$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/708aafaf-00b4-485b-854c-0b32ca30f57b/manifest.mft File: manifest.mft (raw, json) Hash identifier: D6fEPFNJwOa3wQjxqXPc2MavdC++bvk0wxDRvehTS8g= Subject key identifier: 44:96:E0:A4:82:00:F7:B4:21:BF:B2:36:C6:F3:0C:3C:92:AB:23:49 Authority key identifier: E7:CA:DA:5F:08:81:D7:7B:EA:48:B0:76:8A:37:66:B5:00:65:AF:08 Certificate issuer: /CN=A918806F0000/serialNumber=E7CADA5F0881D77BEA48B0768A3766B50065AF08 Certificate serial: 4D296123014F7DC3ECC40EB024CA1D8E5A625A31 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/58raXwiB13vqSLB2ijdmtQBlrwg.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/708aafaf-00b4-485b-854c-0b32ca30f57b/manifest.mft Manifest number: 066F Signing time: Thu 13 Aug 2026 00:01:52 +0000 Manifest this update: Thu 13 Aug 2026 00:01:52 +0000 Manifest next update: Mon 17 Aug 2026 00:01:52 +0000 Files and hashes: 1: 12e59001-35ac-4abf-858f-37b955a24b3f.crl (hash: Cgw/5RytQDdGP68NzvrTAfa2Rz5oC/14DigvQmO4FD4=) 2: 381fc6e6-5d49-41bc-b584-d9437c68e3cd.roa (hash: 8QqQOxAj3sRai6/BzOB2kV66/okkk7p8TzKsBaSwcWA=) 3: 49119734-9dbc-4bd4-98be-57e4ce078928.roa (hash: 0OedyNMwjL1I1p7rzryfdYD0nslES0i+43AbthFPFmE=) 4: 5663bf34-10ed-4309-a236-7466afd6f02f.roa (hash: aoaRIM84eruV/ISWBs3PJCPQb0sEmsLtTOcu1EdbsFA=) 5: cc2f7093-21a6-400f-9db1-93c2fe02bc1c.roa (hash: vbtxuyfgx9e6lLFR0CnUGCC1kgCTySw+Ljt4yM1fDb4=) 6: ea1d02aa-6d25-4b36-b42e-ba837d49e261.roa (hash: q5bh3h1LHQcXwRDCiiiYn6TP5+N60E0SyV4QnQBQL8c=) Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/708aafaf-00b4-485b-854c-0b32ca30f57b/12e59001-35ac-4abf-858f-37b955a24b3f.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/708aafaf-00b4-485b-854c-0b32ca30f57b/manifest.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/58raXwiB13vqSLB2ijdmtQBlrwg.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 17 Aug 2026 00:01:52 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4d:29:61:23:01:4f:7d:c3:ec:c4:0e:b0:24:ca:1d:8e:5a:62:5a:31 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A918806F0000, serialNumber=E7CADA5F0881D77BEA48B0768A3766B50065AF08 Validity Not Before: Aug 13 00:01:52 2026 GMT Not After : Aug 17 00:01:52 2026 GMT Subject: serialNumber=18dbc4c190c9d7c71dfdb13319209dee8e21c1c4c108299d29793d93c69d4fa3, CN=bb9a9116-f615-462e-a680-5266b327e0fa Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d8:e5:b0:7a:0f:d0:b1:e8:f4:c3:f4:b0:e4:49: a5:ae:02:63:98:6b:79:60:b0:50:fd:82:9f:a9:14: 2b:4a:fc:37:85:70:60:7c:14:5a:70:a4:78:2e:ef: a7:10:5c:bc:41:f3:77:51:2d:b5:e6:79:83:51:c6: 33:d4:a6:2e:d7:9d:e9:14:da:0d:8f:8b:fd:74:2f: fd:4e:ae:62:35:d1:21:3d:13:04:5d:2d:55:2e:39: 26:da:f6:c8:3a:27:ee:e2:79:c7:88:bb:c8:70:a5: 92:0c:e6:d4:36:3f:2a:85:9a:cd:92:1b:f2:f9:3e: b4:43:6e:7f:6e:e4:ad:a2:f2:e6:82:c4:b7:92:c2: 16:1f:42:e4:c9:9a:98:a4:e9:68:1f:16:54:ad:3e: 13:b1:3f:86:d5:8a:72:ce:a3:83:f4:58:87:c3:ca: 84:78:10:ee:84:78:e8:86:ff:ca:40:b5:8b:72:18: 9f:cd:63:3c:1f:21:fb:de:27:1d:c9:de:26:da:d9: 6a:04:c3:60:74:3c:ac:9a:cc:9c:ba:c6:bf:8a:28: fb:9f:6b:dd:92:0b:97:98:1b:eb:ae:c6:76:66:fd: ee:80:e3:46:55:8c:90:d8:12:6f:07:f3:0d:49:87: 6a:00:64:e7:2f:a4:84:f6:a5:65:ea:b5:14:16:70: 3b:9b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 44:96:E0:A4:82:00:F7:B4:21:BF:B2:36:C6:F3:0C:3C:92:AB:23:49 X509v3 Authority Key Identifier: keyid:E7:CA:DA:5F:08:81:D7:7B:EA:48:B0:76:8A:37:66:B5:00:65:AF:08 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/58raXwiB13vqSLB2ijdmtQBlrwg.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/708aafaf-00b4-485b-854c-0b32ca30f57b/manifest.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/708aafaf-00b4-485b-854c-0b32ca30f57b/12e59001-35ac-4abf-858f-37b955a24b3f.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 1c:84:5d:ab:fe:eb:a4:15:30:92:1e:3e:85:c7:c4:8d:80:9f: 19:cd:15:54:40:3b:fa:25:49:79:03:15:c0:74:6f:aa:a6:f7: 8e:bc:cd:94:7e:f5:92:90:8f:eb:a1:9d:2d:be:f8:5a:c2:d7: 2b:93:35:c2:75:f4:64:40:e2:0c:8e:fc:97:ea:4a:76:5b:88: 53:f1:03:66:8e:f6:3c:39:b6:84:ab:2b:9c:08:f9:28:29:d9: c9:1d:15:aa:ac:ec:a6:0d:42:d9:c8:28:4e:8b:1b:c6:47:5f: 76:50:04:38:93:f1:32:30:cd:66:7e:74:1f:23:db:39:85:7a: 2f:d7:37:20:a2:57:bd:15:d1:02:90:24:6d:e9:e4:d6:9b:02: 27:1b:6a:30:19:78:12:1a:68:7c:b9:b8:77:fa:5e:74:ce:79: dd:f9:77:7b:72:0e:50:63:c7:60:99:88:8c:60:93:aa:72:db: 11:59:74:6f:8b:66:d8:08:41:31:1c:ab:4c:9b:f3:a2:98:52: d7:7c:85:fe:a5:63:6f:ed:65:7e:fc:ca:0f:9c:dc:bd:f4:36: 7c:a4:27:dd:73:1f:ad:b6:01:4b:1b:d6:fc:07:53:17:d4:21: 42:25:4b:04:76:9c:da:e6:63:63:c4:f2:49:24:98:55:9a:fc: bf:c2:85:84 -----BEGIN CERTIFICATE----- MIIFlTCCBH2gAwIBAgIUTSlhIwFPfcPsxA6wJModjlpiWjEwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODgwNkYwMDAwMTEwLwYDVQQFEyhFN0NBREE1RjA4 ODFENzdCRUE0OEIwNzY4QTM3NjZCNTAwNjVBRjA4MB4XDTI2MDgxMzAwMDE1MloX DTI2MDgxNzAwMDE1MlowejFJMEcGA1UEBRNAMThkYmM0YzE5MGM5ZDdjNzFkZmRi MTMzMTkyMDlkZWU4ZTIxYzFjNGMxMDgyOTlkMjk3OTNkOTNjNjlkNGZhMzEtMCsG A1UEAxMkYmI5YTkxMTYtZjYxNS00NjJlLWE2ODAtNTI2NmIzMjdlMGZhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2OWweg/Qsej0w/Sw5EmlrgJjmGt5 YLBQ/YKfqRQrSvw3hXBgfBRacKR4Lu+nEFy8QfN3US215nmDUcYz1KYu153pFNoN j4v9dC/9Tq5iNdEhPRMEXS1VLjkm2vbIOifu4nnHiLvIcKWSDObUNj8qhZrNkhvy +T60Q25/buStovLmgsS3ksIWH0LkyZqYpOloHxZUrT4TsT+G1YpyzqOD9FiHw8qE eBDuhHjohv/KQLWLchifzWM8HyH73icdyd4m2tlqBMNgdDysmsycusa/iij7n2vd kguXmBvrrsZ2Zv3ugONGVYyQ2BJvB/MNSYdqAGTnL6SE9qVl6rUUFnA7mwIDAQAB o4ICQTCCAj0wHQYDVR0OBBYEFESW4KSCAPe0Ib+yNsbzDDySqyNJMB8GA1UdIwQY MBaAFOfK2l8Igdd76kiwdoo3ZrUAZa8IMA4GA1UdDwEB/wQEAwIHgDB+BggrBgEF BQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVw b3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi81OHJhWHdp QjEzdnFTTEIyaWpkbXRRQmxyd2cuY2VyMH8GCCsGAQUFBwELBHMwcTBvBggrBgEF BQcwC4ZjcnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5hbWF6b25hd3MuY29t L3ZvbHVtZS83MDhhYWZhZi0wMGI0LTQ4NWItODU0Yy0wYjMyY2EzMGY1N2IvbWFu aWZlc3QubWZ0MIGVBgNVHR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnBraS1y c3luYy51cy1lYXN0LTIuYW1hem9uYXdzLmNvbS92b2x1bWUvNzA4YWFmYWYtMDBi NC00ODViLTg1NGMtMGIzMmNhMzBmNTdiLzEyZTU5MDAxLTM1YWMtNGFiZi04NThm LTM3Yjk1NWEyNGIzZi5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggr BgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYw BKACBQAwDQYJKoZIhvcNAQELBQADggEBAByEXav+66QVMJIePoXHxI2AnxnNFVRA O/olSXkDFcB0b6qm9468zZR+9ZKQj+uhnS2++FrC1yuTNcJ19GRA4gyO/JfqSnZb iFPxA2aO9jw5toSrK5wI+Sgp2ckdFaqs7KYNQtnIKE6LG8ZHX3ZQBDiT8TIwzWZ+ dB8j2zmFei/XNyCiV70V0QKQJG3p5NabAicbajAZeBIaaHy5uHf6XnTOed35d3ty DlBjx2CZiIxgk6py2xFZdG+LZtgIQTEcq0yb86KYUtd8hf6lY2/tZX78yg+c3L30 NnykJ91zH622AUsb1vwHUxfUIUIlSwR2nNrmY2PE8kkkmFWa/L/ChYQ= -----END CERTIFICATE-----Generated at Thu Aug 13 21:34:47 2026 by rpki-client