$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/708aafaf-00b4-485b-854c-0b32ca30f57b/manifest.mft File: manifest.mft (raw, json) Hash identifier: cKjuQPzIqpQ1P5Hi6r/pfZsdjo5pEy1FERiDnnqbeHg= Subject key identifier: FF:6B:EC:FF:79:2A:E4:D8:FD:92:74:74:5A:D1:81:5D:57:8A:CB:45 Authority key identifier: E7:CA:DA:5F:08:81:D7:7B:EA:48:B0:76:8A:37:66:B5:00:65:AF:08 Certificate issuer: /CN=A918806F0000/serialNumber=E7CADA5F0881D77BEA48B0768A3766B50065AF08 Certificate serial: 47814F8621FF0BE78CA1B91BEE625A2CE0ABCE66 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/58raXwiB13vqSLB2ijdmtQBlrwg.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/708aafaf-00b4-485b-854c-0b32ca30f57b/manifest.mft Manifest number: 0658 Signing time: Tue 21 Jul 2026 00:01:52 +0000 Manifest this update: Tue 21 Jul 2026 00:01:52 +0000 Manifest next update: Sat 25 Jul 2026 00:01:52 +0000 Files and hashes: 1: 12e59001-35ac-4abf-858f-37b955a24b3f.crl (hash: alOUDSJiQ6HbxNve5ksTddF6l0E0rImPyWMz5RkY4tk=) 2: 381fc6e6-5d49-41bc-b584-d9437c68e3cd.roa (hash: M+i7XpsJD4p5Tk2yVGdLmGjDs5xTMXCNLVAUi3YO9fw=) 3: 49119734-9dbc-4bd4-98be-57e4ce078928.roa (hash: 0OedyNMwjL1I1p7rzryfdYD0nslES0i+43AbthFPFmE=) 4: 5663bf34-10ed-4309-a236-7466afd6f02f.roa (hash: aoaRIM84eruV/ISWBs3PJCPQb0sEmsLtTOcu1EdbsFA=) 5: cc2f7093-21a6-400f-9db1-93c2fe02bc1c.roa (hash: vbtxuyfgx9e6lLFR0CnUGCC1kgCTySw+Ljt4yM1fDb4=) 6: ea1d02aa-6d25-4b36-b42e-ba837d49e261.roa (hash: q5bh3h1LHQcXwRDCiiiYn6TP5+N60E0SyV4QnQBQL8c=) Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/708aafaf-00b4-485b-854c-0b32ca30f57b/12e59001-35ac-4abf-858f-37b955a24b3f.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/708aafaf-00b4-485b-854c-0b32ca30f57b/manifest.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/58raXwiB13vqSLB2ijdmtQBlrwg.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 25 Jul 2026 00:01:52 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 47:81:4f:86:21:ff:0b:e7:8c:a1:b9:1b:ee:62:5a:2c:e0:ab:ce:66 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A918806F0000, serialNumber=E7CADA5F0881D77BEA48B0768A3766B50065AF08 Validity Not Before: Jul 21 00:01:52 2026 GMT Not After : Jul 25 00:01:52 2026 GMT Subject: serialNumber=e98937fc9cc6a801852ee1722792fea4436eefe740118b3cafd9cdadca1625c5, CN=bb9a9116-f615-462e-a680-5266b327e0fa Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e9:fa:70:c4:6c:2a:6c:8c:10:c9:59:41:34:29: eb:83:5c:fa:d7:86:70:1f:ea:09:70:dc:66:c8:df: 53:89:7b:38:83:69:ca:b9:7d:4e:c1:0d:66:07:94: 99:53:97:c2:1e:b5:0e:7c:a6:da:7e:6a:00:12:6c: b6:a0:e7:bf:d2:a4:85:b3:77:e6:65:9b:aa:14:ce: f4:c5:70:b6:53:1f:17:f5:5a:cd:ba:5d:a8:70:cf: 12:f2:8d:c7:dd:3e:38:0b:a3:0f:5c:28:b9:c2:64: 57:6a:27:35:03:ae:a0:61:38:f8:ff:3c:8a:ad:ba: 89:76:fb:22:ea:61:70:70:a4:ba:12:75:bb:e9:53: d4:23:a0:e2:d2:d2:ea:88:d1:aa:bc:77:15:d8:82: 29:68:c7:94:39:27:eb:f1:b3:2c:af:d2:b6:d4:1d: 64:89:84:ee:3b:dd:22:e0:a5:57:a5:50:ff:4f:5e: 78:a3:2c:1e:c0:e5:1f:6b:03:a9:a3:75:50:f6:b9: b7:f8:30:a5:69:8a:d5:5a:63:ab:e6:10:10:d1:a1: 9a:2c:ed:84:91:60:df:f8:8b:d6:f7:4a:9a:de:8c: ad:e7:fa:27:24:25:82:bd:fd:4a:03:b4:ac:18:f7: 5b:40:58:04:b0:3b:f7:02:f1:2e:fa:67:90:a4:4a: 6b:5b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FF:6B:EC:FF:79:2A:E4:D8:FD:92:74:74:5A:D1:81:5D:57:8A:CB:45 X509v3 Authority Key Identifier: keyid:E7:CA:DA:5F:08:81:D7:7B:EA:48:B0:76:8A:37:66:B5:00:65:AF:08 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/58raXwiB13vqSLB2ijdmtQBlrwg.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/708aafaf-00b4-485b-854c-0b32ca30f57b/manifest.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/708aafaf-00b4-485b-854c-0b32ca30f57b/12e59001-35ac-4abf-858f-37b955a24b3f.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 8e:2e:58:60:42:fe:98:1d:99:a1:e0:ba:66:57:16:9a:50:d5: 96:bb:e5:de:ab:e2:70:36:11:3c:0d:dc:a8:9c:c2:d6:ef:e1: c8:a2:03:f6:0d:fd:3c:cc:5e:ed:83:ca:84:a1:2d:76:02:6a: 56:98:ed:d5:72:6e:92:a6:66:37:08:72:8b:b5:0d:cb:da:b5: c9:c5:6e:d8:eb:73:91:80:9f:61:a2:a6:32:c5:3d:b8:98:cc: 27:bd:61:e4:54:c6:78:9e:88:13:46:9b:2b:81:1c:01:28:ef: 36:af:c8:b1:5b:fe:4e:3b:1a:00:5f:e0:c2:4c:65:65:9c:b0: 54:dc:d9:ad:80:bf:4a:30:76:6d:b4:32:41:4c:db:f2:de:12: 1f:9d:3b:ef:89:27:85:8f:b5:27:2b:1b:44:3a:70:52:18:32: 9c:2e:b0:62:cb:b2:57:07:81:7f:7a:42:00:c0:14:ea:b6:40: e1:c2:f9:5f:61:af:ad:a9:72:6c:7f:2a:c4:dd:83:99:4e:3b: d8:95:29:08:ba:75:90:66:04:15:36:95:2a:84:f2:ac:72:82: 2c:69:f0:52:1b:fa:6e:41:e5:94:15:8f:ec:cb:0e:9d:3c:5c: 33:6d:42:48:73:b7:4c:5e:6d:42:e2:99:a3:29:af:d6:4b:29: 7d:df:97:14 -----BEGIN CERTIFICATE----- MIIFlTCCBH2gAwIBAgIUR4FPhiH/C+eMobkb7mJaLOCrzmYwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODgwNkYwMDAwMTEwLwYDVQQFEyhFN0NBREE1RjA4 ODFENzdCRUE0OEIwNzY4QTM3NjZCNTAwNjVBRjA4MB4XDTI2MDcyMTAwMDE1MloX DTI2MDcyNTAwMDE1MlowejFJMEcGA1UEBRNAZTk4OTM3ZmM5Y2M2YTgwMTg1MmVl MTcyMjc5MmZlYTQ0MzZlZWZlNzQwMTE4YjNjYWZkOWNkYWRjYTE2MjVjNTEtMCsG A1UEAxMkYmI5YTkxMTYtZjYxNS00NjJlLWE2ODAtNTI2NmIzMjdlMGZhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6fpwxGwqbIwQyVlBNCnrg1z614Zw H+oJcNxmyN9TiXs4g2nKuX1OwQ1mB5SZU5fCHrUOfKbafmoAEmy2oOe/0qSFs3fm ZZuqFM70xXC2Ux8X9VrNul2ocM8S8o3H3T44C6MPXCi5wmRXaic1A66gYTj4/zyK rbqJdvsi6mFwcKS6EnW76VPUI6Di0tLqiNGqvHcV2IIpaMeUOSfr8bMsr9K21B1k iYTuO90i4KVXpVD/T154oywewOUfawOpo3VQ9rm3+DClaYrVWmOr5hAQ0aGaLO2E kWDf+IvW90qa3oyt5/onJCWCvf1KA7SsGPdbQFgEsDv3AvEu+meQpEprWwIDAQAB o4ICQTCCAj0wHQYDVR0OBBYEFP9r7P95KuTY/ZJ0dFrRgV1XistFMB8GA1UdIwQY MBaAFOfK2l8Igdd76kiwdoo3ZrUAZa8IMA4GA1UdDwEB/wQEAwIHgDB+BggrBgEF BQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVw b3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi81OHJhWHdp QjEzdnFTTEIyaWpkbXRRQmxyd2cuY2VyMH8GCCsGAQUFBwELBHMwcTBvBggrBgEF BQcwC4ZjcnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5hbWF6b25hd3MuY29t L3ZvbHVtZS83MDhhYWZhZi0wMGI0LTQ4NWItODU0Yy0wYjMyY2EzMGY1N2IvbWFu aWZlc3QubWZ0MIGVBgNVHR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnBraS1y c3luYy51cy1lYXN0LTIuYW1hem9uYXdzLmNvbS92b2x1bWUvNzA4YWFmYWYtMDBi NC00ODViLTg1NGMtMGIzMmNhMzBmNTdiLzEyZTU5MDAxLTM1YWMtNGFiZi04NThm LTM3Yjk1NWEyNGIzZi5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggr BgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYw BKACBQAwDQYJKoZIhvcNAQELBQADggEBAI4uWGBC/pgdmaHgumZXFppQ1Za75d6r 4nA2ETwN3Kicwtbv4ciiA/YN/TzMXu2DyoShLXYCalaY7dVybpKmZjcIcou1Dcva tcnFbtjrc5GAn2GipjLFPbiYzCe9YeRUxnieiBNGmyuBHAEo7zavyLFb/k47GgBf 4MJMZWWcsFTc2a2Av0owdm20MkFM2/LeEh+dO++JJ4WPtScrG0Q6cFIYMpwusGLL slcHgX96QgDAFOq2QOHC+V9hr62pcmx/KsTdg5lOO9iVKQi6dZBmBBU2lSqE8qxy gixp8FIb+m5B5ZQVj+zLDp08XDNtQkhzt0xebULimaMpr9ZLKX3flxQ= -----END CERTIFICATE-----Generated at Tue Jul 21 08:57:17 2026 by rpki-client