$ rpki-client -vvf rpki.sub.apnic.net/repository/A91905300000/9/33F4082166A89FFF6F326AE09B44BFBEF1629FEB.mft File: 33F4082166A89FFF6F326AE09B44BFBEF1629FEB.mft (raw, json) Hash identifier: SdPDTLXHY0LdbGRYJdn6+OElgqliPrrFwAHirvheXao= Subject key identifier: DE:EF:62:C5:E8:46:59:24:62:27:B1:52:59:D7:AA:40:19:D2:3C:C6 Authority key identifier: 33:F4:08:21:66:A8:9F:FF:6F:32:6A:E0:9B:44:BF:BE:F1:62:9F:EB Certificate issuer: /CN=A919B0BE0000/serialNumber=33F4082166A89FFF6F326AE09B44BFBEF1629FEB Certificate serial: 7373E69DFDDE253516C54237002C09DFC4574C46 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/M_QIIWaon_9vMmrgm0S_vvFin-s.cer Subject info access: rsync://rpki.sub.apnic.net/repository/A91905300000/9/33F4082166A89FFF6F326AE09B44BFBEF1629FEB.mft Manifest number: 0C Signing time: Thu 03 Jul 2025 02:16:52 +0000 Manifest this update: Thu 03 Jul 2025 02:11:52 +0000 Manifest next update: Fri 04 Jul 2025 03:49:52 +0000 Files and hashes: 1: 3230332e312e36392e302f32342d3234203d3e2039393133.roa (hash: HYKqNuiBE/DUFFDQyKmuMZ6wkcvhITNaHWFYsHIuJlA=) 2: 3230332e33312e3131302e302f32342d3234203d3e2039393133.roa (hash: Th3RG2y4VUTKhfMzlUUSBpKBps2IwB4thNo9+TULNBQ=) 3: 33F4082166A89FFF6F326AE09B44BFBEF1629FEB.crl (hash: FE+rsAsaaSIjNVoAG6jkoJh3nd5M8m470Zfy7Q8teUA=) 4: 3230332e33312e3131312e302f32342d3234203d3e2039393133.roa (hash: YlAvV8ZZuoYsPDhwbCWgqa9GkyYRu/NKCURMzPqa7q4=) 5: 3130332e3233332e3230382e302f32322d3234203d3e2039393133.roa (hash: gjG1OZMW5faujAfknl/AsEqIEMo1X4J8rMD0eZTWBDg=) 6: 3230332e302e38302e302f32342d3234203d3e2039393133.roa (hash: 5CEE0bOW0MgpOlLO8lN9+nz4tABxvncSgkR6y2kvmq4=) 7: 3230332e312e36382e302f32342d3234203d3e2039393133.roa (hash: sf6xpmLBwwFxYc5zLhbA2o5zERE4ANPwwQpcoFqWw9Y=) 8: 3230322e31342e3134382e302f32342d3234203d3e2039393133.roa (hash: jEqn8jELxuDQMwvht+ON+P9QmjrSbE+0mwwGAYlItGo=) 9: 3230332e35372e32332e302f32342d3234203d3e2039393133.roa (hash: 9vPoyR5h4XW7VzKPshTgyqTHm+x238aD7PNshnOSJtk=) Validation: OK Signature path: rsync://rpki.sub.apnic.net/repository/A91905300000/9/33F4082166A89FFF6F326AE09B44BFBEF1629FEB.crl rsync://rpki.sub.apnic.net/repository/A91905300000/9/33F4082166A89FFF6F326AE09B44BFBEF1629FEB.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/M_QIIWaon_9vMmrgm0S_vvFin-s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 04 Jul 2025 03:49:52 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 73:73:e6:9d:fd:de:25:35:16:c5:42:37:00:2c:09:df:c4:57:4c:46 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A919B0BE0000, serialNumber=33F4082166A89FFF6F326AE09B44BFBEF1629FEB Validity Not Before: Jul 3 02:11:52 2025 GMT Not After : Jul 4 03:49:52 2025 GMT Subject: CN=DEEF62C5E84659246227B15259D7AA4019D23CC6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:67:e4:36:78:67:cd:68:61:45:91:30:34:a7: 87:3f:a9:dc:96:21:98:0c:2a:51:4c:98:d4:9c:52: 60:e7:69:70:0b:82:55:9d:36:28:7a:44:e6:c0:e0: 9d:a0:a9:45:a4:34:1b:1c:7d:e6:de:d9:97:95:5a: 20:87:2a:67:e5:e0:f4:74:6d:64:e8:eb:97:7a:bc: d3:43:2e:35:8c:8c:9d:34:1c:f8:08:bc:87:21:32: c6:a3:5b:4b:67:29:d9:9f:d8:ce:52:80:54:80:16: ca:f6:16:d1:18:1a:84:6b:5a:55:56:d2:fc:d0:0f: 0a:80:8b:ef:20:bf:36:e5:6c:04:b3:21:0e:9a:a2: ab:97:ab:d1:db:8f:ea:25:be:aa:62:5d:72:0d:39: 77:b1:ad:70:10:76:26:15:05:29:b9:4b:75:fa:7b: 9c:0f:85:39:4d:ab:dd:15:3c:b2:80:c0:96:93:a1: 64:61:f3:1a:dd:93:00:81:2c:1f:06:cf:bf:df:71: e3:14:12:86:04:d8:52:d4:9d:a5:db:51:88:fe:2d: 2a:c7:74:aa:26:6d:ed:03:65:5e:7b:a3:f1:89:37: 27:ef:c8:a2:3e:29:5c:58:3f:41:1a:b2:03:7f:bb: af:e1:bc:83:9f:38:55:27:7a:87:01:5a:ea:b6:72: ee:85 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DE:EF:62:C5:E8:46:59:24:62:27:B1:52:59:D7:AA:40:19:D2:3C:C6 X509v3 Authority Key Identifier: keyid:33:F4:08:21:66:A8:9F:FF:6F:32:6A:E0:9B:44:BF:BE:F1:62:9F:EB X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.sub.apnic.net/repository/A91905300000/9/33F4082166A89FFF6F326AE09B44BFBEF1629FEB.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/M_QIIWaon_9vMmrgm0S_vvFin-s.cer Subject Information Access: Signed Object - URI:rsync://rpki.sub.apnic.net/repository/A91905300000/9/33F4082166A89FFF6F326AE09B44BFBEF1629FEB.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 0d:e5:96:5c:d4:79:ae:62:0f:e4:7a:f3:31:7d:1a:a7:f5:b0: 8e:e0:48:90:d5:d7:20:8e:58:65:5f:00:79:15:c6:c7:65:56: ba:2d:23:d4:b4:14:87:f6:d0:fe:a9:a6:29:0c:d1:2b:48:fd: ba:a1:67:ed:51:ca:c6:c4:c0:f6:12:e7:b1:17:e2:cd:fd:9c: 56:1a:a9:b0:12:f6:ca:0d:1c:5e:50:ed:66:8c:ab:9a:fd:5a: 5c:8c:1f:76:56:b6:d6:9d:1d:c7:a6:9f:1a:1b:36:89:fd:96: 5c:99:0c:8e:52:7d:2c:f1:1b:86:f7:de:71:68:46:ef:0e:3c: 4c:16:b6:72:e6:10:32:bc:26:91:7d:21:f7:c4:4c:f6:b5:5e: aa:2a:c2:02:0d:cb:72:bc:06:40:a7:f7:4e:35:69:fb:6c:34: 5e:fa:6c:7b:75:b3:d8:af:9c:f0:88:4f:98:24:70:ed:1d:19: 9d:33:39:be:0f:51:ae:1b:6a:48:7f:d1:58:1c:f4:5d:97:0e: b3:5d:d1:8f:1e:ab:30:cc:47:9a:e1:26:f9:e9:d3:40:88:2d: b9:40:d2:d4:cc:10:a2:50:9c:7f:46:bd:68:39:5b:16:59:25: 91:58:3f:ce:74:e3:30:35:bd:cc:dd:a1:12:c4:47:ed:00:4f: 39:cc:b6:97 -----BEGIN CERTIFICATE----- MIIFKDCCBBCgAwIBAgIUc3Pmnf3eJTUWxUI3ACwJ38RXTEYwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxOUIwQkUwMDAwMTEwLwYDVQQFEygzM0Y0MDgyMTY2 QTg5RkZGNkYzMjZBRTA5QjQ0QkZCRUYxNjI5RkVCMB4XDTI1MDcwMzAyMTE1MloX DTI1MDcwNDAzNDk1MlowMzExMC8GA1UEAxMoREVFRjYyQzVFODQ2NTkyNDYyMjdC MTUyNTlEN0FBNDAxOUQyM0NDNjCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAMdn5DZ4Z81oYUWRMDSnhz+p3JYhmAwqUUyY1JxSYOdpcAuCVZ02KHpE5sDg naCpRaQ0Gxx95t7Zl5VaIIcqZ+Xg9HRtZOjrl3q800MuNYyMnTQc+Ai8hyEyxqNb S2cp2Z/YzlKAVIAWyvYW0RgahGtaVVbS/NAPCoCL7yC/NuVsBLMhDpqiq5er0duP 6iW+qmJdcg05d7GtcBB2JhUFKblLdfp7nA+FOU2r3RU8soDAlpOhZGHzGt2TAIEs HwbPv99x4xQShgTYUtSdpdtRiP4tKsd0qiZt7QNlXnuj8Yk3J+/Ioj4pXFg/QRqy A3+7r+G8g584VSd6hwFa6rZy7oUCAwEAAaOCAhswggIXMB0GA1UdDgQWBBTe72LF 6EZZJGInsVJZ16pAGdI8xjAfBgNVHSMEGDAWgBQz9AghZqif/28yauCbRL++8WKf 6zAOBgNVHQ8BAf8EBAMCB4AwcgYDVR0fBGswaTBnoGWgY4ZhcnN5bmM6Ly9ycGtp LnN1Yi5hcG5pYy5uZXQvcmVwb3NpdG9yeS9BOTE5MDUzMDAwMDAvOS8zM0Y0MDgy MTY2QTg5RkZGNkYzMjZBRTA5QjQ0QkZCRUYxNjI5RkVCLmNybDB+BggrBgEFBQcB AQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVwb3Np dG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9NX1FJSVdhb25f OXZNbXJnbTBTX3Z2RmluLXMuY2VyMH0GCCsGAQUFBwELBHEwbzBtBggrBgEFBQcw C4ZhcnN5bmM6Ly9ycGtpLnN1Yi5hcG5pYy5uZXQvcmVwb3NpdG9yeS9BOTE5MDUz MDAwMDAvOS8zM0Y0MDgyMTY2QTg5RkZGNkYzMjZBRTA5QjQ0QkZCRUYxNjI5RkVC Lm1mdDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIw EDAGBAIAAQUAMAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG 9w0BAQsFAAOCAQEADeWWXNR5rmIP5HrzMX0ap/WwjuBIkNXXII5YZV8AeRXGx2VW ui0j1LQUh/bQ/qmmKQzRK0j9uqFn7VHKxsTA9hLnsRfizf2cVhqpsBL2yg0cXlDt Zoyrmv1aXIwfdla21p0dx6afGhs2if2WXJkMjlJ9LPEbhvfecWhG7w48TBa2cuYQ MrwmkX0h98RM9rVeqirCAg3LcrwGQKf3TjVp+2w0Xvpse3Wz2K+c8IhPmCRw7R0Z nTM5vg9RrhtqSH/RWBz0XZcOs13Rjx6rMMxHmuEm+enTQIgtuUDS1MwQolCcf0a9 aDlbFlklkVg/znTjMDW9zN2hEsRH7QBPOcy2lw== -----END CERTIFICATE-----Generated at Thu Jul 3 17:59:38 2025 by rpki-client