
$ rpki-client -vvvf rpki.sub.apnic.net/repository/A91905300000/9/33F4082166A89FFF6F326AE09B44BFBEF1629FEB.mft
File: 33F4082166A89FFF6F326AE09B44BFBEF1629FEB.mft (raw, json)
Hash identifier: T9GsViSV8J4bkvqkF7I80Nr0QN5Jggy7xPDbF+k1ayg=
Subject key identifier: FE:CA:9B:8D:34:58:F6:09:C0:AF:63:08:C5:75:FA:CE:A5:09:87:17
Authority key identifier: 33:F4:08:21:66:A8:9F:FF:6F:32:6A:E0:9B:44:BF:BE:F1:62:9F:EB
Certificate issuer: /CN=A919B0BE0000/serialNumber=33F4082166A89FFF6F326AE09B44BFBEF1629FEB
Certificate serial: 010DECF4A4A692B4D50A6B569B36426316A0CFCC
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/M_QIIWaon_9vMmrgm0S_vvFin-s.cer
Subject info access: rsync://rpki.sub.apnic.net/repository/A91905300000/9/33F4082166A89FFF6F326AE09B44BFBEF1629FEB.mft
Manifest number: 01FC
Signing time: Thu 24 Sep 2026 06:40:34 +0000
Manifest this update: Thu 24 Sep 2026 06:35:34 +0000
Manifest next update: Fri 25 Sep 2026 06:59:34 +0000
Files and hashes: 1: 3230332e312e36382e302f32342d3234203d3e2039393133.roa (hash: i4MOXpZ+JJO1Ou/5KA98cmmyul9itGAIk/VXC8WVFIw=)
2: 3230332e312e36392e302f32342d3234203d3e2039393133.roa (hash: dO5yl6c5PpbhT8VJ6Gr4SbudCYxk8yUDmtlBjVa4pe8=)
3: 3230332e35372e32332e302f32342d3234203d3e2039393133.roa (hash: rW0FmeSZuAkFdgzjWN69hruCSHp62G5GuOISvj+nn7Y=)
4: 3230332e302e38302e302f32342d3234203d3e2039343439.roa (hash: adKswZZ+83MQE5j5Z1GVAEbYVQjS90TsNrYqZtVzT5k=)
5: 3130332e3233332e3230382e302f32322d3234203d3e2039393133.roa (hash: 9lGWz7w8c/R5ruJGuzTNaIgTzYgfFa8S2t6e2U1YuXY=)
6: 3230332e302e38302e302f32342d3234203d3e2039393133.roa (hash: R7Xxtkh+I8I5SM+RNqD6t39Ei7w+LcPfWR//Yn+T4e4=)
7: 3230332e33312e3131302e302f32342d3234203d3e2039393133.roa (hash: /zSQzqTydH2+pkmO1iK1Kwm8hfUZxAJtGdbzfN4QbwM=)
8: 3230322e31342e3134382e302f32342d3234203d3e2039393133.roa (hash: ND9xLQI8Vy8JA2jtUa6aYRzvXLnRH0xjgm4vmCRNG9o=)
9: 3230332e33312e3131312e302f32342d3234203d3e2039393133.roa (hash: dtJRARG5+BtRZcmiFZ9zHEYQh6J1meTmlcz69DUCY8E=)
10: 3230332e302e38302e302f32342d3234203d3e20313334303930.roa (hash: kdx3CUTNv+VjeEs6W9tudB6rNQZmlJL2ExzD6LblsT4=)
11: 33F4082166A89FFF6F326AE09B44BFBEF1629FEB.crl (hash: QfHa/dpv3gfwNHlY3v1gRTE/DUCUCfbYwFXD5xZG9ic=)
Validation: OK
Signature path: rsync://rpki.sub.apnic.net/repository/A91905300000/9/33F4082166A89FFF6F326AE09B44BFBEF1629FEB.crl
rsync://rpki.sub.apnic.net/repository/A91905300000/9/33F4082166A89FFF6F326AE09B44BFBEF1629FEB.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/M_QIIWaon_9vMmrgm0S_vvFin-s.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 25 Sep 2026 06:59:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:ec:f4:a4:a6:92:b4:d5:0a:6b:56:9b:36:42:63:16:a0:cf:cc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A919B0BE0000, serialNumber=33F4082166A89FFF6F326AE09B44BFBEF1629FEB
Validity
Not Before: Sep 24 06:35:34 2026 GMT
Not After : Sep 25 06:59:34 2026 GMT
Subject: CN=FECA9B8D3458F609C0AF6308C575FACEA5098717
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:b5:8c:6b:cf:2b:1b:b0:10:aa:4f:c4:ac:60:
18:f0:1d:b2:a0:65:70:e0:65:c3:9b:1d:ca:4d:28:
af:62:12:13:1e:be:e9:52:da:ab:85:90:4e:dc:ef:
73:bb:1f:b1:41:74:08:5c:34:27:e0:a6:b3:84:3f:
6b:3d:0d:38:67:ef:fa:dc:3c:fe:a6:3a:06:a1:5e:
6b:18:dd:98:74:7f:97:8a:31:da:d3:1b:65:c4:25:
f8:25:e5:75:26:bc:b1:60:b4:46:41:3d:f9:82:d0:
2b:f1:50:e4:cc:eb:dd:17:7a:66:ff:25:a1:ff:54:
47:68:70:64:9f:c3:e1:3e:9c:d4:3c:eb:ad:2d:84:
db:75:44:89:0e:b6:82:0b:60:a7:46:35:47:be:08:
6b:5c:63:fe:8c:6c:b9:cd:90:75:c5:2e:f0:ba:2b:
b7:75:4b:f7:ba:54:61:38:2a:73:60:19:9d:db:0b:
6a:59:08:96:c6:cb:ad:12:02:aa:13:2c:c6:c3:89:
12:bc:01:55:eb:82:51:59:2e:73:aa:6b:9d:bc:6e:
7f:5b:17:db:2a:83:36:37:e5:fc:9e:e2:55:ae:f4:
66:cc:2f:b4:9f:17:44:5b:c8:96:71:12:34:e8:74:
e1:4e:16:1c:4b:09:e6:04:17:ba:9c:56:c2:18:bf:
30:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FE:CA:9B:8D:34:58:F6:09:C0:AF:63:08:C5:75:FA:CE:A5:09:87:17
X509v3 Authority Key Identifier:
keyid:33:F4:08:21:66:A8:9F:FF:6F:32:6A:E0:9B:44:BF:BE:F1:62:9F:EB
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.sub.apnic.net/repository/A91905300000/9/33F4082166A89FFF6F326AE09B44BFBEF1629FEB.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/M_QIIWaon_9vMmrgm0S_vvFin-s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.sub.apnic.net/repository/A91905300000/9/33F4082166A89FFF6F326AE09B44BFBEF1629FEB.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0d:b3:d7:00:be:da:ce:9b:c2:9b:e1:ab:47:00:38:c5:5a:86:
50:3d:5b:4d:5d:40:53:8c:84:b7:29:33:48:1f:8f:bc:2e:d2:
28:aa:29:53:c2:81:b6:1e:88:44:ca:f7:e3:a8:1f:05:ea:6c:
9c:54:0d:6c:70:9b:63:b7:31:51:82:e2:f5:e7:9f:dd:1e:bc:
0c:8b:04:a6:e8:ae:da:65:8b:e9:dd:16:c1:28:da:e2:06:c0:
a3:7e:d1:6b:3d:bf:02:57:6a:5e:0b:b5:33:a4:af:a6:8c:b8:
f4:12:05:a0:da:ed:c5:62:34:55:cc:da:f2:09:91:e9:c1:45:
d9:11:c4:e1:a0:2c:fd:a7:85:47:b1:ca:25:36:18:18:63:d9:
19:86:5e:72:82:cb:77:8a:20:3f:75:54:f2:99:6d:d0:9f:af:
9c:23:fd:23:a2:c9:90:03:82:0b:36:95:d3:fc:35:db:5d:81:
ee:98:d4:6a:e1:8a:4a:80:56:ab:c2:90:a4:e8:bf:d4:e5:db:
f8:67:57:2b:d0:c1:8d:bc:86:6f:b3:88:1e:cb:ba:41:f6:3a:
ae:26:b7:83:05:78:39:c7:f2:d7:bd:b7:e8:d9:80:df:e9:4a:
4e:c1:a1:34:9b:68:c2:d2:64:d7:ef:44:00:28:09:24:35:69:
16:d0:53:d6
-----BEGIN CERTIFICATE-----
MIIFKDCCBBCgAwIBAgIUAQ3s9KSmkrTVCmtWmzZCYxagz8wwDQYJKoZIhvcNAQEL
BQAwSjEVMBMGA1UEAxMMQTkxOUIwQkUwMDAwMTEwLwYDVQQFEygzM0Y0MDgyMTY2
QTg5RkZGNkYzMjZBRTA5QjQ0QkZCRUYxNjI5RkVCMB4XDTI2MDkyNDA2MzUzNFoX
DTI2MDkyNTA2NTkzNFowMzExMC8GA1UEAxMoRkVDQTlCOEQzNDU4RjYwOUMwQUY2
MzA4QzU3NUZBQ0VBNTA5ODcxNzCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC
ggEBAJ61jGvPKxuwEKpPxKxgGPAdsqBlcOBlw5sdyk0or2ISEx6+6VLaq4WQTtzv
c7sfsUF0CFw0J+Cms4Q/az0NOGfv+tw8/qY6BqFeaxjdmHR/l4ox2tMbZcQl+CXl
dSa8sWC0RkE9+YLQK/FQ5Mzr3Rd6Zv8lof9UR2hwZJ/D4T6c1DzrrS2E23VEiQ62
ggtgp0Y1R74Ia1xj/oxsuc2QdcUu8Lort3VL97pUYTgqc2AZndsLalkIlsbLrRIC
qhMsxsOJErwBVeuCUVkuc6prnbxuf1sX2yqDNjfl/J7iVa70ZswvtJ8XRFvIlnES
NOh04U4WHEsJ5gQXupxWwhi/MFECAwEAAaOCAhswggIXMB0GA1UdDgQWBBT+ypuN
NFj2CcCvYwjFdfrOpQmHFzAfBgNVHSMEGDAWgBQz9AghZqif/28yauCbRL++8WKf
6zAOBgNVHQ8BAf8EBAMCB4AwcgYDVR0fBGswaTBnoGWgY4ZhcnN5bmM6Ly9ycGtp
LnN1Yi5hcG5pYy5uZXQvcmVwb3NpdG9yeS9BOTE5MDUzMDAwMDAvOS8zM0Y0MDgy
MTY2QTg5RkZGNkYzMjZBRTA5QjQ0QkZCRUYxNjI5RkVCLmNybDB+BggrBgEFBQcB
AQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVwb3Np
dG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9NX1FJSVdhb25f
OXZNbXJnbTBTX3Z2RmluLXMuY2VyMH0GCCsGAQUFBwELBHEwbzBtBggrBgEFBQcw
C4ZhcnN5bmM6Ly9ycGtpLnN1Yi5hcG5pYy5uZXQvcmVwb3NpdG9yeS9BOTE5MDUz
MDAwMDAvOS8zM0Y0MDgyMTY2QTg5RkZGNkYzMjZBRTA5QjQ0QkZCRUYxNjI5RkVC
Lm1mdDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIw
EDAGBAIAAQUAMAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG
9w0BAQsFAAOCAQEADbPXAL7azpvCm+GrRwA4xVqGUD1bTV1AU4yEtykzSB+PvC7S
KKopU8KBth6IRMr346gfBepsnFQNbHCbY7cxUYLi9eef3R68DIsEpuiu2mWL6d0W
wSja4gbAo37Raz2/AldqXgu1M6Svpoy49BIFoNrtxWI0Vcza8gmR6cFF2RHE4aAs
/aeFR7HKJTYYGGPZGYZecoLLd4ogP3VU8plt0J+vnCP9I6LJkAOCCzaV0/w1212B
7pjUauGKSoBWq8KQpOi/1OXb+GdXK9DBjbyGb7OIHsu6QfY6ria3gwV4Ocfy1723
6NmA3+lKTsGhNJtowtJk1+9EACgJJDVpFtBT1g==
-----END CERTIFICATE-----
Generated at Fri Sep 25 01:02:43 2026 by rpki-client