$ rpki-client -vvvf rpki-rsync.us-east-2.amazonaws.com/volume/708aafaf-00b4-485b-854c-0b32ca30f57b/manifest.mft File: manifest.mft (raw, json) Hash identifier: THFgdM1ArALxe+OErD5oJe2T3r/Q1lcNs7/KXhm5wc0= Subject key identifier: DB:FA:E9:8F:DB:50:1E:F7:D9:8C:C0:5A:81:88:BC:D8:7A:5F:8B:AD Authority key identifier: E7:CA:DA:5F:08:81:D7:7B:EA:48:B0:76:8A:37:66:B5:00:65:AF:08 Certificate issuer: /CN=A918806F0000/serialNumber=E7CADA5F0881D77BEA48B0768A3766B50065AF08 Certificate serial: 2A28D7B7635167A3F0A711FAEB567AAEA0E7173B Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/58raXwiB13vqSLB2ijdmtQBlrwg.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/708aafaf-00b4-485b-854c-0b32ca30f57b/manifest.mft Manifest number: 067D Signing time: Thu 27 Aug 2026 00:04:49 +0000 Manifest this update: Thu 27 Aug 2026 00:04:49 +0000 Manifest next update: Mon 31 Aug 2026 00:04:49 +0000 Files and hashes: 1: 12e59001-35ac-4abf-858f-37b955a24b3f.crl (hash: 2Z3gVd68t5MxCB7ro1hZ4DrtShh5GsZWJt/i2cdY0Ng=) 2: 381fc6e6-5d49-41bc-b584-d9437c68e3cd.roa (hash: 8QqQOxAj3sRai6/BzOB2kV66/okkk7p8TzKsBaSwcWA=) 3: 49119734-9dbc-4bd4-98be-57e4ce078928.roa (hash: 0OedyNMwjL1I1p7rzryfdYD0nslES0i+43AbthFPFmE=) 4: 5663bf34-10ed-4309-a236-7466afd6f02f.roa (hash: aoaRIM84eruV/ISWBs3PJCPQb0sEmsLtTOcu1EdbsFA=) 5: cc2f7093-21a6-400f-9db1-93c2fe02bc1c.roa (hash: vbtxuyfgx9e6lLFR0CnUGCC1kgCTySw+Ljt4yM1fDb4=) 6: ea1d02aa-6d25-4b36-b42e-ba837d49e261.roa (hash: q5bh3h1LHQcXwRDCiiiYn6TP5+N60E0SyV4QnQBQL8c=) Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/708aafaf-00b4-485b-854c-0b32ca30f57b/12e59001-35ac-4abf-858f-37b955a24b3f.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/708aafaf-00b4-485b-854c-0b32ca30f57b/manifest.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/58raXwiB13vqSLB2ijdmtQBlrwg.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 31 Aug 2026 00:04:49 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2a:28:d7:b7:63:51:67:a3:f0:a7:11:fa:eb:56:7a:ae:a0:e7:17:3b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A918806F0000, serialNumber=E7CADA5F0881D77BEA48B0768A3766B50065AF08 Validity Not Before: Aug 27 00:04:49 2026 GMT Not After : Aug 31 00:04:49 2026 GMT Subject: serialNumber=a3a8c339c7de91cccc1e017765fb44a4d6436f2305324b15027615c96e5eaf84, CN=bb9a9116-f615-462e-a680-5266b327e0fa Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:41:b4:76:6d:a1:b4:81:c5:3c:a8:cf:9f:7b: 85:a4:8c:2d:ee:c2:9c:8b:36:39:e0:97:0d:67:a2: 92:84:29:cc:b2:72:36:a9:47:7d:35:b3:9a:2f:c0: af:4f:6a:1b:d3:23:ce:94:15:b1:d2:c4:57:da:1b: 61:bf:c4:63:c9:1b:03:df:5c:b9:4b:17:09:13:cd: 95:ec:29:a7:30:c8:80:d1:c5:e2:e6:33:c2:4b:ae: 33:1c:01:e3:1d:b5:78:44:69:69:9f:ab:b9:05:83: b6:73:ff:39:70:ed:95:49:c6:62:fe:94:fb:33:8f: 03:06:d0:33:9e:d5:4b:68:49:a0:9f:15:ef:0e:fd: c0:f6:87:04:9c:52:c9:25:64:3e:98:45:70:90:60: b1:f6:a1:bc:57:71:07:01:41:89:74:d1:a6:60:cb: 75:94:e5:db:09:4b:2c:5c:63:b1:92:68:30:fd:e3: b5:fc:49:c1:0f:f0:3c:39:36:dc:2a:8b:8b:ca:ee: e9:61:d9:c7:ae:f8:47:bc:cf:ae:43:51:4f:04:2e: 4a:c8:bf:55:3e:2d:2f:b3:00:88:63:50:30:3a:2b: 17:ec:75:46:95:4a:ff:43:e3:f9:ad:a1:26:f9:6a: 9d:9e:77:91:e4:51:41:b6:bf:dd:87:fa:d2:d1:78: 69:73 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DB:FA:E9:8F:DB:50:1E:F7:D9:8C:C0:5A:81:88:BC:D8:7A:5F:8B:AD X509v3 Authority Key Identifier: keyid:E7:CA:DA:5F:08:81:D7:7B:EA:48:B0:76:8A:37:66:B5:00:65:AF:08 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/58raXwiB13vqSLB2ijdmtQBlrwg.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/708aafaf-00b4-485b-854c-0b32ca30f57b/manifest.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/708aafaf-00b4-485b-854c-0b32ca30f57b/12e59001-35ac-4abf-858f-37b955a24b3f.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 80:c7:6e:40:94:da:a3:0d:d0:ca:3b:8f:d8:ac:b0:db:d5:44: a6:71:33:7c:0e:68:0d:cd:71:d9:30:56:36:54:f2:33:60:dc: 92:be:6c:04:88:0a:39:ab:2d:22:b1:94:d1:a4:d9:8e:50:ae: fa:cd:97:fd:24:97:5e:b4:bc:b0:60:2f:61:87:32:2b:f1:9a: 43:3c:32:e4:44:22:83:2b:ae:49:0e:0f:c4:14:07:ea:84:3d: 97:f7:19:c0:09:1e:8d:f5:3b:17:bf:de:80:7b:f4:ba:65:d6: e0:b2:c4:e2:b0:87:eb:cf:44:9c:a8:0b:9d:a9:cb:b6:a4:62: 36:28:53:c2:a0:fa:b6:fe:bc:c3:b6:49:05:ae:ae:2b:bb:da: 31:85:1c:6b:19:76:3e:9c:4f:cb:61:ba:7d:1b:18:26:8a:f9: a9:04:2e:bc:06:96:8f:9a:b3:c6:94:ad:a7:25:27:4e:8a:31: e9:b0:af:85:3b:14:4a:67:d6:04:eb:4d:a5:19:02:7f:a6:57: 0e:1a:12:c7:9b:03:d8:40:c3:2f:41:c9:3e:be:52:78:8f:99: 1b:01:33:7c:c1:af:92:56:87:f8:88:52:ff:99:b0:03:d1:c8: e4:8a:da:cc:43:d9:28:31:cd:11:91:c4:01:01:19:3c:a9:7c: 5e:93:36:3b -----BEGIN CERTIFICATE----- MIIFlTCCBH2gAwIBAgIUKijXt2NRZ6PwpxH661Z6rqDnFzswDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODgwNkYwMDAwMTEwLwYDVQQFEyhFN0NBREE1RjA4 ODFENzdCRUE0OEIwNzY4QTM3NjZCNTAwNjVBRjA4MB4XDTI2MDgyNzAwMDQ0OVoX DTI2MDgzMTAwMDQ0OVowejFJMEcGA1UEBRNAYTNhOGMzMzljN2RlOTFjY2NjMWUw MTc3NjVmYjQ0YTRkNjQzNmYyMzA1MzI0YjE1MDI3NjE1Yzk2ZTVlYWY4NDEtMCsG A1UEAxMkYmI5YTkxMTYtZjYxNS00NjJlLWE2ODAtNTI2NmIzMjdlMGZhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwEG0dm2htIHFPKjPn3uFpIwt7sKc izY54JcNZ6KShCnMsnI2qUd9NbOaL8CvT2ob0yPOlBWx0sRX2hthv8RjyRsD31y5 SxcJE82V7CmnMMiA0cXi5jPCS64zHAHjHbV4RGlpn6u5BYO2c/85cO2VScZi/pT7 M48DBtAzntVLaEmgnxXvDv3A9ocEnFLJJWQ+mEVwkGCx9qG8V3EHAUGJdNGmYMt1 lOXbCUssXGOxkmgw/eO1/EnBD/A8OTbcKouLyu7pYdnHrvhHvM+uQ1FPBC5KyL9V Pi0vswCIY1AwOisX7HVGlUr/Q+P5raEm+WqdnneR5FFBtr/dh/rS0XhpcwIDAQAB o4ICQTCCAj0wHQYDVR0OBBYEFNv66Y/bUB732YzAWoGIvNh6X4utMB8GA1UdIwQY MBaAFOfK2l8Igdd76kiwdoo3ZrUAZa8IMA4GA1UdDwEB/wQEAwIHgDB+BggrBgEF BQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVw b3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi81OHJhWHdp QjEzdnFTTEIyaWpkbXRRQmxyd2cuY2VyMH8GCCsGAQUFBwELBHMwcTBvBggrBgEF BQcwC4ZjcnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5hbWF6b25hd3MuY29t L3ZvbHVtZS83MDhhYWZhZi0wMGI0LTQ4NWItODU0Yy0wYjMyY2EzMGY1N2IvbWFu aWZlc3QubWZ0MIGVBgNVHR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnBraS1y c3luYy51cy1lYXN0LTIuYW1hem9uYXdzLmNvbS92b2x1bWUvNzA4YWFmYWYtMDBi NC00ODViLTg1NGMtMGIzMmNhMzBmNTdiLzEyZTU5MDAxLTM1YWMtNGFiZi04NThm LTM3Yjk1NWEyNGIzZi5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggr BgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYw BKACBQAwDQYJKoZIhvcNAQELBQADggEBAIDHbkCU2qMN0Mo7j9issNvVRKZxM3wO aA3NcdkwVjZU8jNg3JK+bASICjmrLSKxlNGk2Y5QrvrNl/0kl160vLBgL2GHMivx mkM8MuREIoMrrkkOD8QUB+qEPZf3GcAJHo31Oxe/3oB79Lpl1uCyxOKwh+vPRJyo C52py7akYjYoU8Kg+rb+vMO2SQWuriu72jGFHGsZdj6cT8thun0bGCaK+akELrwG lo+as8aUraclJ06KMemwr4U7FEpn1gTrTaUZAn+mVw4aEsebA9hAwy9ByT6+UniP mRsBM3zBr5JWh/iIUv+ZsAPRyOSK2sxD2SgxzRGRxAEBGTypfF6TNjs= -----END CERTIFICATE-----Generated at Thu Aug 27 16:06:46 2026 by rpki-client