$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/708aafaf-00b4-485b-854c-0b32ca30f57b/manifest.mft File: manifest.mft (raw, json) Hash identifier: 7pqutQpboCAuTch2RQ7/50Ofe2LwrkkcpxWDr1h0lTk= Subject key identifier: 1D:C5:5C:41:2D:83:E9:8A:38:D3:AD:11:EF:61:F0:19:68:9D:5A:EE Authority key identifier: E7:CA:DA:5F:08:81:D7:7B:EA:48:B0:76:8A:37:66:B5:00:65:AF:08 Certificate issuer: /CN=A918806F0000/serialNumber=E7CADA5F0881D77BEA48B0768A3766B50065AF08 Certificate serial: 55AB2E0BC9EB4B988E3FF14F0109AFF6AFADC067 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/58raXwiB13vqSLB2ijdmtQBlrwg.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/708aafaf-00b4-485b-854c-0b32ca30f57b/manifest.mft Manifest number: 0669 Signing time: Fri 07 Aug 2026 00:00:45 +0000 Manifest this update: Fri 07 Aug 2026 00:00:45 +0000 Manifest next update: Tue 11 Aug 2026 00:00:45 +0000 Files and hashes: 1: 12e59001-35ac-4abf-858f-37b955a24b3f.crl (hash: StsFqspPcw8pWbkXREgcirPb3mggWjjtHLjm6rmRDdU=) 2: 381fc6e6-5d49-41bc-b584-d9437c68e3cd.roa (hash: 8QqQOxAj3sRai6/BzOB2kV66/okkk7p8TzKsBaSwcWA=) 3: 49119734-9dbc-4bd4-98be-57e4ce078928.roa (hash: 0OedyNMwjL1I1p7rzryfdYD0nslES0i+43AbthFPFmE=) 4: 5663bf34-10ed-4309-a236-7466afd6f02f.roa (hash: aoaRIM84eruV/ISWBs3PJCPQb0sEmsLtTOcu1EdbsFA=) 5: cc2f7093-21a6-400f-9db1-93c2fe02bc1c.roa (hash: vbtxuyfgx9e6lLFR0CnUGCC1kgCTySw+Ljt4yM1fDb4=) 6: ea1d02aa-6d25-4b36-b42e-ba837d49e261.roa (hash: q5bh3h1LHQcXwRDCiiiYn6TP5+N60E0SyV4QnQBQL8c=) Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/708aafaf-00b4-485b-854c-0b32ca30f57b/12e59001-35ac-4abf-858f-37b955a24b3f.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/708aafaf-00b4-485b-854c-0b32ca30f57b/manifest.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/58raXwiB13vqSLB2ijdmtQBlrwg.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 11 Aug 2026 00:00:45 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 55:ab:2e:0b:c9:eb:4b:98:8e:3f:f1:4f:01:09:af:f6:af:ad:c0:67 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A918806F0000, serialNumber=E7CADA5F0881D77BEA48B0768A3766B50065AF08 Validity Not Before: Aug 7 00:00:45 2026 GMT Not After : Aug 11 00:00:45 2026 GMT Subject: serialNumber=12cdf70ffaaf7396aba7f1696ec42a9ce18878234d8507cf2bc7817e52dabb42, CN=bb9a9116-f615-462e-a680-5266b327e0fa Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:83:36:75:d8:16:60:de:ae:b2:f6:f5:04:e1: e8:70:38:20:c8:d9:95:ce:f6:2c:c3:70:bc:82:8b: 94:75:e9:c4:ab:55:72:32:87:e0:89:fd:26:48:f0: 62:56:af:1c:d0:86:c1:8b:8e:a6:a3:64:24:67:d6: 91:90:6a:b2:a8:e6:c6:ea:58:b6:f1:ba:36:b7:5b: a8:9f:89:25:1d:fb:0b:04:e1:1f:ca:64:0a:c4:88: 1b:dd:43:36:05:fa:fd:8d:bb:a7:a7:d5:2d:3c:43: ae:ee:c1:34:fc:63:3c:18:07:18:d4:17:07:10:16: 98:22:51:b4:12:af:4b:53:d0:1c:2f:32:58:7f:f4: 88:c7:10:cf:9f:10:55:d6:66:b0:40:31:93:4c:26: cf:ab:eb:23:3c:83:76:9c:52:b3:d1:cb:49:c7:16: 2c:fc:d6:06:b0:aa:bc:39:9d:87:86:ba:f9:3e:49: 65:29:c3:70:20:34:b3:bf:d7:cc:7c:a2:45:97:95: 45:29:d3:4f:d3:cb:64:dc:cb:7e:e1:98:aa:f4:2f: ae:61:5f:b3:c6:1a:7d:8f:a2:b5:76:69:67:ff:8c: e9:37:a8:4a:3c:aa:ab:af:04:5b:bc:61:71:8d:5c: a0:0d:46:4b:99:e5:43:59:2a:a4:69:9d:6a:f2:43: a4:b3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1D:C5:5C:41:2D:83:E9:8A:38:D3:AD:11:EF:61:F0:19:68:9D:5A:EE X509v3 Authority Key Identifier: keyid:E7:CA:DA:5F:08:81:D7:7B:EA:48:B0:76:8A:37:66:B5:00:65:AF:08 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/58raXwiB13vqSLB2ijdmtQBlrwg.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/708aafaf-00b4-485b-854c-0b32ca30f57b/manifest.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/708aafaf-00b4-485b-854c-0b32ca30f57b/12e59001-35ac-4abf-858f-37b955a24b3f.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 69:a1:f2:bb:cd:9c:a7:d9:00:f7:86:a0:e4:78:01:62:f8:07: f7:93:a2:15:77:15:4b:61:f0:48:6c:7c:47:20:53:94:99:89: fd:af:4e:96:fc:d5:83:ee:d0:f7:e2:48:d4:d5:9d:00:66:c5: 54:e3:3a:43:1f:27:14:a8:4e:0d:01:ee:56:fc:b9:18:03:2a: 06:45:30:a8:83:98:0c:4f:fc:1a:be:5b:23:ab:b8:35:c5:58: f7:18:f7:2c:8e:a3:6e:25:af:62:ed:91:1f:71:38:35:e8:17: 15:17:1c:8f:3c:e9:04:45:93:b2:d9:1c:58:61:9e:53:49:f3: 10:65:a8:1d:66:13:8f:3d:1e:55:82:ec:95:8a:8c:4c:2c:e8: 61:38:37:8b:49:91:09:4c:ed:e8:b9:41:2f:6a:89:91:23:fc: dd:16:45:d3:ad:68:c2:08:7b:a6:8b:9f:77:65:f3:ed:3a:75: 4f:f9:09:bf:50:a8:55:a5:20:69:b3:16:37:e4:c9:51:06:57: 6b:fa:36:c1:c8:49:8e:07:81:bc:da:ab:51:d2:2e:67:55:df: 1a:e7:ae:f5:73:78:c1:8c:53:d9:9f:69:48:3e:7f:18:b4:87: 15:92:27:f0:08:f6:b1:52:80:b5:90:18:1a:ff:35:ac:90:20: 71:9e:58:a1 -----BEGIN CERTIFICATE----- MIIFlTCCBH2gAwIBAgIUVasuC8nrS5iOP/FPAQmv9q+twGcwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODgwNkYwMDAwMTEwLwYDVQQFEyhFN0NBREE1RjA4 ODFENzdCRUE0OEIwNzY4QTM3NjZCNTAwNjVBRjA4MB4XDTI2MDgwNzAwMDA0NVoX DTI2MDgxMTAwMDA0NVowejFJMEcGA1UEBRNAMTJjZGY3MGZmYWFmNzM5NmFiYTdm MTY5NmVjNDJhOWNlMTg4NzgyMzRkODUwN2NmMmJjNzgxN2U1MmRhYmI0MjEtMCsG A1UEAxMkYmI5YTkxMTYtZjYxNS00NjJlLWE2ODAtNTI2NmIzMjdlMGZhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvYM2ddgWYN6usvb1BOHocDggyNmV zvYsw3C8gouUdenEq1VyMofgif0mSPBiVq8c0IbBi46mo2QkZ9aRkGqyqObG6li2 8bo2t1uon4klHfsLBOEfymQKxIgb3UM2Bfr9jbunp9UtPEOu7sE0/GM8GAcY1BcH EBaYIlG0Eq9LU9AcLzJYf/SIxxDPnxBV1mawQDGTTCbPq+sjPIN2nFKz0ctJxxYs /NYGsKq8OZ2Hhrr5PkllKcNwIDSzv9fMfKJFl5VFKdNP08tk3Mt+4Ziq9C+uYV+z xhp9j6K1dmln/4zpN6hKPKqrrwRbvGFxjVygDUZLmeVDWSqkaZ1q8kOkswIDAQAB o4ICQTCCAj0wHQYDVR0OBBYEFB3FXEEtg+mKONOtEe9h8BlonVruMB8GA1UdIwQY MBaAFOfK2l8Igdd76kiwdoo3ZrUAZa8IMA4GA1UdDwEB/wQEAwIHgDB+BggrBgEF BQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVw b3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi81OHJhWHdp QjEzdnFTTEIyaWpkbXRRQmxyd2cuY2VyMH8GCCsGAQUFBwELBHMwcTBvBggrBgEF BQcwC4ZjcnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5hbWF6b25hd3MuY29t L3ZvbHVtZS83MDhhYWZhZi0wMGI0LTQ4NWItODU0Yy0wYjMyY2EzMGY1N2IvbWFu aWZlc3QubWZ0MIGVBgNVHR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnBraS1y c3luYy51cy1lYXN0LTIuYW1hem9uYXdzLmNvbS92b2x1bWUvNzA4YWFmYWYtMDBi NC00ODViLTg1NGMtMGIzMmNhMzBmNTdiLzEyZTU5MDAxLTM1YWMtNGFiZi04NThm LTM3Yjk1NWEyNGIzZi5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggr BgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYw BKACBQAwDQYJKoZIhvcNAQELBQADggEBAGmh8rvNnKfZAPeGoOR4AWL4B/eTohV3 FUth8EhsfEcgU5SZif2vTpb81YPu0PfiSNTVnQBmxVTjOkMfJxSoTg0B7lb8uRgD KgZFMKiDmAxP/Bq+WyOruDXFWPcY9yyOo24lr2LtkR9xODXoFxUXHI886QRFk7LZ HFhhnlNJ8xBlqB1mE489HlWC7JWKjEws6GE4N4tJkQlM7ei5QS9qiZEj/N0WRdOt aMIIe6aLn3dl8+06dU/5Cb9QqFWlIGmzFjfkyVEGV2v6NsHISY4Hgbzaq1HSLmdV 3xrnrvVzeMGMU9mfaUg+fxi0hxWSJ/AI9rFSgLWQGBr/NayQIHGeWKE= -----END CERTIFICATE-----Generated at Fri Aug 7 08:15:33 2026 by rpki-client