$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/708aafaf-00b4-485b-854c-0b32ca30f57b/manifest.mft File: manifest.mft (raw, json) Hash identifier: A5mcyfy5h5C206aBz/zekKn5pFKe8O3g8bluAvRvlQo= Subject key identifier: A6:68:5C:70:C0:FC:B9:70:38:98:6E:63:3D:74:1A:39:A6:5B:FA:F2 Authority key identifier: E7:CA:DA:5F:08:81:D7:7B:EA:48:B0:76:8A:37:66:B5:00:65:AF:08 Certificate issuer: /CN=A918806F0000/serialNumber=E7CADA5F0881D77BEA48B0768A3766B50065AF08 Certificate serial: 3E3146949B3C3D0583995D253D0D4CCA570A0272 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/58raXwiB13vqSLB2ijdmtQBlrwg.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/708aafaf-00b4-485b-854c-0b32ca30f57b/manifest.mft Manifest number: 0671 Signing time: Sat 15 Aug 2026 00:02:16 +0000 Manifest this update: Sat 15 Aug 2026 00:02:16 +0000 Manifest next update: Wed 19 Aug 2026 00:02:16 +0000 Files and hashes: 1: 12e59001-35ac-4abf-858f-37b955a24b3f.crl (hash: l2JSbCsslJIw33N1aSz3QsYTMVzcf5ncENYb6/QQ5fQ=) 2: 381fc6e6-5d49-41bc-b584-d9437c68e3cd.roa (hash: 8QqQOxAj3sRai6/BzOB2kV66/okkk7p8TzKsBaSwcWA=) 3: 49119734-9dbc-4bd4-98be-57e4ce078928.roa (hash: 0OedyNMwjL1I1p7rzryfdYD0nslES0i+43AbthFPFmE=) 4: 5663bf34-10ed-4309-a236-7466afd6f02f.roa (hash: aoaRIM84eruV/ISWBs3PJCPQb0sEmsLtTOcu1EdbsFA=) 5: cc2f7093-21a6-400f-9db1-93c2fe02bc1c.roa (hash: vbtxuyfgx9e6lLFR0CnUGCC1kgCTySw+Ljt4yM1fDb4=) 6: ea1d02aa-6d25-4b36-b42e-ba837d49e261.roa (hash: q5bh3h1LHQcXwRDCiiiYn6TP5+N60E0SyV4QnQBQL8c=) Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/708aafaf-00b4-485b-854c-0b32ca30f57b/12e59001-35ac-4abf-858f-37b955a24b3f.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/708aafaf-00b4-485b-854c-0b32ca30f57b/manifest.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/58raXwiB13vqSLB2ijdmtQBlrwg.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 19 Aug 2026 00:02:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3e:31:46:94:9b:3c:3d:05:83:99:5d:25:3d:0d:4c:ca:57:0a:02:72 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A918806F0000, serialNumber=E7CADA5F0881D77BEA48B0768A3766B50065AF08 Validity Not Before: Aug 15 00:02:16 2026 GMT Not After : Aug 19 00:02:16 2026 GMT Subject: serialNumber=23b94e66180b6aabbe8396d42442ef5143fe4f6dade36045beaa5168a5350ef8, CN=bb9a9116-f615-462e-a680-5266b327e0fa Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:cc:2c:20:f8:ab:7e:87:14:90:73:f0:be:e6: 1a:cd:81:8e:a3:8b:40:74:59:6f:f3:e9:c2:dc:11: f0:b0:aa:b4:06:7a:85:4b:38:79:50:57:1d:e5:20: 81:fe:7b:f1:ab:af:54:b1:92:6a:9c:85:ab:11:e4: 4e:0c:62:8b:64:c2:63:63:13:10:b4:d5:42:70:ef: 56:24:9d:de:ee:9d:75:48:7d:ed:37:2e:8b:c0:d6: ba:d8:b8:43:ad:21:4a:d3:73:ef:88:eb:8b:38:b7: ea:ac:b2:e9:27:a6:3e:33:d2:25:fd:d3:57:66:3f: f4:4d:73:93:98:cd:33:0a:01:ba:b2:60:d4:bc:d4: cb:1e:12:c8:ec:1b:90:5f:1a:76:7a:fe:7e:c4:98: d6:16:8e:fe:6b:d0:97:1c:e5:d0:16:44:14:f9:fb: 17:25:70:a9:9e:8d:80:d7:e1:31:7b:92:e6:e2:d4: 08:51:5e:7c:6c:3f:fd:80:1e:41:97:93:c7:ff:f2: 05:7b:c5:b4:30:e0:21:67:b7:37:34:b3:06:de:6d: e2:2a:9c:e8:e4:58:a8:b6:36:26:d6:e8:98:fd:dd: fa:f4:9f:17:1c:df:d9:ed:c1:a2:13:d1:af:c9:1a: 4b:c7:94:99:94:02:c9:b4:66:02:2f:45:5a:83:2a: 6c:bb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A6:68:5C:70:C0:FC:B9:70:38:98:6E:63:3D:74:1A:39:A6:5B:FA:F2 X509v3 Authority Key Identifier: keyid:E7:CA:DA:5F:08:81:D7:7B:EA:48:B0:76:8A:37:66:B5:00:65:AF:08 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/58raXwiB13vqSLB2ijdmtQBlrwg.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/708aafaf-00b4-485b-854c-0b32ca30f57b/manifest.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/708aafaf-00b4-485b-854c-0b32ca30f57b/12e59001-35ac-4abf-858f-37b955a24b3f.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 83:33:fa:c2:59:9e:d0:6d:22:d7:1b:01:d1:a2:42:ef:b7:f5: fd:36:1a:15:21:fc:2b:9b:b8:88:97:e1:f2:a6:29:21:54:1a: 80:a6:64:cf:8f:0e:46:e2:75:ac:ef:4b:58:e5:c1:73:f0:b4: 7b:c4:0c:11:99:8e:bf:26:f7:2b:36:52:bd:2a:31:05:b7:85: 03:93:2b:d5:ad:d5:55:93:a0:04:26:9a:67:e2:d8:66:cb:fe: 88:84:0c:09:40:5f:c7:9e:91:16:df:5e:68:9f:82:1b:ed:59: 38:80:c1:3d:d2:56:16:a6:f4:1b:aa:8e:59:c7:63:49:76:b8: 03:e1:26:ba:53:9e:dd:a7:a4:4f:f3:74:72:2a:b3:33:c5:8a: 30:80:31:99:db:29:72:f5:09:fd:6a:ab:ed:92:b8:d7:fd:49: dc:96:0f:f7:0c:9f:ec:ba:2f:bd:c5:63:4a:eb:3f:ec:56:7d: 00:d2:2b:19:2f:c2:47:2e:80:1b:15:47:ac:d8:b3:ae:9a:d3: cc:35:5b:4d:d8:09:f0:37:79:0a:c6:87:e5:e4:a5:96:a2:11: 34:67:14:89:2d:27:05:a8:46:93:02:6a:03:a1:49:e0:ed:ff: 0c:28:19:e5:21:f2:2f:db:1a:c7:f7:db:4a:47:d9:79:c6:c4: f1:66:e8:60 -----BEGIN CERTIFICATE----- MIIFlTCCBH2gAwIBAgIUPjFGlJs8PQWDmV0lPQ1MylcKAnIwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODgwNkYwMDAwMTEwLwYDVQQFEyhFN0NBREE1RjA4 ODFENzdCRUE0OEIwNzY4QTM3NjZCNTAwNjVBRjA4MB4XDTI2MDgxNTAwMDIxNloX DTI2MDgxOTAwMDIxNlowejFJMEcGA1UEBRNAMjNiOTRlNjYxODBiNmFhYmJlODM5 NmQ0MjQ0MmVmNTE0M2ZlNGY2ZGFkZTM2MDQ1YmVhYTUxNjhhNTM1MGVmODEtMCsG A1UEAxMkYmI5YTkxMTYtZjYxNS00NjJlLWE2ODAtNTI2NmIzMjdlMGZhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvcwsIPirfocUkHPwvuYazYGOo4tA dFlv8+nC3BHwsKq0BnqFSzh5UFcd5SCB/nvxq69UsZJqnIWrEeRODGKLZMJjYxMQ tNVCcO9WJJ3e7p11SH3tNy6LwNa62LhDrSFK03PviOuLOLfqrLLpJ6Y+M9Il/dNX Zj/0TXOTmM0zCgG6smDUvNTLHhLI7BuQXxp2ev5+xJjWFo7+a9CXHOXQFkQU+fsX JXCpno2A1+Exe5Lm4tQIUV58bD/9gB5Bl5PH//IFe8W0MOAhZ7c3NLMG3m3iKpzo 5FiotjYm1uiY/d369J8XHN/Z7cGiE9GvyRpLx5SZlALJtGYCL0VagypsuwIDAQAB o4ICQTCCAj0wHQYDVR0OBBYEFKZoXHDA/LlwOJhuYz10GjmmW/ryMB8GA1UdIwQY MBaAFOfK2l8Igdd76kiwdoo3ZrUAZa8IMA4GA1UdDwEB/wQEAwIHgDB+BggrBgEF BQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVw b3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi81OHJhWHdp QjEzdnFTTEIyaWpkbXRRQmxyd2cuY2VyMH8GCCsGAQUFBwELBHMwcTBvBggrBgEF BQcwC4ZjcnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5hbWF6b25hd3MuY29t L3ZvbHVtZS83MDhhYWZhZi0wMGI0LTQ4NWItODU0Yy0wYjMyY2EzMGY1N2IvbWFu aWZlc3QubWZ0MIGVBgNVHR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnBraS1y c3luYy51cy1lYXN0LTIuYW1hem9uYXdzLmNvbS92b2x1bWUvNzA4YWFmYWYtMDBi NC00ODViLTg1NGMtMGIzMmNhMzBmNTdiLzEyZTU5MDAxLTM1YWMtNGFiZi04NThm LTM3Yjk1NWEyNGIzZi5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggr BgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYw BKACBQAwDQYJKoZIhvcNAQELBQADggEBAIMz+sJZntBtItcbAdGiQu+39f02GhUh /CubuIiX4fKmKSFUGoCmZM+PDkbidazvS1jlwXPwtHvEDBGZjr8m9ys2Ur0qMQW3 hQOTK9Wt1VWToAQmmmfi2GbL/oiEDAlAX8eekRbfXmifghvtWTiAwT3SVham9Buq jlnHY0l2uAPhJrpTnt2npE/zdHIqszPFijCAMZnbKXL1Cf1qq+2SuNf9SdyWD/cM n+y6L73FY0rrP+xWfQDSKxkvwkcugBsVR6zYs66a08w1W03YCfA3eQrGh+XkpZai ETRnFIktJwWoRpMCagOhSeDt/wwoGeUh8i/bGsf320pH2XnGxPFm6GA= -----END CERTIFICATE-----Generated at Sat Aug 15 21:50:28 2026 by rpki-client