$ rpki-client -vvvf rpki-rsync.us-east-2.amazonaws.com/volume/708aafaf-00b4-485b-854c-0b32ca30f57b/manifest.mft File: manifest.mft (raw, json) Hash identifier: xfIT9bzhZ0y/kjPrhir1KpwZpDjAJpfB7eFXnyJAduA= Subject key identifier: 06:43:37:C4:90:68:2A:C0:6C:AA:9D:21:11:51:F0:73:44:63:72:F8 Authority key identifier: E7:CA:DA:5F:08:81:D7:7B:EA:48:B0:76:8A:37:66:B5:00:65:AF:08 Certificate issuer: /CN=A918806F0000/serialNumber=E7CADA5F0881D77BEA48B0768A3766B50065AF08 Certificate serial: 1AAB043D482AE036B03E687DE35D46EF377E40C9 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/58raXwiB13vqSLB2ijdmtQBlrwg.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/708aafaf-00b4-485b-854c-0b32ca30f57b/manifest.mft Manifest number: 0682 Signing time: Tue 01 Sep 2026 00:05:52 +0000 Manifest this update: Tue 01 Sep 2026 00:05:52 +0000 Manifest next update: Sat 05 Sep 2026 00:05:52 +0000 Files and hashes: 1: 12e59001-35ac-4abf-858f-37b955a24b3f.crl (hash: hBKhZgPhOyOuKQ8gRnJP9NwVhFQ04qe+dPjRAkoYIe8=) 2: 381fc6e6-5d49-41bc-b584-d9437c68e3cd.roa (hash: 8QqQOxAj3sRai6/BzOB2kV66/okkk7p8TzKsBaSwcWA=) 3: 49119734-9dbc-4bd4-98be-57e4ce078928.roa (hash: 0OedyNMwjL1I1p7rzryfdYD0nslES0i+43AbthFPFmE=) 4: 5663bf34-10ed-4309-a236-7466afd6f02f.roa (hash: aoaRIM84eruV/ISWBs3PJCPQb0sEmsLtTOcu1EdbsFA=) 5: cc2f7093-21a6-400f-9db1-93c2fe02bc1c.roa (hash: vbtxuyfgx9e6lLFR0CnUGCC1kgCTySw+Ljt4yM1fDb4=) 6: ea1d02aa-6d25-4b36-b42e-ba837d49e261.roa (hash: q5bh3h1LHQcXwRDCiiiYn6TP5+N60E0SyV4QnQBQL8c=) Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/708aafaf-00b4-485b-854c-0b32ca30f57b/12e59001-35ac-4abf-858f-37b955a24b3f.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/708aafaf-00b4-485b-854c-0b32ca30f57b/manifest.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/58raXwiB13vqSLB2ijdmtQBlrwg.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 05 Sep 2026 00:05:52 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1a:ab:04:3d:48:2a:e0:36:b0:3e:68:7d:e3:5d:46:ef:37:7e:40:c9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A918806F0000, serialNumber=E7CADA5F0881D77BEA48B0768A3766B50065AF08 Validity Not Before: Sep 1 00:05:52 2026 GMT Not After : Sep 5 00:05:52 2026 GMT Subject: serialNumber=ac91e1b3c68849939be38acd1831b3222e347a36899659f86957a897f4a1e319, CN=bb9a9116-f615-462e-a680-5266b327e0fa Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a1:91:3e:60:55:1a:35:f4:19:23:78:32:77:38: a2:a5:2a:7c:de:d0:c4:e2:a2:bc:0b:78:c5:79:6e: 4b:e4:60:00:ba:4e:b5:bc:49:2b:4f:c7:00:8f:ba: 7f:37:e8:97:12:df:05:78:8c:02:76:f2:fa:2d:d6: a1:ed:10:4b:f1:ba:c8:e1:a2:7a:f5:d3:2b:f8:c8: ef:ac:77:79:59:75:e6:14:f7:63:cb:e4:62:e2:50: 50:6d:5f:44:69:2e:79:0b:dd:2b:2c:49:33:5a:01: cd:6f:f2:e0:85:99:2b:32:40:4c:65:a0:cf:d1:35: f8:71:7a:33:14:5a:07:54:d4:42:8f:cf:2a:76:8d: 6f:ea:0a:52:6f:3b:19:68:bd:bf:9b:da:28:71:28: 41:7e:5e:cc:8f:b4:4a:15:fc:ff:24:4d:44:61:7e: 33:b6:39:7f:9d:74:f0:c2:d3:12:07:eb:27:1a:09: 62:4a:ec:84:cf:c1:74:9b:c4:a3:96:f2:39:52:6b: 27:63:6a:71:66:bd:7b:95:9d:8f:1d:74:6c:a0:c5: 29:94:ba:b6:5a:74:fd:9f:f1:77:a0:2f:dc:3d:15: 76:f1:bb:bf:4a:0a:d3:7b:7d:c5:dd:22:42:6a:05: 1b:d7:a9:d7:30:3c:66:fc:94:e8:93:e1:90:75:ba: 87:37 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 06:43:37:C4:90:68:2A:C0:6C:AA:9D:21:11:51:F0:73:44:63:72:F8 X509v3 Authority Key Identifier: keyid:E7:CA:DA:5F:08:81:D7:7B:EA:48:B0:76:8A:37:66:B5:00:65:AF:08 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/58raXwiB13vqSLB2ijdmtQBlrwg.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/708aafaf-00b4-485b-854c-0b32ca30f57b/manifest.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/708aafaf-00b4-485b-854c-0b32ca30f57b/12e59001-35ac-4abf-858f-37b955a24b3f.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 45:62:54:f8:4f:a1:69:76:87:9c:96:39:ca:93:8b:97:17:3e: 2d:1d:3d:0f:a9:90:b8:3f:dc:b0:cc:cb:67:e9:e7:c5:a4:47: 12:31:d7:59:3c:0d:5a:89:c2:5e:da:f1:c9:2d:a1:9c:51:11: 18:e4:61:f2:62:16:11:65:82:3f:40:75:da:8a:cf:5f:b5:17: 1a:a1:dd:c3:18:e7:35:de:96:07:b3:61:36:12:ef:30:ac:c7: 82:f7:c9:ec:c7:e0:6a:fa:58:02:5d:d7:b7:11:9c:9a:48:be: c5:f6:e2:75:88:e9:36:b3:f7:ec:fe:44:d8:d0:cd:60:cb:90: 0d:73:4f:7e:19:ec:03:87:41:95:c1:71:39:8d:e4:7d:dc:63: 54:77:56:49:63:e6:e1:4d:ee:b7:7c:db:e9:5a:75:a5:35:53: 96:65:4d:00:33:28:6e:16:43:67:34:59:4a:8c:f3:77:59:26: 78:2d:56:02:5a:59:0f:a3:97:23:b4:ef:04:56:0a:a4:80:be: 8a:6f:f9:0e:49:7d:fd:a6:37:44:3a:b7:c4:f8:2b:cc:a9:9e: ce:f6:bc:a6:35:19:bc:9f:a8:95:43:fc:9c:45:40:94:3e:6d: 18:85:ca:5f:91:e5:92:17:50:cc:4c:ac:35:0c:7b:6c:9f:0c: f0:94:5a:d5 -----BEGIN CERTIFICATE----- MIIFlTCCBH2gAwIBAgIUGqsEPUgq4DawPmh9411G7zd+QMkwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODgwNkYwMDAwMTEwLwYDVQQFEyhFN0NBREE1RjA4 ODFENzdCRUE0OEIwNzY4QTM3NjZCNTAwNjVBRjA4MB4XDTI2MDkwMTAwMDU1MloX DTI2MDkwNTAwMDU1MlowejFJMEcGA1UEBRNAYWM5MWUxYjNjNjg4NDk5MzliZTM4 YWNkMTgzMWIzMjIyZTM0N2EzNjg5OTY1OWY4Njk1N2E4OTdmNGExZTMxOTEtMCsG A1UEAxMkYmI5YTkxMTYtZjYxNS00NjJlLWE2ODAtNTI2NmIzMjdlMGZhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoZE+YFUaNfQZI3gydziipSp83tDE 4qK8C3jFeW5L5GAAuk61vEkrT8cAj7p/N+iXEt8FeIwCdvL6Ldah7RBL8brI4aJ6 9dMr+MjvrHd5WXXmFPdjy+Ri4lBQbV9EaS55C90rLEkzWgHNb/LghZkrMkBMZaDP 0TX4cXozFFoHVNRCj88qdo1v6gpSbzsZaL2/m9oocShBfl7Mj7RKFfz/JE1EYX4z tjl/nXTwwtMSB+snGgliSuyEz8F0m8SjlvI5UmsnY2pxZr17lZ2PHXRsoMUplLq2 WnT9n/F3oC/cPRV28bu/SgrTe33F3SJCagUb16nXMDxm/JTok+GQdbqHNwIDAQAB o4ICQTCCAj0wHQYDVR0OBBYEFAZDN8SQaCrAbKqdIRFR8HNEY3L4MB8GA1UdIwQY MBaAFOfK2l8Igdd76kiwdoo3ZrUAZa8IMA4GA1UdDwEB/wQEAwIHgDB+BggrBgEF BQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVw b3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi81OHJhWHdp QjEzdnFTTEIyaWpkbXRRQmxyd2cuY2VyMH8GCCsGAQUFBwELBHMwcTBvBggrBgEF BQcwC4ZjcnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5hbWF6b25hd3MuY29t L3ZvbHVtZS83MDhhYWZhZi0wMGI0LTQ4NWItODU0Yy0wYjMyY2EzMGY1N2IvbWFu aWZlc3QubWZ0MIGVBgNVHR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnBraS1y c3luYy51cy1lYXN0LTIuYW1hem9uYXdzLmNvbS92b2x1bWUvNzA4YWFmYWYtMDBi NC00ODViLTg1NGMtMGIzMmNhMzBmNTdiLzEyZTU5MDAxLTM1YWMtNGFiZi04NThm LTM3Yjk1NWEyNGIzZi5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggr BgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYw BKACBQAwDQYJKoZIhvcNAQELBQADggEBAEViVPhPoWl2h5yWOcqTi5cXPi0dPQ+p kLg/3LDMy2fp58WkRxIx11k8DVqJwl7a8cktoZxRERjkYfJiFhFlgj9AddqKz1+1 Fxqh3cMY5zXelgezYTYS7zCsx4L3yezH4Gr6WAJd17cRnJpIvsX24nWI6Taz9+z+ RNjQzWDLkA1zT34Z7AOHQZXBcTmN5H3cY1R3Vklj5uFN7rd82+ladaU1U5ZlTQAz KG4WQ2c0WUqM83dZJngtVgJaWQ+jlyO07wRWCqSAvopv+Q5Jff2mN0Q6t8T4K8yp ns72vKY1GbyfqJVD/JxFQJQ+bRiFyl+R5ZIXUMxMrDUMe2yfDPCUWtU= -----END CERTIFICATE-----Generated at Tue Sep 1 18:10:46 2026 by rpki-client