$ rpki-client -vvvf rpki-rsync.us-east-2.amazonaws.com/volume/708aafaf-00b4-485b-854c-0b32ca30f57b/manifest.mft File: manifest.mft (raw, json) Hash identifier: quP00+Y92oM+pY4nOKEMgyBVIpURbnKtBC06wRJDuAs= Subject key identifier: 39:BD:D9:23:C9:24:4E:2C:AA:90:94:2C:4B:FD:F3:78:82:B8:5A:5D Authority key identifier: E7:CA:DA:5F:08:81:D7:7B:EA:48:B0:76:8A:37:66:B5:00:65:AF:08 Certificate issuer: /CN=A918806F0000/serialNumber=E7CADA5F0881D77BEA48B0768A3766B50065AF08 Certificate serial: 4504FD2265428988B730FF5A3210F40042DDD5B6 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/58raXwiB13vqSLB2ijdmtQBlrwg.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/708aafaf-00b4-485b-854c-0b32ca30f57b/manifest.mft Manifest number: 06A1 Signing time: Fri 02 Oct 2026 00:10:46 +0000 Manifest this update: Fri 02 Oct 2026 00:10:46 +0000 Manifest next update: Tue 06 Oct 2026 00:10:46 +0000 Files and hashes: 1: 12e59001-35ac-4abf-858f-37b955a24b3f.crl (hash: ZZCC4U9AC6ndrOGuc1hD6VPJei5mel1wpgaYZqtimVU=) 2: 381fc6e6-5d49-41bc-b584-d9437c68e3cd.roa (hash: 8QqQOxAj3sRai6/BzOB2kV66/okkk7p8TzKsBaSwcWA=) 3: 49119734-9dbc-4bd4-98be-57e4ce078928.roa (hash: 0OedyNMwjL1I1p7rzryfdYD0nslES0i+43AbthFPFmE=) 4: 5663bf34-10ed-4309-a236-7466afd6f02f.roa (hash: aoaRIM84eruV/ISWBs3PJCPQb0sEmsLtTOcu1EdbsFA=) 5: cc2f7093-21a6-400f-9db1-93c2fe02bc1c.roa (hash: vbtxuyfgx9e6lLFR0CnUGCC1kgCTySw+Ljt4yM1fDb4=) 6: ea1d02aa-6d25-4b36-b42e-ba837d49e261.roa (hash: q5bh3h1LHQcXwRDCiiiYn6TP5+N60E0SyV4QnQBQL8c=) Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/708aafaf-00b4-485b-854c-0b32ca30f57b/12e59001-35ac-4abf-858f-37b955a24b3f.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/708aafaf-00b4-485b-854c-0b32ca30f57b/manifest.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/58raXwiB13vqSLB2ijdmtQBlrwg.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 06 Oct 2026 00:10:46 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 45:04:fd:22:65:42:89:88:b7:30:ff:5a:32:10:f4:00:42:dd:d5:b6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A918806F0000, serialNumber=E7CADA5F0881D77BEA48B0768A3766B50065AF08 Validity Not Before: Oct 2 00:10:46 2026 GMT Not After : Oct 6 00:10:46 2026 GMT Subject: serialNumber=7edd8deeaf64740b89a5b8a43eb7755c5dd5b04f2aa0cc52feaab7203a06d05c, CN=bb9a9116-f615-462e-a680-5266b327e0fa Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d3:30:dd:52:75:92:20:4f:87:aa:14:ca:d1:16: d2:b0:e0:63:8a:2f:4f:80:83:33:46:76:82:f8:4f: 62:d9:4e:d3:74:1a:8c:a3:0e:63:28:ae:1b:c1:b3: 55:3c:8e:e6:cc:4b:2c:2b:2a:60:c5:65:75:92:95: 5c:73:0e:67:82:50:55:58:9d:75:67:e7:4c:e6:86: f0:ac:67:fa:81:4c:0f:9e:b0:4b:c5:5c:c7:d7:45: ae:e6:8d:2b:c3:9c:97:a2:8d:90:f7:d1:88:a9:6b: dd:fc:5d:75:f7:a1:7f:f5:72:dd:64:7c:8b:b3:01: 0b:0d:7b:be:36:b9:f0:3c:a9:40:f4:75:f9:07:74: 6e:13:01:99:26:64:0b:2b:e6:93:9a:01:2c:4e:fe: 5a:0b:9a:d7:2e:bb:9f:1c:0d:d3:92:fe:69:07:7d: 1e:37:90:a0:d1:4a:97:1f:dc:f3:dc:e5:35:11:fb: f1:b4:c5:36:58:35:b7:bd:c6:92:21:33:02:70:23: 7f:93:f1:d6:f9:d6:45:fb:17:f6:f5:cc:68:91:2d: c3:d1:a3:bd:4b:63:a6:ee:35:e5:bf:b7:71:ae:89: fc:8a:07:bc:bf:3d:6b:bf:4f:2f:17:96:b8:4a:73: 1a:ff:2f:e4:61:e3:ad:95:68:73:04:08:74:05:ee: 88:71 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 39:BD:D9:23:C9:24:4E:2C:AA:90:94:2C:4B:FD:F3:78:82:B8:5A:5D X509v3 Authority Key Identifier: keyid:E7:CA:DA:5F:08:81:D7:7B:EA:48:B0:76:8A:37:66:B5:00:65:AF:08 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/58raXwiB13vqSLB2ijdmtQBlrwg.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/708aafaf-00b4-485b-854c-0b32ca30f57b/manifest.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/708aafaf-00b4-485b-854c-0b32ca30f57b/12e59001-35ac-4abf-858f-37b955a24b3f.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 0d:89:c7:06:7a:55:74:5b:93:93:a0:3e:17:b5:24:5b:78:01: 13:97:9f:56:e7:0f:dd:72:1a:b0:85:a0:cd:72:ff:3e:14:bf: 86:59:5b:83:50:0d:2d:d7:6c:de:3a:cf:ad:97:d6:e2:d3:32: 28:e0:45:8d:8f:8b:c2:a7:d1:37:27:7d:12:89:ed:26:42:d1: 36:d3:86:7d:9e:82:90:da:c1:23:41:dd:b4:e3:25:f1:42:4d: 15:c3:04:f8:68:53:9b:1f:e4:01:4c:89:84:6c:0e:e4:0c:9f: 47:7e:7e:4d:b0:c1:d1:36:f6:15:5d:26:44:53:00:b4:e8:15: 63:46:98:39:26:f9:ea:1f:b2:6d:32:ed:6c:02:81:e1:60:65: d7:f1:92:82:da:5e:50:99:6a:46:a2:26:c8:2e:6b:67:1c:3d: 03:e4:c3:b0:19:ea:d2:5c:d4:83:27:e5:22:a0:03:01:66:1e: 54:0a:aa:38:d4:35:e1:66:1c:54:36:42:8b:a2:8f:e7:dd:1f: 63:4e:80:f4:bb:54:18:c5:43:c4:8a:ec:4a:07:4e:4d:7f:0f: 62:ed:da:b3:9c:13:54:dc:b0:a8:4b:eb:43:93:8b:6d:2f:0e: 8c:b1:80:82:cd:47:65:ff:f2:a5:95:59:6a:62:38:7e:f8:b9: cd:29:43:cc -----BEGIN CERTIFICATE----- MIIFlTCCBH2gAwIBAgIURQT9ImVCiYi3MP9aMhD0AELd1bYwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODgwNkYwMDAwMTEwLwYDVQQFEyhFN0NBREE1RjA4 ODFENzdCRUE0OEIwNzY4QTM3NjZCNTAwNjVBRjA4MB4XDTI2MTAwMjAwMTA0NloX DTI2MTAwNjAwMTA0NlowejFJMEcGA1UEBRNAN2VkZDhkZWVhZjY0NzQwYjg5YTVi OGE0M2ViNzc1NWM1ZGQ1YjA0ZjJhYTBjYzUyZmVhYWI3MjAzYTA2ZDA1YzEtMCsG A1UEAxMkYmI5YTkxMTYtZjYxNS00NjJlLWE2ODAtNTI2NmIzMjdlMGZhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0zDdUnWSIE+HqhTK0RbSsOBjii9P gIMzRnaC+E9i2U7TdBqMow5jKK4bwbNVPI7mzEssKypgxWV1kpVccw5nglBVWJ11 Z+dM5obwrGf6gUwPnrBLxVzH10Wu5o0rw5yXoo2Q99GIqWvd/F1196F/9XLdZHyL swELDXu+NrnwPKlA9HX5B3RuEwGZJmQLK+aTmgEsTv5aC5rXLrufHA3Tkv5pB30e N5Cg0UqXH9zz3OU1EfvxtMU2WDW3vcaSITMCcCN/k/HW+dZF+xf29cxokS3D0aO9 S2Om7jXlv7dxron8ige8vz1rv08vF5a4SnMa/y/kYeOtlWhzBAh0Be6IcQIDAQAB o4ICQTCCAj0wHQYDVR0OBBYEFDm92SPJJE4sqpCULEv983iCuFpdMB8GA1UdIwQY MBaAFOfK2l8Igdd76kiwdoo3ZrUAZa8IMA4GA1UdDwEB/wQEAwIHgDB+BggrBgEF BQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVw b3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi81OHJhWHdp QjEzdnFTTEIyaWpkbXRRQmxyd2cuY2VyMH8GCCsGAQUFBwELBHMwcTBvBggrBgEF BQcwC4ZjcnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5hbWF6b25hd3MuY29t L3ZvbHVtZS83MDhhYWZhZi0wMGI0LTQ4NWItODU0Yy0wYjMyY2EzMGY1N2IvbWFu aWZlc3QubWZ0MIGVBgNVHR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnBraS1y c3luYy51cy1lYXN0LTIuYW1hem9uYXdzLmNvbS92b2x1bWUvNzA4YWFmYWYtMDBi NC00ODViLTg1NGMtMGIzMmNhMzBmNTdiLzEyZTU5MDAxLTM1YWMtNGFiZi04NThm LTM3Yjk1NWEyNGIzZi5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggr BgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYw BKACBQAwDQYJKoZIhvcNAQELBQADggEBAA2JxwZ6VXRbk5OgPhe1JFt4AROXn1bn D91yGrCFoM1y/z4Uv4ZZW4NQDS3XbN46z62X1uLTMijgRY2Pi8Kn0TcnfRKJ7SZC 0TbThn2egpDawSNB3bTjJfFCTRXDBPhoU5sf5AFMiYRsDuQMn0d+fk2wwdE29hVd JkRTALToFWNGmDkm+eofsm0y7WwCgeFgZdfxkoLaXlCZakaiJsgua2ccPQPkw7AZ 6tJc1IMn5SKgAwFmHlQKqjjUNeFmHFQ2Qouij+fdH2NOgPS7VBjFQ8SK7EoHTk1/ D2Lt2rOcE1TcsKhL60OTi20vDoyxgILNR2X/8qWVWWpiOH74uc0pQ8w= -----END CERTIFICATE-----Generated at Fri Oct 2 09:34:40 2026 by rpki-client