$ rpki-client -vvvf rpki-rsync.us-east-2.amazonaws.com/volume/708aafaf-00b4-485b-854c-0b32ca30f57b/manifest.mft File: manifest.mft (raw, json) Hash identifier: 30gw3W1HoOyElDVT6O3s14RmS8S+KBwpnEmvmSXPRIo= Subject key identifier: F2:78:66:6A:91:EF:4E:09:05:57:44:37:2D:F7:3F:56:02:08:D0:E7 Authority key identifier: E7:CA:DA:5F:08:81:D7:7B:EA:48:B0:76:8A:37:66:B5:00:65:AF:08 Certificate issuer: /CN=A918806F0000/serialNumber=E7CADA5F0881D77BEA48B0768A3766B50065AF08 Certificate serial: 3A61218CBE30C199F2E51AFBA966907ED327B7A8 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/58raXwiB13vqSLB2ijdmtQBlrwg.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/708aafaf-00b4-485b-854c-0b32ca30f57b/manifest.mft Manifest number: 067A Signing time: Mon 24 Aug 2026 00:04:16 +0000 Manifest this update: Mon 24 Aug 2026 00:04:16 +0000 Manifest next update: Fri 28 Aug 2026 00:04:16 +0000 Files and hashes: 1: 12e59001-35ac-4abf-858f-37b955a24b3f.crl (hash: s5kKbLbUl2LcY2A/KLtqMK48poVrH2dr/GN+DKPTK4w=) 2: 381fc6e6-5d49-41bc-b584-d9437c68e3cd.roa (hash: 8QqQOxAj3sRai6/BzOB2kV66/okkk7p8TzKsBaSwcWA=) 3: 49119734-9dbc-4bd4-98be-57e4ce078928.roa (hash: 0OedyNMwjL1I1p7rzryfdYD0nslES0i+43AbthFPFmE=) 4: 5663bf34-10ed-4309-a236-7466afd6f02f.roa (hash: aoaRIM84eruV/ISWBs3PJCPQb0sEmsLtTOcu1EdbsFA=) 5: cc2f7093-21a6-400f-9db1-93c2fe02bc1c.roa (hash: vbtxuyfgx9e6lLFR0CnUGCC1kgCTySw+Ljt4yM1fDb4=) 6: ea1d02aa-6d25-4b36-b42e-ba837d49e261.roa (hash: q5bh3h1LHQcXwRDCiiiYn6TP5+N60E0SyV4QnQBQL8c=) Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/708aafaf-00b4-485b-854c-0b32ca30f57b/12e59001-35ac-4abf-858f-37b955a24b3f.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/708aafaf-00b4-485b-854c-0b32ca30f57b/manifest.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/58raXwiB13vqSLB2ijdmtQBlrwg.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 28 Aug 2026 00:04:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3a:61:21:8c:be:30:c1:99:f2:e5:1a:fb:a9:66:90:7e:d3:27:b7:a8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A918806F0000, serialNumber=E7CADA5F0881D77BEA48B0768A3766B50065AF08 Validity Not Before: Aug 24 00:04:16 2026 GMT Not After : Aug 28 00:04:16 2026 GMT Subject: serialNumber=96b20f7b13bdb9b255e1eb976e22c3e5c757ebff1c1a49028b420bb0e5caf5c7, CN=bb9a9116-f615-462e-a680-5266b327e0fa Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:73:4f:dc:4f:57:7f:1e:a0:c3:a5:83:2c:a9: 0c:e2:86:2a:b2:63:3b:b4:80:47:98:fd:2a:bb:75: 16:fb:57:a3:22:0a:b4:02:fb:4d:bb:1e:12:d7:04: 47:10:ce:70:a5:60:2b:a8:be:e1:48:48:e7:51:8d: 36:8d:99:39:83:d6:85:6c:71:d3:f6:db:af:61:44: 88:81:71:90:ac:e6:22:41:bc:cc:6d:d0:f0:f1:f0: 88:2a:27:d4:81:65:0a:5f:41:f6:11:c8:29:c2:02: b2:0c:31:0a:25:94:fa:3f:0f:8f:78:22:d8:84:86: c1:c6:3e:7f:20:14:cf:ce:88:5a:dd:ec:7d:70:39: 13:cb:2b:a7:a0:e0:9d:ce:e1:ff:0c:20:0e:18:58: 9d:30:9d:9d:5d:43:e3:5e:f9:95:fd:b4:fd:f3:8d: f7:3d:aa:f1:48:a5:5d:51:6d:f7:da:c9:0b:c3:9b: 88:ce:b8:4f:70:b6:3d:da:44:a0:f5:dd:26:18:24: 4b:99:1c:c5:b0:13:81:ec:be:36:bf:da:c2:d6:88: 8b:5a:88:b5:6d:b4:82:8c:e2:ea:4b:4a:6a:2f:41: 6d:45:a6:34:d8:64:d0:11:48:a0:21:c7:5a:3d:ae: e9:be:59:d6:b3:ea:78:39:35:b3:6a:41:2c:17:9a: d1:bd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F2:78:66:6A:91:EF:4E:09:05:57:44:37:2D:F7:3F:56:02:08:D0:E7 X509v3 Authority Key Identifier: keyid:E7:CA:DA:5F:08:81:D7:7B:EA:48:B0:76:8A:37:66:B5:00:65:AF:08 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/58raXwiB13vqSLB2ijdmtQBlrwg.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/708aafaf-00b4-485b-854c-0b32ca30f57b/manifest.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/708aafaf-00b4-485b-854c-0b32ca30f57b/12e59001-35ac-4abf-858f-37b955a24b3f.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 6f:9b:61:12:5b:fa:48:b2:eb:8b:7c:28:1a:04:e4:86:6e:51: 52:59:c5:12:0e:62:0c:9b:64:e7:f8:f8:94:6d:2a:86:9f:45: 4c:51:f2:4f:65:46:76:91:55:64:5c:03:5d:de:87:10:50:34: ed:2b:44:9f:17:3b:b2:97:a9:5d:a9:8c:ae:8b:ef:0e:43:9a: a4:08:74:27:62:e0:b6:60:c2:bb:f7:42:36:28:3d:c0:ee:28: 27:fc:88:18:39:1e:37:8c:95:da:0a:b4:56:e9:96:4e:4f:f1: 72:d4:eb:89:de:38:23:a9:3f:95:54:53:03:a1:4e:4a:87:3b: ca:f1:f8:6a:44:24:0f:21:41:c7:51:37:a5:64:84:74:b0:a2: d4:d1:a7:a1:1a:19:1a:91:d5:be:2d:e7:80:ba:38:23:c2:88: 72:54:9c:da:aa:a4:ed:a0:77:1e:e7:0c:e3:4c:a7:98:d4:e6: 85:88:9c:de:8b:64:42:01:0f:c9:18:93:50:13:05:b9:e9:f8: 2d:fd:7d:31:96:9c:d9:2c:13:a3:dd:6b:e7:47:65:81:d0:55: aa:cc:ec:4f:07:87:32:ab:2e:e1:0d:c6:f1:04:5c:46:76:06: 71:8d:3e:ca:67:4f:40:61:d6:7b:d1:be:e5:3e:24:15:ae:43: 3f:4d:b4:cd -----BEGIN CERTIFICATE----- MIIFlTCCBH2gAwIBAgIUOmEhjL4wwZny5Rr7qWaQftMnt6gwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODgwNkYwMDAwMTEwLwYDVQQFEyhFN0NBREE1RjA4 ODFENzdCRUE0OEIwNzY4QTM3NjZCNTAwNjVBRjA4MB4XDTI2MDgyNDAwMDQxNloX DTI2MDgyODAwMDQxNlowejFJMEcGA1UEBRNAOTZiMjBmN2IxM2JkYjliMjU1ZTFl Yjk3NmUyMmMzZTVjNzU3ZWJmZjFjMWE0OTAyOGI0MjBiYjBlNWNhZjVjNzEtMCsG A1UEAxMkYmI5YTkxMTYtZjYxNS00NjJlLWE2ODAtNTI2NmIzMjdlMGZhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvHNP3E9Xfx6gw6WDLKkM4oYqsmM7 tIBHmP0qu3UW+1ejIgq0AvtNux4S1wRHEM5wpWArqL7hSEjnUY02jZk5g9aFbHHT 9tuvYUSIgXGQrOYiQbzMbdDw8fCIKifUgWUKX0H2EcgpwgKyDDEKJZT6Pw+PeCLY hIbBxj5/IBTPzoha3ex9cDkTyyunoOCdzuH/DCAOGFidMJ2dXUPjXvmV/bT98433 ParxSKVdUW332skLw5uIzrhPcLY92kSg9d0mGCRLmRzFsBOB7L42v9rC1oiLWoi1 bbSCjOLqS0pqL0FtRaY02GTQEUigIcdaPa7pvlnWs+p4OTWzakEsF5rRvQIDAQAB o4ICQTCCAj0wHQYDVR0OBBYEFPJ4ZmqR704JBVdENy33P1YCCNDnMB8GA1UdIwQY MBaAFOfK2l8Igdd76kiwdoo3ZrUAZa8IMA4GA1UdDwEB/wQEAwIHgDB+BggrBgEF BQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVw b3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi81OHJhWHdp QjEzdnFTTEIyaWpkbXRRQmxyd2cuY2VyMH8GCCsGAQUFBwELBHMwcTBvBggrBgEF BQcwC4ZjcnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5hbWF6b25hd3MuY29t L3ZvbHVtZS83MDhhYWZhZi0wMGI0LTQ4NWItODU0Yy0wYjMyY2EzMGY1N2IvbWFu aWZlc3QubWZ0MIGVBgNVHR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnBraS1y c3luYy51cy1lYXN0LTIuYW1hem9uYXdzLmNvbS92b2x1bWUvNzA4YWFmYWYtMDBi NC00ODViLTg1NGMtMGIzMmNhMzBmNTdiLzEyZTU5MDAxLTM1YWMtNGFiZi04NThm LTM3Yjk1NWEyNGIzZi5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggr BgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYw BKACBQAwDQYJKoZIhvcNAQELBQADggEBAG+bYRJb+kiy64t8KBoE5IZuUVJZxRIO YgybZOf4+JRtKoafRUxR8k9lRnaRVWRcA13ehxBQNO0rRJ8XO7KXqV2pjK6L7w5D mqQIdCdi4LZgwrv3QjYoPcDuKCf8iBg5HjeMldoKtFbplk5P8XLU64neOCOpP5VU UwOhTkqHO8rx+GpEJA8hQcdRN6VkhHSwotTRp6EaGRqR1b4t54C6OCPCiHJUnNqq pO2gdx7nDONMp5jU5oWInN6LZEIBD8kYk1ATBbnp+C39fTGWnNksE6Pda+dHZYHQ VarM7E8HhzKrLuENxvEEXEZ2BnGNPspnT0Bh1nvRvuU+JBWuQz9NtM0= -----END CERTIFICATE-----Generated at Mon Aug 24 21:48:57 2026 by rpki-client