$ rpki-client -vvf rpki.sub.apnic.net/repository/A91905300000/9/33F4082166A89FFF6F326AE09B44BFBEF1629FEB.mft File: 33F4082166A89FFF6F326AE09B44BFBEF1629FEB.mft (raw, json) Hash identifier: dgXDlcWwJLuXxDiPrwZELqbaqn/ROy4Mc/x2uogbwHY= Subject key identifier: 87:15:86:20:43:C1:C6:6D:29:9C:ED:8B:C4:D5:69:CA:51:CA:8B:23 Authority key identifier: 33:F4:08:21:66:A8:9F:FF:6F:32:6A:E0:9B:44:BF:BE:F1:62:9F:EB Certificate issuer: /CN=A919B0BE0000/serialNumber=33F4082166A89FFF6F326AE09B44BFBEF1629FEB Certificate serial: 020983E80273388C1D8F93AE45A96206014F2AB1 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/M_QIIWaon_9vMmrgm0S_vvFin-s.cer Subject info access: rsync://rpki.sub.apnic.net/repository/A91905300000/9/33F4082166A89FFF6F326AE09B44BFBEF1629FEB.mft Manifest number: 01AF Signing time: Tue 28 Jul 2026 14:29:38 +0000 Manifest this update: Tue 28 Jul 2026 14:24:38 +0000 Manifest next update: Wed 29 Jul 2026 16:40:38 +0000 Files and hashes: 1: 3230332e33312e3131312e302f32342d3234203d3e2039393133.roa (hash: dtJRARG5+BtRZcmiFZ9zHEYQh6J1meTmlcz69DUCY8E=) 2: 33F4082166A89FFF6F326AE09B44BFBEF1629FEB.crl (hash: o0x5wI20GB2DLgjRtv3jKo3JapAM3ggt9UQz8RSzuEI=) 3: 3130332e3233332e3230382e302f32322d3234203d3e2039393133.roa (hash: 9lGWz7w8c/R5ruJGuzTNaIgTzYgfFa8S2t6e2U1YuXY=) 4: 3230332e302e38302e302f32342d3234203d3e2039393133.roa (hash: R7Xxtkh+I8I5SM+RNqD6t39Ei7w+LcPfWR//Yn+T4e4=) 5: 3230332e312e36382e302f32342d3234203d3e2039393133.roa (hash: i4MOXpZ+JJO1Ou/5KA98cmmyul9itGAIk/VXC8WVFIw=) 6: 3230332e302e38302e302f32342d3234203d3e20313334303930.roa (hash: kdx3CUTNv+VjeEs6W9tudB6rNQZmlJL2ExzD6LblsT4=) 7: 3230332e312e36392e302f32342d3234203d3e2039393133.roa (hash: dO5yl6c5PpbhT8VJ6Gr4SbudCYxk8yUDmtlBjVa4pe8=) 8: 3230332e35372e32332e302f32342d3234203d3e2039393133.roa (hash: rW0FmeSZuAkFdgzjWN69hruCSHp62G5GuOISvj+nn7Y=) 9: 3230332e302e38302e302f32342d3234203d3e2039343439.roa (hash: adKswZZ+83MQE5j5Z1GVAEbYVQjS90TsNrYqZtVzT5k=) 10: 3230322e31342e3134382e302f32342d3234203d3e2039393133.roa (hash: ND9xLQI8Vy8JA2jtUa6aYRzvXLnRH0xjgm4vmCRNG9o=) 11: 3230332e33312e3131302e302f32342d3234203d3e2039393133.roa (hash: /zSQzqTydH2+pkmO1iK1Kwm8hfUZxAJtGdbzfN4QbwM=) Validation: OK Signature path: rsync://rpki.sub.apnic.net/repository/A91905300000/9/33F4082166A89FFF6F326AE09B44BFBEF1629FEB.crl rsync://rpki.sub.apnic.net/repository/A91905300000/9/33F4082166A89FFF6F326AE09B44BFBEF1629FEB.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/M_QIIWaon_9vMmrgm0S_vvFin-s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 29 Jul 2026 16:40:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 02:09:83:e8:02:73:38:8c:1d:8f:93:ae:45:a9:62:06:01:4f:2a:b1 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A919B0BE0000, serialNumber=33F4082166A89FFF6F326AE09B44BFBEF1629FEB Validity Not Before: Jul 28 14:24:38 2026 GMT Not After : Jul 29 16:40:38 2026 GMT Subject: CN=8715862043C1C66D299CED8BC4D569CA51CA8B23 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:73:81:11:18:05:45:1e:78:17:a0:57:78:10: 0a:38:52:25:51:c0:9c:02:e3:dd:e7:2a:4f:6f:fc: 66:55:79:42:90:32:78:d2:b2:1a:d5:0b:68:b5:13: 46:e9:17:cb:15:12:b9:59:36:fb:95:5e:d9:5d:22: 88:13:ee:ab:c6:23:86:6a:03:99:a9:11:2e:40:f1: d0:bf:09:65:25:10:69:8f:54:5a:aa:0a:20:b4:1b: 7c:38:72:17:51:84:8c:09:8a:25:fd:01:12:fd:f9: 2c:36:c8:05:76:08:5a:a0:97:d9:1b:d5:d9:31:43: 02:61:c7:cb:fb:e8:93:35:e2:c5:25:c4:98:5a:f8: b6:03:82:3d:50:02:d2:7b:a4:96:64:54:ad:cc:86: e7:48:6d:6c:f1:19:3b:d2:f5:12:99:ef:e5:99:99: bf:ff:ba:c5:cf:61:1a:e6:82:8a:26:6b:de:85:3d: 52:1a:08:ff:91:ff:b7:7b:9a:45:ad:48:a9:01:38: 30:fa:66:c7:73:2b:0e:93:b0:4a:27:3e:9c:d3:e8: fe:2c:66:d6:fd:05:93:c5:bc:26:53:a5:02:28:fd: d5:c1:2d:ec:5e:01:57:8e:67:b7:c5:9a:b2:e8:e8: 2a:b4:3f:f5:a1:20:ae:33:fe:ab:ee:4a:0d:7e:84: 85:1f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 87:15:86:20:43:C1:C6:6D:29:9C:ED:8B:C4:D5:69:CA:51:CA:8B:23 X509v3 Authority Key Identifier: keyid:33:F4:08:21:66:A8:9F:FF:6F:32:6A:E0:9B:44:BF:BE:F1:62:9F:EB X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.sub.apnic.net/repository/A91905300000/9/33F4082166A89FFF6F326AE09B44BFBEF1629FEB.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/M_QIIWaon_9vMmrgm0S_vvFin-s.cer Subject Information Access: Signed Object - URI:rsync://rpki.sub.apnic.net/repository/A91905300000/9/33F4082166A89FFF6F326AE09B44BFBEF1629FEB.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 69:f6:b1:b1:e7:1d:d2:be:fc:44:92:aa:1d:aa:b5:62:17:63: cf:84:b5:df:19:f3:8b:29:18:90:2c:f1:d0:75:b3:c1:2a:cc: fd:a4:07:bd:d1:eb:84:77:ef:60:e7:9f:be:b8:58:2e:d2:dc: c5:ab:54:35:ab:0f:e8:9e:70:ab:67:28:b3:63:08:49:25:e8: 71:ca:6c:c9:da:c5:b3:aa:f8:69:7f:0e:8b:51:bb:ff:90:b4: 67:05:27:d9:15:da:73:e7:86:8b:7e:39:d3:db:25:e1:92:7c: f3:26:07:b7:99:3b:93:d1:54:da:8c:4c:c2:84:36:cb:98:a8: 3d:d0:25:16:0f:2a:93:d2:17:47:b0:fa:a2:00:01:49:04:a1: 5d:91:a1:49:92:27:8d:5d:82:da:b7:d9:f6:17:7f:f9:25:5e: 5c:33:55:b7:9a:4e:9c:30:d5:1c:71:d1:b2:e5:57:44:c4:73: 7f:29:4b:ab:8f:b1:60:17:f6:14:d9:a7:dc:49:60:0b:59:71: 0e:21:d8:6f:32:d2:85:33:be:f4:38:44:2e:08:60:66:a3:c3: af:6b:d3:a2:3e:d9:51:b7:d1:46:c4:2c:9a:40:46:b3:31:b6: 78:d1:66:75:ab:3c:db:8a:d8:c0:da:f7:c2:5f:cd:57:f8:94: 60:2a:3e:e4 -----BEGIN CERTIFICATE----- MIIFKDCCBBCgAwIBAgIUAgmD6AJzOIwdj5OuRaliBgFPKrEwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxOUIwQkUwMDAwMTEwLwYDVQQFEygzM0Y0MDgyMTY2 QTg5RkZGNkYzMjZBRTA5QjQ0QkZCRUYxNjI5RkVCMB4XDTI2MDcyODE0MjQzOFoX DTI2MDcyOTE2NDAzOFowMzExMC8GA1UEAxMoODcxNTg2MjA0M0MxQzY2RDI5OUNF RDhCQzRENTY5Q0E1MUNBOEIyMzCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAKhzgREYBUUeeBegV3gQCjhSJVHAnALj3ecqT2/8ZlV5QpAyeNKyGtULaLUT RukXyxUSuVk2+5Ve2V0iiBPuq8YjhmoDmakRLkDx0L8JZSUQaY9UWqoKILQbfDhy F1GEjAmKJf0BEv35LDbIBXYIWqCX2RvV2TFDAmHHy/vokzXixSXEmFr4tgOCPVAC 0nuklmRUrcyG50htbPEZO9L1Epnv5ZmZv/+6xc9hGuaCiiZr3oU9UhoI/5H/t3ua Ra1IqQE4MPpmx3MrDpOwSic+nNPo/ixm1v0Fk8W8JlOlAij91cEt7F4BV45nt8Wa sujoKrQ/9aEgrjP+q+5KDX6EhR8CAwEAAaOCAhswggIXMB0GA1UdDgQWBBSHFYYg Q8HGbSmc7YvE1WnKUcqLIzAfBgNVHSMEGDAWgBQz9AghZqif/28yauCbRL++8WKf 6zAOBgNVHQ8BAf8EBAMCB4AwcgYDVR0fBGswaTBnoGWgY4ZhcnN5bmM6Ly9ycGtp LnN1Yi5hcG5pYy5uZXQvcmVwb3NpdG9yeS9BOTE5MDUzMDAwMDAvOS8zM0Y0MDgy MTY2QTg5RkZGNkYzMjZBRTA5QjQ0QkZCRUYxNjI5RkVCLmNybDB+BggrBgEFBQcB AQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVwb3Np dG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9NX1FJSVdhb25f OXZNbXJnbTBTX3Z2RmluLXMuY2VyMH0GCCsGAQUFBwELBHEwbzBtBggrBgEFBQcw C4ZhcnN5bmM6Ly9ycGtpLnN1Yi5hcG5pYy5uZXQvcmVwb3NpdG9yeS9BOTE5MDUz MDAwMDAvOS8zM0Y0MDgyMTY2QTg5RkZGNkYzMjZBRTA5QjQ0QkZCRUYxNjI5RkVC Lm1mdDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIw EDAGBAIAAQUAMAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG 9w0BAQsFAAOCAQEAafaxsecd0r78RJKqHaq1Yhdjz4S13xnziykYkCzx0HWzwSrM /aQHvdHrhHfvYOefvrhYLtLcxatUNasP6J5wq2cos2MISSXoccpsydrFs6r4aX8O i1G7/5C0ZwUn2RXac+eGi34509sl4ZJ88yYHt5k7k9FU2oxMwoQ2y5ioPdAlFg8q k9IXR7D6ogABSQShXZGhSZInjV2C2rfZ9hd/+SVeXDNVt5pOnDDVHHHRsuVXRMRz fylLq4+xYBf2FNmn3ElgC1lxDiHYbzLShTO+9DhELghgZqPDr2vToj7ZUbfRRsQs mkBGszG2eNFmdas824rYwNr3wl/NV/iUYCo+5A== -----END CERTIFICATE-----Generated at Tue Jul 28 21:32:02 2026 by rpki-client