$ rpki-client -vvvf rpki-rsync.us-east-2.amazonaws.com/volume/708aafaf-00b4-485b-854c-0b32ca30f57b/manifest.mft File: manifest.mft (raw, json) Hash identifier: 1iFWpT5uxAgLVNByB5EUnvmX8aTKVIwTeX8r8PDkPxo= Subject key identifier: 44:B6:9C:A0:78:C1:22:DC:99:95:23:FA:7F:DC:7B:07:92:18:1D:79 Authority key identifier: E7:CA:DA:5F:08:81:D7:7B:EA:48:B0:76:8A:37:66:B5:00:65:AF:08 Certificate issuer: /CN=A918806F0000/serialNumber=E7CADA5F0881D77BEA48B0768A3766B50065AF08 Certificate serial: 1BAC83E5E900088D1BD2073F1E0CC09660085237 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/58raXwiB13vqSLB2ijdmtQBlrwg.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/708aafaf-00b4-485b-854c-0b32ca30f57b/manifest.mft Manifest number: 0696 Signing time: Mon 21 Sep 2026 00:08:56 +0000 Manifest this update: Mon 21 Sep 2026 00:08:56 +0000 Manifest next update: Fri 25 Sep 2026 00:08:56 +0000 Files and hashes: 1: 12e59001-35ac-4abf-858f-37b955a24b3f.crl (hash: vlw0cNX34e5ejW0iFpWDLObeEHIP/OexoB0wvHRRQzU=) 2: 381fc6e6-5d49-41bc-b584-d9437c68e3cd.roa (hash: 8QqQOxAj3sRai6/BzOB2kV66/okkk7p8TzKsBaSwcWA=) 3: 49119734-9dbc-4bd4-98be-57e4ce078928.roa (hash: 0OedyNMwjL1I1p7rzryfdYD0nslES0i+43AbthFPFmE=) 4: 5663bf34-10ed-4309-a236-7466afd6f02f.roa (hash: aoaRIM84eruV/ISWBs3PJCPQb0sEmsLtTOcu1EdbsFA=) 5: cc2f7093-21a6-400f-9db1-93c2fe02bc1c.roa (hash: vbtxuyfgx9e6lLFR0CnUGCC1kgCTySw+Ljt4yM1fDb4=) 6: ea1d02aa-6d25-4b36-b42e-ba837d49e261.roa (hash: q5bh3h1LHQcXwRDCiiiYn6TP5+N60E0SyV4QnQBQL8c=) Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/708aafaf-00b4-485b-854c-0b32ca30f57b/12e59001-35ac-4abf-858f-37b955a24b3f.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/708aafaf-00b4-485b-854c-0b32ca30f57b/manifest.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/58raXwiB13vqSLB2ijdmtQBlrwg.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 25 Sep 2026 00:08:56 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1b:ac:83:e5:e9:00:08:8d:1b:d2:07:3f:1e:0c:c0:96:60:08:52:37 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A918806F0000, serialNumber=E7CADA5F0881D77BEA48B0768A3766B50065AF08 Validity Not Before: Sep 21 00:08:56 2026 GMT Not After : Sep 25 00:08:56 2026 GMT Subject: serialNumber=0608144ec574f75a5267f43277c3abe70a2f5ab6ca35cbd144df383215a48d44, CN=bb9a9116-f615-462e-a680-5266b327e0fa Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9b:5f:e6:72:3f:f7:de:36:55:c7:43:e4:1e:d1: e1:93:64:18:3a:ee:06:87:43:21:6e:62:b7:f4:02: 98:ec:70:f3:a7:22:f9:cc:dc:11:ff:2e:67:9d:e5: cc:77:de:bc:02:c8:a1:d5:1d:80:b3:d5:fe:a2:ad: ca:9b:34:8c:b5:07:76:8c:3a:93:20:f3:0e:98:51: 90:a8:c6:65:19:53:23:b9:7f:94:e5:d6:8b:d0:9c: 1c:1f:ce:25:56:e5:f6:07:b1:2a:72:35:d4:97:95: 01:3f:5f:43:f9:f0:c9:97:92:b3:3a:c0:75:bc:25: ff:e6:83:b6:25:f4:76:37:a7:3f:f2:11:de:7d:d8: 97:aa:60:dc:b2:8b:be:e6:66:94:36:79:26:58:2d: 37:65:96:d3:ab:0c:2d:9c:09:d6:7d:18:ee:ef:02: a6:58:eb:27:00:22:b7:e0:40:d9:fe:6a:61:fb:33: 95:6a:8e:8f:2f:54:37:47:71:fb:93:13:3e:52:d9: 32:19:7c:ee:95:bf:f3:13:57:9f:b0:cd:56:7b:6a: ab:fc:3d:b4:6a:23:85:bd:fa:2a:64:f1:b0:fb:a4: 34:5c:c6:83:86:20:60:77:b9:a3:34:d0:c1:7b:15: 10:bd:47:04:2f:2c:fe:32:76:4d:f0:87:e1:f4:0f: 99:13 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 44:B6:9C:A0:78:C1:22:DC:99:95:23:FA:7F:DC:7B:07:92:18:1D:79 X509v3 Authority Key Identifier: keyid:E7:CA:DA:5F:08:81:D7:7B:EA:48:B0:76:8A:37:66:B5:00:65:AF:08 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/58raXwiB13vqSLB2ijdmtQBlrwg.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/708aafaf-00b4-485b-854c-0b32ca30f57b/manifest.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/708aafaf-00b4-485b-854c-0b32ca30f57b/12e59001-35ac-4abf-858f-37b955a24b3f.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 3b:53:2e:e5:19:5c:15:30:a2:3f:26:27:79:32:97:da:93:7e: 7b:06:0e:74:80:a9:2a:d2:88:5e:63:80:bc:27:12:d3:6d:fc: eb:46:12:e4:5e:37:6c:a6:6b:90:8b:1f:9e:03:81:c7:34:ab: cb:0a:59:b6:2d:89:7a:dd:a4:48:0c:d7:99:65:f7:1c:54:bc: ce:fc:a1:a6:83:7e:ba:a4:05:09:38:a3:16:69:6e:22:4a:36: 0d:ac:db:96:30:f5:28:2a:57:a5:0c:48:2b:69:41:8b:ce:24: e4:44:d9:1f:5c:c4:07:e4:6d:36:95:fc:16:7d:43:46:9a:13: aa:4d:e6:74:e9:2c:4a:36:77:34:fe:40:bf:58:6f:bb:c0:59: 93:13:54:ac:29:e0:37:2e:a8:f4:5c:83:66:8b:b8:46:5d:ac: ba:bd:7b:06:1f:d7:92:b3:9d:a0:41:ee:1b:f2:03:76:f3:57: 46:44:43:b1:35:9d:c3:63:ff:1b:01:8f:0b:57:3e:fa:a0:3b: 86:a0:d4:68:53:58:e2:5f:c3:39:bd:12:5f:e4:56:4f:73:b7: bf:a2:04:af:a8:d4:75:80:92:87:60:aa:62:2a:f6:6b:3d:5c: e4:f1:a9:21:d3:7f:5a:2c:06:14:b9:f6:c5:09:2c:0b:80:36: 20:4d:87:01 -----BEGIN CERTIFICATE----- MIIFlTCCBH2gAwIBAgIUG6yD5ekACI0b0gc/HgzAlmAIUjcwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODgwNkYwMDAwMTEwLwYDVQQFEyhFN0NBREE1RjA4 ODFENzdCRUE0OEIwNzY4QTM3NjZCNTAwNjVBRjA4MB4XDTI2MDkyMTAwMDg1NloX DTI2MDkyNTAwMDg1NlowejFJMEcGA1UEBRNAMDYwODE0NGVjNTc0Zjc1YTUyNjdm NDMyNzdjM2FiZTcwYTJmNWFiNmNhMzVjYmQxNDRkZjM4MzIxNWE0OGQ0NDEtMCsG A1UEAxMkYmI5YTkxMTYtZjYxNS00NjJlLWE2ODAtNTI2NmIzMjdlMGZhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAm1/mcj/33jZVx0PkHtHhk2QYOu4G h0MhbmK39AKY7HDzpyL5zNwR/y5nneXMd968Asih1R2As9X+oq3KmzSMtQd2jDqT IPMOmFGQqMZlGVMjuX+U5daL0JwcH84lVuX2B7EqcjXUl5UBP19D+fDJl5KzOsB1 vCX/5oO2JfR2N6c/8hHefdiXqmDcsou+5maUNnkmWC03ZZbTqwwtnAnWfRju7wKm WOsnACK34EDZ/mph+zOVao6PL1Q3R3H7kxM+UtkyGXzulb/zE1efsM1We2qr/D20 aiOFvfoqZPGw+6Q0XMaDhiBgd7mjNNDBexUQvUcELyz+MnZN8Ifh9A+ZEwIDAQAB o4ICQTCCAj0wHQYDVR0OBBYEFES2nKB4wSLcmZUj+n/ceweSGB15MB8GA1UdIwQY MBaAFOfK2l8Igdd76kiwdoo3ZrUAZa8IMA4GA1UdDwEB/wQEAwIHgDB+BggrBgEF BQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVw b3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi81OHJhWHdp QjEzdnFTTEIyaWpkbXRRQmxyd2cuY2VyMH8GCCsGAQUFBwELBHMwcTBvBggrBgEF BQcwC4ZjcnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5hbWF6b25hd3MuY29t L3ZvbHVtZS83MDhhYWZhZi0wMGI0LTQ4NWItODU0Yy0wYjMyY2EzMGY1N2IvbWFu aWZlc3QubWZ0MIGVBgNVHR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnBraS1y c3luYy51cy1lYXN0LTIuYW1hem9uYXdzLmNvbS92b2x1bWUvNzA4YWFmYWYtMDBi NC00ODViLTg1NGMtMGIzMmNhMzBmNTdiLzEyZTU5MDAxLTM1YWMtNGFiZi04NThm LTM3Yjk1NWEyNGIzZi5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggr BgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYw BKACBQAwDQYJKoZIhvcNAQELBQADggEBADtTLuUZXBUwoj8mJ3kyl9qTfnsGDnSA qSrSiF5jgLwnEtNt/OtGEuReN2yma5CLH54Dgcc0q8sKWbYtiXrdpEgM15ll9xxU vM78oaaDfrqkBQk4oxZpbiJKNg2s25Yw9SgqV6UMSCtpQYvOJORE2R9cxAfkbTaV /BZ9Q0aaE6pN5nTpLEo2dzT+QL9Yb7vAWZMTVKwp4DcuqPRcg2aLuEZdrLq9ewYf 15KznaBB7hvyA3bzV0ZEQ7E1ncNj/xsBjwtXPvqgO4ag1GhTWOJfwzm9El/kVk9z t7+iBK+o1HWAkodgqmIq9ms9XOTxqSHTf1osBhS59sUJLAuANiBNhwE= -----END CERTIFICATE-----Generated at Mon Sep 21 20:47:16 2026 by rpki-client