$ rpki-client -vvvf rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/manifest.mft File: manifest.mft (raw, json) Hash identifier: I0m0zdlUr17HxsovDIvA/mgEtVMnsYVHuKJWTjLZOaA= Subject key identifier: 07:63:7D:35:FE:FC:29:13:B4:1B:E9:F6:E1:C3:57:76:A7:BF:D8:1D Authority key identifier: 53:DC:22:12:5F:A3:4F:39:86:CB:F1:24:22:E3:4F:9B:9C:66:1B:E7 Certificate issuer: /CN=A91F635F0000/serialNumber=53DC22125FA34F3986CBF12422E34F9B9C661BE7 Certificate serial: 42609937288B3E9882E24C379BCC43A2335150DF Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/U9wiEl-jTzmGy_EkIuNPm5xmG-c.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/manifest.mft Manifest number: 065A Signing time: Sat 03 Oct 2026 00:12:35 +0000 Manifest this update: Sat 03 Oct 2026 00:12:35 +0000 Manifest next update: Wed 07 Oct 2026 00:12:35 +0000 Files and hashes: 1: 2e40ee0b-9aa9-4919-a079-9712212e127c.roa (hash: lRaza4oTSv80s0nRvQVFd1GE4T+uuqE3c/56F8PmYq0=) 2: 32bf2c39-b536-43d0-b557-f68d8ee64091.roa (hash: iIHDM3/+WXNJbvnwGQBXplujxAFsKTRIJshTaDQ2+P0=) 3: 3d1fb1c7-6140-4c57-928f-1a59586f9e2b.roa (hash: pFH0mX/mS/sgsJHsPD8qn/rMn+DTJ3ZqeRaeUX7Sd/o=) 4: 40956690-3661-49f2-8ebc-2fa5a47a98ad.roa (hash: OamEyNs9Hu0JtYjz/T3HrIq6+zrYFAoh1XdRlDH9dpc=) 5: 4cb3e9f9-46a2-41eb-a4b7-75b53d791f33.roa (hash: LIfhw9Wha8vnR9Jm+6F9NuPWFr6q9jWgQ0Fsm+plzso=) 6: 55d6cbae-8b7f-45a9-8d9b-458d10a9b1ca.roa (hash: 4pmbz7g4O/Ukb8CdhdoUCeEMb4qdXTEeuhLOtcehxcA=) 7: 565f9740-389f-45ac-956e-b96e19889315.roa (hash: jOuib/rqNEB+QR2F/5ggYq891QHKCJh1yIuNR/CNTJo=) 8: 840736df-cd98-4b5b-a4f2-5615993fc74d.roa (hash: mmNX17+NtJIJh0zbb/SQtHaGLzPUHV1+X/OLX4I1Wzk=) 9: a5b01bdd-cdeb-4cfc-8c93-7e70c5e09306.crl (hash: F/vun3VO9eKuQlLh1vtfPmp/97g8qKCSzVnWbR+7aFg=) 10: b51d6a60-7601-45c2-8839-f2002dfa8409.roa (hash: qPzKMLETddB1HMtrfs0e/EyZsPUwi+5CNvlo+jknupQ=) 11: c18b0845-fc95-41d6-b476-af4e1e466849.roa (hash: O8R9fDsm2qIOaEx3u8c5fKh+n/zWMwHcNzLgCHsKkGw=) 12: e5ffe65e-7287-4628-8759-7c141866ee12.roa (hash: rNf1YrXcxiwazHFFa/XOYIwqL9UKy6EAFGqESc8O0Oo=) Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/a5b01bdd-cdeb-4cfc-8c93-7e70c5e09306.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/manifest.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/U9wiEl-jTzmGy_EkIuNPm5xmG-c.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 07 Oct 2026 00:12:35 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 42:60:99:37:28:8b:3e:98:82:e2:4c:37:9b:cc:43:a2:33:51:50:df Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F635F0000, serialNumber=53DC22125FA34F3986CBF12422E34F9B9C661BE7 Validity Not Before: Oct 3 00:12:35 2026 GMT Not After : Oct 7 00:12:35 2026 GMT Subject: serialNumber=e1e57c7654cb2b3845093a25d6e9d4055b2bbd550831e64b5eea378054ba64c7, CN=c0bf0fe8-717c-4f72-9b45-c9c519132a81 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ca:01:fb:ff:57:62:7d:6a:30:e1:91:a1:ec:ba: fa:91:11:b7:c2:76:ac:b6:c9:5a:7b:f8:6e:56:ec: aa:de:48:5f:55:98:9b:c6:03:78:1a:ca:14:23:d1: 55:68:87:a9:68:bc:ed:9d:58:8e:ef:0e:3d:55:f1: e3:f6:e8:72:16:be:4d:0d:5c:a1:62:4b:1b:ee:ce: 2a:7a:61:11:37:27:70:46:2d:1c:1a:d4:a9:05:9e: 5e:68:ef:64:21:1a:f1:17:6a:bb:1f:12:0f:54:9a: 7d:c1:58:06:de:10:5b:b2:dd:57:55:3d:72:7f:ca: 18:d1:87:a3:41:9c:fa:1c:df:fc:22:9e:50:9b:68: 37:e6:6b:a5:6f:fb:a2:04:f1:71:d8:64:79:92:49: 73:2f:bb:ef:2e:06:e5:0f:b8:ea:ca:27:87:d4:c5: b3:fc:c0:2b:95:26:aa:af:f6:01:fe:aa:37:4e:89: f5:a1:f1:28:08:e5:a9:09:68:fd:e7:d1:52:26:94: 28:49:d5:60:bd:86:c3:4d:43:ad:bc:a5:ca:41:6a: 2d:3e:37:2d:a2:a7:c0:ae:17:b0:60:c7:a5:b3:67: c0:94:a2:b9:82:1f:9e:49:7b:38:27:65:b4:39:dc: f6:2f:2a:72:44:32:81:fc:87:c0:fb:dd:c1:96:d6: a1:b5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 07:63:7D:35:FE:FC:29:13:B4:1B:E9:F6:E1:C3:57:76:A7:BF:D8:1D X509v3 Authority Key Identifier: keyid:53:DC:22:12:5F:A3:4F:39:86:CB:F1:24:22:E3:4F:9B:9C:66:1B:E7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/U9wiEl-jTzmGy_EkIuNPm5xmG-c.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/manifest.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/a5b01bdd-cdeb-4cfc-8c93-7e70c5e09306.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 68:3c:5e:cc:a9:de:4a:e7:bf:0c:e5:c9:42:03:f9:3e:b5:b5: d7:6a:9a:36:b3:8f:22:f1:bc:4e:b9:d3:09:40:07:0d:24:be: 15:ad:63:86:98:5c:f2:56:7c:0d:cc:7e:57:8b:96:09:ca:80: de:9d:ea:af:09:44:f6:35:22:ab:1e:15:c0:48:3c:f2:d7:ce: 48:45:6d:67:fb:b7:57:b9:e4:0d:f8:36:f3:af:0c:ee:b6:e3: 7b:9b:15:fb:4c:ed:c7:28:68:74:87:e6:93:e0:95:e3:ea:a3: c4:69:6d:8f:95:37:70:be:14:9b:27:5b:3e:26:1c:00:bd:8f: 9e:88:ac:6b:e5:83:22:58:fe:17:4c:d8:9b:9e:6f:e1:5c:aa: 43:6f:6e:03:a1:3b:3a:fb:26:a5:a8:0a:2a:1e:b3:41:74:96: 0d:d5:1f:05:be:e3:8a:59:5b:46:44:c3:03:b4:99:ac:93:0a: 97:ff:2b:44:e9:a0:de:2d:30:34:cf:b4:9a:13:e8:b7:4a:35: 5f:9f:30:e9:2c:13:4c:62:b9:ff:ed:59:3f:aa:64:cf:e3:85: 21:53:17:09:2e:94:84:77:21:7e:72:64:28:33:71:4e:6e:0b: 66:3d:cc:56:18:a6:2a:56:0a:59:9e:08:af:b7:35:0b:17:5c: 51:f8:4d:25 -----BEGIN CERTIFICATE----- MIIFlTCCBH2gAwIBAgIUQmCZNyiLPpiC4kw3m8xDojNRUN8wDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxRjYzNUYwMDAwMTEwLwYDVQQFEyg1M0RDMjIxMjVG QTM0RjM5ODZDQkYxMjQyMkUzNEY5QjlDNjYxQkU3MB4XDTI2MTAwMzAwMTIzNVoX DTI2MTAwNzAwMTIzNVowejFJMEcGA1UEBRNAZTFlNTdjNzY1NGNiMmIzODQ1MDkz YTI1ZDZlOWQ0MDU1YjJiYmQ1NTA4MzFlNjRiNWVlYTM3ODA1NGJhNjRjNzEtMCsG A1UEAxMkYzBiZjBmZTgtNzE3Yy00ZjcyLTliNDUtYzljNTE5MTMyYTgxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAygH7/1difWow4ZGh7Lr6kRG3wnas tslae/huVuyq3khfVZibxgN4GsoUI9FVaIepaLztnViO7w49VfHj9uhyFr5NDVyh Yksb7s4qemERNydwRi0cGtSpBZ5eaO9kIRrxF2q7HxIPVJp9wVgG3hBbst1XVT1y f8oY0YejQZz6HN/8Ip5Qm2g35mulb/uiBPFx2GR5kklzL7vvLgblD7jqyieH1MWz /MArlSaqr/YB/qo3Ton1ofEoCOWpCWj959FSJpQoSdVgvYbDTUOtvKXKQWotPjct oqfArhewYMels2fAlKK5gh+eSXs4J2W0Odz2LypyRDKB/IfA+93BltahtQIDAQAB o4ICQTCCAj0wHQYDVR0OBBYEFAdjfTX+/CkTtBvp9uHDV3anv9gdMB8GA1UdIwQY MBaAFFPcIhJfo085hsvxJCLjT5ucZhvnMA4GA1UdDwEB/wQEAwIHgDB+BggrBgEF BQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVw b3NpdG9yeS9CM0EyNEYyMDFENjYxMUUyOEFDODgzN0M3MkZEMUZGMi9VOXdpRWwt alR6bUd5X0VrSXVOUG01eG1HLWMuY2VyMH8GCCsGAQUFBwELBHMwcTBvBggrBgEF BQcwC4ZjcnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5hbWF6b25hd3MuY29t L3ZvbHVtZS8wOGMyZjI2NC0yM2Y5LTQ5ZmItOWQ0My1mOGI1MGJlYzkyNjEvbWFu aWZlc3QubWZ0MIGVBgNVHR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnBraS1y c3luYy51cy1lYXN0LTIuYW1hem9uYXdzLmNvbS92b2x1bWUvMDhjMmYyNjQtMjNm OS00OWZiLTlkNDMtZjhiNTBiZWM5MjYxL2E1YjAxYmRkLWNkZWItNGNmYy04Yzkz LTdlNzBjNWUwOTMwNi5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggr BgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYw BKACBQAwDQYJKoZIhvcNAQELBQADggEBAGg8Xsyp3krnvwzlyUID+T61tddqmjaz jyLxvE650wlABw0kvhWtY4aYXPJWfA3MfleLlgnKgN6d6q8JRPY1IqseFcBIPPLX zkhFbWf7t1e55A34NvOvDO6243ubFftM7ccoaHSH5pPglePqo8RpbY+VN3C+FJsn Wz4mHAC9j56IrGvlgyJY/hdM2Jueb+FcqkNvbgOhOzr7JqWoCioes0F0lg3VHwW+ 44pZW0ZEwwO0mayTCpf/K0TpoN4tMDTPtJoT6LdKNV+fMOksE0xiuf/tWT+qZM/j hSFTFwkulIR3IX5yZCgzcU5uC2Y9zFYYpipWClmeCK+3NQsXXFH4TSU= -----END CERTIFICATE-----Generated at Sat Oct 3 11:03:47 2026 by rpki-client