$ rpki-client -vvf rpki.sub.apnic.net/repository/A91905300000/9/33F4082166A89FFF6F326AE09B44BFBEF1629FEB.mft File: 33F4082166A89FFF6F326AE09B44BFBEF1629FEB.mft (raw, json) Hash identifier: pgDHX85dbiVYghevXkLcU2LgyYwkCWKB7PMW7QiYcTM= Subject key identifier: 24:71:DB:31:32:5B:33:D8:CC:81:F9:14:2C:E0:97:66:B0:F0:72:34 Authority key identifier: 33:F4:08:21:66:A8:9F:FF:6F:32:6A:E0:9B:44:BF:BE:F1:62:9F:EB Certificate issuer: /CN=A919B0BE0000/serialNumber=33F4082166A89FFF6F326AE09B44BFBEF1629FEB Certificate serial: 3C00F384F8A07763A4203A96D8515141D3E28F78 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/M_QIIWaon_9vMmrgm0S_vvFin-s.cer Subject info access: rsync://rpki.sub.apnic.net/repository/A91905300000/9/33F4082166A89FFF6F326AE09B44BFBEF1629FEB.mft Manifest number: E2 Signing time: Sun 01 Mar 2026 10:55:24 +0000 Manifest this update: Sun 01 Mar 2026 10:50:24 +0000 Manifest next update: Mon 02 Mar 2026 13:45:24 +0000 Files and hashes: 1: 3230332e35372e32332e302f32342d3234203d3e2039393133.roa (hash: 9vPoyR5h4XW7VzKPshTgyqTHm+x238aD7PNshnOSJtk=) 2: 33F4082166A89FFF6F326AE09B44BFBEF1629FEB.crl (hash: uz/QslePMdVF/pVVtyZFRCZb67V2lMklx4mNDRPvaFw=) 3: 3230332e312e36392e302f32342d3234203d3e2039393133.roa (hash: HYKqNuiBE/DUFFDQyKmuMZ6wkcvhITNaHWFYsHIuJlA=) 4: 3130332e3233332e3230382e302f32322d3234203d3e2039393133.roa (hash: gjG1OZMW5faujAfknl/AsEqIEMo1X4J8rMD0eZTWBDg=) 5: 3230332e312e36382e302f32342d3234203d3e2039393133.roa (hash: sf6xpmLBwwFxYc5zLhbA2o5zERE4ANPwwQpcoFqWw9Y=) 6: 3230332e302e38302e302f32342d3234203d3e2039393133.roa (hash: 5CEE0bOW0MgpOlLO8lN9+nz4tABxvncSgkR6y2kvmq4=) 7: 3230332e33312e3131312e302f32342d3234203d3e2039393133.roa (hash: YlAvV8ZZuoYsPDhwbCWgqa9GkyYRu/NKCURMzPqa7q4=) 8: 3230332e33312e3131302e302f32342d3234203d3e2039393133.roa (hash: Th3RG2y4VUTKhfMzlUUSBpKBps2IwB4thNo9+TULNBQ=) 9: 3230322e31342e3134382e302f32342d3234203d3e2039393133.roa (hash: jEqn8jELxuDQMwvht+ON+P9QmjrSbE+0mwwGAYlItGo=) Validation: OK Signature path: rsync://rpki.sub.apnic.net/repository/A91905300000/9/33F4082166A89FFF6F326AE09B44BFBEF1629FEB.crl rsync://rpki.sub.apnic.net/repository/A91905300000/9/33F4082166A89FFF6F326AE09B44BFBEF1629FEB.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/M_QIIWaon_9vMmrgm0S_vvFin-s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 02 Mar 2026 13:45:24 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3c:00:f3:84:f8:a0:77:63:a4:20:3a:96:d8:51:51:41:d3:e2:8f:78 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A919B0BE0000, serialNumber=33F4082166A89FFF6F326AE09B44BFBEF1629FEB Validity Not Before: Mar 1 10:50:24 2026 GMT Not After : Mar 2 13:45:24 2026 GMT Subject: CN=2471DB31325B33D8CC81F9142CE09766B0F07234 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ec:0d:c8:d2:0b:29:3a:eb:68:6b:83:76:b7:41: 6b:c9:79:6a:e3:1f:c2:d3:4d:be:26:a8:38:15:f6: cb:9e:f1:a0:96:bf:e1:e3:d2:73:29:a1:ac:34:29: a6:08:10:9b:ae:5d:21:4c:b1:b7:1b:30:56:54:d0: 11:33:5d:7b:1a:45:33:a6:85:e3:c3:77:00:48:97: 8f:d5:11:18:7b:fe:1d:3b:af:c7:7d:ec:ca:67:4e: b2:b9:69:33:a8:e9:ba:18:95:cc:76:72:d5:b8:74: 21:4f:79:91:a5:6d:ad:9f:9f:4f:a6:f4:19:3a:ab: 3b:42:47:5b:2d:01:a1:74:cd:8b:25:13:22:99:4a: db:cd:be:47:91:78:05:f4:3f:ca:5c:ad:ba:65:7a: a1:f0:a7:c3:d1:fe:df:51:95:90:d6:60:15:95:dc: 42:96:da:d1:63:c9:48:09:1f:b1:65:86:bb:5f:8f: 80:81:3e:a4:c1:34:80:bb:6c:7c:91:19:c2:8f:5a: a2:18:a6:63:6b:e8:44:5c:97:32:07:4f:a6:f2:22: 5d:4d:74:3a:ca:66:1e:71:91:1f:a7:6a:21:ea:9c: 8e:f7:97:04:2c:4f:63:f8:78:92:d7:1a:81:36:85: 21:c1:b2:44:4a:1d:19:65:95:ee:ea:a7:69:a3:51: 4b:0b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 24:71:DB:31:32:5B:33:D8:CC:81:F9:14:2C:E0:97:66:B0:F0:72:34 X509v3 Authority Key Identifier: keyid:33:F4:08:21:66:A8:9F:FF:6F:32:6A:E0:9B:44:BF:BE:F1:62:9F:EB X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.sub.apnic.net/repository/A91905300000/9/33F4082166A89FFF6F326AE09B44BFBEF1629FEB.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/M_QIIWaon_9vMmrgm0S_vvFin-s.cer Subject Information Access: Signed Object - URI:rsync://rpki.sub.apnic.net/repository/A91905300000/9/33F4082166A89FFF6F326AE09B44BFBEF1629FEB.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 3d:ce:f5:7c:bb:d1:bb:80:8f:e7:d4:16:6e:07:d5:2e:82:1f: 68:c0:4a:93:f8:0b:31:20:1f:3a:a6:95:f5:34:0f:60:cb:c6: 8c:0f:c8:cf:d6:ea:7f:12:6e:10:16:fc:e8:67:cf:d1:b0:cc: 38:25:63:b2:33:47:4f:2b:92:e4:d8:81:c6:83:3a:98:f0:5d: 13:40:4e:e7:e0:91:be:75:ef:20:62:c0:fe:23:2a:e7:1e:5b: 99:b5:c8:ee:d8:99:e5:68:a6:91:e1:60:67:ff:c1:b6:8e:30: 46:1b:d3:bb:8a:c1:37:e1:fa:c5:bd:b5:d5:87:67:dc:24:6f: 47:9b:5e:f1:e7:62:59:72:cb:47:53:49:c0:a2:13:bc:c8:1c: f5:fc:fe:59:80:ea:9b:e4:b5:99:04:e5:8a:cc:b0:bc:3d:d5: b8:37:5e:5f:df:6d:91:be:f5:b5:e3:97:38:21:73:0f:bb:a3: 18:78:29:0f:4d:a9:90:39:db:3b:19:b9:e9:10:5e:b8:70:50: f8:01:fb:c4:61:44:a1:a5:93:bd:95:b0:71:d2:8f:5e:42:94: c4:22:02:97:ff:6b:d8:af:d6:f5:36:69:dc:91:a3:9c:56:73: 0c:4e:37:de:1c:2a:7c:5f:96:23:d1:69:ee:3f:ca:02:1a:de: dc:e6:90:e2 -----BEGIN CERTIFICATE----- MIIFKDCCBBCgAwIBAgIUPADzhPigd2OkIDqW2FFRQdPij3gwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxOUIwQkUwMDAwMTEwLwYDVQQFEygzM0Y0MDgyMTY2 QTg5RkZGNkYzMjZBRTA5QjQ0QkZCRUYxNjI5RkVCMB4XDTI2MDMwMTEwNTAyNFoX DTI2MDMwMjEzNDUyNFowMzExMC8GA1UEAxMoMjQ3MURCMzEzMjVCMzNEOENDODFG OTE0MkNFMDk3NjZCMEYwNzIzNDCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAOwNyNILKTrraGuDdrdBa8l5auMfwtNNviaoOBX2y57xoJa/4ePScymhrDQp pggQm65dIUyxtxswVlTQETNdexpFM6aF48N3AEiXj9URGHv+HTuvx33symdOsrlp M6jpuhiVzHZy1bh0IU95kaVtrZ+fT6b0GTqrO0JHWy0BoXTNiyUTIplK282+R5F4 BfQ/ylytumV6ofCnw9H+31GVkNZgFZXcQpba0WPJSAkfsWWGu1+PgIE+pME0gLts fJEZwo9aohimY2voRFyXMgdPpvIiXU10OspmHnGRH6dqIeqcjveXBCxPY/h4ktca gTaFIcGyREodGWWV7uqnaaNRSwsCAwEAAaOCAhswggIXMB0GA1UdDgQWBBQkcdsx Mlsz2MyB+RQs4JdmsPByNDAfBgNVHSMEGDAWgBQz9AghZqif/28yauCbRL++8WKf 6zAOBgNVHQ8BAf8EBAMCB4AwcgYDVR0fBGswaTBnoGWgY4ZhcnN5bmM6Ly9ycGtp LnN1Yi5hcG5pYy5uZXQvcmVwb3NpdG9yeS9BOTE5MDUzMDAwMDAvOS8zM0Y0MDgy MTY2QTg5RkZGNkYzMjZBRTA5QjQ0QkZCRUYxNjI5RkVCLmNybDB+BggrBgEFBQcB AQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVwb3Np dG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9NX1FJSVdhb25f OXZNbXJnbTBTX3Z2RmluLXMuY2VyMH0GCCsGAQUFBwELBHEwbzBtBggrBgEFBQcw C4ZhcnN5bmM6Ly9ycGtpLnN1Yi5hcG5pYy5uZXQvcmVwb3NpdG9yeS9BOTE5MDUz MDAwMDAvOS8zM0Y0MDgyMTY2QTg5RkZGNkYzMjZBRTA5QjQ0QkZCRUYxNjI5RkVC Lm1mdDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIw EDAGBAIAAQUAMAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG 9w0BAQsFAAOCAQEAPc71fLvRu4CP59QWbgfVLoIfaMBKk/gLMSAfOqaV9TQPYMvG jA/Iz9bqfxJuEBb86GfP0bDMOCVjsjNHTyuS5NiBxoM6mPBdE0BO5+CRvnXvIGLA /iMq5x5bmbXI7tiZ5WimkeFgZ//Bto4wRhvTu4rBN+H6xb211Ydn3CRvR5te8edi WXLLR1NJwKITvMgc9fz+WYDqm+S1mQTlisywvD3VuDdeX99tkb71teOXOCFzD7uj GHgpD02pkDnbOxm56RBeuHBQ+AH7xGFEoaWTvZWwcdKPXkKUxCICl/9r2K/W9TZp 3JGjnFZzDE433hwqfF+WI9Fp7j/KAhre3OaQ4g== -----END CERTIFICATE-----Generated at Mon Mar 2 02:01:13 2026 by rpki-client