$ rpki-client -vvvf rpki-rsync.us-east-2.amazonaws.com/volume/708aafaf-00b4-485b-854c-0b32ca30f57b/manifest.mft File: manifest.mft (raw, json) Hash identifier: qOUF2CUUNzG4AlK4PrxMYXjH/g5WUXnbSKfwSTKM4WQ= Subject key identifier: 28:A3:5A:57:2B:E7:F8:09:9D:51:43:1D:3F:54:71:BD:3C:9A:1A:C8 Authority key identifier: E7:CA:DA:5F:08:81:D7:7B:EA:48:B0:76:8A:37:66:B5:00:65:AF:08 Certificate issuer: /CN=A918806F0000/serialNumber=E7CADA5F0881D77BEA48B0768A3766B50065AF08 Certificate serial: 708D63C4F914ABB6DDC966815E0CB1D3C14908CD Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/58raXwiB13vqSLB2ijdmtQBlrwg.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/708aafaf-00b4-485b-854c-0b32ca30f57b/manifest.mft Manifest number: 068A Signing time: Wed 09 Sep 2026 00:06:59 +0000 Manifest this update: Wed 09 Sep 2026 00:06:59 +0000 Manifest next update: Sun 13 Sep 2026 00:06:59 +0000 Files and hashes: 1: 12e59001-35ac-4abf-858f-37b955a24b3f.crl (hash: zJ8+iAOacc2jKI6bb59db3Ul56qpJsRi1mJ2nGz3Ilc=) 2: 381fc6e6-5d49-41bc-b584-d9437c68e3cd.roa (hash: 8QqQOxAj3sRai6/BzOB2kV66/okkk7p8TzKsBaSwcWA=) 3: 49119734-9dbc-4bd4-98be-57e4ce078928.roa (hash: 0OedyNMwjL1I1p7rzryfdYD0nslES0i+43AbthFPFmE=) 4: 5663bf34-10ed-4309-a236-7466afd6f02f.roa (hash: aoaRIM84eruV/ISWBs3PJCPQb0sEmsLtTOcu1EdbsFA=) 5: cc2f7093-21a6-400f-9db1-93c2fe02bc1c.roa (hash: vbtxuyfgx9e6lLFR0CnUGCC1kgCTySw+Ljt4yM1fDb4=) 6: ea1d02aa-6d25-4b36-b42e-ba837d49e261.roa (hash: q5bh3h1LHQcXwRDCiiiYn6TP5+N60E0SyV4QnQBQL8c=) Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/708aafaf-00b4-485b-854c-0b32ca30f57b/12e59001-35ac-4abf-858f-37b955a24b3f.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/708aafaf-00b4-485b-854c-0b32ca30f57b/manifest.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/58raXwiB13vqSLB2ijdmtQBlrwg.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 13 Sep 2026 00:06:59 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 70:8d:63:c4:f9:14:ab:b6:dd:c9:66:81:5e:0c:b1:d3:c1:49:08:cd Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A918806F0000, serialNumber=E7CADA5F0881D77BEA48B0768A3766B50065AF08 Validity Not Before: Sep 9 00:06:59 2026 GMT Not After : Sep 13 00:06:59 2026 GMT Subject: serialNumber=4c4cdb4218d9db85da94d21d204f7368cd27b58ef816b88886469a9825e95390, CN=bb9a9116-f615-462e-a680-5266b327e0fa Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:c3:ec:8c:78:bd:2e:4c:88:04:f1:c7:d8:79: 37:fa:ea:08:a8:5d:c3:68:1d:24:7f:14:f4:e9:a4: db:b1:18:39:6d:44:db:71:0b:0d:06:fd:81:58:e7: 13:2e:09:34:e6:82:25:4a:5c:dd:4c:82:51:98:60: 93:2c:d3:04:b3:59:43:94:07:00:9d:4a:23:83:c5: b9:14:ab:54:fc:1f:ff:ef:ee:2c:f9:9c:f5:9f:e7: 08:9d:74:86:42:3f:b1:f5:ea:d1:eb:ab:e4:48:16: 98:dd:d8:31:67:c2:bc:22:b3:28:ff:8e:5a:2d:38: 0a:d6:9c:36:40:c7:70:38:f9:2e:fe:99:5c:d1:f4: 57:c1:8a:ab:89:f6:24:b3:e2:3c:f5:dc:c7:65:9e: dd:90:72:79:93:88:ca:fb:1f:49:2b:58:39:79:2b: d1:58:3d:c0:fe:90:24:c4:ec:65:b9:c6:25:0d:a9: f3:20:82:cd:e5:d3:90:3d:89:33:44:2f:bd:ec:0e: 3b:17:49:66:e3:cc:c4:52:a2:6e:4c:9d:b0:c8:c0: ea:50:23:c3:e9:e6:99:96:85:a1:44:fd:66:67:27: cc:3f:e5:e8:12:f5:5d:98:8e:e4:f5:b5:98:14:b8: f7:4a:08:21:d1:8d:36:69:ef:94:58:0d:76:51:45: 84:bd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 28:A3:5A:57:2B:E7:F8:09:9D:51:43:1D:3F:54:71:BD:3C:9A:1A:C8 X509v3 Authority Key Identifier: keyid:E7:CA:DA:5F:08:81:D7:7B:EA:48:B0:76:8A:37:66:B5:00:65:AF:08 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/58raXwiB13vqSLB2ijdmtQBlrwg.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/708aafaf-00b4-485b-854c-0b32ca30f57b/manifest.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/708aafaf-00b4-485b-854c-0b32ca30f57b/12e59001-35ac-4abf-858f-37b955a24b3f.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 41:37:2a:98:a9:1c:a1:ad:b5:79:65:d1:b4:9e:17:0d:97:54: 55:e5:ce:04:b4:e9:b5:8d:38:dd:38:53:18:9f:94:cf:6d:5a: 6e:27:79:f3:65:ec:1f:1b:3c:dc:97:17:c7:3c:9b:73:a0:a9: f8:01:f1:0e:3a:f5:4c:e2:4d:ae:c6:18:3c:76:bb:00:05:1f: ca:ff:10:5b:d0:20:ea:dc:d1:b8:a2:a5:43:cd:43:fd:13:c7: 12:24:f1:35:09:c0:52:38:3e:98:4a:53:1d:f0:9c:de:4b:92: d0:af:26:57:45:a9:2b:d1:98:b5:88:5d:67:86:d6:c4:0e:38: fc:50:be:dd:d3:ec:e3:39:2f:fa:ce:28:68:69:6d:fb:57:8e: be:c6:37:1b:d9:9e:5d:51:14:a3:1c:0a:ba:51:af:a4:b3:27: a8:54:86:72:d7:6d:6b:71:99:fe:f3:a0:50:d6:75:c6:5f:d5: cc:ed:b5:55:be:e1:04:14:dc:d4:4b:5c:50:bf:2a:fe:9d:c2: ff:a0:f9:84:2f:97:75:6a:65:4d:f0:b9:f0:23:0f:b2:2d:06: 1b:a5:5f:4d:dc:89:d3:9b:ae:4a:88:97:f7:2b:1f:48:a9:75: a5:ce:de:02:af:49:93:eb:ed:7f:55:0f:a4:f0:05:7b:5a:94: 58:e3:4f:ed -----BEGIN CERTIFICATE----- MIIFlTCCBH2gAwIBAgIUcI1jxPkUq7bdyWaBXgyx08FJCM0wDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODgwNkYwMDAwMTEwLwYDVQQFEyhFN0NBREE1RjA4 ODFENzdCRUE0OEIwNzY4QTM3NjZCNTAwNjVBRjA4MB4XDTI2MDkwOTAwMDY1OVoX DTI2MDkxMzAwMDY1OVowejFJMEcGA1UEBRNANGM0Y2RiNDIxOGQ5ZGI4NWRhOTRk MjFkMjA0ZjczNjhjZDI3YjU4ZWY4MTZiODg4ODY0NjlhOTgyNWU5NTM5MDEtMCsG A1UEAxMkYmI5YTkxMTYtZjYxNS00NjJlLWE2ODAtNTI2NmIzMjdlMGZhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtsPsjHi9LkyIBPHH2Hk3+uoIqF3D aB0kfxT06aTbsRg5bUTbcQsNBv2BWOcTLgk05oIlSlzdTIJRmGCTLNMEs1lDlAcA nUojg8W5FKtU/B//7+4s+Zz1n+cInXSGQj+x9erR66vkSBaY3dgxZ8K8IrMo/45a LTgK1pw2QMdwOPku/plc0fRXwYqrifYks+I89dzHZZ7dkHJ5k4jK+x9JK1g5eSvR WD3A/pAkxOxlucYlDanzIILN5dOQPYkzRC+97A47F0lm48zEUqJuTJ2wyMDqUCPD 6eaZloWhRP1mZyfMP+XoEvVdmI7k9bWYFLj3Sggh0Y02ae+UWA12UUWEvQIDAQAB o4ICQTCCAj0wHQYDVR0OBBYEFCijWlcr5/gJnVFDHT9Ucb08mhrIMB8GA1UdIwQY MBaAFOfK2l8Igdd76kiwdoo3ZrUAZa8IMA4GA1UdDwEB/wQEAwIHgDB+BggrBgEF BQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVw b3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi81OHJhWHdp QjEzdnFTTEIyaWpkbXRRQmxyd2cuY2VyMH8GCCsGAQUFBwELBHMwcTBvBggrBgEF BQcwC4ZjcnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5hbWF6b25hd3MuY29t L3ZvbHVtZS83MDhhYWZhZi0wMGI0LTQ4NWItODU0Yy0wYjMyY2EzMGY1N2IvbWFu aWZlc3QubWZ0MIGVBgNVHR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnBraS1y c3luYy51cy1lYXN0LTIuYW1hem9uYXdzLmNvbS92b2x1bWUvNzA4YWFmYWYtMDBi NC00ODViLTg1NGMtMGIzMmNhMzBmNTdiLzEyZTU5MDAxLTM1YWMtNGFiZi04NThm LTM3Yjk1NWEyNGIzZi5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggr BgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYw BKACBQAwDQYJKoZIhvcNAQELBQADggEBAEE3KpipHKGttXll0bSeFw2XVFXlzgS0 6bWNON04UxiflM9tWm4nefNl7B8bPNyXF8c8m3OgqfgB8Q469UziTa7GGDx2uwAF H8r/EFvQIOrc0biipUPNQ/0TxxIk8TUJwFI4PphKUx3wnN5LktCvJldFqSvRmLWI XWeG1sQOOPxQvt3T7OM5L/rOKGhpbftXjr7GNxvZnl1RFKMcCrpRr6SzJ6hUhnLX bWtxmf7zoFDWdcZf1czttVW+4QQU3NRLXFC/Kv6dwv+g+YQvl3VqZU3wufAjD7It BhulX03cidObrkqIl/crH0ipdaXO3gKvSZPr7X9VD6TwBXtalFjjT+0= -----END CERTIFICATE-----Generated at Wed Sep 9 07:59:35 2026 by rpki-client