$ rpki-client -vvvf rpki-rsync.us-east-2.amazonaws.com/volume/708aafaf-00b4-485b-854c-0b32ca30f57b/manifest.mft File: manifest.mft (raw, json) Hash identifier: jovI5F5Jngl8ZpxSq34bLyeUKwSLldLnAXN/HbFmbcE= Subject key identifier: DF:C7:E8:06:BF:9E:5F:A9:01:AA:66:77:17:24:21:A9:5F:8D:8A:1E Authority key identifier: E7:CA:DA:5F:08:81:D7:7B:EA:48:B0:76:8A:37:66:B5:00:65:AF:08 Certificate issuer: /CN=A918806F0000/serialNumber=E7CADA5F0881D77BEA48B0768A3766B50065AF08 Certificate serial: 415B0CB37F19C325732A00370C8A1629712CD904 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/58raXwiB13vqSLB2ijdmtQBlrwg.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/708aafaf-00b4-485b-854c-0b32ca30f57b/manifest.mft Manifest number: 0687 Signing time: Sun 06 Sep 2026 00:06:33 +0000 Manifest this update: Sun 06 Sep 2026 00:06:33 +0000 Manifest next update: Thu 10 Sep 2026 00:06:33 +0000 Files and hashes: 1: 12e59001-35ac-4abf-858f-37b955a24b3f.crl (hash: Mprq1BY3KmeG+RnF2RqhrfGMkSSpeYxXzQ/Qlspqwts=) 2: 381fc6e6-5d49-41bc-b584-d9437c68e3cd.roa (hash: 8QqQOxAj3sRai6/BzOB2kV66/okkk7p8TzKsBaSwcWA=) 3: 49119734-9dbc-4bd4-98be-57e4ce078928.roa (hash: 0OedyNMwjL1I1p7rzryfdYD0nslES0i+43AbthFPFmE=) 4: 5663bf34-10ed-4309-a236-7466afd6f02f.roa (hash: aoaRIM84eruV/ISWBs3PJCPQb0sEmsLtTOcu1EdbsFA=) 5: cc2f7093-21a6-400f-9db1-93c2fe02bc1c.roa (hash: vbtxuyfgx9e6lLFR0CnUGCC1kgCTySw+Ljt4yM1fDb4=) 6: ea1d02aa-6d25-4b36-b42e-ba837d49e261.roa (hash: q5bh3h1LHQcXwRDCiiiYn6TP5+N60E0SyV4QnQBQL8c=) Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/708aafaf-00b4-485b-854c-0b32ca30f57b/12e59001-35ac-4abf-858f-37b955a24b3f.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/708aafaf-00b4-485b-854c-0b32ca30f57b/manifest.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/58raXwiB13vqSLB2ijdmtQBlrwg.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 10 Sep 2026 00:06:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 41:5b:0c:b3:7f:19:c3:25:73:2a:00:37:0c:8a:16:29:71:2c:d9:04 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A918806F0000, serialNumber=E7CADA5F0881D77BEA48B0768A3766B50065AF08 Validity Not Before: Sep 6 00:06:33 2026 GMT Not After : Sep 10 00:06:33 2026 GMT Subject: serialNumber=a6ff32f1b39650b60afc4984c14e434fbdb1be8caeab45f94c3cd433c0e532a1, CN=bb9a9116-f615-462e-a680-5266b327e0fa Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:93:b6:36:f0:58:3f:fa:5f:70:87:ac:2e:90:ce: f7:0c:75:e7:70:34:62:64:ad:4a:9a:6e:f0:bd:83: e7:4e:08:b0:c1:5a:c4:68:63:81:a9:85:d7:79:5c: d2:65:21:d4:4a:1e:0f:39:ab:fc:6a:45:2e:89:48: 0d:a8:f2:be:59:22:98:e4:7c:2a:61:b2:0e:b6:4b: e7:37:7d:93:e8:ea:70:08:4f:20:93:d3:c7:1a:5d: f3:f7:55:4d:32:d6:f8:ac:f6:39:52:d0:27:0d:8a: 53:1e:44:d3:25:22:8d:d2:77:ff:52:17:c3:07:f2: 4f:cd:26:c1:d0:81:6d:28:53:d8:38:4b:4b:c6:c0: e8:96:70:12:ba:28:f8:2b:01:ac:cb:61:54:35:1e: 94:d5:84:a9:58:c7:0b:3b:65:9b:b7:b9:c1:05:ed: f4:5c:99:2d:06:b8:16:0e:da:ca:24:d5:5f:c7:4f: 9c:9a:4b:c8:45:a5:5e:e1:78:cd:b3:63:77:5c:8a: 98:38:75:75:4f:1d:90:b9:7b:ea:b3:f6:ef:b3:af: 84:a8:79:6a:1f:d5:46:a8:ae:6e:c0:09:a7:8b:b4: 1b:36:11:cc:06:2d:38:df:d1:f9:b4:3e:38:4a:3a: 86:8f:0b:3f:06:64:23:e9:1b:91:bb:14:63:b3:f5: 39:c1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DF:C7:E8:06:BF:9E:5F:A9:01:AA:66:77:17:24:21:A9:5F:8D:8A:1E X509v3 Authority Key Identifier: keyid:E7:CA:DA:5F:08:81:D7:7B:EA:48:B0:76:8A:37:66:B5:00:65:AF:08 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/58raXwiB13vqSLB2ijdmtQBlrwg.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/708aafaf-00b4-485b-854c-0b32ca30f57b/manifest.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/708aafaf-00b4-485b-854c-0b32ca30f57b/12e59001-35ac-4abf-858f-37b955a24b3f.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 02:27:b5:d3:05:dc:31:76:d5:91:b1:94:66:19:c3:a1:a2:a9: a7:ae:c8:ef:31:cd:3c:8e:ae:ba:d2:78:61:c2:6f:92:b3:fb: 4b:14:10:33:4e:b2:6a:b9:db:64:51:59:44:b9:e3:e6:b5:83: 92:57:ba:42:4e:13:72:67:4b:ae:fa:bb:ed:8f:05:f0:56:08: 34:c1:7c:11:56:fe:aa:d0:24:b7:99:1f:c9:8b:43:af:48:b7: 91:26:b3:e8:af:bc:f6:ff:11:75:e0:28:0a:01:31:3f:4d:1c: eb:75:4f:27:98:31:22:10:5e:cf:b5:78:74:a3:19:cb:a9:be: 4f:14:71:58:5b:56:14:d6:df:7f:65:48:b5:5d:b8:7e:4f:a0: 51:5f:2f:0d:94:66:cb:6a:6c:d4:df:bf:9b:19:86:d9:4e:cf: 6b:81:49:b4:b3:b6:26:cb:22:9a:f1:ec:53:7f:91:eb:5b:c9: af:2f:7c:71:d4:a6:3a:c7:98:f4:0d:ca:d6:42:cd:4f:be:56: d8:7f:b7:17:c7:6b:3a:3d:56:39:14:60:52:af:2c:cc:26:4f: 09:eb:9a:d4:7a:bc:b7:2d:fa:cb:50:7f:68:80:1d:09:20:ae: 49:ff:4c:77:75:c5:75:28:45:49:c4:11:f9:ce:e8:38:a9:8a: a5:b0:36:09 -----BEGIN CERTIFICATE----- MIIFlTCCBH2gAwIBAgIUQVsMs38ZwyVzKgA3DIoWKXEs2QQwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODgwNkYwMDAwMTEwLwYDVQQFEyhFN0NBREE1RjA4 ODFENzdCRUE0OEIwNzY4QTM3NjZCNTAwNjVBRjA4MB4XDTI2MDkwNjAwMDYzM1oX DTI2MDkxMDAwMDYzM1owejFJMEcGA1UEBRNAYTZmZjMyZjFiMzk2NTBiNjBhZmM0 OTg0YzE0ZTQzNGZiZGIxYmU4Y2FlYWI0NWY5NGMzY2Q0MzNjMGU1MzJhMTEtMCsG A1UEAxMkYmI5YTkxMTYtZjYxNS00NjJlLWE2ODAtNTI2NmIzMjdlMGZhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAk7Y28Fg/+l9wh6wukM73DHXncDRi ZK1Kmm7wvYPnTgiwwVrEaGOBqYXXeVzSZSHUSh4POav8akUuiUgNqPK+WSKY5Hwq YbIOtkvnN32T6OpwCE8gk9PHGl3z91VNMtb4rPY5UtAnDYpTHkTTJSKN0nf/UhfD B/JPzSbB0IFtKFPYOEtLxsDolnASuij4KwGsy2FUNR6U1YSpWMcLO2Wbt7nBBe30 XJktBrgWDtrKJNVfx0+cmkvIRaVe4XjNs2N3XIqYOHV1Tx2QuXvqs/bvs6+EqHlq H9VGqK5uwAmni7QbNhHMBi0439H5tD44SjqGjws/BmQj6RuRuxRjs/U5wQIDAQAB o4ICQTCCAj0wHQYDVR0OBBYEFN/H6Aa/nl+pAapmdxckIalfjYoeMB8GA1UdIwQY MBaAFOfK2l8Igdd76kiwdoo3ZrUAZa8IMA4GA1UdDwEB/wQEAwIHgDB+BggrBgEF BQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVw b3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi81OHJhWHdp QjEzdnFTTEIyaWpkbXRRQmxyd2cuY2VyMH8GCCsGAQUFBwELBHMwcTBvBggrBgEF BQcwC4ZjcnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5hbWF6b25hd3MuY29t L3ZvbHVtZS83MDhhYWZhZi0wMGI0LTQ4NWItODU0Yy0wYjMyY2EzMGY1N2IvbWFu aWZlc3QubWZ0MIGVBgNVHR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnBraS1y c3luYy51cy1lYXN0LTIuYW1hem9uYXdzLmNvbS92b2x1bWUvNzA4YWFmYWYtMDBi NC00ODViLTg1NGMtMGIzMmNhMzBmNTdiLzEyZTU5MDAxLTM1YWMtNGFiZi04NThm LTM3Yjk1NWEyNGIzZi5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggr BgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYw BKACBQAwDQYJKoZIhvcNAQELBQADggEBAAIntdMF3DF21ZGxlGYZw6GiqaeuyO8x zTyOrrrSeGHCb5Kz+0sUEDNOsmq522RRWUS54+a1g5JXukJOE3JnS676u+2PBfBW CDTBfBFW/qrQJLeZH8mLQ69It5Ems+ivvPb/EXXgKAoBMT9NHOt1TyeYMSIQXs+1 eHSjGcupvk8UcVhbVhTW339lSLVduH5PoFFfLw2UZstqbNTfv5sZhtlOz2uBSbSz tibLIprx7FN/ketbya8vfHHUpjrHmPQNytZCzU++Vth/txfHazo9VjkUYFKvLMwm TwnrmtR6vLct+stQf2iAHQkgrkn/THd1xXUoRUnEEfnO6DipiqWwNgk= -----END CERTIFICATE-----Generated at Sun Sep 6 19:01:03 2026 by rpki-client