$ rpki-client -vvvf rpki-rsync.us-east-2.amazonaws.com/volume/708aafaf-00b4-485b-854c-0b32ca30f57b/manifest.mft File: manifest.mft (raw, json) Hash identifier: 9jYdkIXpK6pRUBUTZTmIkQSHZ2OQnLIBjwAm90Ia+KI= Subject key identifier: 15:B0:D3:B7:ED:FF:0E:07:F7:7A:EE:A3:13:BE:99:6A:DA:87:45:F3 Authority key identifier: E7:CA:DA:5F:08:81:D7:7B:EA:48:B0:76:8A:37:66:B5:00:65:AF:08 Certificate issuer: /CN=A918806F0000/serialNumber=E7CADA5F0881D77BEA48B0768A3766B50065AF08 Certificate serial: 799A7A005FC71E7116D81B0ACA7491E8E4E19B0D Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/58raXwiB13vqSLB2ijdmtQBlrwg.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/708aafaf-00b4-485b-854c-0b32ca30f57b/manifest.mft Manifest number: 067C Signing time: Wed 26 Aug 2026 00:04:38 +0000 Manifest this update: Wed 26 Aug 2026 00:04:38 +0000 Manifest next update: Sun 30 Aug 2026 00:04:38 +0000 Files and hashes: 1: 12e59001-35ac-4abf-858f-37b955a24b3f.crl (hash: y0ZuKpFBmtEkYznl9yp6DmPT4NclzXA/VJvAfLturUA=) 2: 381fc6e6-5d49-41bc-b584-d9437c68e3cd.roa (hash: 8QqQOxAj3sRai6/BzOB2kV66/okkk7p8TzKsBaSwcWA=) 3: 49119734-9dbc-4bd4-98be-57e4ce078928.roa (hash: 0OedyNMwjL1I1p7rzryfdYD0nslES0i+43AbthFPFmE=) 4: 5663bf34-10ed-4309-a236-7466afd6f02f.roa (hash: aoaRIM84eruV/ISWBs3PJCPQb0sEmsLtTOcu1EdbsFA=) 5: cc2f7093-21a6-400f-9db1-93c2fe02bc1c.roa (hash: vbtxuyfgx9e6lLFR0CnUGCC1kgCTySw+Ljt4yM1fDb4=) 6: ea1d02aa-6d25-4b36-b42e-ba837d49e261.roa (hash: q5bh3h1LHQcXwRDCiiiYn6TP5+N60E0SyV4QnQBQL8c=) Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/708aafaf-00b4-485b-854c-0b32ca30f57b/12e59001-35ac-4abf-858f-37b955a24b3f.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/708aafaf-00b4-485b-854c-0b32ca30f57b/manifest.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/58raXwiB13vqSLB2ijdmtQBlrwg.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 30 Aug 2026 00:04:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 79:9a:7a:00:5f:c7:1e:71:16:d8:1b:0a:ca:74:91:e8:e4:e1:9b:0d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A918806F0000, serialNumber=E7CADA5F0881D77BEA48B0768A3766B50065AF08 Validity Not Before: Aug 26 00:04:38 2026 GMT Not After : Aug 30 00:04:38 2026 GMT Subject: serialNumber=542468338f3e2dfabbf35b89f81aead2721d3a2118cd4a1630fe37f1757ee4dc, CN=bb9a9116-f615-462e-a680-5266b327e0fa Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ca:22:d9:af:eb:94:d4:cc:08:8b:cd:b3:ae:07: 64:15:a1:05:a2:bb:5b:2f:48:fb:b3:be:e5:c0:a3: 7b:6e:70:e9:c6:60:85:dd:53:41:07:57:68:24:03: 96:5f:73:c2:32:82:ed:f0:60:5b:21:5e:7b:39:3f: e3:64:09:ef:e2:bd:83:49:67:0b:f8:8c:d5:90:ba: 6f:85:70:51:05:04:c2:ee:01:e1:f2:10:87:cb:72: 2e:8a:98:c5:e7:ba:1f:20:35:d2:3e:7b:a5:0e:98: d7:26:bf:0c:a9:64:3a:d4:92:c6:c2:0f:15:fd:91: f2:28:04:df:9e:34:21:ea:7b:83:ad:57:f6:3a:c6: dc:ee:bd:09:c3:64:8f:b9:8f:2b:d9:02:12:6e:03: d2:2a:dc:8a:62:70:93:dc:41:23:b6:da:61:0a:34: a3:f1:90:be:f0:71:fb:2e:0d:ae:bd:7d:9d:14:24: 4b:c8:76:9a:f7:c2:14:00:1e:fb:9a:b9:41:1f:40: 46:ad:e6:41:88:c6:1e:49:4b:2f:8f:f9:69:dc:95: 46:a6:c5:9c:65:db:f3:8f:fa:e1:aa:10:04:a9:8c: e6:13:14:e8:c3:22:79:bf:16:52:f9:f9:e0:10:24: 98:61:b3:7c:06:5c:0b:76:dc:88:9a:0c:6c:aa:bf: 72:3f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 15:B0:D3:B7:ED:FF:0E:07:F7:7A:EE:A3:13:BE:99:6A:DA:87:45:F3 X509v3 Authority Key Identifier: keyid:E7:CA:DA:5F:08:81:D7:7B:EA:48:B0:76:8A:37:66:B5:00:65:AF:08 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/58raXwiB13vqSLB2ijdmtQBlrwg.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/708aafaf-00b4-485b-854c-0b32ca30f57b/manifest.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/708aafaf-00b4-485b-854c-0b32ca30f57b/12e59001-35ac-4abf-858f-37b955a24b3f.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 00:84:84:cb:ec:d0:f4:73:7a:80:e4:12:b3:65:d2:c9:40:98: a0:d2:93:fd:65:91:5c:c0:86:98:df:81:39:23:a3:f5:c0:e5: 5f:66:43:50:e3:f4:4b:1a:df:c8:35:e5:c1:df:fe:af:00:40: 05:76:f3:93:5b:be:55:63:35:cc:ef:20:e5:c2:e3:b4:20:1b: 89:c3:00:de:28:04:4d:c1:ce:63:94:b6:c0:ef:81:ba:e3:b1: 08:b4:16:a9:eb:5e:29:dc:09:aa:a0:01:91:f5:c0:56:fb:64: 7a:cc:57:fa:23:ce:a4:d1:57:19:d5:fc:6c:a4:8e:a4:5e:2e: e5:0c:10:44:30:ab:d8:d1:cf:41:b9:2b:18:b9:ec:b1:4f:25: f5:b6:69:ac:a4:6f:7f:38:b3:d7:78:07:9c:04:55:5b:65:db: 52:de:88:37:14:9e:b9:6a:8a:8d:19:f1:bf:90:fa:df:08:80: 16:d9:14:98:30:57:0c:3f:15:fa:a8:d7:d6:21:49:fb:f5:66: 65:53:f7:a8:3d:a2:ec:49:f5:19:4e:a6:58:02:73:5b:5e:2c: e2:9c:4c:70:0e:4a:ee:c2:ea:bd:17:72:e2:e5:31:3f:b5:89: ed:98:8a:4f:88:df:b8:54:67:c9:68:0f:48:05:0a:31:2e:19: c1:2e:1d:c8 -----BEGIN CERTIFICATE----- MIIFlTCCBH2gAwIBAgIUeZp6AF/HHnEW2BsKynSR6OThmw0wDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODgwNkYwMDAwMTEwLwYDVQQFEyhFN0NBREE1RjA4 ODFENzdCRUE0OEIwNzY4QTM3NjZCNTAwNjVBRjA4MB4XDTI2MDgyNjAwMDQzOFoX DTI2MDgzMDAwMDQzOFowejFJMEcGA1UEBRNANTQyNDY4MzM4ZjNlMmRmYWJiZjM1 Yjg5ZjgxYWVhZDI3MjFkM2EyMTE4Y2Q0YTE2MzBmZTM3ZjE3NTdlZTRkYzEtMCsG A1UEAxMkYmI5YTkxMTYtZjYxNS00NjJlLWE2ODAtNTI2NmIzMjdlMGZhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyiLZr+uU1MwIi82zrgdkFaEFortb L0j7s77lwKN7bnDpxmCF3VNBB1doJAOWX3PCMoLt8GBbIV57OT/jZAnv4r2DSWcL +IzVkLpvhXBRBQTC7gHh8hCHy3IuipjF57ofIDXSPnulDpjXJr8MqWQ61JLGwg8V /ZHyKATfnjQh6nuDrVf2Osbc7r0Jw2SPuY8r2QISbgPSKtyKYnCT3EEjttphCjSj 8ZC+8HH7Lg2uvX2dFCRLyHaa98IUAB77mrlBH0BGreZBiMYeSUsvj/lp3JVGpsWc Zdvzj/rhqhAEqYzmExTowyJ5vxZS+fngECSYYbN8BlwLdtyImgxsqr9yPwIDAQAB o4ICQTCCAj0wHQYDVR0OBBYEFBWw07ft/w4H93ruoxO+mWrah0XzMB8GA1UdIwQY MBaAFOfK2l8Igdd76kiwdoo3ZrUAZa8IMA4GA1UdDwEB/wQEAwIHgDB+BggrBgEF BQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVw b3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi81OHJhWHdp QjEzdnFTTEIyaWpkbXRRQmxyd2cuY2VyMH8GCCsGAQUFBwELBHMwcTBvBggrBgEF BQcwC4ZjcnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5hbWF6b25hd3MuY29t L3ZvbHVtZS83MDhhYWZhZi0wMGI0LTQ4NWItODU0Yy0wYjMyY2EzMGY1N2IvbWFu aWZlc3QubWZ0MIGVBgNVHR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnBraS1y c3luYy51cy1lYXN0LTIuYW1hem9uYXdzLmNvbS92b2x1bWUvNzA4YWFmYWYtMDBi NC00ODViLTg1NGMtMGIzMmNhMzBmNTdiLzEyZTU5MDAxLTM1YWMtNGFiZi04NThm LTM3Yjk1NWEyNGIzZi5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggr BgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYw BKACBQAwDQYJKoZIhvcNAQELBQADggEBAACEhMvs0PRzeoDkErNl0slAmKDSk/1l kVzAhpjfgTkjo/XA5V9mQ1Dj9Esa38g15cHf/q8AQAV285NbvlVjNczvIOXC47Qg G4nDAN4oBE3BzmOUtsDvgbrjsQi0FqnrXincCaqgAZH1wFb7ZHrMV/ojzqTRVxnV /GykjqReLuUMEEQwq9jRz0G5Kxi57LFPJfW2aaykb384s9d4B5wEVVtl21LeiDcU nrlqio0Z8b+Q+t8IgBbZFJgwVww/Ffqo19YhSfv1ZmVT96g9ouxJ9RlOplgCc1te LOKcTHAOSu7C6r0XcuLlMT+1ie2Yik+I37hUZ8loD0gFCjEuGcEuHcg= -----END CERTIFICATE-----Generated at Wed Aug 26 02:30:50 2026 by rpki-client