$ rpki-client -vvvf rpki-rsync.us-east-2.amazonaws.com/volume/708aafaf-00b4-485b-854c-0b32ca30f57b/manifest.mft File: manifest.mft (raw, json) Hash identifier: x1b0a6zlspzdTlMsJWVURsxeH8uryDH5Q10MFcmzlqY= Subject key identifier: 80:6F:F6:CE:C0:07:82:E9:08:A3:FC:86:A7:BC:62:75:DD:CD:84:F8 Authority key identifier: E7:CA:DA:5F:08:81:D7:7B:EA:48:B0:76:8A:37:66:B5:00:65:AF:08 Certificate issuer: /CN=A918806F0000/serialNumber=E7CADA5F0881D77BEA48B0768A3766B50065AF08 Certificate serial: 5E5B61B6AEE14C82F62598F104498FBDA91A15B5 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/58raXwiB13vqSLB2ijdmtQBlrwg.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/708aafaf-00b4-485b-854c-0b32ca30f57b/manifest.mft Manifest number: 0698 Signing time: Wed 23 Sep 2026 00:09:19 +0000 Manifest this update: Wed 23 Sep 2026 00:09:19 +0000 Manifest next update: Sun 27 Sep 2026 00:09:19 +0000 Files and hashes: 1: 12e59001-35ac-4abf-858f-37b955a24b3f.crl (hash: Ivwf5CZaovOB40vdh0G334mRLD/GOguvRE4VAztIQMA=) 2: 381fc6e6-5d49-41bc-b584-d9437c68e3cd.roa (hash: 8QqQOxAj3sRai6/BzOB2kV66/okkk7p8TzKsBaSwcWA=) 3: 49119734-9dbc-4bd4-98be-57e4ce078928.roa (hash: 0OedyNMwjL1I1p7rzryfdYD0nslES0i+43AbthFPFmE=) 4: 5663bf34-10ed-4309-a236-7466afd6f02f.roa (hash: aoaRIM84eruV/ISWBs3PJCPQb0sEmsLtTOcu1EdbsFA=) 5: cc2f7093-21a6-400f-9db1-93c2fe02bc1c.roa (hash: vbtxuyfgx9e6lLFR0CnUGCC1kgCTySw+Ljt4yM1fDb4=) 6: ea1d02aa-6d25-4b36-b42e-ba837d49e261.roa (hash: q5bh3h1LHQcXwRDCiiiYn6TP5+N60E0SyV4QnQBQL8c=) Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/708aafaf-00b4-485b-854c-0b32ca30f57b/12e59001-35ac-4abf-858f-37b955a24b3f.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/708aafaf-00b4-485b-854c-0b32ca30f57b/manifest.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/58raXwiB13vqSLB2ijdmtQBlrwg.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 27 Sep 2026 00:09:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5e:5b:61:b6:ae:e1:4c:82:f6:25:98:f1:04:49:8f:bd:a9:1a:15:b5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A918806F0000, serialNumber=E7CADA5F0881D77BEA48B0768A3766B50065AF08 Validity Not Before: Sep 23 00:09:19 2026 GMT Not After : Sep 27 00:09:19 2026 GMT Subject: serialNumber=20ad88b699c8a51fd4a7464d250099aa8f648dfafb6f2030ab287d9ada261511, CN=bb9a9116-f615-462e-a680-5266b327e0fa Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e4:86:4e:75:9d:2d:0c:c3:1e:86:d9:2f:df:04: 64:be:a0:1b:73:3a:a8:fa:78:64:c6:13:2b:1b:2a: f9:4e:24:3f:ab:00:2a:79:ed:80:94:cf:6b:82:d2: 94:67:8a:be:4b:bf:d9:f5:90:57:a7:3a:82:31:89: 89:1c:80:4c:6f:4d:fc:14:85:32:0c:b8:89:e2:91: 27:a5:9d:86:4f:2f:a9:8b:fb:26:ed:97:79:b3:68: af:a0:68:ba:2f:ae:60:32:d5:7a:b6:14:f9:a3:91: 00:eb:b2:69:7b:96:35:65:17:2a:20:e3:3a:e2:8c: 4b:b0:70:14:9f:a7:4e:51:7e:a8:50:89:d6:9b:6b: 71:39:70:fd:03:b0:49:d4:06:d1:b3:00:16:54:c4: bf:75:36:b4:6c:d6:e8:4e:2e:44:8f:88:a5:11:c6: a2:5f:0a:5b:cf:e1:c4:4d:ca:2c:8e:c9:b4:07:8d: 2f:86:cb:73:f6:df:f2:ac:fc:2c:1c:1b:ee:c7:bb: 85:80:99:bd:71:eb:0a:b5:17:23:d3:30:b5:c4:d5: 8a:c4:01:f9:8a:18:48:90:86:ba:36:ea:18:20:e3: 98:bc:cc:9b:24:78:74:96:d0:24:ec:73:11:88:61: 34:d7:ef:38:0f:89:77:da:c2:6f:e5:06:78:d5:d2: ac:43 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 80:6F:F6:CE:C0:07:82:E9:08:A3:FC:86:A7:BC:62:75:DD:CD:84:F8 X509v3 Authority Key Identifier: keyid:E7:CA:DA:5F:08:81:D7:7B:EA:48:B0:76:8A:37:66:B5:00:65:AF:08 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/58raXwiB13vqSLB2ijdmtQBlrwg.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/708aafaf-00b4-485b-854c-0b32ca30f57b/manifest.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/708aafaf-00b4-485b-854c-0b32ca30f57b/12e59001-35ac-4abf-858f-37b955a24b3f.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 5a:e6:0f:41:1c:aa:c4:f8:7a:84:12:6e:61:3f:70:93:d0:ff: 2e:98:d0:58:85:71:de:f9:cc:a2:30:97:2e:b4:81:50:77:0d: 65:cc:2a:c5:b8:27:e8:cc:a7:bc:de:d8:54:a2:e6:b5:95:76: 32:6c:79:7e:e9:50:16:13:83:f4:4f:86:cb:ce:05:f3:5e:0b: 73:ee:80:86:53:e2:62:1a:01:53:86:19:3d:ac:2c:5c:24:36: 7f:ed:d3:2b:a7:46:ab:50:9d:01:2b:c5:8d:3d:13:13:55:47: e7:48:8e:ef:84:f8:76:7f:c9:e9:ba:dc:2c:21:ed:ed:06:55: d8:36:af:58:a5:97:b4:a3:3c:e9:5e:a1:7e:46:15:a8:fd:f1: 7b:b8:e0:31:81:3e:bb:bc:98:73:42:bf:bd:94:c0:76:30:c3: 87:d5:5f:f1:43:d2:c0:80:f6:96:86:4b:dc:b9:c1:49:82:1e: 30:e2:99:ae:a9:0c:0c:69:73:9b:52:77:20:c1:02:f6:74:6f: cc:5a:0e:9e:c6:5c:10:c1:7e:d5:34:c8:99:80:9e:8c:98:f0: 16:f3:ee:09:43:80:28:7c:b8:f7:32:0a:4e:8a:cb:50:31:7a: 08:a3:49:28:d4:1c:34:75:7a:45:b7:12:23:67:08:a0:51:9d: d8:28:30:6a -----BEGIN CERTIFICATE----- MIIFlTCCBH2gAwIBAgIUXlthtq7hTIL2JZjxBEmPvakaFbUwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODgwNkYwMDAwMTEwLwYDVQQFEyhFN0NBREE1RjA4 ODFENzdCRUE0OEIwNzY4QTM3NjZCNTAwNjVBRjA4MB4XDTI2MDkyMzAwMDkxOVoX DTI2MDkyNzAwMDkxOVowejFJMEcGA1UEBRNAMjBhZDg4YjY5OWM4YTUxZmQ0YTc0 NjRkMjUwMDk5YWE4ZjY0OGRmYWZiNmYyMDMwYWIyODdkOWFkYTI2MTUxMTEtMCsG A1UEAxMkYmI5YTkxMTYtZjYxNS00NjJlLWE2ODAtNTI2NmIzMjdlMGZhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5IZOdZ0tDMMehtkv3wRkvqAbczqo +nhkxhMrGyr5TiQ/qwAqee2AlM9rgtKUZ4q+S7/Z9ZBXpzqCMYmJHIBMb038FIUy DLiJ4pEnpZ2GTy+pi/sm7Zd5s2ivoGi6L65gMtV6thT5o5EA67Jpe5Y1ZRcqIOM6 4oxLsHAUn6dOUX6oUInWm2txOXD9A7BJ1AbRswAWVMS/dTa0bNboTi5Ej4ilEcai Xwpbz+HETcosjsm0B40vhstz9t/yrPwsHBvux7uFgJm9cesKtRcj0zC1xNWKxAH5 ihhIkIa6NuoYIOOYvMybJHh0ltAk7HMRiGE01+84D4l32sJv5QZ41dKsQwIDAQAB o4ICQTCCAj0wHQYDVR0OBBYEFIBv9s7AB4LpCKP8hqe8YnXdzYT4MB8GA1UdIwQY MBaAFOfK2l8Igdd76kiwdoo3ZrUAZa8IMA4GA1UdDwEB/wQEAwIHgDB+BggrBgEF BQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVw b3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi81OHJhWHdp QjEzdnFTTEIyaWpkbXRRQmxyd2cuY2VyMH8GCCsGAQUFBwELBHMwcTBvBggrBgEF BQcwC4ZjcnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5hbWF6b25hd3MuY29t L3ZvbHVtZS83MDhhYWZhZi0wMGI0LTQ4NWItODU0Yy0wYjMyY2EzMGY1N2IvbWFu aWZlc3QubWZ0MIGVBgNVHR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnBraS1y c3luYy51cy1lYXN0LTIuYW1hem9uYXdzLmNvbS92b2x1bWUvNzA4YWFmYWYtMDBi NC00ODViLTg1NGMtMGIzMmNhMzBmNTdiLzEyZTU5MDAxLTM1YWMtNGFiZi04NThm LTM3Yjk1NWEyNGIzZi5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggr BgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYw BKACBQAwDQYJKoZIhvcNAQELBQADggEBAFrmD0EcqsT4eoQSbmE/cJPQ/y6Y0FiF cd75zKIwly60gVB3DWXMKsW4J+jMp7ze2FSi5rWVdjJseX7pUBYTg/RPhsvOBfNe C3PugIZT4mIaAVOGGT2sLFwkNn/t0yunRqtQnQErxY09ExNVR+dIju+E+HZ/yem6 3Cwh7e0GVdg2r1ill7SjPOleoX5GFaj98Xu44DGBPru8mHNCv72UwHYww4fVX/FD 0sCA9paGS9y5wUmCHjDima6pDAxpc5tSdyDBAvZ0b8xaDp7GXBDBftU0yJmAnoyY 8Bbz7glDgCh8uPcyCk6Ky1AxegijSSjUHDR1ekW3EiNnCKBRndgoMGo= -----END CERTIFICATE-----Generated at Wed Sep 23 20:51:54 2026 by rpki-client