$ rpki-client -vvf rpki.sub.apnic.net/repository/A91905300000/9/33F4082166A89FFF6F326AE09B44BFBEF1629FEB.mft File: 33F4082166A89FFF6F326AE09B44BFBEF1629FEB.mft (raw, json) Hash identifier: qgAnmbeIJc4zCCxaZ2D8clpQlg1Nd5LRya8FZ4HQX5A= Subject key identifier: E3:F9:27:54:59:62:BD:B7:D6:D8:78:2A:20:93:1C:AE:D6:2B:2A:CA Authority key identifier: 33:F4:08:21:66:A8:9F:FF:6F:32:6A:E0:9B:44:BF:BE:F1:62:9F:EB Certificate issuer: /CN=A919B0BE0000/serialNumber=33F4082166A89FFF6F326AE09B44BFBEF1629FEB Certificate serial: 4E3BE0A9F8A648B5A62676A76E6A94AE726B9612 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/M_QIIWaon_9vMmrgm0S_vvFin-s.cer Subject info access: rsync://rpki.sub.apnic.net/repository/A91905300000/9/33F4082166A89FFF6F326AE09B44BFBEF1629FEB.mft Manifest number: 2E Signing time: Sun 19 Oct 2025 15:07:08 +0000 Manifest this update: Sun 19 Oct 2025 15:02:08 +0000 Manifest next update: Mon 20 Oct 2025 17:31:08 +0000 Files and hashes: 1: 3230332e312e36382e302f32342d3234203d3e2039393133.roa (hash: sf6xpmLBwwFxYc5zLhbA2o5zERE4ANPwwQpcoFqWw9Y=) 2: 3230322e31342e3134382e302f32342d3234203d3e2039393133.roa (hash: jEqn8jELxuDQMwvht+ON+P9QmjrSbE+0mwwGAYlItGo=) 3: 3130332e3233332e3230382e302f32322d3234203d3e2039393133.roa (hash: gjG1OZMW5faujAfknl/AsEqIEMo1X4J8rMD0eZTWBDg=) 4: 3230332e33312e3131312e302f32342d3234203d3e2039393133.roa (hash: YlAvV8ZZuoYsPDhwbCWgqa9GkyYRu/NKCURMzPqa7q4=) 5: 3230332e312e36392e302f32342d3234203d3e2039393133.roa (hash: HYKqNuiBE/DUFFDQyKmuMZ6wkcvhITNaHWFYsHIuJlA=) 6: 3230332e302e38302e302f32342d3234203d3e2039393133.roa (hash: 5CEE0bOW0MgpOlLO8lN9+nz4tABxvncSgkR6y2kvmq4=) 7: 3230332e35372e32332e302f32342d3234203d3e2039393133.roa (hash: 9vPoyR5h4XW7VzKPshTgyqTHm+x238aD7PNshnOSJtk=) 8: 33F4082166A89FFF6F326AE09B44BFBEF1629FEB.crl (hash: vgG2/hNA+ffL/nKvwpUeOwtS5TWMLPStjJQQDs4oEMM=) 9: 3230332e33312e3131302e302f32342d3234203d3e2039393133.roa (hash: Th3RG2y4VUTKhfMzlUUSBpKBps2IwB4thNo9+TULNBQ=) Validation: OK Signature path: rsync://rpki.sub.apnic.net/repository/A91905300000/9/33F4082166A89FFF6F326AE09B44BFBEF1629FEB.crl rsync://rpki.sub.apnic.net/repository/A91905300000/9/33F4082166A89FFF6F326AE09B44BFBEF1629FEB.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/M_QIIWaon_9vMmrgm0S_vvFin-s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 20 Oct 2025 17:31:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4e:3b:e0:a9:f8:a6:48:b5:a6:26:76:a7:6e:6a:94:ae:72:6b:96:12 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A919B0BE0000, serialNumber=33F4082166A89FFF6F326AE09B44BFBEF1629FEB Validity Not Before: Oct 19 15:02:08 2025 GMT Not After : Oct 20 17:31:08 2025 GMT Subject: CN=E3F927545962BDB7D6D8782A20931CAED62B2ACA Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:fb:09:d5:dc:4e:bd:1b:8d:fb:43:3c:6f:09:59: 08:96:eb:14:14:22:15:e8:2b:92:7b:42:fe:21:d5: ca:09:f4:b9:1f:29:51:50:5c:25:6a:55:05:93:b1: a3:25:67:de:e8:27:ea:3b:52:40:f8:ad:be:71:fc: c8:f2:96:07:f4:ba:df:4f:6f:80:62:6e:04:c6:20: 8c:93:d0:34:36:13:39:58:e7:85:99:e2:47:82:43: b7:4d:96:70:f7:f2:8c:15:35:a8:92:89:ba:e5:81: c3:c9:8b:08:cc:92:5d:4c:c4:82:e1:44:8d:2d:c8: b9:10:15:aa:c6:9a:24:ef:6a:c8:6b:1e:f7:19:24: c0:df:21:ec:75:02:0c:9d:50:b5:0d:f2:30:fc:9a: b9:e3:50:36:5c:80:8e:84:f1:6d:68:35:80:1c:eb: 25:2f:4f:81:ce:77:13:a6:3a:32:3f:95:f7:05:94: 8b:79:20:24:b1:d4:8c:e1:96:08:04:2f:14:90:f1: e4:32:04:33:be:53:01:90:86:65:6a:eb:41:e0:95: df:a5:f6:fb:7b:a4:78:f9:61:ef:3d:3b:79:8a:13: 4d:fd:ca:a6:d8:b2:28:11:51:18:72:cb:f1:96:b5: ef:a9:1f:70:ae:17:53:12:04:90:5c:f2:9e:84:85: df:19 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E3:F9:27:54:59:62:BD:B7:D6:D8:78:2A:20:93:1C:AE:D6:2B:2A:CA X509v3 Authority Key Identifier: keyid:33:F4:08:21:66:A8:9F:FF:6F:32:6A:E0:9B:44:BF:BE:F1:62:9F:EB X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.sub.apnic.net/repository/A91905300000/9/33F4082166A89FFF6F326AE09B44BFBEF1629FEB.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/M_QIIWaon_9vMmrgm0S_vvFin-s.cer Subject Information Access: Signed Object - URI:rsync://rpki.sub.apnic.net/repository/A91905300000/9/33F4082166A89FFF6F326AE09B44BFBEF1629FEB.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 6c:c7:88:20:21:8c:76:0f:95:de:5d:7c:57:cd:ee:c4:e0:75: ef:ef:fe:0a:35:8c:57:e7:5b:a2:d9:78:69:cb:88:10:ec:d5: 17:8e:57:9f:45:e3:bc:ee:59:55:e1:9d:0d:e9:15:62:00:f2: f1:c1:1d:00:6a:5a:02:bc:e7:be:e4:0a:e4:f5:fd:6b:d7:0d: ad:32:72:fd:15:a1:92:7b:58:d4:3b:6b:1b:5a:dd:d3:65:41: 6f:48:97:a2:61:5c:79:1b:73:62:b7:2f:87:58:47:9b:ba:42: ba:c3:0c:b3:31:23:88:d4:ac:4d:23:55:09:0b:07:d1:16:b6: 49:bc:2d:7e:b6:86:90:9e:fa:84:57:ed:78:bc:b4:66:6f:df: 58:30:ee:8a:54:92:2e:1e:ce:52:1e:e9:e7:8d:55:3d:14:c9: ed:2d:51:65:ec:fc:50:c0:ae:42:ca:60:28:9e:e0:a8:5a:c3: 06:ff:c4:a2:60:63:b8:d5:66:5b:45:5d:c3:30:69:7a:fd:28: 95:ad:a6:b4:9d:0c:3d:86:0a:17:c9:69:c6:de:56:c8:bd:b8: 19:ba:01:7a:e4:24:6d:4a:84:87:b8:f2:88:e2:24:a3:58:38: ad:17:af:12:3f:be:a4:e5:12:1a:9e:ee:f2:25:a7:24:7f:1f: 92:28:94:62 -----BEGIN CERTIFICATE----- MIIFKDCCBBCgAwIBAgIUTjvgqfimSLWmJnanbmqUrnJrlhIwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxOUIwQkUwMDAwMTEwLwYDVQQFEygzM0Y0MDgyMTY2 QTg5RkZGNkYzMjZBRTA5QjQ0QkZCRUYxNjI5RkVCMB4XDTI1MTAxOTE1MDIwOFoX DTI1MTAyMDE3MzEwOFowMzExMC8GA1UEAxMoRTNGOTI3NTQ1OTYyQkRCN0Q2RDg3 ODJBMjA5MzFDQUVENjJCMkFDQTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAPsJ1dxOvRuN+0M8bwlZCJbrFBQiFegrkntC/iHVygn0uR8pUVBcJWpVBZOx oyVn3ugn6jtSQPitvnH8yPKWB/S6309vgGJuBMYgjJPQNDYTOVjnhZniR4JDt02W cPfyjBU1qJKJuuWBw8mLCMySXUzEguFEjS3IuRAVqsaaJO9qyGse9xkkwN8h7HUC DJ1QtQ3yMPyaueNQNlyAjoTxbWg1gBzrJS9Pgc53E6Y6Mj+V9wWUi3kgJLHUjOGW CAQvFJDx5DIEM75TAZCGZWrrQeCV36X2+3ukePlh7z07eYoTTf3KptiyKBFRGHLL 8Za176kfcK4XUxIEkFzynoSF3xkCAwEAAaOCAhswggIXMB0GA1UdDgQWBBTj+SdU WWK9t9bYeCogkxyu1isqyjAfBgNVHSMEGDAWgBQz9AghZqif/28yauCbRL++8WKf 6zAOBgNVHQ8BAf8EBAMCB4AwcgYDVR0fBGswaTBnoGWgY4ZhcnN5bmM6Ly9ycGtp LnN1Yi5hcG5pYy5uZXQvcmVwb3NpdG9yeS9BOTE5MDUzMDAwMDAvOS8zM0Y0MDgy MTY2QTg5RkZGNkYzMjZBRTA5QjQ0QkZCRUYxNjI5RkVCLmNybDB+BggrBgEFBQcB AQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVwb3Np dG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9NX1FJSVdhb25f OXZNbXJnbTBTX3Z2RmluLXMuY2VyMH0GCCsGAQUFBwELBHEwbzBtBggrBgEFBQcw C4ZhcnN5bmM6Ly9ycGtpLnN1Yi5hcG5pYy5uZXQvcmVwb3NpdG9yeS9BOTE5MDUz MDAwMDAvOS8zM0Y0MDgyMTY2QTg5RkZGNkYzMjZBRTA5QjQ0QkZCRUYxNjI5RkVC Lm1mdDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIw EDAGBAIAAQUAMAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG 9w0BAQsFAAOCAQEAbMeIICGMdg+V3l18V83uxOB17+/+CjWMV+dbotl4acuIEOzV F45Xn0XjvO5ZVeGdDekVYgDy8cEdAGpaArznvuQK5PX9a9cNrTJy/RWhkntY1Dtr G1rd02VBb0iXomFceRtzYrcvh1hHm7pCusMMszEjiNSsTSNVCQsH0Ra2SbwtfraG kJ76hFfteLy0Zm/fWDDuilSSLh7OUh7p541VPRTJ7S1RZez8UMCuQspgKJ7gqFrD Bv/EomBjuNVmW0VdwzBpev0ola2mtJ0MPYYKF8lpxt5WyL24GboBeuQkbUqEh7jy iOIko1g4rRevEj++pOUSGp7u8iWnJH8fkiiUYg== -----END CERTIFICATE-----Generated at Mon Oct 20 01:47:14 2025 by rpki-client