$ rpki-client -vvf rpki.sub.apnic.net/repository/A91905300000/9/33F4082166A89FFF6F326AE09B44BFBEF1629FEB.mft File: 33F4082166A89FFF6F326AE09B44BFBEF1629FEB.mft (raw, json) Hash identifier: uhjzrplbqpJQeUd0Vp+dApcX1ggLn5EvSU6sVx4C4tE= Subject key identifier: 7F:8E:DC:13:77:F3:84:D5:FB:A3:0B:A0:A8:80:80:3E:30:28:67:43 Authority key identifier: 33:F4:08:21:66:A8:9F:FF:6F:32:6A:E0:9B:44:BF:BE:F1:62:9F:EB Certificate issuer: /CN=A919B0BE0000/serialNumber=33F4082166A89FFF6F326AE09B44BFBEF1629FEB Certificate serial: 5119FAED1468901B2BDED148B6E56C1E333AFA2D Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/M_QIIWaon_9vMmrgm0S_vvFin-s.cer Subject info access: rsync://rpki.sub.apnic.net/repository/A91905300000/9/33F4082166A89FFF6F326AE09B44BFBEF1629FEB.mft Manifest number: 011F Signing time: Thu 16 Apr 2026 22:43:47 +0000 Manifest this update: Thu 16 Apr 2026 22:38:47 +0000 Manifest next update: Fri 17 Apr 2026 22:56:47 +0000 Files and hashes: 1: 3230332e33312e3131302e302f32342d3234203d3e2039393133.roa (hash: Th3RG2y4VUTKhfMzlUUSBpKBps2IwB4thNo9+TULNBQ=) 2: 3130332e3233332e3230382e302f32322d3234203d3e2039393133.roa (hash: gjG1OZMW5faujAfknl/AsEqIEMo1X4J8rMD0eZTWBDg=) 3: 3230332e302e38302e302f32342d3234203d3e2039393133.roa (hash: 5CEE0bOW0MgpOlLO8lN9+nz4tABxvncSgkR6y2kvmq4=) 4: 3230322e31342e3134382e302f32342d3234203d3e2039393133.roa (hash: jEqn8jELxuDQMwvht+ON+P9QmjrSbE+0mwwGAYlItGo=) 5: 3230332e33312e3131312e302f32342d3234203d3e2039393133.roa (hash: YlAvV8ZZuoYsPDhwbCWgqa9GkyYRu/NKCURMzPqa7q4=) 6: 3230332e312e36382e302f32342d3234203d3e2039393133.roa (hash: sf6xpmLBwwFxYc5zLhbA2o5zERE4ANPwwQpcoFqWw9Y=) 7: 3230332e312e36392e302f32342d3234203d3e2039393133.roa (hash: HYKqNuiBE/DUFFDQyKmuMZ6wkcvhITNaHWFYsHIuJlA=) 8: 33F4082166A89FFF6F326AE09B44BFBEF1629FEB.crl (hash: YZ13KWxmERSIHnl1AXGapV0yRdKKIhFD2M3hO4xjB54=) 9: 3230332e35372e32332e302f32342d3234203d3e2039393133.roa (hash: 9vPoyR5h4XW7VzKPshTgyqTHm+x238aD7PNshnOSJtk=) Validation: OK Signature path: rsync://rpki.sub.apnic.net/repository/A91905300000/9/33F4082166A89FFF6F326AE09B44BFBEF1629FEB.crl rsync://rpki.sub.apnic.net/repository/A91905300000/9/33F4082166A89FFF6F326AE09B44BFBEF1629FEB.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/M_QIIWaon_9vMmrgm0S_vvFin-s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 17 Apr 2026 22:56:47 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 51:19:fa:ed:14:68:90:1b:2b:de:d1:48:b6:e5:6c:1e:33:3a:fa:2d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A919B0BE0000, serialNumber=33F4082166A89FFF6F326AE09B44BFBEF1629FEB Validity Not Before: Apr 16 22:38:47 2026 GMT Not After : Apr 17 22:56:47 2026 GMT Subject: CN=7F8EDC1377F384D5FBA30BA0A880803E30286743 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e5:64:b5:50:56:83:ce:05:81:4a:52:c5:72:75: 7d:d6:1b:f2:3c:96:8c:3a:e7:fc:61:92:65:3d:84: eb:0d:ff:d4:13:9e:d4:48:c2:9f:18:80:e0:ba:37: cc:d3:04:b1:62:52:4d:73:e3:9d:b1:f2:14:f2:e9: 1d:70:fe:f2:90:42:45:09:1b:3d:01:e8:57:ae:98: b7:58:d8:75:38:91:fa:4e:11:52:bd:ad:1c:c9:0a: 59:c5:e5:8c:c0:48:cd:67:a2:89:74:92:af:03:c8: 42:4a:c3:ed:28:64:a1:2c:94:6b:e5:43:88:ae:1f: a6:15:57:cc:7b:4a:7c:76:92:8c:7c:0c:52:1c:86: 0c:c2:c4:e8:cd:fd:a7:43:64:dd:2b:79:57:63:cc: f1:35:86:8e:d4:49:38:b1:b9:91:f4:5b:81:f7:02: 24:85:f5:eb:51:04:9b:ce:60:30:4b:09:b2:58:5e: 73:7d:8a:56:c8:7f:ca:bf:a4:60:cd:28:13:a3:61: 02:0a:ec:ad:5c:f5:61:4f:03:3a:21:19:32:a0:75: c8:fe:f0:71:6b:18:b9:61:f5:8d:ef:92:95:fa:3a: fa:d3:39:1d:cb:0e:41:a9:fe:8e:72:d2:85:2d:5e: af:cf:b1:bd:20:72:e9:56:1e:a5:e5:8a:2e:fb:73: 08:65 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7F:8E:DC:13:77:F3:84:D5:FB:A3:0B:A0:A8:80:80:3E:30:28:67:43 X509v3 Authority Key Identifier: keyid:33:F4:08:21:66:A8:9F:FF:6F:32:6A:E0:9B:44:BF:BE:F1:62:9F:EB X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.sub.apnic.net/repository/A91905300000/9/33F4082166A89FFF6F326AE09B44BFBEF1629FEB.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/M_QIIWaon_9vMmrgm0S_vvFin-s.cer Subject Information Access: Signed Object - URI:rsync://rpki.sub.apnic.net/repository/A91905300000/9/33F4082166A89FFF6F326AE09B44BFBEF1629FEB.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 10:c4:19:1d:c2:5c:24:8a:07:0b:97:62:d7:d0:db:db:cf:2d: 9f:27:be:ca:5c:cb:ed:76:68:87:f4:d4:3f:d2:35:aa:a8:65: 5e:81:24:12:89:9a:13:b2:1a:ef:77:48:55:6b:72:f7:e0:6f: a5:82:a2:43:e4:8e:8e:9c:1b:7c:7f:f2:63:b5:16:c2:f3:c6: f4:ea:f1:7a:ff:9c:81:ea:46:ae:37:47:10:6b:8b:31:e1:09: 35:52:71:09:65:5b:9b:b1:25:00:72:cb:8b:5f:eb:5f:cd:5e: 37:9a:42:1e:6f:79:ea:c1:e9:4e:3a:45:20:60:a0:ad:b0:26: d4:3e:a8:9d:7d:5a:87:94:10:39:a1:1a:08:31:9a:80:d4:f1: 19:30:45:b2:9c:a0:6e:3b:78:2d:a8:6b:9b:7f:32:ff:f6:74: d3:ca:fb:17:a6:9c:da:f7:04:73:a5:6a:28:1e:a8:da:b3:49: d4:d5:11:bb:97:19:c9:c8:6d:26:b9:32:99:d2:89:4c:b2:df: e1:23:aa:38:91:cb:56:99:3d:0f:37:2d:28:6a:f5:bb:7b:33: 42:6c:0f:0d:3c:7d:f7:92:a8:2b:a2:7f:16:4b:b3:59:e1:f9: 17:b3:69:ff:33:c4:0a:25:6d:97:97:8f:8f:79:ef:b2:f4:5b: 60:8b:76:62 -----BEGIN CERTIFICATE----- MIIFKDCCBBCgAwIBAgIUURn67RRokBsr3tFItuVsHjM6+i0wDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxOUIwQkUwMDAwMTEwLwYDVQQFEygzM0Y0MDgyMTY2 QTg5RkZGNkYzMjZBRTA5QjQ0QkZCRUYxNjI5RkVCMB4XDTI2MDQxNjIyMzg0N1oX DTI2MDQxNzIyNTY0N1owMzExMC8GA1UEAxMoN0Y4RURDMTM3N0YzODRENUZCQTMw QkEwQTg4MDgwM0UzMDI4Njc0MzCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAOVktVBWg84FgUpSxXJ1fdYb8jyWjDrn/GGSZT2E6w3/1BOe1EjCnxiA4Lo3 zNMEsWJSTXPjnbHyFPLpHXD+8pBCRQkbPQHoV66Yt1jYdTiR+k4RUr2tHMkKWcXl jMBIzWeiiXSSrwPIQkrD7ShkoSyUa+VDiK4fphVXzHtKfHaSjHwMUhyGDMLE6M39 p0Nk3St5V2PM8TWGjtRJOLG5kfRbgfcCJIX161EEm85gMEsJslhec32KVsh/yr+k YM0oE6NhAgrsrVz1YU8DOiEZMqB1yP7wcWsYuWH1je+Slfo6+tM5HcsOQan+jnLS hS1er8+xvSBy6VYepeWKLvtzCGUCAwEAAaOCAhswggIXMB0GA1UdDgQWBBR/jtwT d/OE1fujC6CogIA+MChnQzAfBgNVHSMEGDAWgBQz9AghZqif/28yauCbRL++8WKf 6zAOBgNVHQ8BAf8EBAMCB4AwcgYDVR0fBGswaTBnoGWgY4ZhcnN5bmM6Ly9ycGtp LnN1Yi5hcG5pYy5uZXQvcmVwb3NpdG9yeS9BOTE5MDUzMDAwMDAvOS8zM0Y0MDgy MTY2QTg5RkZGNkYzMjZBRTA5QjQ0QkZCRUYxNjI5RkVCLmNybDB+BggrBgEFBQcB AQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVwb3Np dG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9NX1FJSVdhb25f OXZNbXJnbTBTX3Z2RmluLXMuY2VyMH0GCCsGAQUFBwELBHEwbzBtBggrBgEFBQcw C4ZhcnN5bmM6Ly9ycGtpLnN1Yi5hcG5pYy5uZXQvcmVwb3NpdG9yeS9BOTE5MDUz MDAwMDAvOS8zM0Y0MDgyMTY2QTg5RkZGNkYzMjZBRTA5QjQ0QkZCRUYxNjI5RkVC Lm1mdDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIw EDAGBAIAAQUAMAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG 9w0BAQsFAAOCAQEAEMQZHcJcJIoHC5di19Db288tnye+ylzL7XZoh/TUP9I1qqhl XoEkEomaE7Ia73dIVWty9+BvpYKiQ+SOjpwbfH/yY7UWwvPG9Orxev+cgepGrjdH EGuLMeEJNVJxCWVbm7ElAHLLi1/rX81eN5pCHm956sHpTjpFIGCgrbAm1D6onX1a h5QQOaEaCDGagNTxGTBFspygbjt4Lahrm38y//Z008r7F6ac2vcEc6VqKB6o2rNJ 1NURu5cZychtJrkymdKJTLLf4SOqOJHLVpk9DzctKGr1u3szQmwPDTx995KoK6J/ FkuzWeH5F7Np/zPECiVtl5ePj3nvsvRbYIt2Yg== -----END CERTIFICATE-----Generated at Fri Apr 17 12:29:25 2026 by rpki-client