$ rpki-client -vvf rpki.sub.apnic.net/repository/A91905300000/9/33F4082166A89FFF6F326AE09B44BFBEF1629FEB.mft File: 33F4082166A89FFF6F326AE09B44BFBEF1629FEB.mft (raw, json) Hash identifier: fNCPOKklWfLje5JGsD1I62OwNRZLBhTrg7BTYz+Wa3c= Subject key identifier: BC:70:3B:8C:6A:C9:D6:BE:6D:78:12:6B:3B:06:E0:2E:34:56:3D:E1 Authority key identifier: 33:F4:08:21:66:A8:9F:FF:6F:32:6A:E0:9B:44:BF:BE:F1:62:9F:EB Certificate issuer: /CN=A919B0BE0000/serialNumber=33F4082166A89FFF6F326AE09B44BFBEF1629FEB Certificate serial: 7B2177FE0255FF03A54913AC396EB8BBF5823A8A Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/M_QIIWaon_9vMmrgm0S_vvFin-s.cer Subject info access: rsync://rpki.sub.apnic.net/repository/A91905300000/9/33F4082166A89FFF6F326AE09B44BFBEF1629FEB.mft Manifest number: 0143 Signing time: Tue 12 May 2026 19:27:59 +0000 Manifest this update: Tue 12 May 2026 19:22:59 +0000 Manifest next update: Wed 13 May 2026 23:01:59 +0000 Files and hashes: 1: 3230332e33312e3131302e302f32342d3234203d3e2039393133.roa (hash: /zSQzqTydH2+pkmO1iK1Kwm8hfUZxAJtGdbzfN4QbwM=) 2: 3230332e312e36382e302f32342d3234203d3e2039393133.roa (hash: i4MOXpZ+JJO1Ou/5KA98cmmyul9itGAIk/VXC8WVFIw=) 3: 3130332e3233332e3230382e302f32322d3234203d3e2039393133.roa (hash: 9lGWz7w8c/R5ruJGuzTNaIgTzYgfFa8S2t6e2U1YuXY=) 4: 3230332e302e38302e302f32342d3234203d3e2039393133.roa (hash: R7Xxtkh+I8I5SM+RNqD6t39Ei7w+LcPfWR//Yn+T4e4=) 5: 3230322e31342e3134382e302f32342d3234203d3e2039393133.roa (hash: ND9xLQI8Vy8JA2jtUa6aYRzvXLnRH0xjgm4vmCRNG9o=) 6: 33F4082166A89FFF6F326AE09B44BFBEF1629FEB.crl (hash: 5+2RNpUAQxiY7KdYN40hR9wTEYe2l1avZyWtYYHjdVY=) 7: 3230332e35372e32332e302f32342d3234203d3e2039393133.roa (hash: rW0FmeSZuAkFdgzjWN69hruCSHp62G5GuOISvj+nn7Y=) 8: 3230332e312e36392e302f32342d3234203d3e2039393133.roa (hash: dO5yl6c5PpbhT8VJ6Gr4SbudCYxk8yUDmtlBjVa4pe8=) 9: 3230332e33312e3131312e302f32342d3234203d3e2039393133.roa (hash: dtJRARG5+BtRZcmiFZ9zHEYQh6J1meTmlcz69DUCY8E=) Validation: OK Signature path: rsync://rpki.sub.apnic.net/repository/A91905300000/9/33F4082166A89FFF6F326AE09B44BFBEF1629FEB.crl rsync://rpki.sub.apnic.net/repository/A91905300000/9/33F4082166A89FFF6F326AE09B44BFBEF1629FEB.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/M_QIIWaon_9vMmrgm0S_vvFin-s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 13 May 2026 23:01:59 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7b:21:77:fe:02:55:ff:03:a5:49:13:ac:39:6e:b8:bb:f5:82:3a:8a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A919B0BE0000, serialNumber=33F4082166A89FFF6F326AE09B44BFBEF1629FEB Validity Not Before: May 12 19:22:59 2026 GMT Not After : May 13 23:01:59 2026 GMT Subject: CN=BC703B8C6AC9D6BE6D78126B3B06E02E34563DE1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:f1:9f:8b:e2:d5:f8:9d:b5:a3:25:8c:4e:0c: e7:e2:0b:5b:85:10:ce:6a:5e:2f:74:4d:d6:e8:84: 56:6b:54:24:13:db:e0:a6:98:a7:ed:e6:cb:b4:ea: cc:fa:fd:3e:15:84:d8:df:71:fc:54:6c:60:11:ef: 8f:10:77:50:71:5e:9c:15:30:c9:99:db:ae:a4:36: bf:00:88:b1:da:31:b3:57:5a:a9:ef:0c:83:ac:65: 5f:0d:bb:d4:47:75:95:c4:eb:a1:f8:14:4c:8f:b6: 43:4e:5c:e7:80:bd:f7:4e:b9:15:d8:7f:e6:a3:c5: 64:60:66:3f:2b:af:4b:a3:0a:1c:6b:f8:42:26:c8: 13:03:36:75:21:f3:b6:c6:76:e7:99:93:c2:59:ef: cb:5b:5f:5c:a0:df:09:61:9b:6f:4c:f7:20:06:a2: fd:dd:3e:52:bc:4a:15:46:41:4e:79:84:5e:a9:91: b0:1c:42:c3:ad:27:10:dd:47:65:7f:e5:b1:85:08: 50:e1:f1:c7:3b:39:2d:2d:13:2d:bb:18:7e:0b:49: 9f:c7:04:01:6a:70:cc:4f:19:af:97:cc:df:b3:c2: dc:02:c0:5f:7a:38:e4:62:f5:37:cc:2e:2f:e1:5f: 6d:84:32:3c:0d:41:c4:ca:f8:e7:89:ee:f4:8c:86: a5:a7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BC:70:3B:8C:6A:C9:D6:BE:6D:78:12:6B:3B:06:E0:2E:34:56:3D:E1 X509v3 Authority Key Identifier: keyid:33:F4:08:21:66:A8:9F:FF:6F:32:6A:E0:9B:44:BF:BE:F1:62:9F:EB X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.sub.apnic.net/repository/A91905300000/9/33F4082166A89FFF6F326AE09B44BFBEF1629FEB.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/M_QIIWaon_9vMmrgm0S_vvFin-s.cer Subject Information Access: Signed Object - URI:rsync://rpki.sub.apnic.net/repository/A91905300000/9/33F4082166A89FFF6F326AE09B44BFBEF1629FEB.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 41:23:ad:2e:fb:74:2f:d8:2e:0f:f3:d4:61:2b:ca:39:8b:db: fc:7f:46:ac:f4:ea:6d:3b:36:67:3d:c7:3d:3d:72:f8:e0:b2: 99:c3:17:c6:ee:ed:e8:09:1d:4e:cb:d9:ee:06:c8:a6:77:61: 5b:ed:f5:69:e5:64:5e:77:32:6f:e3:7d:c1:f9:83:eb:07:10: 35:74:4b:a3:ef:ea:a5:1a:80:a2:32:48:c8:cc:56:87:97:49: c0:56:08:19:d1:31:20:e6:36:04:05:7c:6e:0b:7d:94:80:1c: 71:a3:c8:f9:e3:60:43:2c:84:f1:9a:14:4b:0e:d5:10:5f:f4: 2b:ed:9e:1b:5d:33:e8:56:1c:85:8b:33:7d:95:34:03:a8:d4: 36:45:d4:90:33:60:2e:46:4d:2f:dd:a7:9b:16:c6:0d:c8:5d: 49:f7:35:58:84:5e:bc:8f:f7:a4:a9:fd:aa:3d:3e:25:f5:64: d3:50:e0:fb:7e:35:df:2c:3b:e7:0a:6f:22:4c:85:ed:ee:eb: 5f:db:b7:cc:1f:d5:0e:ea:65:7a:b2:71:a0:9b:47:55:36:48: 65:8c:78:27:ab:22:d4:f1:73:1a:9d:1e:1b:85:c7:be:79:43: 2d:21:3f:77:7c:76:7d:26:e1:47:9a:a5:9e:88:52:7c:e0:2b: 80:a0:df:8b -----BEGIN CERTIFICATE----- MIIFKDCCBBCgAwIBAgIUeyF3/gJV/wOlSROsOW64u/WCOoowDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxOUIwQkUwMDAwMTEwLwYDVQQFEygzM0Y0MDgyMTY2 QTg5RkZGNkYzMjZBRTA5QjQ0QkZCRUYxNjI5RkVCMB4XDTI2MDUxMjE5MjI1OVoX DTI2MDUxMzIzMDE1OVowMzExMC8GA1UEAxMoQkM3MDNCOEM2QUM5RDZCRTZENzgx MjZCM0IwNkUwMkUzNDU2M0RFMTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBALHxn4vi1fidtaMljE4M5+ILW4UQzmpeL3RN1uiEVmtUJBPb4KaYp+3my7Tq zPr9PhWE2N9x/FRsYBHvjxB3UHFenBUwyZnbrqQ2vwCIsdoxs1daqe8Mg6xlXw27 1Ed1lcTrofgUTI+2Q05c54C99065Fdh/5qPFZGBmPyuvS6MKHGv4QibIEwM2dSHz tsZ255mTwlnvy1tfXKDfCWGbb0z3IAai/d0+UrxKFUZBTnmEXqmRsBxCw60nEN1H ZX/lsYUIUOHxxzs5LS0TLbsYfgtJn8cEAWpwzE8Zr5fM37PC3ALAX3o45GL1N8wu L+FfbYQyPA1BxMr454nu9IyGpacCAwEAAaOCAhswggIXMB0GA1UdDgQWBBS8cDuM asnWvm14Ems7BuAuNFY94TAfBgNVHSMEGDAWgBQz9AghZqif/28yauCbRL++8WKf 6zAOBgNVHQ8BAf8EBAMCB4AwcgYDVR0fBGswaTBnoGWgY4ZhcnN5bmM6Ly9ycGtp LnN1Yi5hcG5pYy5uZXQvcmVwb3NpdG9yeS9BOTE5MDUzMDAwMDAvOS8zM0Y0MDgy MTY2QTg5RkZGNkYzMjZBRTA5QjQ0QkZCRUYxNjI5RkVCLmNybDB+BggrBgEFBQcB AQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVwb3Np dG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9NX1FJSVdhb25f OXZNbXJnbTBTX3Z2RmluLXMuY2VyMH0GCCsGAQUFBwELBHEwbzBtBggrBgEFBQcw C4ZhcnN5bmM6Ly9ycGtpLnN1Yi5hcG5pYy5uZXQvcmVwb3NpdG9yeS9BOTE5MDUz MDAwMDAvOS8zM0Y0MDgyMTY2QTg5RkZGNkYzMjZBRTA5QjQ0QkZCRUYxNjI5RkVC Lm1mdDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIw EDAGBAIAAQUAMAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG 9w0BAQsFAAOCAQEAQSOtLvt0L9guD/PUYSvKOYvb/H9GrPTqbTs2Zz3HPT1y+OCy mcMXxu7t6AkdTsvZ7gbIpndhW+31aeVkXncyb+N9wfmD6wcQNXRLo+/qpRqAojJI yMxWh5dJwFYIGdExIOY2BAV8bgt9lIAccaPI+eNgQyyE8ZoUSw7VEF/0K+2eG10z 6FYchYszfZU0A6jUNkXUkDNgLkZNL92nmxbGDchdSfc1WIRevI/3pKn9qj0+JfVk 01Dg+3413yw75wpvIkyF7e7rX9u3zB/VDuplerJxoJtHVTZIZYx4J6si1PFzGp0e G4XHvnlDLSE/d3x2fSbhR5qlnohSfOArgKDfiw== -----END CERTIFICATE-----Generated at Wed May 13 03:11:14 2026 by rpki-client