$ rpki-client -vvvf rpki-rsync.us-east-2.amazonaws.com/volume/708aafaf-00b4-485b-854c-0b32ca30f57b/manifest.mft File: manifest.mft (raw, json) Hash identifier: 9wHHiKcxDVxDa0o423VZaBTF8+Y9g2JCGBdDgkk7/XM= Subject key identifier: DF:E8:39:28:CB:9A:94:58:C6:89:CC:63:79:20:CC:6B:02:01:99:C3 Authority key identifier: E7:CA:DA:5F:08:81:D7:7B:EA:48:B0:76:8A:37:66:B5:00:65:AF:08 Certificate issuer: /CN=A918806F0000/serialNumber=E7CADA5F0881D77BEA48B0768A3766B50065AF08 Certificate serial: 3B3508E0F5C4CE6549E4DA74163FBC24701B9FD2 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/58raXwiB13vqSLB2ijdmtQBlrwg.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/708aafaf-00b4-485b-854c-0b32ca30f57b/manifest.mft Manifest number: 068E Signing time: Sun 13 Sep 2026 00:07:30 +0000 Manifest this update: Sun 13 Sep 2026 00:07:30 +0000 Manifest next update: Thu 17 Sep 2026 00:07:30 +0000 Files and hashes: 1: 12e59001-35ac-4abf-858f-37b955a24b3f.crl (hash: 82BwbFOwxIUwvY+8NG0ARo9HICKZMhmtcKqzDntjvUk=) 2: 381fc6e6-5d49-41bc-b584-d9437c68e3cd.roa (hash: 8QqQOxAj3sRai6/BzOB2kV66/okkk7p8TzKsBaSwcWA=) 3: 49119734-9dbc-4bd4-98be-57e4ce078928.roa (hash: 0OedyNMwjL1I1p7rzryfdYD0nslES0i+43AbthFPFmE=) 4: 5663bf34-10ed-4309-a236-7466afd6f02f.roa (hash: aoaRIM84eruV/ISWBs3PJCPQb0sEmsLtTOcu1EdbsFA=) 5: cc2f7093-21a6-400f-9db1-93c2fe02bc1c.roa (hash: vbtxuyfgx9e6lLFR0CnUGCC1kgCTySw+Ljt4yM1fDb4=) 6: ea1d02aa-6d25-4b36-b42e-ba837d49e261.roa (hash: q5bh3h1LHQcXwRDCiiiYn6TP5+N60E0SyV4QnQBQL8c=) Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/708aafaf-00b4-485b-854c-0b32ca30f57b/12e59001-35ac-4abf-858f-37b955a24b3f.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/708aafaf-00b4-485b-854c-0b32ca30f57b/manifest.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/58raXwiB13vqSLB2ijdmtQBlrwg.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 17 Sep 2026 00:07:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3b:35:08:e0:f5:c4:ce:65:49:e4:da:74:16:3f:bc:24:70:1b:9f:d2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A918806F0000, serialNumber=E7CADA5F0881D77BEA48B0768A3766B50065AF08 Validity Not Before: Sep 13 00:07:30 2026 GMT Not After : Sep 17 00:07:30 2026 GMT Subject: serialNumber=4931c2c763228cec0661985b568525529027146fa0eb0f8eba4256d6340f5f37, CN=bb9a9116-f615-462e-a680-5266b327e0fa Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dd:fe:48:13:31:48:3e:eb:ab:b6:9e:35:00:55: 4e:8b:0d:ff:61:8c:40:d2:a6:87:36:38:25:7a:10: a9:96:97:d8:47:3c:17:27:a2:39:1d:a9:be:9e:58: 34:53:f7:57:2a:75:3c:9c:db:40:2d:02:75:26:0f: 38:30:d9:b2:6d:d1:b6:ca:fc:c4:b6:c1:6a:15:37: 6a:5d:ab:f1:4b:82:f1:03:40:1f:64:12:3c:63:4c: ab:ff:5c:7e:0c:7c:b7:2c:48:50:40:da:28:41:e2: a3:94:26:73:48:89:ee:08:8b:3d:69:8c:28:00:4b: c1:e8:03:fe:b7:af:5e:d2:dd:6d:92:4a:d5:38:2c: b2:72:25:af:6a:8c:0c:02:4c:7a:f7:e5:dd:29:e5: ac:69:bb:a5:62:1d:f1:f1:f2:95:33:cc:a1:27:bf: 84:82:07:5b:9d:1f:2e:46:60:83:d6:17:0c:fc:b2: 34:bb:25:c5:41:5c:46:64:da:d8:45:9d:56:f9:d0: 01:b7:6b:7b:5c:8f:b9:4e:de:62:a6:45:39:51:1e: 92:70:ee:a5:fe:2c:8e:23:f8:54:42:57:92:06:ad: 6d:01:83:e4:a8:6e:1d:95:e6:d3:cf:bc:14:83:b8: 5e:9a:1b:bf:60:95:92:44:a4:6d:6a:91:0d:62:23: a3:59 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DF:E8:39:28:CB:9A:94:58:C6:89:CC:63:79:20:CC:6B:02:01:99:C3 X509v3 Authority Key Identifier: keyid:E7:CA:DA:5F:08:81:D7:7B:EA:48:B0:76:8A:37:66:B5:00:65:AF:08 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/58raXwiB13vqSLB2ijdmtQBlrwg.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/708aafaf-00b4-485b-854c-0b32ca30f57b/manifest.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/708aafaf-00b4-485b-854c-0b32ca30f57b/12e59001-35ac-4abf-858f-37b955a24b3f.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 5e:6a:9f:40:fa:bc:f9:60:ab:ef:38:75:79:0b:3e:ab:31:9a: 8b:9b:66:be:cf:18:08:86:47:18:7a:08:46:20:20:07:fe:08: 32:ed:a6:72:8c:36:15:9c:b0:94:b9:b3:25:02:1b:f5:c9:3b: 20:a6:1f:84:00:79:b4:e0:91:62:d2:a5:99:37:62:32:ab:46: d3:e3:a2:d0:6b:08:47:98:34:f2:81:fd:07:80:82:21:31:af: 5f:91:41:32:d3:e8:5c:a1:a9:0f:79:17:43:81:19:f9:46:01: d3:e8:31:e2:d6:f5:b5:13:a0:ff:6a:09:15:f1:d3:50:56:3d: 74:3c:b1:ed:37:6a:1d:31:83:a8:a9:6f:cb:42:96:a2:58:e8: 44:bf:32:36:04:08:0e:e2:0f:bf:e8:2e:27:5b:6a:45:dd:9f: 31:83:63:26:29:50:84:d9:8c:8e:6a:74:d0:a5:15:37:26:50: 36:27:d9:fb:87:5c:b5:c4:25:45:dd:f0:17:94:f1:07:bc:31: 67:72:33:d2:c3:ad:03:4d:07:0c:e8:b0:c6:0b:0b:57:a1:1b: 2e:3c:a8:8e:36:e5:45:90:6f:f5:88:86:f0:b7:78:ce:5d:46: ce:f6:d9:fa:d5:db:23:c7:6f:8a:b0:71:16:cf:a8:ef:5b:9b: b1:e6:00:86 -----BEGIN CERTIFICATE----- MIIFlTCCBH2gAwIBAgIUOzUI4PXEzmVJ5Np0Fj+8JHAbn9IwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODgwNkYwMDAwMTEwLwYDVQQFEyhFN0NBREE1RjA4 ODFENzdCRUE0OEIwNzY4QTM3NjZCNTAwNjVBRjA4MB4XDTI2MDkxMzAwMDczMFoX DTI2MDkxNzAwMDczMFowejFJMEcGA1UEBRNANDkzMWMyYzc2MzIyOGNlYzA2NjE5 ODViNTY4NTI1NTI5MDI3MTQ2ZmEwZWIwZjhlYmE0MjU2ZDYzNDBmNWYzNzEtMCsG A1UEAxMkYmI5YTkxMTYtZjYxNS00NjJlLWE2ODAtNTI2NmIzMjdlMGZhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3f5IEzFIPuurtp41AFVOiw3/YYxA 0qaHNjglehCplpfYRzwXJ6I5Ham+nlg0U/dXKnU8nNtALQJ1Jg84MNmybdG2yvzE tsFqFTdqXavxS4LxA0AfZBI8Y0yr/1x+DHy3LEhQQNooQeKjlCZzSInuCIs9aYwo AEvB6AP+t69e0t1tkkrVOCyyciWvaowMAkx69+XdKeWsabulYh3x8fKVM8yhJ7+E ggdbnR8uRmCD1hcM/LI0uyXFQVxGZNrYRZ1W+dABt2t7XI+5Tt5ipkU5UR6ScO6l /iyOI/hUQleSBq1tAYPkqG4dlebTz7wUg7hemhu/YJWSRKRtapENYiOjWQIDAQAB o4ICQTCCAj0wHQYDVR0OBBYEFN/oOSjLmpRYxonMY3kgzGsCAZnDMB8GA1UdIwQY MBaAFOfK2l8Igdd76kiwdoo3ZrUAZa8IMA4GA1UdDwEB/wQEAwIHgDB+BggrBgEF BQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVw b3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi81OHJhWHdp QjEzdnFTTEIyaWpkbXRRQmxyd2cuY2VyMH8GCCsGAQUFBwELBHMwcTBvBggrBgEF BQcwC4ZjcnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5hbWF6b25hd3MuY29t L3ZvbHVtZS83MDhhYWZhZi0wMGI0LTQ4NWItODU0Yy0wYjMyY2EzMGY1N2IvbWFu aWZlc3QubWZ0MIGVBgNVHR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnBraS1y c3luYy51cy1lYXN0LTIuYW1hem9uYXdzLmNvbS92b2x1bWUvNzA4YWFmYWYtMDBi NC00ODViLTg1NGMtMGIzMmNhMzBmNTdiLzEyZTU5MDAxLTM1YWMtNGFiZi04NThm LTM3Yjk1NWEyNGIzZi5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggr BgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYw BKACBQAwDQYJKoZIhvcNAQELBQADggEBAF5qn0D6vPlgq+84dXkLPqsxmoubZr7P GAiGRxh6CEYgIAf+CDLtpnKMNhWcsJS5syUCG/XJOyCmH4QAebTgkWLSpZk3YjKr RtPjotBrCEeYNPKB/QeAgiExr1+RQTLT6FyhqQ95F0OBGflGAdPoMeLW9bUToP9q CRXx01BWPXQ8se03ah0xg6ipb8tClqJY6ES/MjYECA7iD7/oLidbakXdnzGDYyYp UITZjI5qdNClFTcmUDYn2fuHXLXEJUXd8BeU8Qe8MWdyM9LDrQNNBwzosMYLC1eh Gy48qI425UWQb/WIhvC3eM5dRs722frV2yPHb4qwcRbPqO9bm7HmAIY= -----END CERTIFICATE-----Generated at Sun Sep 13 18:35:31 2026 by rpki-client