$ rpki-client -vvf rpki.sub.apnic.net/repository/A91905300000/9/33F4082166A89FFF6F326AE09B44BFBEF1629FEB.mft File: 33F4082166A89FFF6F326AE09B44BFBEF1629FEB.mft (raw, json) Hash identifier: qU29uojp33H1kr+/yElUsgOluYaCJQ1X2bywgYRyhJg= Subject key identifier: 00:F6:E8:A5:AE:39:A2:00:72:7F:22:AC:47:45:FE:A8:75:86:E9:D8 Authority key identifier: 33:F4:08:21:66:A8:9F:FF:6F:32:6A:E0:9B:44:BF:BE:F1:62:9F:EB Certificate issuer: /CN=A919B0BE0000/serialNumber=33F4082166A89FFF6F326AE09B44BFBEF1629FEB Certificate serial: 18BEC08558974522A82DE818934EE1CC5B09EB54 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/M_QIIWaon_9vMmrgm0S_vvFin-s.cer Subject info access: rsync://rpki.sub.apnic.net/repository/A91905300000/9/33F4082166A89FFF6F326AE09B44BFBEF1629FEB.mft Manifest number: 0102 Signing time: Wed 25 Mar 2026 20:06:13 +0000 Manifest this update: Wed 25 Mar 2026 20:01:13 +0000 Manifest next update: Thu 26 Mar 2026 23:17:13 +0000 Files and hashes: 1: 3230332e33312e3131312e302f32342d3234203d3e2039393133.roa (hash: YlAvV8ZZuoYsPDhwbCWgqa9GkyYRu/NKCURMzPqa7q4=) 2: 3130332e3233332e3230382e302f32322d3234203d3e2039393133.roa (hash: gjG1OZMW5faujAfknl/AsEqIEMo1X4J8rMD0eZTWBDg=) 3: 3230332e302e38302e302f32342d3234203d3e2039393133.roa (hash: 5CEE0bOW0MgpOlLO8lN9+nz4tABxvncSgkR6y2kvmq4=) 4: 3230332e33312e3131302e302f32342d3234203d3e2039393133.roa (hash: Th3RG2y4VUTKhfMzlUUSBpKBps2IwB4thNo9+TULNBQ=) 5: 33F4082166A89FFF6F326AE09B44BFBEF1629FEB.crl (hash: wTFiNop4GHo0Mov+dRcMiZ0f+UG/sdlrNIBwd8m+8LE=) 6: 3230322e31342e3134382e302f32342d3234203d3e2039393133.roa (hash: jEqn8jELxuDQMwvht+ON+P9QmjrSbE+0mwwGAYlItGo=) 7: 3230332e35372e32332e302f32342d3234203d3e2039393133.roa (hash: 9vPoyR5h4XW7VzKPshTgyqTHm+x238aD7PNshnOSJtk=) 8: 3230332e312e36392e302f32342d3234203d3e2039393133.roa (hash: HYKqNuiBE/DUFFDQyKmuMZ6wkcvhITNaHWFYsHIuJlA=) 9: 3230332e312e36382e302f32342d3234203d3e2039393133.roa (hash: sf6xpmLBwwFxYc5zLhbA2o5zERE4ANPwwQpcoFqWw9Y=) Validation: OK Signature path: rsync://rpki.sub.apnic.net/repository/A91905300000/9/33F4082166A89FFF6F326AE09B44BFBEF1629FEB.crl rsync://rpki.sub.apnic.net/repository/A91905300000/9/33F4082166A89FFF6F326AE09B44BFBEF1629FEB.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/M_QIIWaon_9vMmrgm0S_vvFin-s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 26 Mar 2026 23:17:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 18:be:c0:85:58:97:45:22:a8:2d:e8:18:93:4e:e1:cc:5b:09:eb:54 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A919B0BE0000, serialNumber=33F4082166A89FFF6F326AE09B44BFBEF1629FEB Validity Not Before: Mar 25 20:01:13 2026 GMT Not After : Mar 26 23:17:13 2026 GMT Subject: CN=00F6E8A5AE39A200727F22AC4745FEA87586E9D8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:92:bc:01:6e:b5:27:cf:f4:fa:4c:1e:8d:39:9b: 62:28:ee:a1:88:eb:3d:2c:a2:a2:a6:35:ab:a8:86: bf:75:7a:cd:12:63:00:b9:0c:f2:3a:f1:56:df:1b: bc:9d:07:c2:6b:8e:86:29:06:13:f1:82:8f:9a:4a: 11:9b:11:7a:68:82:77:e8:c7:6f:03:23:df:73:cc: 65:8a:46:af:0c:7b:6d:93:42:bd:27:32:58:26:5b: f4:41:5f:35:e3:85:dd:2e:7c:e2:92:79:10:0f:16: 18:06:3d:3f:fa:35:d7:e7:29:a0:07:96:52:5d:d0: cf:10:11:7d:3e:e8:2f:b3:4b:0d:80:06:a9:e4:3e: 80:1f:94:f2:59:f2:37:58:ae:bb:81:60:34:6d:65: 61:4d:e8:75:bc:55:77:60:c1:d9:af:af:98:c0:6a: 96:d0:b0:20:69:dd:c1:10:98:6d:21:cb:7d:bc:7a: e7:30:b0:79:80:8c:25:06:5d:98:1d:05:61:51:3d: 75:0c:e9:37:9e:87:47:34:06:d6:27:88:d0:3d:a3: 25:85:c6:07:06:18:93:49:fa:bd:d0:34:15:c9:35: f9:1a:4c:ac:16:08:58:78:cf:d0:a3:5d:4a:85:b0: e5:32:be:f7:40:d4:d5:0a:8c:75:54:ab:9f:f6:45: 8c:e1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 00:F6:E8:A5:AE:39:A2:00:72:7F:22:AC:47:45:FE:A8:75:86:E9:D8 X509v3 Authority Key Identifier: keyid:33:F4:08:21:66:A8:9F:FF:6F:32:6A:E0:9B:44:BF:BE:F1:62:9F:EB X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.sub.apnic.net/repository/A91905300000/9/33F4082166A89FFF6F326AE09B44BFBEF1629FEB.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/M_QIIWaon_9vMmrgm0S_vvFin-s.cer Subject Information Access: Signed Object - URI:rsync://rpki.sub.apnic.net/repository/A91905300000/9/33F4082166A89FFF6F326AE09B44BFBEF1629FEB.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 27:12:13:76:dd:82:1a:5d:93:ff:64:a3:72:ab:19:04:e4:a3: 0a:f4:85:9f:aa:23:58:23:e5:94:bb:b6:ed:2a:d2:62:6b:11: 4f:85:04:7a:99:12:22:f5:44:7a:05:46:06:a0:3c:43:a2:8d: d1:1b:03:50:15:ed:03:f6:29:c7:2e:e1:d2:b2:49:59:d9:02: f3:ad:be:f1:62:ad:6b:5b:48:7f:26:ec:53:f4:2c:59:64:6e: 05:70:97:96:9a:f2:87:03:bb:53:e6:fe:9d:f0:b5:e9:fd:b6: 52:b0:7d:d1:f6:27:63:cb:f4:dd:34:f4:19:2a:3b:3e:99:48: f4:5a:f1:89:88:56:3c:86:4d:ef:88:1a:df:ac:ee:34:06:50: bf:1e:63:c1:1b:eb:22:64:4f:c2:ee:fb:f0:80:c4:90:50:b1: 87:f0:97:41:58:10:66:4b:57:71:25:f5:0b:3d:f5:43:28:90: 1f:88:46:9e:d4:dd:2f:7a:fa:31:84:41:3d:64:25:39:cf:16: c5:53:47:99:04:f6:57:1d:67:08:ee:07:a7:86:3a:b4:cc:33: a9:f8:2b:b2:4a:b5:ab:5b:bb:3a:9e:32:f8:2e:f7:a3:25:34: f0:3d:33:24:35:33:b9:15:bd:e1:11:50:67:07:68:fe:28:21: 15:af:c6:d0 -----BEGIN CERTIFICATE----- MIIFKDCCBBCgAwIBAgIUGL7AhViXRSKoLegYk07hzFsJ61QwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxOUIwQkUwMDAwMTEwLwYDVQQFEygzM0Y0MDgyMTY2 QTg5RkZGNkYzMjZBRTA5QjQ0QkZCRUYxNjI5RkVCMB4XDTI2MDMyNTIwMDExM1oX DTI2MDMyNjIzMTcxM1owMzExMC8GA1UEAxMoMDBGNkU4QTVBRTM5QTIwMDcyN0Yy MkFDNDc0NUZFQTg3NTg2RTlEODCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAJK8AW61J8/0+kwejTmbYijuoYjrPSyioqY1q6iGv3V6zRJjALkM8jrxVt8b vJ0HwmuOhikGE/GCj5pKEZsRemiCd+jHbwMj33PMZYpGrwx7bZNCvScyWCZb9EFf NeOF3S584pJ5EA8WGAY9P/o11+cpoAeWUl3QzxARfT7oL7NLDYAGqeQ+gB+U8lny N1iuu4FgNG1lYU3odbxVd2DB2a+vmMBqltCwIGndwRCYbSHLfbx65zCweYCMJQZd mB0FYVE9dQzpN56HRzQG1ieI0D2jJYXGBwYYk0n6vdA0Fck1+RpMrBYIWHjP0KNd SoWw5TK+90DU1QqMdVSrn/ZFjOECAwEAAaOCAhswggIXMB0GA1UdDgQWBBQA9uil rjmiAHJ/IqxHRf6odYbp2DAfBgNVHSMEGDAWgBQz9AghZqif/28yauCbRL++8WKf 6zAOBgNVHQ8BAf8EBAMCB4AwcgYDVR0fBGswaTBnoGWgY4ZhcnN5bmM6Ly9ycGtp LnN1Yi5hcG5pYy5uZXQvcmVwb3NpdG9yeS9BOTE5MDUzMDAwMDAvOS8zM0Y0MDgy MTY2QTg5RkZGNkYzMjZBRTA5QjQ0QkZCRUYxNjI5RkVCLmNybDB+BggrBgEFBQcB AQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVwb3Np dG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9NX1FJSVdhb25f OXZNbXJnbTBTX3Z2RmluLXMuY2VyMH0GCCsGAQUFBwELBHEwbzBtBggrBgEFBQcw C4ZhcnN5bmM6Ly9ycGtpLnN1Yi5hcG5pYy5uZXQvcmVwb3NpdG9yeS9BOTE5MDUz MDAwMDAvOS8zM0Y0MDgyMTY2QTg5RkZGNkYzMjZBRTA5QjQ0QkZCRUYxNjI5RkVC Lm1mdDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIw EDAGBAIAAQUAMAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG 9w0BAQsFAAOCAQEAJxITdt2CGl2T/2SjcqsZBOSjCvSFn6ojWCPllLu27SrSYmsR T4UEepkSIvVEegVGBqA8Q6KN0RsDUBXtA/Ypxy7h0rJJWdkC862+8WKta1tIfybs U/QsWWRuBXCXlpryhwO7U+b+nfC16f22UrB90fYnY8v03TT0GSo7PplI9FrxiYhW PIZN74ga36zuNAZQvx5jwRvrImRPwu778IDEkFCxh/CXQVgQZktXcSX1Cz31QyiQ H4hGntTdL3r6MYRBPWQlOc8WxVNHmQT2Vx1nCO4Hp4Y6tMwzqfgrskq1q1u7Op4y +C73oyU08D0zJDUzuRW94RFQZwdo/ighFa/G0A== -----END CERTIFICATE-----Generated at Thu Mar 26 07:12:35 2026 by rpki-client