$ rpki-client -vvvf rpki-rsync.us-east-2.amazonaws.com/volume/708aafaf-00b4-485b-854c-0b32ca30f57b/manifest.mft File: manifest.mft (raw, json) Hash identifier: DeKnvWhA19CBMxi4Jq9yr/PO3v1b8Uxg3MYCXAUOiHk= Subject key identifier: 7D:D0:11:76:89:34:13:D8:7A:46:D5:4D:45:AF:9A:CF:0C:85:6F:70 Authority key identifier: E7:CA:DA:5F:08:81:D7:7B:EA:48:B0:76:8A:37:66:B5:00:65:AF:08 Certificate issuer: /CN=A918806F0000/serialNumber=E7CADA5F0881D77BEA48B0768A3766B50065AF08 Certificate serial: 17A5E9FD80D04C01803A9878067595924FDE7F83 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/58raXwiB13vqSLB2ijdmtQBlrwg.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/708aafaf-00b4-485b-854c-0b32ca30f57b/manifest.mft Manifest number: 0690 Signing time: Tue 15 Sep 2026 00:07:46 +0000 Manifest this update: Tue 15 Sep 2026 00:07:46 +0000 Manifest next update: Sat 19 Sep 2026 00:07:46 +0000 Files and hashes: 1: 12e59001-35ac-4abf-858f-37b955a24b3f.crl (hash: TYrQKq9vNQQ5irAdq5iTEXB5jsBtlbF3++UAxvOuFqE=) 2: 381fc6e6-5d49-41bc-b584-d9437c68e3cd.roa (hash: 8QqQOxAj3sRai6/BzOB2kV66/okkk7p8TzKsBaSwcWA=) 3: 49119734-9dbc-4bd4-98be-57e4ce078928.roa (hash: 0OedyNMwjL1I1p7rzryfdYD0nslES0i+43AbthFPFmE=) 4: 5663bf34-10ed-4309-a236-7466afd6f02f.roa (hash: aoaRIM84eruV/ISWBs3PJCPQb0sEmsLtTOcu1EdbsFA=) 5: cc2f7093-21a6-400f-9db1-93c2fe02bc1c.roa (hash: vbtxuyfgx9e6lLFR0CnUGCC1kgCTySw+Ljt4yM1fDb4=) 6: ea1d02aa-6d25-4b36-b42e-ba837d49e261.roa (hash: q5bh3h1LHQcXwRDCiiiYn6TP5+N60E0SyV4QnQBQL8c=) Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/708aafaf-00b4-485b-854c-0b32ca30f57b/12e59001-35ac-4abf-858f-37b955a24b3f.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/708aafaf-00b4-485b-854c-0b32ca30f57b/manifest.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/58raXwiB13vqSLB2ijdmtQBlrwg.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 19 Sep 2026 00:07:46 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 17:a5:e9:fd:80:d0:4c:01:80:3a:98:78:06:75:95:92:4f:de:7f:83 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A918806F0000, serialNumber=E7CADA5F0881D77BEA48B0768A3766B50065AF08 Validity Not Before: Sep 15 00:07:46 2026 GMT Not After : Sep 19 00:07:46 2026 GMT Subject: serialNumber=d66aee98dca1ffa1f34297aad7a1887ebd1e2c5ae5758d7f85052ad2361cc133, CN=bb9a9116-f615-462e-a680-5266b327e0fa Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:99:cb:83:47:6c:0c:1e:18:df:97:1f:b5:fd:3f: 47:92:18:e1:e7:69:66:bf:bc:2a:dd:7c:53:53:61: 91:e5:3d:b3:5c:88:58:37:77:7c:72:3f:c3:0c:63: f9:eb:ea:d6:b9:24:94:be:43:d7:b4:24:65:e0:6c: 45:57:bb:e1:e9:5d:70:75:9d:9e:b7:76:fa:ef:ee: 2d:1e:0d:bf:a3:6f:f4:ec:c4:64:20:a3:53:3f:41: 0d:8a:a7:26:e6:e2:b4:15:2c:2c:b5:e9:4d:cf:23: f4:79:01:59:09:71:f2:6b:db:69:0e:b3:ca:39:23: 2a:6f:94:5f:9f:8d:70:8b:03:ed:96:18:8f:9a:41: d4:af:a4:c0:bf:e2:6c:04:c7:f1:ea:f6:b8:8c:ff: 94:76:b1:a2:d3:63:2e:74:2c:87:d2:82:43:ca:e1: 66:83:56:b3:85:ff:69:91:d5:25:39:99:f6:9e:7c: 6a:d1:8f:7d:9f:af:15:53:c8:29:2a:2f:74:62:4f: f7:a0:b3:6b:2f:88:dd:24:dc:37:5c:a2:56:3d:e8: 64:ff:bc:56:fd:66:f6:ec:3c:f7:1b:97:e5:43:7b: d6:be:eb:1e:4d:2a:36:1b:05:57:c2:da:ee:fd:93: 5a:a0:40:9c:f1:34:a9:e1:54:4f:a9:83:f3:cc:df: 3f:f5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7D:D0:11:76:89:34:13:D8:7A:46:D5:4D:45:AF:9A:CF:0C:85:6F:70 X509v3 Authority Key Identifier: keyid:E7:CA:DA:5F:08:81:D7:7B:EA:48:B0:76:8A:37:66:B5:00:65:AF:08 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/58raXwiB13vqSLB2ijdmtQBlrwg.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/708aafaf-00b4-485b-854c-0b32ca30f57b/manifest.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/708aafaf-00b4-485b-854c-0b32ca30f57b/12e59001-35ac-4abf-858f-37b955a24b3f.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 04:37:b5:88:6c:2b:e2:20:53:c8:23:05:64:b0:aa:2b:e7:8d: 39:c8:ed:54:64:2c:5f:4f:fe:de:95:94:dd:e0:f6:fe:1d:63: 25:b7:5e:6d:e3:69:7b:cb:85:64:34:97:c8:e6:73:66:f6:b5: 8e:15:b1:22:89:ab:4e:b0:f8:aa:2b:6d:89:59:bc:58:4d:58: 9c:11:f2:d3:0d:5e:99:8f:40:f2:56:6f:51:e8:39:d2:b5:00: 5b:e2:0b:bc:08:b7:77:b2:e8:75:03:b9:db:a5:3d:1f:2d:45: 6f:a4:b0:66:21:ab:81:26:e7:7f:d5:59:ce:59:3d:0f:19:38: 78:97:b2:f0:3c:d6:16:dd:a3:c7:63:a5:d7:a0:05:a7:ec:0e: 06:4f:d2:3b:e5:ed:5a:4c:a6:8e:32:4b:bb:9c:d4:a8:8c:09: 36:29:ae:79:af:43:b6:55:5c:b0:3f:4f:d5:44:4d:a8:3b:24: 27:a7:e1:18:37:98:8d:a6:ab:7b:00:6a:07:41:b6:46:e0:ae: 3e:25:07:ec:73:69:92:96:db:5a:de:30:20:d7:ab:02:5b:17: 2b:01:20:9f:b5:3a:f3:5c:50:25:8b:51:4c:b8:ed:ca:cc:81: 44:8b:66:c3:03:00:fc:d3:20:a3:a1:bf:54:9d:e8:11:9b:48: 74:db:e6:bd -----BEGIN CERTIFICATE----- MIIFlTCCBH2gAwIBAgIUF6Xp/YDQTAGAOph4BnWVkk/ef4MwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODgwNkYwMDAwMTEwLwYDVQQFEyhFN0NBREE1RjA4 ODFENzdCRUE0OEIwNzY4QTM3NjZCNTAwNjVBRjA4MB4XDTI2MDkxNTAwMDc0NloX DTI2MDkxOTAwMDc0NlowejFJMEcGA1UEBRNAZDY2YWVlOThkY2ExZmZhMWYzNDI5 N2FhZDdhMTg4N2ViZDFlMmM1YWU1NzU4ZDdmODUwNTJhZDIzNjFjYzEzMzEtMCsG A1UEAxMkYmI5YTkxMTYtZjYxNS00NjJlLWE2ODAtNTI2NmIzMjdlMGZhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmcuDR2wMHhjflx+1/T9Hkhjh52lm v7wq3XxTU2GR5T2zXIhYN3d8cj/DDGP56+rWuSSUvkPXtCRl4GxFV7vh6V1wdZ2e t3b67+4tHg2/o2/07MRkIKNTP0ENiqcm5uK0FSwstelNzyP0eQFZCXHya9tpDrPK OSMqb5Rfn41wiwPtlhiPmkHUr6TAv+JsBMfx6va4jP+UdrGi02MudCyH0oJDyuFm g1azhf9pkdUlOZn2nnxq0Y99n68VU8gpKi90Yk/3oLNrL4jdJNw3XKJWPehk/7xW /Wb27Dz3G5flQ3vWvuseTSo2GwVXwtru/ZNaoECc8TSp4VRPqYPzzN8/9QIDAQAB o4ICQTCCAj0wHQYDVR0OBBYEFH3QEXaJNBPYekbVTUWvms8MhW9wMB8GA1UdIwQY MBaAFOfK2l8Igdd76kiwdoo3ZrUAZa8IMA4GA1UdDwEB/wQEAwIHgDB+BggrBgEF BQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVw b3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi81OHJhWHdp QjEzdnFTTEIyaWpkbXRRQmxyd2cuY2VyMH8GCCsGAQUFBwELBHMwcTBvBggrBgEF BQcwC4ZjcnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5hbWF6b25hd3MuY29t L3ZvbHVtZS83MDhhYWZhZi0wMGI0LTQ4NWItODU0Yy0wYjMyY2EzMGY1N2IvbWFu aWZlc3QubWZ0MIGVBgNVHR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnBraS1y c3luYy51cy1lYXN0LTIuYW1hem9uYXdzLmNvbS92b2x1bWUvNzA4YWFmYWYtMDBi NC00ODViLTg1NGMtMGIzMmNhMzBmNTdiLzEyZTU5MDAxLTM1YWMtNGFiZi04NThm LTM3Yjk1NWEyNGIzZi5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggr BgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYw BKACBQAwDQYJKoZIhvcNAQELBQADggEBAAQ3tYhsK+IgU8gjBWSwqivnjTnI7VRk LF9P/t6VlN3g9v4dYyW3Xm3jaXvLhWQ0l8jmc2b2tY4VsSKJq06w+KorbYlZvFhN WJwR8tMNXpmPQPJWb1HoOdK1AFviC7wIt3ey6HUDudulPR8tRW+ksGYhq4Em53/V Wc5ZPQ8ZOHiXsvA81hbdo8djpdegBafsDgZP0jvl7VpMpo4yS7uc1KiMCTYprnmv Q7ZVXLA/T9VETag7JCen4Rg3mI2mq3sAagdBtkbgrj4lB+xzaZKW21reMCDXqwJb FysBIJ+1OvNcUCWLUUy47crMgUSLZsMDAPzTIKOhv1Sd6BGbSHTb5r0= -----END CERTIFICATE-----Generated at Tue Sep 15 12:44:06 2026 by rpki-client