQVnbhpc.cer Subject info access: rsync://rpki.sub.apnic.net/repository/A917447B0000/0/BEC716379E148BA880231B055E3B034159DB8697.mft Manifest number: 0152 Signing time: Tue 02 Jun 2026 18:09:52 +0000 Manifest this update: Tue 02 Jun 2026 18:04:52 +0000 Manifest next update: Wed 03 Jun 2026 19:40:52 +0000 Files and hashes: 1: 3136302e3138372e3132352e302f32342d3234203d3e2039383333.roa (hash: X2xp6uKIsNAWVyJ6WAzD1qj3ichPSAAnt4LFLuMhakA=) 2: 3136302e3138372e3132342e302f32342d3234203d3e20313533333436.roa (hash: NAbzcXI7CIRLEYaSeuu8ld26GBq5ENO+YouoZ+7T5Ys=) 3: BEC716379E148BA880231B055E3B034159DB8697.crl (hash: e/UXhwxbJxKvmKlZ+6VEmI7c7w3/m75TR6t5WfV/UmM=) Validation: OK Signature path: rsync://rpki.sub.apnic.net/repository/A917447B0000/0/BEC716379E148BA880231B055E3B034159DB8697.crl rsync://rpki.sub.apnic.net/repository/A917447B0000/0/BEC716379E148BA880231B055E3B034159DB8697.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/vscWN54Ui6iAIxsFXjsDQVnbhpc.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 03 Jun 2026 19:40:52 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 15:df:4c:e0:fe:0e:5b:fa:25:80:96:ae:b8:79:d5:29:3a:c0:02:88 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A917447B0000, serialNumber=BEC716379E148BA880231B055E3B034159DB8697 Validity Not Before: Jun 2 18:04:52 2026 GMT Not After : Jun 3 19:40:52 2026 GMT Subject: CN=8A987588E381547EECA0FEAE52B6F8AF1D960862 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dd:aa:a7:c4:ef:f7:eb:a4:ef:a8:15:a4:e6:2e: e8:a6:cc:1d:5f:fa:1b:b9:86:a4:c6:9a:9a:9f:40: 27:66:a6:5a:39:d2:b9:32:72:57:61:85:0c:dc:fc: c4:42:d5:5b:1b:09:4b:61:54:b6:97:5e:9e:76:6a: c5:8b:96:d4:6b:e7:b2:ad:3f:6e:a1:c3:e7:8b:0e: f8:ee:e5:85:e1:82:df:d3:01:0b:96:2c:cc:7e:02: db:f2:f5:59:14:cd:e9:80:7b:b7:ef:14:cc:63:3d: c9:02:6c:03:af:11:c8:5d:6d:4e:eb:02:83:9a:4b: 3c:ba:6c:15:d8:b4:48:01:9d:5a:7a:2f:77:d8:88: 22:30:72:45:93:44:78:13:3a:65:6e:16:ed:ef:d7: 6c:d2:b0:dd:9d:99:dc:dd:07:b9:bf:13:24:b8:4c: 51:dc:f5:08:20:c3:8f:c3:3d:df:9d:ba:1b:95:fd: 04:4d:29:22:9d:38:9e:35:85:48:a8:88:ac:1f:e6: 9f:c4:ad:df:bd:e1:e8:7b:55:53:4b:47:19:f7:1e: fb:9b:92:76:c4:de:ab:dc:23:0b:18:1e:52:e6:55: a3:db:ed:9e:43:a8:d1:17:64:6f:32:ef:ae:ff:1f: cf:9d:a2:e6:67:08:6b:1e:0f:f6:cd:3e:06:25:39: 98:f7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8A:98:75:88:E3:81:54:7E:EC:A0:FE:AE:52:B6:F8:AF:1D:96:08:62 X509v3 Authority Key Identifier: keyid:BE:C7:16:37:9E:14:8B:A8:80:23:1B:05:5E:3B:03:41:59:DB:86:97 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.sub.apnic.net/repository/A917447B0000/0/BEC716379E148BA880231B055E3B034159DB8697.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/vscWN54Ui6iAIxsFXjsDQVnbhpc.cer Subject Information Access: Signed Object - URI:rsync://rpki.sub.apnic.net/repository/A917447B0000/0/BEC716379E148BA880231B055E3B034159DB8697.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 32:89:2d:b2:eb:1f:79:bb:34:41:33:29:39:9b:d4:1c:46:c8: 5f:15:75:03:fe:22:4e:0d:f9:dd:0f:57:0e:03:a9:bf:7d:93: 03:a4:81:52:62:6b:58:fd:a8:89:28:e7:6b:14:e6:e0:3d:79: 0d:1e:79:0a:8e:06:5c:fa:69:07:ab:84:f5:43:74:6e:46:57: 81:22:be:cd:56:e3:ed:1c:74:87:6c:b1:67:e1:ca:11:a3:4a: 13:99:5f:b7:a4:fa:03:13:6b:97:89:ef:a1:42:c2:89:5a:d8: ed:4f:f5:d2:2b:60:c3:fd:3b:e0:8b:e0:04:4a:b4:3a:55:42: 81:1a:8b:bd:53:67:0d:84:63:36:e7:86:02:5c:48:bd:e0:73: 87:e2:8f:6c:8c:01:ea:d2:2b:01:b8:35:36:65:29:6c:fc:4c: b0:8c:89:62:fe:29:3e:28:fb:4d:9d:73:c2:29:ac:64:43:a2: 28:e0:a3:ae:37:e3:f2:90:63:f7:dd:f5:7f:17:d2:db:df:4c: e2:5b:96:42:9e:e7:0d:a2:50:f6:8d:43:27:fa:ba:2c:fc:45: 1d:bf:9e:da:e3:ae:1d:9c:1a:b1:d4:b9:42:2e:ab:ea:e2:3e: 6c:36:2e:0c:16:9c:81:09:b8:24:28:77:12:93:a2:34:67:bf: 7a:27:11:af -----BEGIN CERTIFICATE----- MIIFKDCCBBCgAwIBAgIUFd9M4P4OW/olgJauuHnVKTrAAogwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxNzQ0N0IwMDAwMTEwLwYDVQQFEyhCRUM3MTYzNzlF MTQ4QkE4ODAyMzFCMDU1RTNCMDM0MTU5REI4Njk3MB4XDTI2MDYwMjE4MDQ1MloX DTI2MDYwMzE5NDA1MlowMzExMC8GA1UEAxMoOEE5ODc1ODhFMzgxNTQ3RUVDQTBG RUFFNTJCNkY4QUYxRDk2MDg2MjCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAN2qp8Tv9+uk76gVpOYu6KbMHV/6G7mGpMaamp9AJ2amWjnSuTJyV2GFDNz8 xELVWxsJS2FUtpdennZqxYuW1Gvnsq0/bqHD54sO+O7lheGC39MBC5YszH4C2/L1 WRTN6YB7t+8UzGM9yQJsA68RyF1tTusCg5pLPLpsFdi0SAGdWnovd9iIIjByRZNE eBM6ZW4W7e/XbNKw3Z2Z3N0Hub8TJLhMUdz1CCDDj8M93526G5X9BE0pIp04njWF SKiIrB/mn8St373h6HtVU0tHGfce+5uSdsTeq9wjCxgeUuZVo9vtnkOo0RdkbzLv rv8fz52i5mcIax4P9s0+BiU5mPcCAwEAAaOCAhswggIXMB0GA1UdDgQWBBSKmHWI 44FUfuyg/q5StvivHZYIYjAfBgNVHSMEGDAWgBS+xxY3nhSLqIAjGwVeOwNBWduG lzAOBgNVHQ8BAf8EBAMCB4AwcgYDVR0fBGswaTBnoGWgY4ZhcnN5bmM6Ly9ycGtp LnN1Yi5hcG5pYy5uZXQvcmVwb3NpdG9yeS9BOTE3NDQ3QjAwMDAvMC9CRUM3MTYz NzlFMTQ4QkE4ODAyMzFCMDU1RTNCMDM0MTU5REI4Njk3LmNybDB+BggrBgEFBQcB AQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVwb3Np dG9yeS9CM0EyNEYyMDFENjYxMUUyOEFDODgzN0M3MkZEMUZGMi92c2NXTjU0VWk2 aUFJeHNGWGpzRFFWbmJocGMuY2VyMH0GCCsGAQUFBwELBHEwbzBtBggrBgEFBQcw C4ZhcnN5bmM6Ly9ycGtpLnN1Yi5hcG5pYy5uZXQvcmVwb3NpdG9yeS9BOTE3NDQ3 QjAwMDAvMC9CRUM3MTYzNzlFMTQ4QkE4ODAyMzFCMDU1RTNCMDM0MTU5REI4Njk3 Lm1mdDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIw EDAGBAIAAQUAMAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG 9w0BAQsFAAOCAQEAMoktsusfebs0QTMpOZvUHEbIXxV1A/4iTg353Q9XDgOpv32T A6SBUmJrWP2oiSjnaxTm4D15DR55Co4GXPppB6uE9UN0bkZXgSK+zVbj7Rx0h2yx Z+HKEaNKE5lft6T6AxNrl4nvoULCiVrY7U/10itgw/074IvgBEq0OlVCgRqLvVNn DYRjNueGAlxIveBzh+KPbIwB6tIrAbg1NmUpbPxMsIyJYv4pPij7TZ1zwimsZEOi KOCjrjfj8pBj9931fxfS299M4luWQp7nDaJQ9o1DJ/q6LPxFHb+e2uOuHZwasdS5 Qi6r6uI+bDYuDBacgQm4JCh3EpOiNGe/eicRrw== -----END CERTIFICATE-----Generated at Tue Jun 2 21:18:48 2026 by rpki-client