$ rpki-client -vvf rpki.sub.apnic.net/repository/A91905300000/9/33F4082166A89FFF6F326AE09B44BFBEF1629FEB.mft File: 33F4082166A89FFF6F326AE09B44BFBEF1629FEB.mft (raw, json) Hash identifier: 2s60PUE0MN7jhI/pbFQkkSt+udOj+5oVoZCAFtVqBEY= Subject key identifier: 80:3F:AA:22:CB:C1:FA:2A:F4:A4:25:37:C4:C6:42:8C:A1:AE:81:DA Authority key identifier: 33:F4:08:21:66:A8:9F:FF:6F:32:6A:E0:9B:44:BF:BE:F1:62:9F:EB Certificate issuer: /CN=A919B0BE0000/serialNumber=33F4082166A89FFF6F326AE09B44BFBEF1629FEB Certificate serial: 0243E321F0A516F6745EAC3044A379BCDE2DF989 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/M_QIIWaon_9vMmrgm0S_vvFin-s.cer Subject info access: rsync://rpki.sub.apnic.net/repository/A91905300000/9/33F4082166A89FFF6F326AE09B44BFBEF1629FEB.mft Manifest number: 0170 Signing time: Sat 13 Jun 2026 10:39:20 +0000 Manifest this update: Sat 13 Jun 2026 10:34:20 +0000 Manifest next update: Sun 14 Jun 2026 12:06:20 +0000 Files and hashes: 1: 3230332e312e36392e302f32342d3234203d3e2039393133.roa (hash: dO5yl6c5PpbhT8VJ6Gr4SbudCYxk8yUDmtlBjVa4pe8=) 2: 3230332e35372e32332e302f32342d3234203d3e2039393133.roa (hash: rW0FmeSZuAkFdgzjWN69hruCSHp62G5GuOISvj+nn7Y=) 3: 3230332e33312e3131312e302f32342d3234203d3e2039393133.roa (hash: dtJRARG5+BtRZcmiFZ9zHEYQh6J1meTmlcz69DUCY8E=) 4: 3230332e302e38302e302f32342d3234203d3e2039393133.roa (hash: R7Xxtkh+I8I5SM+RNqD6t39Ei7w+LcPfWR//Yn+T4e4=) 5: 3230332e302e38302e302f32342d3234203d3e20313334303930.roa (hash: kdx3CUTNv+VjeEs6W9tudB6rNQZmlJL2ExzD6LblsT4=) 6: 33F4082166A89FFF6F326AE09B44BFBEF1629FEB.crl (hash: fNHYziK3OOWaoVB5AY2cWz6hByPAf0PYvlc9tGh2ZAo=) 7: 3230322e31342e3134382e302f32342d3234203d3e2039393133.roa (hash: ND9xLQI8Vy8JA2jtUa6aYRzvXLnRH0xjgm4vmCRNG9o=) 8: 3130332e3233332e3230382e302f32322d3234203d3e2039393133.roa (hash: 9lGWz7w8c/R5ruJGuzTNaIgTzYgfFa8S2t6e2U1YuXY=) 9: 3230332e312e36382e302f32342d3234203d3e2039393133.roa (hash: i4MOXpZ+JJO1Ou/5KA98cmmyul9itGAIk/VXC8WVFIw=) 10: 3230332e33312e3131302e302f32342d3234203d3e2039393133.roa (hash: /zSQzqTydH2+pkmO1iK1Kwm8hfUZxAJtGdbzfN4QbwM=) Validation: OK Signature path: rsync://rpki.sub.apnic.net/repository/A91905300000/9/33F4082166A89FFF6F326AE09B44BFBEF1629FEB.crl rsync://rpki.sub.apnic.net/repository/A91905300000/9/33F4082166A89FFF6F326AE09B44BFBEF1629FEB.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/M_QIIWaon_9vMmrgm0S_vvFin-s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 14 Jun 2026 12:06:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 02:43:e3:21:f0:a5:16:f6:74:5e:ac:30:44:a3:79:bc:de:2d:f9:89 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A919B0BE0000, serialNumber=33F4082166A89FFF6F326AE09B44BFBEF1629FEB Validity Not Before: Jun 13 10:34:20 2026 GMT Not After : Jun 14 12:06:20 2026 GMT Subject: CN=803FAA22CBC1FA2AF4A42537C4C6428CA1AE81DA Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8a:fb:cc:08:c0:5e:55:d9:a6:cc:e9:cd:ad:77: 15:ba:3a:6a:bb:1d:47:69:73:9e:06:c2:f0:1d:94: 6e:f3:d7:df:69:2d:cc:18:31:09:02:ae:f8:b3:82: 37:a0:1c:6d:c3:59:4f:f1:de:48:5e:ab:09:8e:80: f7:e4:44:17:27:90:f0:24:d8:42:ae:80:99:45:54: 37:c2:2b:0b:f1:1d:b2:9f:f7:54:50:5b:b7:2e:cd: 3d:b7:1c:35:28:2a:0a:f5:1a:b1:1b:39:7d:6e:3d: 89:a9:44:4b:f0:90:b2:5c:20:65:8b:c0:23:df:d0: a5:c7:70:3d:73:b6:74:6a:42:55:70:cf:1c:52:15: b5:81:b4:df:c5:14:f8:f7:46:72:25:fb:8c:df:b9: de:ba:2c:f1:ab:2f:42:d3:5c:72:17:bc:27:dd:71: 34:a8:a2:fb:6f:30:f2:53:87:fa:10:f9:0f:04:f8: 4f:6e:f3:ac:2e:cd:1b:ea:f0:15:73:ce:bc:33:35: 4d:d7:8a:8a:2a:63:46:c3:86:a7:82:0f:ee:24:b4: 08:6b:cf:55:21:4d:c2:7e:2f:0c:97:3d:32:b1:e6: 66:7e:b8:99:93:d8:dd:9f:83:ea:8a:91:fa:24:e7: a3:0b:37:b3:da:c5:9a:5a:d8:52:6b:5b:73:65:17: 57:8b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 80:3F:AA:22:CB:C1:FA:2A:F4:A4:25:37:C4:C6:42:8C:A1:AE:81:DA X509v3 Authority Key Identifier: keyid:33:F4:08:21:66:A8:9F:FF:6F:32:6A:E0:9B:44:BF:BE:F1:62:9F:EB X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.sub.apnic.net/repository/A91905300000/9/33F4082166A89FFF6F326AE09B44BFBEF1629FEB.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/M_QIIWaon_9vMmrgm0S_vvFin-s.cer Subject Information Access: Signed Object - URI:rsync://rpki.sub.apnic.net/repository/A91905300000/9/33F4082166A89FFF6F326AE09B44BFBEF1629FEB.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 58:9f:86:b2:79:26:48:67:df:74:8f:d6:39:92:c3:24:f6:17: 63:0b:b2:21:b5:2e:66:e1:a3:06:0d:67:a4:8f:24:9d:e3:50: 7c:93:aa:9b:28:f6:1d:0f:cd:c6:01:9c:95:e5:9e:fc:5d:4e: 1b:65:e4:15:df:18:c7:9f:4d:d9:7b:92:a5:45:29:aa:37:30: bc:f4:7c:e6:e9:b0:0d:00:e2:08:7a:ca:02:90:a8:c2:fc:b0: 93:42:1c:43:88:a1:f4:31:da:72:9d:ce:ce:ce:0b:b3:a5:7e: 1e:42:f2:bf:c1:e5:2b:a2:8e:80:ee:b0:1e:fb:0d:33:43:5b: ba:df:df:b4:00:66:b4:1b:69:f1:58:b4:6b:32:55:1a:96:e6: b9:3e:c9:06:ec:43:27:64:5e:70:c2:59:6e:8d:29:90:d4:06: bb:f3:10:25:f5:a0:d3:3c:99:98:c6:74:c5:54:70:f0:8c:a4: 93:4c:fa:a4:57:fd:87:3b:56:97:f7:29:3c:86:d3:43:02:57: b8:ac:d6:f9:75:0f:68:43:0c:55:01:f8:6d:42:21:d8:92:f5: c8:a7:c0:44:83:5d:29:47:89:cd:fe:4e:cc:2a:da:3b:1d:ca: c5:66:fb:b6:3d:ac:cf:b6:98:fa:68:19:1b:fd:c7:f0:7f:8b: 63:ed:7c:5c -----BEGIN CERTIFICATE----- MIIFKDCCBBCgAwIBAgIUAkPjIfClFvZ0XqwwRKN5vN4t+YkwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxOUIwQkUwMDAwMTEwLwYDVQQFEygzM0Y0MDgyMTY2 QTg5RkZGNkYzMjZBRTA5QjQ0QkZCRUYxNjI5RkVCMB4XDTI2MDYxMzEwMzQyMFoX DTI2MDYxNDEyMDYyMFowMzExMC8GA1UEAxMoODAzRkFBMjJDQkMxRkEyQUY0QTQy NTM3QzRDNjQyOENBMUFFODFEQTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAIr7zAjAXlXZpszpza13Fbo6arsdR2lzngbC8B2UbvPX32ktzBgxCQKu+LOC N6AcbcNZT/HeSF6rCY6A9+REFyeQ8CTYQq6AmUVUN8IrC/Edsp/3VFBbty7NPbcc NSgqCvUasRs5fW49ialES/CQslwgZYvAI9/QpcdwPXO2dGpCVXDPHFIVtYG038UU +PdGciX7jN+53ros8asvQtNcche8J91xNKii+28w8lOH+hD5DwT4T27zrC7NG+rw FXPOvDM1TdeKiipjRsOGp4IP7iS0CGvPVSFNwn4vDJc9MrHmZn64mZPY3Z+D6oqR +iTnows3s9rFmlrYUmtbc2UXV4sCAwEAAaOCAhswggIXMB0GA1UdDgQWBBSAP6oi y8H6KvSkJTfExkKMoa6B2jAfBgNVHSMEGDAWgBQz9AghZqif/28yauCbRL++8WKf 6zAOBgNVHQ8BAf8EBAMCB4AwcgYDVR0fBGswaTBnoGWgY4ZhcnN5bmM6Ly9ycGtp LnN1Yi5hcG5pYy5uZXQvcmVwb3NpdG9yeS9BOTE5MDUzMDAwMDAvOS8zM0Y0MDgy MTY2QTg5RkZGNkYzMjZBRTA5QjQ0QkZCRUYxNjI5RkVCLmNybDB+BggrBgEFBQcB AQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVwb3Np dG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9NX1FJSVdhb25f OXZNbXJnbTBTX3Z2RmluLXMuY2VyMH0GCCsGAQUFBwELBHEwbzBtBggrBgEFBQcw C4ZhcnN5bmM6Ly9ycGtpLnN1Yi5hcG5pYy5uZXQvcmVwb3NpdG9yeS9BOTE5MDUz MDAwMDAvOS8zM0Y0MDgyMTY2QTg5RkZGNkYzMjZBRTA5QjQ0QkZCRUYxNjI5RkVC Lm1mdDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIw EDAGBAIAAQUAMAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG 9w0BAQsFAAOCAQEAWJ+GsnkmSGffdI/WOZLDJPYXYwuyIbUuZuGjBg1npI8kneNQ fJOqmyj2HQ/NxgGcleWe/F1OG2XkFd8Yx59N2XuSpUUpqjcwvPR85umwDQDiCHrK ApCowvywk0IcQ4ih9DHacp3Ozs4Ls6V+HkLyv8HlK6KOgO6wHvsNM0Nbut/ftABm tBtp8Vi0azJVGpbmuT7JBuxDJ2RecMJZbo0pkNQGu/MQJfWg0zyZmMZ0xVRw8Iyk k0z6pFf9hztWl/cpPIbTQwJXuKzW+XUPaEMMVQH4bUIh2JL1yKfARINdKUeJzf5O zCraOx3KxWb7tj2sz7aY+mgZG/3H8H+LY+18XA== -----END CERTIFICATE-----Generated at Sat Jun 13 15:30:47 2026 by rpki-client