$ rpki-client -vvvf rpki-rsync.us-east-2.amazonaws.com/volume/708aafaf-00b4-485b-854c-0b32ca30f57b/manifest.mft File: manifest.mft (raw, json) Hash identifier: qEFdPDEVO8lGZeJhMOC21m48IdYzsZC1Gs9psy+7ODs= Subject key identifier: AB:4F:E8:E4:DA:08:7E:ED:97:FD:48:84:2D:82:28:C7:38:AD:EE:1C Authority key identifier: E7:CA:DA:5F:08:81:D7:7B:EA:48:B0:76:8A:37:66:B5:00:65:AF:08 Certificate issuer: /CN=A918806F0000/serialNumber=E7CADA5F0881D77BEA48B0768A3766B50065AF08 Certificate serial: 03602F374AF5C3AD5AB908462159B077B24BB747 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/58raXwiB13vqSLB2ijdmtQBlrwg.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/708aafaf-00b4-485b-854c-0b32ca30f57b/manifest.mft Manifest number: 068F Signing time: Mon 14 Sep 2026 00:07:38 +0000 Manifest this update: Mon 14 Sep 2026 00:07:38 +0000 Manifest next update: Fri 18 Sep 2026 00:07:38 +0000 Files and hashes: 1: 12e59001-35ac-4abf-858f-37b955a24b3f.crl (hash: mnxhEpar/ZpEdw3HBb4wU6KwlwpcjsUdp4ATyhWback=) 2: 381fc6e6-5d49-41bc-b584-d9437c68e3cd.roa (hash: 8QqQOxAj3sRai6/BzOB2kV66/okkk7p8TzKsBaSwcWA=) 3: 49119734-9dbc-4bd4-98be-57e4ce078928.roa (hash: 0OedyNMwjL1I1p7rzryfdYD0nslES0i+43AbthFPFmE=) 4: 5663bf34-10ed-4309-a236-7466afd6f02f.roa (hash: aoaRIM84eruV/ISWBs3PJCPQb0sEmsLtTOcu1EdbsFA=) 5: cc2f7093-21a6-400f-9db1-93c2fe02bc1c.roa (hash: vbtxuyfgx9e6lLFR0CnUGCC1kgCTySw+Ljt4yM1fDb4=) 6: ea1d02aa-6d25-4b36-b42e-ba837d49e261.roa (hash: q5bh3h1LHQcXwRDCiiiYn6TP5+N60E0SyV4QnQBQL8c=) Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/708aafaf-00b4-485b-854c-0b32ca30f57b/12e59001-35ac-4abf-858f-37b955a24b3f.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/708aafaf-00b4-485b-854c-0b32ca30f57b/manifest.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/58raXwiB13vqSLB2ijdmtQBlrwg.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 18 Sep 2026 00:07:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 03:60:2f:37:4a:f5:c3:ad:5a:b9:08:46:21:59:b0:77:b2:4b:b7:47 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A918806F0000, serialNumber=E7CADA5F0881D77BEA48B0768A3766B50065AF08 Validity Not Before: Sep 14 00:07:38 2026 GMT Not After : Sep 18 00:07:38 2026 GMT Subject: serialNumber=007f70f31b458f02c73f397e8da482837f3b044b8047dff029e8ae9a856c8a08, CN=bb9a9116-f615-462e-a680-5266b327e0fa Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a2:61:5b:05:51:3d:83:32:10:ff:2e:65:67:d6: 07:46:86:30:a1:e7:61:a7:5b:00:eb:33:01:a5:f5: e0:fd:b6:5a:75:17:87:58:7d:a6:02:c8:22:f5:e1: f8:46:b9:a9:a7:ff:c2:08:c6:2a:ab:37:7a:2d:e7: ce:c2:6a:63:2e:8f:29:36:e6:d2:0a:18:db:5e:9f: c0:ce:c2:aa:bc:98:37:f7:78:65:20:39:a3:61:62: 72:6f:8d:a9:3a:77:44:c4:0d:ca:9c:da:02:dc:f6: 5c:80:8e:5c:0e:ca:03:55:e7:f0:11:00:24:98:c2: 5f:f2:6f:c3:f6:dc:ab:35:39:1b:94:c4:fb:63:a7: 36:30:71:a5:9f:ef:08:db:53:83:25:e7:ee:fd:86: b8:c1:0e:90:ba:21:f7:a9:be:4a:10:eb:92:99:80: 9d:28:f1:c9:71:15:0b:70:43:01:12:24:e6:68:db: 4c:7f:0b:d1:46:0b:aa:e5:01:a2:43:4c:a0:58:19: 46:fb:de:7f:bc:d3:3e:72:ee:7b:78:99:ce:d5:69: fa:78:2f:c0:bd:9a:e3:fd:72:98:cc:f5:87:f4:cc: 6e:a8:17:c1:29:0f:c8:44:36:f9:87:3f:ef:2a:84: b9:cf:9d:3e:8a:e8:a7:ba:42:9c:a7:ab:91:cc:66: 42:e1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AB:4F:E8:E4:DA:08:7E:ED:97:FD:48:84:2D:82:28:C7:38:AD:EE:1C X509v3 Authority Key Identifier: keyid:E7:CA:DA:5F:08:81:D7:7B:EA:48:B0:76:8A:37:66:B5:00:65:AF:08 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/58raXwiB13vqSLB2ijdmtQBlrwg.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/708aafaf-00b4-485b-854c-0b32ca30f57b/manifest.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/708aafaf-00b4-485b-854c-0b32ca30f57b/12e59001-35ac-4abf-858f-37b955a24b3f.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 51:da:fb:11:f2:32:25:95:4b:57:4e:59:35:50:aa:ef:d1:c7: 6f:86:a4:95:05:46:c6:63:1b:10:4d:ab:ec:66:ca:cb:0c:ff: a0:38:c8:d4:0a:ee:59:8f:44:81:7d:42:7c:9c:92:f7:8b:41: 5e:77:9b:e6:06:80:bd:77:1b:2d:79:4d:25:bd:d4:0f:7a:f0: 82:0c:4a:41:29:03:4e:05:a4:64:35:14:25:36:8a:bd:b2:e8: af:68:71:f1:ba:eb:0f:02:6f:0a:61:11:b9:b5:44:16:ea:52: fb:b7:6c:72:27:69:d0:be:c7:9e:5c:4a:a5:24:f0:8b:3b:1a: 75:34:64:ff:5c:a4:c4:03:e6:84:26:fd:3f:70:02:84:30:e8: a0:4a:0a:7f:71:cd:b9:54:4f:05:3a:ea:95:1e:9e:b7:69:d4: b2:b2:0e:96:43:2f:8e:47:aa:3f:83:40:36:f9:a2:8f:df:42: ef:1b:96:ce:40:6a:aa:b5:21:2d:6d:6f:5d:c6:9e:35:fa:bd: 76:d5:37:a0:8b:1d:54:d5:b9:4d:28:3d:cc:c2:54:d4:fd:f8: e0:14:34:92:c4:7e:68:df:8f:2c:b9:9a:64:e5:f1:b1:c6:04: 44:0e:e4:57:21:89:f6:47:f3:db:6b:34:e8:6d:0d:d8:69:a3: 69:49:56:a4 -----BEGIN CERTIFICATE----- MIIFlTCCBH2gAwIBAgIUA2AvN0r1w61auQhGIVmwd7JLt0cwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODgwNkYwMDAwMTEwLwYDVQQFEyhFN0NBREE1RjA4 ODFENzdCRUE0OEIwNzY4QTM3NjZCNTAwNjVBRjA4MB4XDTI2MDkxNDAwMDczOFoX DTI2MDkxODAwMDczOFowejFJMEcGA1UEBRNAMDA3ZjcwZjMxYjQ1OGYwMmM3M2Yz OTdlOGRhNDgyODM3ZjNiMDQ0YjgwNDdkZmYwMjllOGFlOWE4NTZjOGEwODEtMCsG A1UEAxMkYmI5YTkxMTYtZjYxNS00NjJlLWE2ODAtNTI2NmIzMjdlMGZhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAomFbBVE9gzIQ/y5lZ9YHRoYwoedh p1sA6zMBpfXg/bZadReHWH2mAsgi9eH4Rrmpp//CCMYqqzd6LefOwmpjLo8pNubS ChjbXp/AzsKqvJg393hlIDmjYWJyb42pOndExA3KnNoC3PZcgI5cDsoDVefwEQAk mMJf8m/D9tyrNTkblMT7Y6c2MHGln+8I21ODJefu/Ya4wQ6QuiH3qb5KEOuSmYCd KPHJcRULcEMBEiTmaNtMfwvRRguq5QGiQ0ygWBlG+95/vNM+cu57eJnO1Wn6eC/A vZrj/XKYzPWH9MxuqBfBKQ/IRDb5hz/vKoS5z50+iuinukKcp6uRzGZC4QIDAQAB o4ICQTCCAj0wHQYDVR0OBBYEFKtP6OTaCH7tl/1IhC2CKMc4re4cMB8GA1UdIwQY MBaAFOfK2l8Igdd76kiwdoo3ZrUAZa8IMA4GA1UdDwEB/wQEAwIHgDB+BggrBgEF BQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVw b3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi81OHJhWHdp QjEzdnFTTEIyaWpkbXRRQmxyd2cuY2VyMH8GCCsGAQUFBwELBHMwcTBvBggrBgEF BQcwC4ZjcnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5hbWF6b25hd3MuY29t L3ZvbHVtZS83MDhhYWZhZi0wMGI0LTQ4NWItODU0Yy0wYjMyY2EzMGY1N2IvbWFu aWZlc3QubWZ0MIGVBgNVHR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnBraS1y c3luYy51cy1lYXN0LTIuYW1hem9uYXdzLmNvbS92b2x1bWUvNzA4YWFmYWYtMDBi NC00ODViLTg1NGMtMGIzMmNhMzBmNTdiLzEyZTU5MDAxLTM1YWMtNGFiZi04NThm LTM3Yjk1NWEyNGIzZi5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggr BgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYw BKACBQAwDQYJKoZIhvcNAQELBQADggEBAFHa+xHyMiWVS1dOWTVQqu/Rx2+GpJUF RsZjGxBNq+xmyssM/6A4yNQK7lmPRIF9QnyckveLQV53m+YGgL13Gy15TSW91A96 8IIMSkEpA04FpGQ1FCU2ir2y6K9ocfG66w8CbwphEbm1RBbqUvu3bHInadC+x55c SqUk8Is7GnU0ZP9cpMQD5oQm/T9wAoQw6KBKCn9xzblUTwU66pUenrdp1LKyDpZD L45Hqj+DQDb5oo/fQu8bls5Aaqq1IS1tb13GnjX6vXbVN6CLHVTVuU0oPczCVNT9 +OAUNJLEfmjfjyy5mmTl8bHGBEQO5FchifZH89trNOhtDdhpo2lJVqQ= -----END CERTIFICATE-----Generated at Mon Sep 14 15:38:08 2026 by rpki-client