$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/708aafaf-00b4-485b-854c-0b32ca30f57b/manifest.mft File: manifest.mft (raw, json) Hash identifier: btiTag9kAPIpjyh9ltSrK++7lodUypyBEx55U6f04jU= Subject key identifier: 41:C4:F4:F4:C3:D5:F4:06:BD:C6:F5:A2:15:11:88:FC:ED:1C:2B:EF Authority key identifier: E7:CA:DA:5F:08:81:D7:7B:EA:48:B0:76:8A:37:66:B5:00:65:AF:08 Certificate issuer: /CN=A918806F0000/serialNumber=E7CADA5F0881D77BEA48B0768A3766B50065AF08 Certificate serial: 1D387C7E69F9B80767937807158088848F2171EB Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/58raXwiB13vqSLB2ijdmtQBlrwg.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/708aafaf-00b4-485b-854c-0b32ca30f57b/manifest.mft Manifest number: 0673 Signing time: Mon 17 Aug 2026 00:02:42 +0000 Manifest this update: Mon 17 Aug 2026 00:02:42 +0000 Manifest next update: Fri 21 Aug 2026 00:02:42 +0000 Files and hashes: 1: 12e59001-35ac-4abf-858f-37b955a24b3f.crl (hash: QYIBBXShrdawBIqWiJCejqVbK4YTEDj3N6PLa1/Mo8Q=) 2: 381fc6e6-5d49-41bc-b584-d9437c68e3cd.roa (hash: 8QqQOxAj3sRai6/BzOB2kV66/okkk7p8TzKsBaSwcWA=) 3: 49119734-9dbc-4bd4-98be-57e4ce078928.roa (hash: 0OedyNMwjL1I1p7rzryfdYD0nslES0i+43AbthFPFmE=) 4: 5663bf34-10ed-4309-a236-7466afd6f02f.roa (hash: aoaRIM84eruV/ISWBs3PJCPQb0sEmsLtTOcu1EdbsFA=) 5: cc2f7093-21a6-400f-9db1-93c2fe02bc1c.roa (hash: vbtxuyfgx9e6lLFR0CnUGCC1kgCTySw+Ljt4yM1fDb4=) 6: ea1d02aa-6d25-4b36-b42e-ba837d49e261.roa (hash: q5bh3h1LHQcXwRDCiiiYn6TP5+N60E0SyV4QnQBQL8c=) Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/708aafaf-00b4-485b-854c-0b32ca30f57b/12e59001-35ac-4abf-858f-37b955a24b3f.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/708aafaf-00b4-485b-854c-0b32ca30f57b/manifest.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/58raXwiB13vqSLB2ijdmtQBlrwg.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 21 Aug 2026 00:02:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1d:38:7c:7e:69:f9:b8:07:67:93:78:07:15:80:88:84:8f:21:71:eb Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A918806F0000, serialNumber=E7CADA5F0881D77BEA48B0768A3766B50065AF08 Validity Not Before: Aug 17 00:02:42 2026 GMT Not After : Aug 21 00:02:42 2026 GMT Subject: serialNumber=739799832593d2115ddde8198eb424293586868ca7c839a585cc435a27b40084, CN=bb9a9116-f615-462e-a680-5266b327e0fa Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:99:9a:17:b5:09:85:6e:16:73:0a:7b:4f:84:4d: dd:70:c9:ab:f4:9d:0c:ca:d6:87:e4:c1:d2:00:28: ba:6b:48:6b:6e:15:15:d1:cd:3d:1e:e3:13:85:bf: 90:fa:5d:2f:aa:8c:d4:55:e7:cd:51:86:2b:f3:37: e5:26:19:bb:a1:db:ee:f4:67:2f:16:45:00:43:c1: f9:f7:8d:2b:15:5e:9d:19:60:cd:64:d3:29:5f:90: fe:55:05:6e:77:4d:99:22:a7:87:b3:e7:0a:4c:ed: 38:c6:50:05:28:64:a3:04:84:9e:f8:69:40:76:d1: f2:ab:db:4c:fd:27:de:1d:62:cc:17:c0:a2:02:74: b2:a9:13:c0:b3:f7:98:98:0b:96:00:75:5c:4a:a1: 90:a0:2c:23:d2:41:9d:f2:76:15:46:b1:c1:ea:a8: 6b:e2:5d:2a:22:12:c0:29:fe:48:a3:5e:8e:59:74: be:56:b7:7b:2f:00:61:7b:a6:29:86:00:d0:0e:ab: 3a:c7:43:3b:b8:c7:f4:3b:0a:d0:3a:1d:53:c7:e3: 93:3c:b3:65:1e:ed:6f:f0:56:7c:fa:95:b0:f5:ab: a7:a3:7b:58:c0:d4:62:df:63:b7:3f:6a:93:ba:fd: cc:51:2f:cf:bd:8c:f5:64:fd:a2:c7:7b:56:43:dd: c7:8d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 41:C4:F4:F4:C3:D5:F4:06:BD:C6:F5:A2:15:11:88:FC:ED:1C:2B:EF X509v3 Authority Key Identifier: keyid:E7:CA:DA:5F:08:81:D7:7B:EA:48:B0:76:8A:37:66:B5:00:65:AF:08 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/58raXwiB13vqSLB2ijdmtQBlrwg.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/708aafaf-00b4-485b-854c-0b32ca30f57b/manifest.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/708aafaf-00b4-485b-854c-0b32ca30f57b/12e59001-35ac-4abf-858f-37b955a24b3f.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 83:fa:f0:c5:60:99:02:35:78:4c:21:d6:e7:53:78:eb:1c:a5: bc:21:2a:eb:06:3f:2e:9c:37:a3:53:23:f2:98:2e:89:47:c9: 77:eb:51:51:d8:a7:ed:57:b0:d0:8a:7f:c1:c3:b9:f9:06:d3: 28:d6:54:c4:f3:8c:53:34:c8:66:c6:ee:ff:23:23:2f:71:69: 52:ac:bc:1d:e1:59:02:1f:d1:f8:09:61:48:2c:64:48:ea:ee: 7a:77:04:9c:cc:32:c2:d7:de:ed:ea:58:2d:32:19:f0:de:06: f0:85:ba:ff:ae:04:86:a0:98:c7:ac:1c:f1:96:3b:36:ee:e2: 19:18:f3:d9:d8:5f:ad:40:11:7a:da:19:e7:17:b4:b7:b0:f7: 7a:e8:e4:23:30:7a:25:c2:44:eb:a3:51:fa:0a:53:51:8e:8c: 15:f2:05:ff:c3:a9:dd:90:17:32:50:55:73:00:aa:3f:c8:bc: 99:b4:70:78:a1:bb:f2:8d:e0:7d:49:10:ac:89:bd:a1:c1:73: 23:61:97:3d:cc:79:76:71:af:d4:52:fb:c8:eb:54:28:eb:a4: 92:8e:7e:f1:b5:70:9e:2e:03:9a:b6:28:73:d9:a3:d6:e4:d9: 54:df:32:72:2c:c7:a6:f8:6b:9f:e6:b6:af:91:1d:14:54:1b: 84:b0:47:e0 -----BEGIN CERTIFICATE----- MIIFlTCCBH2gAwIBAgIUHTh8fmn5uAdnk3gHFYCIhI8hceswDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODgwNkYwMDAwMTEwLwYDVQQFEyhFN0NBREE1RjA4 ODFENzdCRUE0OEIwNzY4QTM3NjZCNTAwNjVBRjA4MB4XDTI2MDgxNzAwMDI0MloX DTI2MDgyMTAwMDI0MlowejFJMEcGA1UEBRNANzM5Nzk5ODMyNTkzZDIxMTVkZGRl ODE5OGViNDI0MjkzNTg2ODY4Y2E3YzgzOWE1ODVjYzQzNWEyN2I0MDA4NDEtMCsG A1UEAxMkYmI5YTkxMTYtZjYxNS00NjJlLWE2ODAtNTI2NmIzMjdlMGZhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmZoXtQmFbhZzCntPhE3dcMmr9J0M ytaH5MHSACi6a0hrbhUV0c09HuMThb+Q+l0vqozUVefNUYYr8zflJhm7odvu9Gcv FkUAQ8H5940rFV6dGWDNZNMpX5D+VQVud02ZIqeHs+cKTO04xlAFKGSjBISe+GlA dtHyq9tM/SfeHWLMF8CiAnSyqRPAs/eYmAuWAHVcSqGQoCwj0kGd8nYVRrHB6qhr 4l0qIhLAKf5Io16OWXS+Vrd7LwBhe6YphgDQDqs6x0M7uMf0OwrQOh1Tx+OTPLNl Hu1v8FZ8+pWw9auno3tYwNRi32O3P2qTuv3MUS/PvYz1ZP2ix3tWQ93HjQIDAQAB o4ICQTCCAj0wHQYDVR0OBBYEFEHE9PTD1fQGvcb1ohURiPztHCvvMB8GA1UdIwQY MBaAFOfK2l8Igdd76kiwdoo3ZrUAZa8IMA4GA1UdDwEB/wQEAwIHgDB+BggrBgEF BQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVw b3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi81OHJhWHdp QjEzdnFTTEIyaWpkbXRRQmxyd2cuY2VyMH8GCCsGAQUFBwELBHMwcTBvBggrBgEF BQcwC4ZjcnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5hbWF6b25hd3MuY29t L3ZvbHVtZS83MDhhYWZhZi0wMGI0LTQ4NWItODU0Yy0wYjMyY2EzMGY1N2IvbWFu aWZlc3QubWZ0MIGVBgNVHR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnBraS1y c3luYy51cy1lYXN0LTIuYW1hem9uYXdzLmNvbS92b2x1bWUvNzA4YWFmYWYtMDBi NC00ODViLTg1NGMtMGIzMmNhMzBmNTdiLzEyZTU5MDAxLTM1YWMtNGFiZi04NThm LTM3Yjk1NWEyNGIzZi5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggr BgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYw BKACBQAwDQYJKoZIhvcNAQELBQADggEBAIP68MVgmQI1eEwh1udTeOscpbwhKusG Py6cN6NTI/KYLolHyXfrUVHYp+1XsNCKf8HDufkG0yjWVMTzjFM0yGbG7v8jIy9x aVKsvB3hWQIf0fgJYUgsZEjq7np3BJzMMsLX3u3qWC0yGfDeBvCFuv+uBIagmMes HPGWOzbu4hkY89nYX61AEXraGecXtLew93ro5CMweiXCROujUfoKU1GOjBXyBf/D qd2QFzJQVXMAqj/IvJm0cHihu/KN4H1JEKyJvaHBcyNhlz3MeXZxr9RS+8jrVCjr pJKOfvG1cJ4uA5q2KHPZo9bk2VTfMnIsx6b4a5/mtq+RHRRUG4SwR+A= -----END CERTIFICATE-----Generated at Mon Aug 17 13:07:24 2026 by rpki-client