$ rpki-client -vvf rpki.sub.apnic.net/repository/A91905300000/9/33F4082166A89FFF6F326AE09B44BFBEF1629FEB.mft File: 33F4082166A89FFF6F326AE09B44BFBEF1629FEB.mft (raw, json) Hash identifier: Jy2x6b0orP7dzL7mS7LX8IE9G+GqgiIJWWNrwallBXA= Subject key identifier: C9:40:3D:44:6B:DD:BE:3B:9E:80:CB:07:51:31:F6:EA:5B:AD:DD:E7 Authority key identifier: 33:F4:08:21:66:A8:9F:FF:6F:32:6A:E0:9B:44:BF:BE:F1:62:9F:EB Certificate issuer: /CN=A919B0BE0000/serialNumber=33F4082166A89FFF6F326AE09B44BFBEF1629FEB Certificate serial: 3DB2C5147D826AFFD0122B492391441816B1D48C Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/M_QIIWaon_9vMmrgm0S_vvFin-s.cer Subject info access: rsync://rpki.sub.apnic.net/repository/A91905300000/9/33F4082166A89FFF6F326AE09B44BFBEF1629FEB.mft Manifest number: 01CB Signing time: Tue 18 Aug 2026 20:12:29 +0000 Manifest this update: Tue 18 Aug 2026 20:07:29 +0000 Manifest next update: Wed 19 Aug 2026 23:56:29 +0000 Files and hashes: 1: 3230332e35372e32332e302f32342d3234203d3e2039393133.roa (hash: rW0FmeSZuAkFdgzjWN69hruCSHp62G5GuOISvj+nn7Y=) 2: 33F4082166A89FFF6F326AE09B44BFBEF1629FEB.crl (hash: KMlrrGiNUnCv9J6SlL3Rq96gR/5Src29pAtLhlycHLU=) 3: 3230332e302e38302e302f32342d3234203d3e2039343439.roa (hash: adKswZZ+83MQE5j5Z1GVAEbYVQjS90TsNrYqZtVzT5k=) 4: 3230332e33312e3131302e302f32342d3234203d3e2039393133.roa (hash: /zSQzqTydH2+pkmO1iK1Kwm8hfUZxAJtGdbzfN4QbwM=) 5: 3230332e312e36382e302f32342d3234203d3e2039393133.roa (hash: i4MOXpZ+JJO1Ou/5KA98cmmyul9itGAIk/VXC8WVFIw=) 6: 3230322e31342e3134382e302f32342d3234203d3e2039393133.roa (hash: ND9xLQI8Vy8JA2jtUa6aYRzvXLnRH0xjgm4vmCRNG9o=) 7: 3230332e302e38302e302f32342d3234203d3e20313334303930.roa (hash: kdx3CUTNv+VjeEs6W9tudB6rNQZmlJL2ExzD6LblsT4=) 8: 3130332e3233332e3230382e302f32322d3234203d3e2039393133.roa (hash: 9lGWz7w8c/R5ruJGuzTNaIgTzYgfFa8S2t6e2U1YuXY=) 9: 3230332e33312e3131312e302f32342d3234203d3e2039393133.roa (hash: dtJRARG5+BtRZcmiFZ9zHEYQh6J1meTmlcz69DUCY8E=) 10: 3230332e302e38302e302f32342d3234203d3e2039393133.roa (hash: R7Xxtkh+I8I5SM+RNqD6t39Ei7w+LcPfWR//Yn+T4e4=) 11: 3230332e312e36392e302f32342d3234203d3e2039393133.roa (hash: dO5yl6c5PpbhT8VJ6Gr4SbudCYxk8yUDmtlBjVa4pe8=) Validation: OK Signature path: rsync://rpki.sub.apnic.net/repository/A91905300000/9/33F4082166A89FFF6F326AE09B44BFBEF1629FEB.crl rsync://rpki.sub.apnic.net/repository/A91905300000/9/33F4082166A89FFF6F326AE09B44BFBEF1629FEB.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/M_QIIWaon_9vMmrgm0S_vvFin-s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 19 Aug 2026 23:56:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3d:b2:c5:14:7d:82:6a:ff:d0:12:2b:49:23:91:44:18:16:b1:d4:8c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A919B0BE0000, serialNumber=33F4082166A89FFF6F326AE09B44BFBEF1629FEB Validity Not Before: Aug 18 20:07:29 2026 GMT Not After : Aug 19 23:56:29 2026 GMT Subject: CN=C9403D446BDDBE3B9E80CB075131F6EA5BADDDE7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:92:65:e7:5d:3e:83:2b:ec:74:00:98:c4:c9:50: df:25:1b:8f:d1:b0:8e:0a:98:05:53:2f:70:59:f5: 45:d8:52:7c:f1:71:fa:c4:90:ae:5e:e7:72:46:4c: a4:98:e7:a4:36:44:4f:2c:ed:0a:9f:7c:44:23:95: 79:d6:53:96:63:45:12:1e:2a:3d:e2:09:db:b7:00: 7e:6b:29:62:72:bf:be:25:91:db:3a:e8:7e:b3:5f: 7d:11:32:cf:a2:3b:6f:58:2b:a1:83:9d:ef:5f:ad: 60:62:de:b7:77:ad:e7:0c:2a:5c:f9:e1:3b:22:2d: a6:ff:3f:23:00:53:e2:cd:6c:f5:c3:d8:07:bf:3e: 65:11:f4:63:96:b9:ab:6b:a4:f6:38:17:06:88:95: 87:67:dd:8d:16:07:5b:0f:9f:a8:63:ea:37:3e:31: e2:e4:bb:f0:6e:c6:60:d6:3e:ff:cc:dd:70:91:8b: a5:ea:a3:5c:b0:a7:c5:fd:62:c0:4d:b2:4d:65:f2: c2:dc:77:92:85:ad:19:6e:12:a2:b6:b1:7c:95:70: 2c:fa:fa:f8:e6:03:ef:f6:c8:46:df:3c:5b:21:d0: 2f:75:83:ac:d3:5c:b6:14:03:d2:30:1c:a1:2d:fd: 10:38:b3:23:54:c0:7b:b5:72:ca:ad:62:ef:1a:f3: 62:85 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C9:40:3D:44:6B:DD:BE:3B:9E:80:CB:07:51:31:F6:EA:5B:AD:DD:E7 X509v3 Authority Key Identifier: keyid:33:F4:08:21:66:A8:9F:FF:6F:32:6A:E0:9B:44:BF:BE:F1:62:9F:EB X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.sub.apnic.net/repository/A91905300000/9/33F4082166A89FFF6F326AE09B44BFBEF1629FEB.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/M_QIIWaon_9vMmrgm0S_vvFin-s.cer Subject Information Access: Signed Object - URI:rsync://rpki.sub.apnic.net/repository/A91905300000/9/33F4082166A89FFF6F326AE09B44BFBEF1629FEB.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 18:04:96:5e:06:bc:25:53:6c:38:45:d7:61:b6:fe:91:36:bd: 79:ad:43:55:7f:24:e0:45:67:c9:e4:47:d3:f3:a7:aa:c5:1f: 34:61:34:6b:62:1f:2a:aa:77:3b:c1:10:52:09:7d:9d:76:90: cf:35:20:6e:9a:f3:38:9f:aa:34:35:a3:63:90:ab:2b:c2:16: a8:cf:68:45:73:05:60:13:2e:9b:56:ad:0a:1a:90:b8:00:29: f3:2c:72:bc:5f:d4:6b:84:16:e6:8b:be:47:53:97:75:f9:5e: a4:2a:43:2a:e7:21:8e:27:d6:0b:7a:5c:58:b7:8a:11:3a:92: 72:b7:16:6d:0d:a0:6a:d8:fd:99:97:40:c2:a2:c7:9a:1b:14: fe:13:c4:d3:b2:73:bb:de:97:91:6e:06:f8:bd:c9:4f:1e:b5: 0e:31:78:81:52:90:d8:dd:57:48:97:43:1f:a0:10:a6:35:fd: b1:42:4f:4d:f9:bd:e5:ae:f3:80:d6:63:fb:38:09:a0:6f:ea: 50:0e:27:75:3d:93:e3:df:92:78:92:08:8c:f0:99:2b:08:47: cc:fa:05:fd:24:53:89:79:13:ee:77:ed:dc:85:fa:4a:f0:77: d2:72:02:af:50:a7:5c:38:77:ca:0f:ae:0d:0e:6b:06:4e:90: d6:00:66:cf -----BEGIN CERTIFICATE----- MIIFKDCCBBCgAwIBAgIUPbLFFH2Cav/QEitJI5FEGBax1IwwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxOUIwQkUwMDAwMTEwLwYDVQQFEygzM0Y0MDgyMTY2 QTg5RkZGNkYzMjZBRTA5QjQ0QkZCRUYxNjI5RkVCMB4XDTI2MDgxODIwMDcyOVoX DTI2MDgxOTIzNTYyOVowMzExMC8GA1UEAxMoQzk0MDNENDQ2QkREQkUzQjlFODBD QjA3NTEzMUY2RUE1QkFERERFNzCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAJJl510+gyvsdACYxMlQ3yUbj9GwjgqYBVMvcFn1RdhSfPFx+sSQrl7nckZM pJjnpDZETyztCp98RCOVedZTlmNFEh4qPeIJ27cAfmspYnK/viWR2zrofrNffREy z6I7b1groYOd71+tYGLet3et5wwqXPnhOyItpv8/IwBT4s1s9cPYB78+ZRH0Y5a5 q2uk9jgXBoiVh2fdjRYHWw+fqGPqNz4x4uS78G7GYNY+/8zdcJGLpeqjXLCnxf1i wE2yTWXywtx3koWtGW4SoraxfJVwLPr6+OYD7/bIRt88WyHQL3WDrNNcthQD0jAc oS39EDizI1TAe7Vyyq1i7xrzYoUCAwEAAaOCAhswggIXMB0GA1UdDgQWBBTJQD1E a92+O56AywdRMfbqW63d5zAfBgNVHSMEGDAWgBQz9AghZqif/28yauCbRL++8WKf 6zAOBgNVHQ8BAf8EBAMCB4AwcgYDVR0fBGswaTBnoGWgY4ZhcnN5bmM6Ly9ycGtp LnN1Yi5hcG5pYy5uZXQvcmVwb3NpdG9yeS9BOTE5MDUzMDAwMDAvOS8zM0Y0MDgy MTY2QTg5RkZGNkYzMjZBRTA5QjQ0QkZCRUYxNjI5RkVCLmNybDB+BggrBgEFBQcB AQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVwb3Np dG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9NX1FJSVdhb25f OXZNbXJnbTBTX3Z2RmluLXMuY2VyMH0GCCsGAQUFBwELBHEwbzBtBggrBgEFBQcw C4ZhcnN5bmM6Ly9ycGtpLnN1Yi5hcG5pYy5uZXQvcmVwb3NpdG9yeS9BOTE5MDUz MDAwMDAvOS8zM0Y0MDgyMTY2QTg5RkZGNkYzMjZBRTA5QjQ0QkZCRUYxNjI5RkVC Lm1mdDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIw EDAGBAIAAQUAMAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG 9w0BAQsFAAOCAQEAGASWXga8JVNsOEXXYbb+kTa9ea1DVX8k4EVnyeRH0/OnqsUf NGE0a2IfKqp3O8EQUgl9nXaQzzUgbprzOJ+qNDWjY5CrK8IWqM9oRXMFYBMum1at ChqQuAAp8yxyvF/Ua4QW5ou+R1OXdflepCpDKuchjifWC3pcWLeKETqScrcWbQ2g atj9mZdAwqLHmhsU/hPE07Jzu96XkW4G+L3JTx61DjF4gVKQ2N1XSJdDH6AQpjX9 sUJPTfm95a7zgNZj+zgJoG/qUA4ndT2T49+SeJIIjPCZKwhHzPoF/SRTiXkT7nft 3IX6SvB30nICr1CnXDh3yg+uDQ5rBk6Q1gBmzw== -----END CERTIFICATE-----Generated at Wed Aug 19 12:48:02 2026 by rpki-client