$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/708aafaf-00b4-485b-854c-0b32ca30f57b/manifest.mft File: manifest.mft (raw, json) Hash identifier: V4HYWp8W2lDabM+NV/38WsvJ7bX6NZvhUfvfiGEO450= Subject key identifier: 29:49:B2:0A:53:3F:2A:8F:1D:FD:D2:7D:8E:C2:69:B8:30:1E:C2:17 Authority key identifier: E7:CA:DA:5F:08:81:D7:7B:EA:48:B0:76:8A:37:66:B5:00:65:AF:08 Certificate issuer: /CN=A918806F0000/serialNumber=E7CADA5F0881D77BEA48B0768A3766B50065AF08 Certificate serial: 54E0B6A7726FB2734BABDC715D51F36E619BDD06 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/58raXwiB13vqSLB2ijdmtQBlrwg.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/708aafaf-00b4-485b-854c-0b32ca30f57b/manifest.mft Manifest number: 0665 Signing time: Mon 03 Aug 2026 00:03:57 +0000 Manifest this update: Mon 03 Aug 2026 00:03:57 +0000 Manifest next update: Fri 07 Aug 2026 00:03:57 +0000 Files and hashes: 1: 12e59001-35ac-4abf-858f-37b955a24b3f.crl (hash: US3ETysasgiXM9KbySXPLVX0jXs8ASxG1c5+UzozJUQ=) 2: 381fc6e6-5d49-41bc-b584-d9437c68e3cd.roa (hash: M+i7XpsJD4p5Tk2yVGdLmGjDs5xTMXCNLVAUi3YO9fw=) 3: 49119734-9dbc-4bd4-98be-57e4ce078928.roa (hash: 0OedyNMwjL1I1p7rzryfdYD0nslES0i+43AbthFPFmE=) 4: 5663bf34-10ed-4309-a236-7466afd6f02f.roa (hash: aoaRIM84eruV/ISWBs3PJCPQb0sEmsLtTOcu1EdbsFA=) 5: cc2f7093-21a6-400f-9db1-93c2fe02bc1c.roa (hash: vbtxuyfgx9e6lLFR0CnUGCC1kgCTySw+Ljt4yM1fDb4=) 6: ea1d02aa-6d25-4b36-b42e-ba837d49e261.roa (hash: q5bh3h1LHQcXwRDCiiiYn6TP5+N60E0SyV4QnQBQL8c=) Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/708aafaf-00b4-485b-854c-0b32ca30f57b/12e59001-35ac-4abf-858f-37b955a24b3f.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/708aafaf-00b4-485b-854c-0b32ca30f57b/manifest.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/58raXwiB13vqSLB2ijdmtQBlrwg.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 07 Aug 2026 00:03:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 54:e0:b6:a7:72:6f:b2:73:4b:ab:dc:71:5d:51:f3:6e:61:9b:dd:06 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A918806F0000, serialNumber=E7CADA5F0881D77BEA48B0768A3766B50065AF08 Validity Not Before: Aug 3 00:03:57 2026 GMT Not After : Aug 7 00:03:57 2026 GMT Subject: serialNumber=6dbd62f2f976d4e810c836fa95afd6a792e3144e138a1a0682f012e54bd3cfaf, CN=bb9a9116-f615-462e-a680-5266b327e0fa Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ca:ea:1e:85:a0:90:51:1c:3c:15:c6:17:5a:c5: e1:fb:7f:69:93:9e:12:c3:8e:e7:9e:32:d2:28:cd: b0:6a:cf:70:79:4d:dc:57:a2:ec:5b:f6:2c:67:c6: 90:f3:65:38:de:fa:d8:63:79:d7:d7:ad:f2:99:4e: a9:f5:86:66:79:ee:46:04:0e:f4:c9:c2:09:d6:20: 4f:dc:43:b9:3f:b3:d9:42:37:50:14:8d:28:3f:c2: 9d:1a:73:77:e7:06:92:01:ac:6c:b3:f8:03:b3:6b: 82:5d:ff:d7:ce:8f:00:f2:2a:ea:e8:e4:57:c4:a1: bb:a7:e7:8d:83:31:32:73:bc:fc:b3:92:78:bd:9d: 94:39:a8:37:dc:cd:12:f5:e1:f4:39:83:e5:df:df: 5e:46:27:bd:1b:c0:51:84:25:2d:03:ab:d6:f2:70: fa:68:9e:ba:12:de:ab:f3:a5:0d:10:df:ef:3a:ba: 77:d7:1a:1f:a4:86:12:a2:2d:1f:22:76:63:62:ca: c4:54:fa:94:a8:37:10:7b:a9:b9:d0:10:bd:dc:47: bf:bc:a6:1c:3f:89:39:22:1b:23:a9:02:73:18:f6: 45:d1:93:ca:5e:25:48:2c:0a:73:0b:a0:4b:23:ea: e0:e2:99:bb:a3:d7:0d:97:0e:2a:e5:56:e6:a2:d8: 36:3b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 29:49:B2:0A:53:3F:2A:8F:1D:FD:D2:7D:8E:C2:69:B8:30:1E:C2:17 X509v3 Authority Key Identifier: keyid:E7:CA:DA:5F:08:81:D7:7B:EA:48:B0:76:8A:37:66:B5:00:65:AF:08 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/58raXwiB13vqSLB2ijdmtQBlrwg.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/708aafaf-00b4-485b-854c-0b32ca30f57b/manifest.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/708aafaf-00b4-485b-854c-0b32ca30f57b/12e59001-35ac-4abf-858f-37b955a24b3f.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 50:c8:39:fc:2b:94:3b:9e:40:d8:9b:ee:de:7b:9c:0c:21:84: 20:48:ad:7f:af:e7:1f:13:26:37:5a:fb:d4:9c:8f:8b:8d:a1: a8:e3:ed:28:0f:bd:f5:ea:f7:6b:96:8b:66:9a:9c:2c:9e:55: e3:77:c8:b1:f3:f5:10:34:0e:d6:4d:f4:75:02:e7:3e:6f:cd: 6b:6c:56:75:36:f9:45:eb:18:c3:b1:ee:f1:5b:b2:00:a5:52: d5:9c:f7:12:96:2b:7e:e9:0e:e2:8f:98:6d:a3:f0:fa:1c:3e: 42:e6:7b:51:f6:d7:cd:06:25:6c:fa:f3:0f:5a:01:a3:ef:ce: 57:1a:18:ba:2b:04:fc:a7:c6:53:bb:0a:17:95:51:d7:69:9a: b3:94:46:76:90:de:1d:14:9a:cd:62:aa:c7:bd:bf:43:f4:68: a6:2e:d2:ab:c4:82:bd:b2:c7:19:b6:74:81:00:76:33:4c:80: 3f:0e:d1:e4:56:89:0f:15:09:61:4d:ae:09:2f:3d:ab:a9:be: 83:0a:d7:c8:be:4b:29:f1:7a:a9:3e:ac:5f:ef:70:a8:a5:48: cc:49:ba:74:30:14:a1:04:d1:6f:88:d5:9c:6e:ef:1e:e6:73: 3a:3b:82:60:58:36:0c:e7:d3:0f:37:f4:ed:70:89:92:96:07: 15:79:24:3d -----BEGIN CERTIFICATE----- MIIFlTCCBH2gAwIBAgIUVOC2p3JvsnNLq9xxXVHzbmGb3QYwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODgwNkYwMDAwMTEwLwYDVQQFEyhFN0NBREE1RjA4 ODFENzdCRUE0OEIwNzY4QTM3NjZCNTAwNjVBRjA4MB4XDTI2MDgwMzAwMDM1N1oX DTI2MDgwNzAwMDM1N1owejFJMEcGA1UEBRNANmRiZDYyZjJmOTc2ZDRlODEwYzgz NmZhOTVhZmQ2YTc5MmUzMTQ0ZTEzOGExYTA2ODJmMDEyZTU0YmQzY2ZhZjEtMCsG A1UEAxMkYmI5YTkxMTYtZjYxNS00NjJlLWE2ODAtNTI2NmIzMjdlMGZhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyuoehaCQURw8FcYXWsXh+39pk54S w47nnjLSKM2was9weU3cV6LsW/YsZ8aQ82U43vrYY3nX163ymU6p9YZmee5GBA70 ycIJ1iBP3EO5P7PZQjdQFI0oP8KdGnN35waSAaxss/gDs2uCXf/Xzo8A8irq6ORX xKG7p+eNgzEyc7z8s5J4vZ2UOag33M0S9eH0OYPl399eRie9G8BRhCUtA6vW8nD6 aJ66Et6r86UNEN/vOrp31xofpIYSoi0fInZjYsrEVPqUqDcQe6m50BC93Ee/vKYc P4k5IhsjqQJzGPZF0ZPKXiVILApzC6BLI+rg4pm7o9cNlw4q5Vbmotg2OwIDAQAB o4ICQTCCAj0wHQYDVR0OBBYEFClJsgpTPyqPHf3SfY7CabgwHsIXMB8GA1UdIwQY MBaAFOfK2l8Igdd76kiwdoo3ZrUAZa8IMA4GA1UdDwEB/wQEAwIHgDB+BggrBgEF BQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVw b3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi81OHJhWHdp QjEzdnFTTEIyaWpkbXRRQmxyd2cuY2VyMH8GCCsGAQUFBwELBHMwcTBvBggrBgEF BQcwC4ZjcnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5hbWF6b25hd3MuY29t L3ZvbHVtZS83MDhhYWZhZi0wMGI0LTQ4NWItODU0Yy0wYjMyY2EzMGY1N2IvbWFu aWZlc3QubWZ0MIGVBgNVHR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnBraS1y c3luYy51cy1lYXN0LTIuYW1hem9uYXdzLmNvbS92b2x1bWUvNzA4YWFmYWYtMDBi NC00ODViLTg1NGMtMGIzMmNhMzBmNTdiLzEyZTU5MDAxLTM1YWMtNGFiZi04NThm LTM3Yjk1NWEyNGIzZi5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggr BgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYw BKACBQAwDQYJKoZIhvcNAQELBQADggEBAFDIOfwrlDueQNib7t57nAwhhCBIrX+v 5x8TJjda+9Scj4uNoajj7SgPvfXq92uWi2aanCyeVeN3yLHz9RA0DtZN9HUC5z5v zWtsVnU2+UXrGMOx7vFbsgClUtWc9xKWK37pDuKPmG2j8PocPkLme1H2180GJWz6 8w9aAaPvzlcaGLorBPynxlO7CheVUddpmrOURnaQ3h0Ums1iqse9v0P0aKYu0qvE gr2yxxm2dIEAdjNMgD8O0eRWiQ8VCWFNrgkvPaupvoMK18i+Synxeqk+rF/vcKil SMxJunQwFKEE0W+I1Zxu7x7mczo7gmBYNgzn0w839O1wiZKWBxV5JD0= -----END CERTIFICATE-----Generated at Mon Aug 3 12:25:41 2026 by rpki-client