$ rpki-client -vvf rpki.sub.apnic.net/repository/A91905300000/9/33F4082166A89FFF6F326AE09B44BFBEF1629FEB.mft File: 33F4082166A89FFF6F326AE09B44BFBEF1629FEB.mft (raw, json) Hash identifier: UnpS8kTfaBKnZuKNS1s7v2MBeD7bBB9n5+77dl0+Y78= Subject key identifier: 71:0F:C5:1D:BF:79:73:03:3D:FA:83:0E:74:28:D2:F8:49:C0:FB:71 Authority key identifier: 33:F4:08:21:66:A8:9F:FF:6F:32:6A:E0:9B:44:BF:BE:F1:62:9F:EB Certificate issuer: /CN=A919B0BE0000/serialNumber=33F4082166A89FFF6F326AE09B44BFBEF1629FEB Certificate serial: 70ADE2E0D68EFE5AC2B77E61421EC8E7BDE6B4E9 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/M_QIIWaon_9vMmrgm0S_vvFin-s.cer Subject info access: rsync://rpki.sub.apnic.net/repository/A91905300000/9/33F4082166A89FFF6F326AE09B44BFBEF1629FEB.mft Manifest number: 01A8 Signing time: Thu 23 Jul 2026 08:49:01 +0000 Manifest this update: Thu 23 Jul 2026 08:44:01 +0000 Manifest next update: Fri 24 Jul 2026 09:20:01 +0000 Files and hashes: 1: 3230332e302e38302e302f32342d3234203d3e20313334303930.roa (hash: kdx3CUTNv+VjeEs6W9tudB6rNQZmlJL2ExzD6LblsT4=) 2: 3130332e3233332e3230382e302f32322d3234203d3e2039393133.roa (hash: 9lGWz7w8c/R5ruJGuzTNaIgTzYgfFa8S2t6e2U1YuXY=) 3: 3230332e33312e3131302e302f32342d3234203d3e2039393133.roa (hash: /zSQzqTydH2+pkmO1iK1Kwm8hfUZxAJtGdbzfN4QbwM=) 4: 3230332e33312e3131312e302f32342d3234203d3e2039393133.roa (hash: dtJRARG5+BtRZcmiFZ9zHEYQh6J1meTmlcz69DUCY8E=) 5: 3230322e31342e3134382e302f32342d3234203d3e2039393133.roa (hash: ND9xLQI8Vy8JA2jtUa6aYRzvXLnRH0xjgm4vmCRNG9o=) 6: 3230332e312e36382e302f32342d3234203d3e2039393133.roa (hash: i4MOXpZ+JJO1Ou/5KA98cmmyul9itGAIk/VXC8WVFIw=) 7: 3230332e302e38302e302f32342d3234203d3e2039343439.roa (hash: adKswZZ+83MQE5j5Z1GVAEbYVQjS90TsNrYqZtVzT5k=) 8: 3230332e35372e32332e302f32342d3234203d3e2039393133.roa (hash: rW0FmeSZuAkFdgzjWN69hruCSHp62G5GuOISvj+nn7Y=) 9: 33F4082166A89FFF6F326AE09B44BFBEF1629FEB.crl (hash: jO+O2btjxc0hxmzKxcOiqKyrRQcxQ4HovARAmDHBSVM=) 10: 3230332e302e38302e302f32342d3234203d3e2039393133.roa (hash: R7Xxtkh+I8I5SM+RNqD6t39Ei7w+LcPfWR//Yn+T4e4=) 11: 3230332e312e36392e302f32342d3234203d3e2039393133.roa (hash: dO5yl6c5PpbhT8VJ6Gr4SbudCYxk8yUDmtlBjVa4pe8=) Validation: OK Signature path: rsync://rpki.sub.apnic.net/repository/A91905300000/9/33F4082166A89FFF6F326AE09B44BFBEF1629FEB.crl rsync://rpki.sub.apnic.net/repository/A91905300000/9/33F4082166A89FFF6F326AE09B44BFBEF1629FEB.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/M_QIIWaon_9vMmrgm0S_vvFin-s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 24 Jul 2026 09:20:01 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 70:ad:e2:e0:d6:8e:fe:5a:c2:b7:7e:61:42:1e:c8:e7:bd:e6:b4:e9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A919B0BE0000, serialNumber=33F4082166A89FFF6F326AE09B44BFBEF1629FEB Validity Not Before: Jul 23 08:44:01 2026 GMT Not After : Jul 24 09:20:01 2026 GMT Subject: CN=710FC51DBF7973033DFA830E7428D2F849C0FB71 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:11:37:eb:c3:a0:4f:f1:a8:82:08:cc:f8:31: 8e:f6:c9:5f:b8:de:dd:f1:35:d9:b9:f5:a5:4c:19: 31:2c:b3:4c:35:25:92:09:39:36:1d:78:8d:a1:78: e5:62:18:10:3d:e6:24:94:e9:9b:63:66:da:a8:fb: 2c:df:bb:8a:4e:ab:18:5e:e0:82:3e:f8:c8:cb:b2: 1a:e6:88:84:8f:a8:5e:d7:9a:24:4d:2f:98:5a:f9: 43:9e:62:7f:69:3f:b5:d0:f3:05:2f:44:e5:a1:d3: 27:76:e6:07:a4:69:b4:d8:ca:b5:f9:a8:36:b3:95: cf:d6:b1:3d:b6:24:27:1b:fd:2b:b9:c6:8c:b4:a9: b0:43:a1:48:f8:ff:f5:f8:d1:92:1f:5e:41:a6:69: e9:ed:36:48:22:d7:4d:bb:05:08:ec:34:3c:35:d4: 10:61:ca:ff:5a:17:6b:d2:30:e9:8c:08:28:3d:71: c7:9a:44:35:fa:72:72:b5:44:15:da:4c:2f:c1:cd: 78:87:67:ad:73:8f:be:74:1b:52:ec:6a:5e:43:85: bf:5c:89:a1:74:3a:69:0d:d7:ca:a9:cc:b1:f2:18: a6:f5:55:00:b9:f2:06:e3:dd:93:24:c9:c2:16:12: 03:e0:0e:b7:fd:74:07:a8:6c:3f:6b:b0:ad:d5:d4: c9:f9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 71:0F:C5:1D:BF:79:73:03:3D:FA:83:0E:74:28:D2:F8:49:C0:FB:71 X509v3 Authority Key Identifier: keyid:33:F4:08:21:66:A8:9F:FF:6F:32:6A:E0:9B:44:BF:BE:F1:62:9F:EB X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.sub.apnic.net/repository/A91905300000/9/33F4082166A89FFF6F326AE09B44BFBEF1629FEB.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/M_QIIWaon_9vMmrgm0S_vvFin-s.cer Subject Information Access: Signed Object - URI:rsync://rpki.sub.apnic.net/repository/A91905300000/9/33F4082166A89FFF6F326AE09B44BFBEF1629FEB.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 58:06:54:a1:42:a3:a7:ac:d5:bf:0c:ba:ab:6c:80:58:14:43: 87:d8:c7:ef:61:11:75:42:72:b1:c3:18:38:76:90:8f:dd:10: ea:f4:fb:62:35:b4:3c:e5:9c:e8:6f:76:11:0c:5d:6d:22:aa: 21:41:15:b1:4d:49:a7:85:55:57:43:18:73:b7:fe:c1:42:fb: 00:e5:3e:0a:27:4c:c8:f4:dd:93:4d:f3:74:97:a5:28:37:db: 45:cd:e5:63:99:bc:1b:ef:49:6e:19:a9:c7:a9:9d:d0:74:2a: a8:a5:16:8c:8f:9a:a8:98:2f:d5:44:df:e4:08:d2:41:29:1e: 19:da:b6:de:c5:eb:17:1b:0d:7b:1e:9d:6f:46:b4:04:d4:77: dc:da:0e:9e:7a:7c:a8:0f:c3:c3:67:c0:5c:47:eb:b9:17:45: d2:4f:aa:33:0d:1f:3e:12:6d:f9:d0:09:bd:ae:0c:a0:68:94: 7c:12:38:bd:e5:9d:fd:09:37:b1:46:72:45:57:d0:c2:bb:e5: e9:b6:04:13:66:bc:7e:f4:0f:5e:48:75:f1:d7:89:58:c4:99: 98:e3:ad:15:fd:c8:74:75:53:f6:57:17:ba:ab:69:21:d6:d3: 7f:d2:bd:a6:ed:e0:d2:69:96:86:6b:dc:a3:75:b3:7b:fb:23: f7:31:43:ab -----BEGIN CERTIFICATE----- MIIFKDCCBBCgAwIBAgIUcK3i4NaO/lrCt35hQh7I573mtOkwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxOUIwQkUwMDAwMTEwLwYDVQQFEygzM0Y0MDgyMTY2 QTg5RkZGNkYzMjZBRTA5QjQ0QkZCRUYxNjI5RkVCMB4XDTI2MDcyMzA4NDQwMVoX DTI2MDcyNDA5MjAwMVowMzExMC8GA1UEAxMoNzEwRkM1MURCRjc5NzMwMzNERkE4 MzBFNzQyOEQyRjg0OUMwRkI3MTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAMgRN+vDoE/xqIIIzPgxjvbJX7je3fE12bn1pUwZMSyzTDUlkgk5Nh14jaF4 5WIYED3mJJTpm2Nm2qj7LN+7ik6rGF7ggj74yMuyGuaIhI+oXteaJE0vmFr5Q55i f2k/tdDzBS9E5aHTJ3bmB6RptNjKtfmoNrOVz9axPbYkJxv9K7nGjLSpsEOhSPj/ 9fjRkh9eQaZp6e02SCLXTbsFCOw0PDXUEGHK/1oXa9Iw6YwIKD1xx5pENfpycrVE FdpML8HNeIdnrXOPvnQbUuxqXkOFv1yJoXQ6aQ3XyqnMsfIYpvVVALnyBuPdkyTJ whYSA+AOt/10B6hsP2uwrdXUyfkCAwEAAaOCAhswggIXMB0GA1UdDgQWBBRxD8Ud v3lzAz36gw50KNL4ScD7cTAfBgNVHSMEGDAWgBQz9AghZqif/28yauCbRL++8WKf 6zAOBgNVHQ8BAf8EBAMCB4AwcgYDVR0fBGswaTBnoGWgY4ZhcnN5bmM6Ly9ycGtp LnN1Yi5hcG5pYy5uZXQvcmVwb3NpdG9yeS9BOTE5MDUzMDAwMDAvOS8zM0Y0MDgy MTY2QTg5RkZGNkYzMjZBRTA5QjQ0QkZCRUYxNjI5RkVCLmNybDB+BggrBgEFBQcB AQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVwb3Np dG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9NX1FJSVdhb25f OXZNbXJnbTBTX3Z2RmluLXMuY2VyMH0GCCsGAQUFBwELBHEwbzBtBggrBgEFBQcw C4ZhcnN5bmM6Ly9ycGtpLnN1Yi5hcG5pYy5uZXQvcmVwb3NpdG9yeS9BOTE5MDUz MDAwMDAvOS8zM0Y0MDgyMTY2QTg5RkZGNkYzMjZBRTA5QjQ0QkZCRUYxNjI5RkVC Lm1mdDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIw EDAGBAIAAQUAMAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG 9w0BAQsFAAOCAQEAWAZUoUKjp6zVvwy6q2yAWBRDh9jH72ERdUJyscMYOHaQj90Q 6vT7YjW0POWc6G92EQxdbSKqIUEVsU1Jp4VVV0MYc7f+wUL7AOU+CidMyPTdk03z dJelKDfbRc3lY5m8G+9Jbhmpx6md0HQqqKUWjI+aqJgv1UTf5AjSQSkeGdq23sXr FxsNex6db0a0BNR33NoOnnp8qA/Dw2fAXEfruRdF0k+qMw0fPhJt+dAJva4MoGiU fBI4veWd/Qk3sUZyRVfQwrvl6bYEE2a8fvQPXkh18deJWMSZmOOtFf3IdHVT9lcX uqtpIdbTf9K9pu3g0mmWhmvco3Wze/sj9zFDqw== -----END CERTIFICATE-----Generated at Fri Jul 24 00:03:01 2026 by rpki-client