$ rpki-client -vvvf rpki.sub.apnic.net/repository/A91905300000/9/33F4082166A89FFF6F326AE09B44BFBEF1629FEB.mft File: 33F4082166A89FFF6F326AE09B44BFBEF1629FEB.mft (raw, json) Hash identifier: WE6zeIZs6Iue6udoXx5vepj4GZYnvzsfv93X8Sc8cXU= Subject key identifier: A2:3E:FD:F4:07:BD:11:ED:6D:78:57:ED:E3:37:6F:D2:EB:04:6E:D2 Authority key identifier: 33:F4:08:21:66:A8:9F:FF:6F:32:6A:E0:9B:44:BF:BE:F1:62:9F:EB Certificate issuer: /CN=A919B0BE0000/serialNumber=33F4082166A89FFF6F326AE09B44BFBEF1629FEB Certificate serial: 0C22FF888615E54AA8A26558E1E240FE0D8E47F9 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/M_QIIWaon_9vMmrgm0S_vvFin-s.cer Subject info access: rsync://rpki.sub.apnic.net/repository/A91905300000/9/33F4082166A89FFF6F326AE09B44BFBEF1629FEB.mft Manifest number: 01F9 Signing time: Tue 22 Sep 2026 02:05:34 +0000 Manifest this update: Tue 22 Sep 2026 02:00:34 +0000 Manifest next update: Wed 23 Sep 2026 03:47:34 +0000 Files and hashes: 1: 33F4082166A89FFF6F326AE09B44BFBEF1629FEB.crl (hash: AG88k4ePe5IEH3I2U1yzs1n5f1KaOu9M1ZgXcIcdLYE=) 2: 3230332e312e36392e302f32342d3234203d3e2039393133.roa (hash: dO5yl6c5PpbhT8VJ6Gr4SbudCYxk8yUDmtlBjVa4pe8=) 3: 3230332e302e38302e302f32342d3234203d3e2039393133.roa (hash: R7Xxtkh+I8I5SM+RNqD6t39Ei7w+LcPfWR//Yn+T4e4=) 4: 3130332e3233332e3230382e302f32322d3234203d3e2039393133.roa (hash: 9lGWz7w8c/R5ruJGuzTNaIgTzYgfFa8S2t6e2U1YuXY=) 5: 3230332e35372e32332e302f32342d3234203d3e2039393133.roa (hash: rW0FmeSZuAkFdgzjWN69hruCSHp62G5GuOISvj+nn7Y=) 6: 3230332e312e36382e302f32342d3234203d3e2039393133.roa (hash: i4MOXpZ+JJO1Ou/5KA98cmmyul9itGAIk/VXC8WVFIw=) 7: 3230322e31342e3134382e302f32342d3234203d3e2039393133.roa (hash: ND9xLQI8Vy8JA2jtUa6aYRzvXLnRH0xjgm4vmCRNG9o=) 8: 3230332e302e38302e302f32342d3234203d3e20313334303930.roa (hash: kdx3CUTNv+VjeEs6W9tudB6rNQZmlJL2ExzD6LblsT4=) 9: 3230332e302e38302e302f32342d3234203d3e2039343439.roa (hash: adKswZZ+83MQE5j5Z1GVAEbYVQjS90TsNrYqZtVzT5k=) 10: 3230332e33312e3131302e302f32342d3234203d3e2039393133.roa (hash: /zSQzqTydH2+pkmO1iK1Kwm8hfUZxAJtGdbzfN4QbwM=) 11: 3230332e33312e3131312e302f32342d3234203d3e2039393133.roa (hash: dtJRARG5+BtRZcmiFZ9zHEYQh6J1meTmlcz69DUCY8E=) Validation: OK Signature path: rsync://rpki.sub.apnic.net/repository/A91905300000/9/33F4082166A89FFF6F326AE09B44BFBEF1629FEB.crl rsync://rpki.sub.apnic.net/repository/A91905300000/9/33F4082166A89FFF6F326AE09B44BFBEF1629FEB.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/M_QIIWaon_9vMmrgm0S_vvFin-s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 23 Sep 2026 03:47:34 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0c:22:ff:88:86:15:e5:4a:a8:a2:65:58:e1:e2:40:fe:0d:8e:47:f9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A919B0BE0000, serialNumber=33F4082166A89FFF6F326AE09B44BFBEF1629FEB Validity Not Before: Sep 22 02:00:34 2026 GMT Not After : Sep 23 03:47:34 2026 GMT Subject: CN=A23EFDF407BD11ED6D7857EDE3376FD2EB046ED2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:3d:65:18:31:14:16:37:11:2c:f3:c3:98:f7: a2:03:0f:2a:f1:12:9d:70:50:23:8c:f1:71:c7:03: 58:7b:11:c7:44:34:08:75:75:1c:f9:18:e6:16:ab: 6b:d7:bc:69:60:9a:1d:65:26:5b:a0:3c:cb:47:8e: 8b:53:76:fc:13:44:3a:6a:30:19:1a:6a:28:25:90: b6:a6:57:7c:b8:20:f2:74:07:a8:f2:33:56:db:7a: 09:f8:72:3e:8f:23:3d:1f:67:15:be:f0:ae:c6:91: 7f:c5:f9:41:74:df:6b:76:5d:84:32:5e:93:49:a4: a8:06:0e:9c:b6:95:dc:4f:de:a8:22:4a:15:2a:6f: 83:b5:1f:8f:87:1b:11:5f:47:81:24:ae:1b:96:24: de:66:9a:94:fa:86:a9:53:ed:cd:57:a0:e2:90:0c: 12:e0:4e:ff:4e:3f:e5:e3:f0:e7:ee:db:a9:3d:b8: 54:c3:69:6e:5c:87:6a:77:ac:1f:de:75:ef:b0:fd: 42:70:ff:e8:4c:64:17:cd:f5:67:11:aa:84:c4:ea: 3a:0a:1f:51:94:d6:9d:c6:b4:78:b6:bf:aa:dc:90: 20:52:fb:66:c8:8d:b2:fb:67:22:2e:8b:22:f2:a5: bd:a1:ec:e2:d2:51:6d:dc:bc:da:0f:ab:04:24:35: 2b:ef Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A2:3E:FD:F4:07:BD:11:ED:6D:78:57:ED:E3:37:6F:D2:EB:04:6E:D2 X509v3 Authority Key Identifier: keyid:33:F4:08:21:66:A8:9F:FF:6F:32:6A:E0:9B:44:BF:BE:F1:62:9F:EB X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.sub.apnic.net/repository/A91905300000/9/33F4082166A89FFF6F326AE09B44BFBEF1629FEB.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/M_QIIWaon_9vMmrgm0S_vvFin-s.cer Subject Information Access: Signed Object - URI:rsync://rpki.sub.apnic.net/repository/A91905300000/9/33F4082166A89FFF6F326AE09B44BFBEF1629FEB.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 6a:f1:d8:49:ed:27:b4:6a:56:c4:7f:28:ab:67:ec:02:9e:ee: dc:5f:fc:3d:c2:78:d4:49:07:ca:99:76:38:d2:6f:bc:29:24: f8:8a:28:50:f3:84:f8:72:17:8c:74:a0:c6:3c:b7:7d:46:19: a7:ee:1f:ad:31:ff:51:89:cb:dd:40:44:62:77:84:34:ce:47: 99:71:19:1a:82:c3:07:54:bb:a9:9e:d4:c7:73:eb:6e:e3:d3: 79:fe:4f:49:fb:4d:a3:35:7c:cd:44:11:a1:5b:dd:da:aa:a3: 3b:ca:a5:2a:f0:16:cc:82:5b:e2:b2:fc:63:07:40:49:ed:98: ff:27:32:bc:73:e2:b4:b5:8a:ff:b7:7e:67:5d:15:ae:c7:d8: 12:48:a3:0a:99:43:97:b4:a9:5f:20:2d:b0:7c:1d:89:9f:a6: b4:fe:76:40:ab:e7:05:27:06:51:bf:97:2a:cd:2b:91:1e:50: c7:ad:8f:92:1a:00:b1:25:47:60:e4:e0:d5:20:4b:e6:73:a8: b1:c0:37:a5:8e:be:fb:1c:b5:d7:9b:8c:a7:7b:19:f6:dd:93: ba:65:dc:7c:e7:9f:bd:5c:73:1e:41:c6:09:7d:a8:41:30:e6: 52:b5:5d:db:0d:f9:2a:2c:f1:f8:04:51:dc:89:87:19:5b:8b: 0d:0c:87:ac -----BEGIN CERTIFICATE----- MIIFKDCCBBCgAwIBAgIUDCL/iIYV5UqoomVY4eJA/g2OR/kwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxOUIwQkUwMDAwMTEwLwYDVQQFEygzM0Y0MDgyMTY2 QTg5RkZGNkYzMjZBRTA5QjQ0QkZCRUYxNjI5RkVCMB4XDTI2MDkyMjAyMDAzNFoX DTI2MDkyMzAzNDczNFowMzExMC8GA1UEAxMoQTIzRUZERjQwN0JEMTFFRDZENzg1 N0VERTMzNzZGRDJFQjA0NkVEMjCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBALw9ZRgxFBY3ESzzw5j3ogMPKvESnXBQI4zxcccDWHsRx0Q0CHV1HPkY5har a9e8aWCaHWUmW6A8y0eOi1N2/BNEOmowGRpqKCWQtqZXfLgg8nQHqPIzVtt6Cfhy Po8jPR9nFb7wrsaRf8X5QXTfa3ZdhDJek0mkqAYOnLaV3E/eqCJKFSpvg7Ufj4cb EV9HgSSuG5Yk3maalPqGqVPtzVeg4pAMEuBO/04/5ePw5+7bqT24VMNpblyHanes H95177D9QnD/6ExkF831ZxGqhMTqOgofUZTWnca0eLa/qtyQIFL7ZsiNsvtnIi6L IvKlvaHs4tJRbdy82g+rBCQ1K+8CAwEAAaOCAhswggIXMB0GA1UdDgQWBBSiPv30 B70R7W14V+3jN2/S6wRu0jAfBgNVHSMEGDAWgBQz9AghZqif/28yauCbRL++8WKf 6zAOBgNVHQ8BAf8EBAMCB4AwcgYDVR0fBGswaTBnoGWgY4ZhcnN5bmM6Ly9ycGtp LnN1Yi5hcG5pYy5uZXQvcmVwb3NpdG9yeS9BOTE5MDUzMDAwMDAvOS8zM0Y0MDgy MTY2QTg5RkZGNkYzMjZBRTA5QjQ0QkZCRUYxNjI5RkVCLmNybDB+BggrBgEFBQcB AQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVwb3Np dG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9NX1FJSVdhb25f OXZNbXJnbTBTX3Z2RmluLXMuY2VyMH0GCCsGAQUFBwELBHEwbzBtBggrBgEFBQcw C4ZhcnN5bmM6Ly9ycGtpLnN1Yi5hcG5pYy5uZXQvcmVwb3NpdG9yeS9BOTE5MDUz MDAwMDAvOS8zM0Y0MDgyMTY2QTg5RkZGNkYzMjZBRTA5QjQ0QkZCRUYxNjI5RkVC Lm1mdDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIw EDAGBAIAAQUAMAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG 9w0BAQsFAAOCAQEAavHYSe0ntGpWxH8oq2fsAp7u3F/8PcJ41EkHypl2ONJvvCkk +IooUPOE+HIXjHSgxjy3fUYZp+4frTH/UYnL3UBEYneENM5HmXEZGoLDB1S7qZ7U x3PrbuPTef5PSftNozV8zUQRoVvd2qqjO8qlKvAWzIJb4rL8YwdASe2Y/ycyvHPi tLWK/7d+Z10VrsfYEkijCplDl7SpXyAtsHwdiZ+mtP52QKvnBScGUb+XKs0rkR5Q x62PkhoAsSVHYOTg1SBL5nOoscA3pY6++xy115uMp3sZ9t2TumXcfOefvVxzHkHG CX2oQTDmUrVd2w35Kizx+ARR3ImHGVuLDQyHrA== -----END CERTIFICATE-----Generated at Tue Sep 22 15:04:55 2026 by rpki-client