$ rpki-client -vvvf rpki.sub.apnic.net/repository/A91905300000/9/33F4082166A89FFF6F326AE09B44BFBEF1629FEB.mft File: 33F4082166A89FFF6F326AE09B44BFBEF1629FEB.mft (raw, json) Hash identifier: k/tyOqmBKvr5UtYUOMyuI5jAJFnzuqR1czLGVQgaILc= Subject key identifier: 85:D2:68:80:12:E5:0D:10:4E:37:23:FB:BD:96:85:76:30:69:42:56 Authority key identifier: 33:F4:08:21:66:A8:9F:FF:6F:32:6A:E0:9B:44:BF:BE:F1:62:9F:EB Certificate issuer: /CN=A919B0BE0000/serialNumber=33F4082166A89FFF6F326AE09B44BFBEF1629FEB Certificate serial: 0B3933DF1ADDCF03A6C39142CF9F7B55996CE3D3 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/M_QIIWaon_9vMmrgm0S_vvFin-s.cer Subject info access: rsync://rpki.sub.apnic.net/repository/A91905300000/9/33F4082166A89FFF6F326AE09B44BFBEF1629FEB.mft Manifest number: 020D Signing time: Wed 07 Oct 2026 04:02:15 +0000 Manifest this update: Wed 07 Oct 2026 03:57:15 +0000 Manifest next update: Thu 08 Oct 2026 07:33:15 +0000 Files and hashes: 1: 3230332e302e38302e302f32342d3234203d3e2039343439.roa (hash: adKswZZ+83MQE5j5Z1GVAEbYVQjS90TsNrYqZtVzT5k=) 2: 3230332e302e38302e302f32342d3234203d3e2039393133.roa (hash: R7Xxtkh+I8I5SM+RNqD6t39Ei7w+LcPfWR//Yn+T4e4=) 3: 3230332e33312e3131302e302f32342d3234203d3e2039393133.roa (hash: /zSQzqTydH2+pkmO1iK1Kwm8hfUZxAJtGdbzfN4QbwM=) 4: 3230332e33312e3131312e302f32342d3234203d3e2039393133.roa (hash: dtJRARG5+BtRZcmiFZ9zHEYQh6J1meTmlcz69DUCY8E=) 5: 3130332e3233332e3230382e302f32322d3234203d3e2039393133.roa (hash: 9lGWz7w8c/R5ruJGuzTNaIgTzYgfFa8S2t6e2U1YuXY=) 6: 3230332e312e36382e302f32342d3234203d3e2039393133.roa (hash: i4MOXpZ+JJO1Ou/5KA98cmmyul9itGAIk/VXC8WVFIw=) 7: 3230332e35372e32332e302f32342d3234203d3e2039393133.roa (hash: rW0FmeSZuAkFdgzjWN69hruCSHp62G5GuOISvj+nn7Y=) 8: 33F4082166A89FFF6F326AE09B44BFBEF1629FEB.crl (hash: HEfMk1WRS1tg5OI9lJ3DPiG4ZRRX5zPHAgJowQKtNwc=) 9: 3230322e31342e3134382e302f32342d3234203d3e2039393133.roa (hash: ND9xLQI8Vy8JA2jtUa6aYRzvXLnRH0xjgm4vmCRNG9o=) 10: 3230332e302e38302e302f32342d3234203d3e20313334303930.roa (hash: kdx3CUTNv+VjeEs6W9tudB6rNQZmlJL2ExzD6LblsT4=) 11: 3230332e312e36392e302f32342d3234203d3e2039393133.roa (hash: dO5yl6c5PpbhT8VJ6Gr4SbudCYxk8yUDmtlBjVa4pe8=) Validation: OK Signature path: rsync://rpki.sub.apnic.net/repository/A91905300000/9/33F4082166A89FFF6F326AE09B44BFBEF1629FEB.crl rsync://rpki.sub.apnic.net/repository/A91905300000/9/33F4082166A89FFF6F326AE09B44BFBEF1629FEB.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/M_QIIWaon_9vMmrgm0S_vvFin-s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 08 Oct 2026 07:33:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0b:39:33:df:1a:dd:cf:03:a6:c3:91:42:cf:9f:7b:55:99:6c:e3:d3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A919B0BE0000, serialNumber=33F4082166A89FFF6F326AE09B44BFBEF1629FEB Validity Not Before: Oct 7 03:57:15 2026 GMT Not After : Oct 8 07:33:15 2026 GMT Subject: CN=85D2688012E50D104E3723FBBD96857630694256 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9b:47:7e:4a:86:92:e5:96:54:bf:72:07:8c:cc: 59:6b:23:f7:9f:23:2c:70:4f:cd:4e:63:36:6b:88: 5d:be:93:77:7e:1b:73:11:d0:d1:44:9b:b8:02:6c: 8d:bc:a9:f5:a7:4a:8d:fd:57:d3:fe:51:75:17:bd: 82:f6:13:68:8b:3c:52:eb:2e:c2:1c:15:33:05:8f: 99:3f:07:1d:a8:81:8b:70:58:a6:73:59:e3:c1:c7: 9b:f5:2c:3f:c1:9f:9d:79:54:7b:41:15:dc:b3:25: bf:7e:1f:ef:ad:e1:4b:ec:45:80:51:63:4a:cc:15: f3:6b:2d:33:69:73:5e:a0:e8:31:df:a5:cf:86:e9: 2f:18:9c:e3:83:d9:d4:46:52:04:80:f9:5f:e8:ba: df:bc:e1:f0:77:2d:41:3f:9c:38:17:2e:f6:ab:c4: 03:57:e0:ad:98:0f:9c:36:74:d7:98:8a:ef:72:bd: 3b:af:47:8e:e4:23:d8:ad:65:99:b2:11:0c:24:ea: 4b:55:a1:55:e2:19:0c:e3:dd:5d:48:45:1d:c7:47: 67:fc:1f:3c:08:94:24:9f:a1:55:fc:43:21:86:cd: c4:36:f1:f9:27:5b:d9:f8:40:9c:bc:b7:64:75:76: f6:40:0c:1c:9c:13:5c:0b:e3:83:51:e9:6a:9a:ea: 9a:83 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 85:D2:68:80:12:E5:0D:10:4E:37:23:FB:BD:96:85:76:30:69:42:56 X509v3 Authority Key Identifier: keyid:33:F4:08:21:66:A8:9F:FF:6F:32:6A:E0:9B:44:BF:BE:F1:62:9F:EB X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.sub.apnic.net/repository/A91905300000/9/33F4082166A89FFF6F326AE09B44BFBEF1629FEB.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/M_QIIWaon_9vMmrgm0S_vvFin-s.cer Subject Information Access: Signed Object - URI:rsync://rpki.sub.apnic.net/repository/A91905300000/9/33F4082166A89FFF6F326AE09B44BFBEF1629FEB.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 0b:44:45:3f:46:90:f6:13:f2:6b:ce:8c:2e:02:89:cb:14:18: 47:09:6c:fb:9e:9f:4b:06:53:5e:f0:99:39:0e:42:c1:41:7b: af:3a:48:e8:22:59:0f:1f:bb:5c:17:db:55:cc:a5:83:91:b0: c7:11:50:3f:42:1e:c5:28:b0:fe:1b:15:58:7c:0c:86:db:83: 4d:99:23:c5:62:ac:26:be:b4:85:21:4a:32:a0:70:d9:4b:6d: 48:30:7f:cc:a9:b2:56:68:46:de:53:53:c2:ff:0e:32:86:12: 97:86:84:6e:b7:44:c0:df:fb:ca:d0:0f:07:3a:9e:b0:1a:95: 31:50:6a:6f:df:a3:fe:e3:72:36:0d:c4:2a:20:e4:51:13:89: 50:3b:a1:05:8a:19:84:f2:98:67:c8:2b:45:86:1c:47:de:c6: ed:cb:ad:a6:3f:bb:0f:fd:3e:bc:74:33:9d:51:4d:da:e0:94: 5a:fb:cf:c7:71:bb:8c:d9:e0:2e:59:f4:99:fe:4b:3a:1a:15: db:f3:68:fa:2c:c0:82:98:66:c6:3b:8e:3d:c0:e8:37:c4:b5: 20:4a:7b:8a:b1:2f:7f:6f:fd:9e:15:93:e7:67:96:c0:4d:77: 6f:c5:65:97:2a:a5:31:05:dc:3d:7d:57:94:ed:ff:60:70:9c: 29:0d:39:bf -----BEGIN CERTIFICATE----- MIIFKDCCBBCgAwIBAgIUCzkz3xrdzwOmw5FCz597VZls49MwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxOUIwQkUwMDAwMTEwLwYDVQQFEygzM0Y0MDgyMTY2 QTg5RkZGNkYzMjZBRTA5QjQ0QkZCRUYxNjI5RkVCMB4XDTI2MTAwNzAzNTcxNVoX DTI2MTAwODA3MzMxNVowMzExMC8GA1UEAxMoODVEMjY4ODAxMkU1MEQxMDRFMzcy M0ZCQkQ5Njg1NzYzMDY5NDI1NjCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAJtHfkqGkuWWVL9yB4zMWWsj958jLHBPzU5jNmuIXb6Td34bcxHQ0USbuAJs jbyp9adKjf1X0/5RdRe9gvYTaIs8UusuwhwVMwWPmT8HHaiBi3BYpnNZ48HHm/Us P8GfnXlUe0EV3LMlv34f763hS+xFgFFjSswV82stM2lzXqDoMd+lz4bpLxic44PZ 1EZSBID5X+i637zh8HctQT+cOBcu9qvEA1fgrZgPnDZ015iK73K9O69HjuQj2K1l mbIRDCTqS1WhVeIZDOPdXUhFHcdHZ/wfPAiUJJ+hVfxDIYbNxDbx+Sdb2fhAnLy3 ZHV29kAMHJwTXAvjg1HpaprqmoMCAwEAAaOCAhswggIXMB0GA1UdDgQWBBSF0miA EuUNEE43I/u9loV2MGlCVjAfBgNVHSMEGDAWgBQz9AghZqif/28yauCbRL++8WKf 6zAOBgNVHQ8BAf8EBAMCB4AwcgYDVR0fBGswaTBnoGWgY4ZhcnN5bmM6Ly9ycGtp LnN1Yi5hcG5pYy5uZXQvcmVwb3NpdG9yeS9BOTE5MDUzMDAwMDAvOS8zM0Y0MDgy MTY2QTg5RkZGNkYzMjZBRTA5QjQ0QkZCRUYxNjI5RkVCLmNybDB+BggrBgEFBQcB AQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVwb3Np dG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9NX1FJSVdhb25f OXZNbXJnbTBTX3Z2RmluLXMuY2VyMH0GCCsGAQUFBwELBHEwbzBtBggrBgEFBQcw C4ZhcnN5bmM6Ly9ycGtpLnN1Yi5hcG5pYy5uZXQvcmVwb3NpdG9yeS9BOTE5MDUz MDAwMDAvOS8zM0Y0MDgyMTY2QTg5RkZGNkYzMjZBRTA5QjQ0QkZCRUYxNjI5RkVC Lm1mdDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIw EDAGBAIAAQUAMAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG 9w0BAQsFAAOCAQEAC0RFP0aQ9hPya86MLgKJyxQYRwls+56fSwZTXvCZOQ5CwUF7 rzpI6CJZDx+7XBfbVcylg5GwxxFQP0IexSiw/hsVWHwMhtuDTZkjxWKsJr60hSFK MqBw2UttSDB/zKmyVmhG3lNTwv8OMoYSl4aEbrdEwN/7ytAPBzqesBqVMVBqb9+j /uNyNg3EKiDkUROJUDuhBYoZhPKYZ8grRYYcR97G7cutpj+7D/0+vHQznVFN2uCU WvvPx3G7jNngLln0mf5LOhoV2/No+izAgphmxjuOPcDoN8S1IEp7irEvf2/9nhWT 52eWwE13b8VllyqlMQXcPX1XlO3/YHCcKQ05vw== -----END CERTIFICATE-----Generated at Wed Oct 7 06:20:37 2026 by rpki-client