$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/708aafaf-00b4-485b-854c-0b32ca30f57b/manifest.mft File: manifest.mft (raw, json) Hash identifier: tFw0tD0lEEXEBRGW6ONXjYvJWKWtWBZBmws8A8gtKhI= Subject key identifier: 9C:92:EF:A4:0F:14:CE:FA:FC:C9:36:44:60:F7:2F:B9:84:7A:60:08 Authority key identifier: E7:CA:DA:5F:08:81:D7:7B:EA:48:B0:76:8A:37:66:B5:00:65:AF:08 Certificate issuer: /CN=A918806F0000/serialNumber=E7CADA5F0881D77BEA48B0768A3766B50065AF08 Certificate serial: 3AC52C55C32D34F163C71E499EA92ED7BB609F85 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/58raXwiB13vqSLB2ijdmtQBlrwg.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/708aafaf-00b4-485b-854c-0b32ca30f57b/manifest.mft Manifest number: 065B Signing time: Fri 24 Jul 2026 00:02:22 +0000 Manifest this update: Fri 24 Jul 2026 00:02:22 +0000 Manifest next update: Tue 28 Jul 2026 00:02:22 +0000 Files and hashes: 1: 12e59001-35ac-4abf-858f-37b955a24b3f.crl (hash: SffkZWwmOkB33xh+zczaGycMaDss0VzU8nrzd9mXTGo=) 2: 381fc6e6-5d49-41bc-b584-d9437c68e3cd.roa (hash: M+i7XpsJD4p5Tk2yVGdLmGjDs5xTMXCNLVAUi3YO9fw=) 3: 49119734-9dbc-4bd4-98be-57e4ce078928.roa (hash: 0OedyNMwjL1I1p7rzryfdYD0nslES0i+43AbthFPFmE=) 4: 5663bf34-10ed-4309-a236-7466afd6f02f.roa (hash: aoaRIM84eruV/ISWBs3PJCPQb0sEmsLtTOcu1EdbsFA=) 5: cc2f7093-21a6-400f-9db1-93c2fe02bc1c.roa (hash: vbtxuyfgx9e6lLFR0CnUGCC1kgCTySw+Ljt4yM1fDb4=) 6: ea1d02aa-6d25-4b36-b42e-ba837d49e261.roa (hash: q5bh3h1LHQcXwRDCiiiYn6TP5+N60E0SyV4QnQBQL8c=) Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/708aafaf-00b4-485b-854c-0b32ca30f57b/12e59001-35ac-4abf-858f-37b955a24b3f.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/708aafaf-00b4-485b-854c-0b32ca30f57b/manifest.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/58raXwiB13vqSLB2ijdmtQBlrwg.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 28 Jul 2026 00:02:21 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3a:c5:2c:55:c3:2d:34:f1:63:c7:1e:49:9e:a9:2e:d7:bb:60:9f:85 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A918806F0000, serialNumber=E7CADA5F0881D77BEA48B0768A3766B50065AF08 Validity Not Before: Jul 24 00:02:22 2026 GMT Not After : Jul 28 00:02:22 2026 GMT Subject: serialNumber=983ac5a9b16b9478a8af033c817c0ab13a016d99a1013148f01b3612b34e84fd, CN=bb9a9116-f615-462e-a680-5266b327e0fa Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:71:ad:7d:02:f3:fd:3d:6b:31:13:cc:5f:36: 3d:80:f9:82:01:ee:55:36:00:66:fd:09:f2:7f:fd: c8:83:01:60:21:9e:0e:2f:0e:7a:4c:04:4b:37:1c: 4f:fe:84:44:d7:48:59:bd:3b:d0:59:6e:b6:3c:6d: 6c:eb:b3:39:e1:c1:4c:45:06:70:da:36:b1:16:9c: ae:10:46:c2:87:5f:57:2f:2f:32:7d:39:0f:c3:c3: de:d6:d2:11:a0:82:f6:13:60:98:33:70:6b:30:ce: 4a:69:99:29:ea:d3:27:cf:7f:bb:5a:65:cd:5f:0d: 24:28:02:81:53:57:a6:e5:bf:3d:73:2f:9c:20:20: 19:e1:d2:3c:9b:ce:db:fb:ea:b9:00:4d:7d:70:84: ca:7f:70:60:f7:4a:a5:46:6a:bd:fb:b3:62:2a:81: 49:9b:eb:3e:96:2a:01:14:1c:c6:ed:fe:a9:30:22: f0:7d:c5:fd:62:2f:a7:b3:33:22:7a:ef:0a:aa:e9: 2a:90:40:4b:0e:40:ab:25:9e:95:61:80:7f:76:92: 08:45:01:e4:c1:9b:d4:9a:19:65:1d:bf:e7:e5:0a: bb:13:24:0f:28:c4:39:bc:12:93:62:50:57:0c:9f: b6:2d:d5:3b:fb:01:1e:c4:db:42:eb:12:b1:45:3c: e7:03 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9C:92:EF:A4:0F:14:CE:FA:FC:C9:36:44:60:F7:2F:B9:84:7A:60:08 X509v3 Authority Key Identifier: keyid:E7:CA:DA:5F:08:81:D7:7B:EA:48:B0:76:8A:37:66:B5:00:65:AF:08 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/58raXwiB13vqSLB2ijdmtQBlrwg.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/708aafaf-00b4-485b-854c-0b32ca30f57b/manifest.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/708aafaf-00b4-485b-854c-0b32ca30f57b/12e59001-35ac-4abf-858f-37b955a24b3f.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 61:ad:b2:b8:a2:04:b0:50:49:8c:6c:e2:a1:c9:92:24:aa:36: e9:43:3a:49:20:84:3c:df:4d:dc:b6:e3:c6:a2:25:75:83:dd: c5:8a:de:40:2a:26:8c:4a:c2:bd:e4:aa:51:c8:e9:5b:3d:e0: f6:75:37:84:a9:78:27:d9:f0:4f:ae:fe:ab:42:a6:aa:ba:0d: 31:c3:73:58:07:2c:69:ed:75:52:7e:a0:b1:03:dc:b8:18:94: c3:2a:5e:bf:df:90:67:e5:54:ab:c4:97:9b:d6:45:88:25:94: e9:8f:da:27:3f:38:3b:12:1e:58:89:4c:4e:77:7f:27:67:6d: c1:c7:30:1d:79:7e:c2:1e:8e:6a:9d:45:c5:f9:4c:a8:53:0b: 05:6f:b2:8c:12:67:34:e0:59:76:af:d6:31:60:56:45:de:53: 2f:48:fc:06:e1:f5:47:20:ce:40:04:8f:a8:af:a6:bd:94:1f: 1e:fe:7c:55:37:0f:1c:33:3c:13:60:07:6d:1b:f3:8b:49:29: bf:78:1c:c8:19:c2:d8:5e:92:35:61:71:c7:cb:de:b4:c8:94: d8:96:65:71:df:93:5a:c3:4f:a7:f1:cb:be:55:81:62:4a:ce: 28:9b:eb:c7:a7:13:28:08:55:0f:d6:fa:e5:b2:31:11:73:f7: d8:2f:0d:21 -----BEGIN CERTIFICATE----- MIIFlTCCBH2gAwIBAgIUOsUsVcMtNPFjxx5Jnqku17tgn4UwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODgwNkYwMDAwMTEwLwYDVQQFEyhFN0NBREE1RjA4 ODFENzdCRUE0OEIwNzY4QTM3NjZCNTAwNjVBRjA4MB4XDTI2MDcyNDAwMDIyMloX DTI2MDcyODAwMDIyMlowejFJMEcGA1UEBRNAOTgzYWM1YTliMTZiOTQ3OGE4YWYw MzNjODE3YzBhYjEzYTAxNmQ5OWExMDEzMTQ4ZjAxYjM2MTJiMzRlODRmZDEtMCsG A1UEAxMkYmI5YTkxMTYtZjYxNS00NjJlLWE2ODAtNTI2NmIzMjdlMGZhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAx3GtfQLz/T1rMRPMXzY9gPmCAe5V NgBm/Qnyf/3IgwFgIZ4OLw56TARLNxxP/oRE10hZvTvQWW62PG1s67M54cFMRQZw 2jaxFpyuEEbCh19XLy8yfTkPw8Pe1tIRoIL2E2CYM3BrMM5KaZkp6tMnz3+7WmXN Xw0kKAKBU1em5b89cy+cICAZ4dI8m87b++q5AE19cITKf3Bg90qlRmq9+7NiKoFJ m+s+lioBFBzG7f6pMCLwfcX9Yi+nszMieu8KqukqkEBLDkCrJZ6VYYB/dpIIRQHk wZvUmhllHb/n5Qq7EyQPKMQ5vBKTYlBXDJ+2LdU7+wEexNtC6xKxRTznAwIDAQAB o4ICQTCCAj0wHQYDVR0OBBYEFJyS76QPFM76/Mk2RGD3L7mEemAIMB8GA1UdIwQY MBaAFOfK2l8Igdd76kiwdoo3ZrUAZa8IMA4GA1UdDwEB/wQEAwIHgDB+BggrBgEF BQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVw b3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi81OHJhWHdp QjEzdnFTTEIyaWpkbXRRQmxyd2cuY2VyMH8GCCsGAQUFBwELBHMwcTBvBggrBgEF BQcwC4ZjcnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5hbWF6b25hd3MuY29t L3ZvbHVtZS83MDhhYWZhZi0wMGI0LTQ4NWItODU0Yy0wYjMyY2EzMGY1N2IvbWFu aWZlc3QubWZ0MIGVBgNVHR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnBraS1y c3luYy51cy1lYXN0LTIuYW1hem9uYXdzLmNvbS92b2x1bWUvNzA4YWFmYWYtMDBi NC00ODViLTg1NGMtMGIzMmNhMzBmNTdiLzEyZTU5MDAxLTM1YWMtNGFiZi04NThm LTM3Yjk1NWEyNGIzZi5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggr BgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYw BKACBQAwDQYJKoZIhvcNAQELBQADggEBAGGtsriiBLBQSYxs4qHJkiSqNulDOkkg hDzfTdy248aiJXWD3cWK3kAqJoxKwr3kqlHI6Vs94PZ1N4SpeCfZ8E+u/qtCpqq6 DTHDc1gHLGntdVJ+oLED3LgYlMMqXr/fkGflVKvEl5vWRYgllOmP2ic/ODsSHliJ TE53fydnbcHHMB15fsIejmqdRcX5TKhTCwVvsowSZzTgWXav1jFgVkXeUy9I/Abh 9UcgzkAEj6ivpr2UHx7+fFU3DxwzPBNgB20b84tJKb94HMgZwthekjVhccfL3rTI lNiWZXHfk1rDT6fxy75VgWJKziib68enEygIVQ/W+uWyMRFz99gvDSE= -----END CERTIFICATE-----Generated at Fri Jul 24 16:12:01 2026 by rpki-client