$ rpki-client -vvvf rpki-rsync.us-east-2.amazonaws.com/volume/708aafaf-00b4-485b-854c-0b32ca30f57b/manifest.mft File: manifest.mft (raw, json) Hash identifier: 4CTRhMNnzK/Dku4lq4xAXiqXfUItqymtV8lLfBOEyfk= Subject key identifier: 73:28:5B:7E:09:DC:11:02:16:F3:B2:F0:AC:42:EA:7B:38:4D:CD:A6 Authority key identifier: E7:CA:DA:5F:08:81:D7:7B:EA:48:B0:76:8A:37:66:B5:00:65:AF:08 Certificate issuer: /CN=A918806F0000/serialNumber=E7CADA5F0881D77BEA48B0768A3766B50065AF08 Certificate serial: 3EF64F622A67BF2B93DF3025669F75770F0E09C4 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/58raXwiB13vqSLB2ijdmtQBlrwg.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/708aafaf-00b4-485b-854c-0b32ca30f57b/manifest.mft Manifest number: 069A Signing time: Fri 25 Sep 2026 00:09:34 +0000 Manifest this update: Fri 25 Sep 2026 00:09:34 +0000 Manifest next update: Tue 29 Sep 2026 00:09:34 +0000 Files and hashes: 1: 12e59001-35ac-4abf-858f-37b955a24b3f.crl (hash: /UB2NMAeXCY2LXQ3j+ZFrYuu7C4DzDivyAIH+ZtlyuY=) 2: 381fc6e6-5d49-41bc-b584-d9437c68e3cd.roa (hash: 8QqQOxAj3sRai6/BzOB2kV66/okkk7p8TzKsBaSwcWA=) 3: 49119734-9dbc-4bd4-98be-57e4ce078928.roa (hash: 0OedyNMwjL1I1p7rzryfdYD0nslES0i+43AbthFPFmE=) 4: 5663bf34-10ed-4309-a236-7466afd6f02f.roa (hash: aoaRIM84eruV/ISWBs3PJCPQb0sEmsLtTOcu1EdbsFA=) 5: cc2f7093-21a6-400f-9db1-93c2fe02bc1c.roa (hash: vbtxuyfgx9e6lLFR0CnUGCC1kgCTySw+Ljt4yM1fDb4=) 6: ea1d02aa-6d25-4b36-b42e-ba837d49e261.roa (hash: q5bh3h1LHQcXwRDCiiiYn6TP5+N60E0SyV4QnQBQL8c=) Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/708aafaf-00b4-485b-854c-0b32ca30f57b/12e59001-35ac-4abf-858f-37b955a24b3f.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/708aafaf-00b4-485b-854c-0b32ca30f57b/manifest.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/58raXwiB13vqSLB2ijdmtQBlrwg.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 29 Sep 2026 00:09:34 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3e:f6:4f:62:2a:67:bf:2b:93:df:30:25:66:9f:75:77:0f:0e:09:c4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A918806F0000, serialNumber=E7CADA5F0881D77BEA48B0768A3766B50065AF08 Validity Not Before: Sep 25 00:09:34 2026 GMT Not After : Sep 29 00:09:34 2026 GMT Subject: serialNumber=ac1c52e12712588645d08c7ffaae74083a25b14bc5ea2c339e3b47a08a9358eb, CN=bb9a9116-f615-462e-a680-5266b327e0fa Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e1:92:22:f7:d4:6e:4b:01:c9:e3:3e:49:d5:a7: 19:83:1a:49:a5:22:f9:88:e0:fa:f1:18:ec:b5:37: 35:26:61:6a:5b:1f:15:d9:23:d3:78:e7:d3:76:ad: 33:11:39:6f:90:e7:53:01:52:4d:44:74:dd:d1:ea: 30:9a:54:0c:95:7d:42:26:e5:f7:3c:d1:c3:a2:16: 99:5c:bf:79:06:72:fd:62:2f:ac:45:98:64:9d:62: b6:52:e1:12:04:5a:c5:e2:ca:88:a6:e7:2c:17:39: a4:c2:fc:f3:38:21:bd:be:75:7f:6f:e7:2a:92:9e: b0:f6:51:32:80:ec:fb:ef:06:fa:d0:0b:4e:1d:5d: ad:dc:7e:01:e1:da:04:9a:b0:d6:b4:d4:7c:fd:80: 0d:9f:95:93:2f:6a:69:55:d1:c2:9e:73:f2:30:6c: 1f:c7:6d:2d:5b:3d:be:e4:26:c7:c4:2d:0a:57:e6: ed:ed:ec:6f:48:d9:ce:d5:2a:7a:95:1a:25:ff:ea: 5c:da:b6:c5:57:ff:a9:52:b6:1f:fc:b7:e7:9e:51: ea:0e:5d:24:9c:99:8a:03:19:cc:53:0b:4d:65:22: bc:ec:d4:8c:41:24:8a:fe:75:55:49:98:ff:80:36: 0c:8a:ef:2c:01:3c:6c:39:40:86:83:af:7f:03:a4: 1b:0f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 73:28:5B:7E:09:DC:11:02:16:F3:B2:F0:AC:42:EA:7B:38:4D:CD:A6 X509v3 Authority Key Identifier: keyid:E7:CA:DA:5F:08:81:D7:7B:EA:48:B0:76:8A:37:66:B5:00:65:AF:08 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/58raXwiB13vqSLB2ijdmtQBlrwg.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/708aafaf-00b4-485b-854c-0b32ca30f57b/manifest.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/708aafaf-00b4-485b-854c-0b32ca30f57b/12e59001-35ac-4abf-858f-37b955a24b3f.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 8a:e7:32:66:e9:24:e1:06:3a:bd:f4:3e:21:08:38:7e:e5:5e: 77:28:fc:8e:6f:1e:84:8f:24:cc:3d:ee:5a:37:b5:02:3b:4c: ef:5a:a8:d2:11:cd:dc:25:6a:14:76:c6:cd:bd:56:e9:5b:6a: 88:e8:d5:5a:90:3c:9b:8b:5f:13:b3:e1:44:d9:6e:6f:f7:90: 28:d7:47:72:b8:50:60:40:83:eb:46:a7:e5:55:66:76:ad:3a: c5:32:b7:7a:61:5d:f4:73:b9:83:10:46:2f:c5:d8:71:fc:66: eb:db:7c:62:6c:8a:43:39:62:41:53:2b:5d:15:19:ae:40:5f: a2:7b:4c:92:fc:a8:69:ab:60:39:8e:fe:cb:74:d7:3e:40:12: 05:c5:e1:87:8c:3e:dd:12:01:31:c6:6f:14:80:d0:dc:75:11: 68:80:5c:b1:46:57:70:c3:27:89:d3:7f:42:15:1d:99:58:2f: 9c:96:ac:f5:c7:cb:02:3f:f0:06:e7:7a:72:cb:37:7a:3d:08: 7b:ca:75:6c:d5:c6:8f:63:a5:b5:df:11:42:da:84:55:1f:19: ce:33:84:a6:df:ed:0b:84:2e:97:87:53:19:22:7a:89:e9:48: 2f:07:a6:3c:d2:62:7e:15:f1:e7:be:44:aa:45:cc:0c:21:6f: 2b:20:22:26 -----BEGIN CERTIFICATE----- MIIFlTCCBH2gAwIBAgIUPvZPYipnvyuT3zAlZp91dw8OCcQwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODgwNkYwMDAwMTEwLwYDVQQFEyhFN0NBREE1RjA4 ODFENzdCRUE0OEIwNzY4QTM3NjZCNTAwNjVBRjA4MB4XDTI2MDkyNTAwMDkzNFoX DTI2MDkyOTAwMDkzNFowejFJMEcGA1UEBRNAYWMxYzUyZTEyNzEyNTg4NjQ1ZDA4 YzdmZmFhZTc0MDgzYTI1YjE0YmM1ZWEyYzMzOWUzYjQ3YTA4YTkzNThlYjEtMCsG A1UEAxMkYmI5YTkxMTYtZjYxNS00NjJlLWE2ODAtNTI2NmIzMjdlMGZhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4ZIi99RuSwHJ4z5J1acZgxpJpSL5 iOD68RjstTc1JmFqWx8V2SPTeOfTdq0zETlvkOdTAVJNRHTd0eowmlQMlX1CJuX3 PNHDohaZXL95BnL9Yi+sRZhknWK2UuESBFrF4sqIpucsFzmkwvzzOCG9vnV/b+cq kp6w9lEygOz77wb60AtOHV2t3H4B4doEmrDWtNR8/YANn5WTL2ppVdHCnnPyMGwf x20tWz2+5CbHxC0KV+bt7exvSNnO1Sp6lRol/+pc2rbFV/+pUrYf/LfnnlHqDl0k nJmKAxnMUwtNZSK87NSMQSSK/nVVSZj/gDYMiu8sATxsOUCGg69/A6QbDwIDAQAB o4ICQTCCAj0wHQYDVR0OBBYEFHMoW34J3BECFvOy8KxC6ns4Tc2mMB8GA1UdIwQY MBaAFOfK2l8Igdd76kiwdoo3ZrUAZa8IMA4GA1UdDwEB/wQEAwIHgDB+BggrBgEF BQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVw b3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi81OHJhWHdp QjEzdnFTTEIyaWpkbXRRQmxyd2cuY2VyMH8GCCsGAQUFBwELBHMwcTBvBggrBgEF BQcwC4ZjcnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5hbWF6b25hd3MuY29t L3ZvbHVtZS83MDhhYWZhZi0wMGI0LTQ4NWItODU0Yy0wYjMyY2EzMGY1N2IvbWFu aWZlc3QubWZ0MIGVBgNVHR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnBraS1y c3luYy51cy1lYXN0LTIuYW1hem9uYXdzLmNvbS92b2x1bWUvNzA4YWFmYWYtMDBi NC00ODViLTg1NGMtMGIzMmNhMzBmNTdiLzEyZTU5MDAxLTM1YWMtNGFiZi04NThm LTM3Yjk1NWEyNGIzZi5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggr BgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYw BKACBQAwDQYJKoZIhvcNAQELBQADggEBAIrnMmbpJOEGOr30PiEIOH7lXnco/I5v HoSPJMw97lo3tQI7TO9aqNIRzdwlahR2xs29Vulbaojo1VqQPJuLXxOz4UTZbm/3 kCjXR3K4UGBAg+tGp+VVZnatOsUyt3phXfRzuYMQRi/F2HH8ZuvbfGJsikM5YkFT K10VGa5AX6J7TJL8qGmrYDmO/st01z5AEgXF4YeMPt0SATHGbxSA0Nx1EWiAXLFG V3DDJ4nTf0IVHZlYL5yWrPXHywI/8AbnenLLN3o9CHvKdWzVxo9jpbXfEULahFUf Gc4zhKbf7QuELpeHUxkieonpSC8HpjzSYn4V8ee+RKpFzAwhbysgIiY= -----END CERTIFICATE-----Generated at Fri Sep 25 06:50:02 2026 by rpki-client