$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/708aafaf-00b4-485b-854c-0b32ca30f57b/manifest.mft File: manifest.mft (raw, json) Hash identifier: MFF/+m1MR7Rr2Mv2YZjWnJeN1fFeHau+TBTbvBVLNUk= Subject key identifier: 67:2E:37:90:A5:7D:58:AA:81:F8:62:3C:BF:71:95:CF:17:FE:49:B4 Authority key identifier: E7:CA:DA:5F:08:81:D7:7B:EA:48:B0:76:8A:37:66:B5:00:65:AF:08 Certificate issuer: /CN=A918806F0000/serialNumber=E7CADA5F0881D77BEA48B0768A3766B50065AF08 Certificate serial: 2958D1C32153C6BDA7910F69979A7B26F77E93B6 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/58raXwiB13vqSLB2ijdmtQBlrwg.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/708aafaf-00b4-485b-854c-0b32ca30f57b/manifest.mft Manifest number: 0672 Signing time: Sun 16 Aug 2026 00:02:32 +0000 Manifest this update: Sun 16 Aug 2026 00:02:32 +0000 Manifest next update: Thu 20 Aug 2026 00:02:32 +0000 Files and hashes: 1: 12e59001-35ac-4abf-858f-37b955a24b3f.crl (hash: jEHyV/ERFImE/6rksggQZfGJrEvsiad7gDGQ1DOHehI=) 2: 381fc6e6-5d49-41bc-b584-d9437c68e3cd.roa (hash: 8QqQOxAj3sRai6/BzOB2kV66/okkk7p8TzKsBaSwcWA=) 3: 49119734-9dbc-4bd4-98be-57e4ce078928.roa (hash: 0OedyNMwjL1I1p7rzryfdYD0nslES0i+43AbthFPFmE=) 4: 5663bf34-10ed-4309-a236-7466afd6f02f.roa (hash: aoaRIM84eruV/ISWBs3PJCPQb0sEmsLtTOcu1EdbsFA=) 5: cc2f7093-21a6-400f-9db1-93c2fe02bc1c.roa (hash: vbtxuyfgx9e6lLFR0CnUGCC1kgCTySw+Ljt4yM1fDb4=) 6: ea1d02aa-6d25-4b36-b42e-ba837d49e261.roa (hash: q5bh3h1LHQcXwRDCiiiYn6TP5+N60E0SyV4QnQBQL8c=) Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/708aafaf-00b4-485b-854c-0b32ca30f57b/12e59001-35ac-4abf-858f-37b955a24b3f.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/708aafaf-00b4-485b-854c-0b32ca30f57b/manifest.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/58raXwiB13vqSLB2ijdmtQBlrwg.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 20 Aug 2026 00:02:32 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 29:58:d1:c3:21:53:c6:bd:a7:91:0f:69:97:9a:7b:26:f7:7e:93:b6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A918806F0000, serialNumber=E7CADA5F0881D77BEA48B0768A3766B50065AF08 Validity Not Before: Aug 16 00:02:32 2026 GMT Not After : Aug 20 00:02:32 2026 GMT Subject: serialNumber=92434bfb24f64ed16a3a2d845c6c519d698aa56a468fdd82b324b736c194c524, CN=bb9a9116-f615-462e-a680-5266b327e0fa Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ce:ae:62:7e:8b:88:82:ae:ce:0b:83:a8:2b:f4: 9b:3d:44:a7:bd:94:07:f5:e5:82:91:72:dc:63:35: 7e:ac:e5:af:7f:c4:17:a9:4d:f5:6d:f0:49:3b:e4: b2:17:a9:5c:3d:c1:86:d1:62:19:f0:a3:ea:15:96: 36:0a:50:91:d4:76:91:8e:2f:f1:fa:a1:d1:4e:64: 6f:7b:4b:4d:b8:23:45:29:6a:6a:84:8e:fa:94:52: e4:93:cc:6f:49:2f:37:08:6d:ce:a1:62:39:e0:ff: 64:ec:04:ed:ed:83:7b:d5:1c:5b:d1:37:a9:39:0e: a4:bc:e7:c0:a6:5a:85:a9:b3:5b:87:9d:80:b3:37: 64:dd:4b:68:64:22:c3:25:dc:45:96:0d:84:c6:69: e4:95:24:4f:c8:d2:0b:94:56:12:4a:25:a7:11:f6: 20:a6:1f:f1:e3:37:50:b0:7b:c2:5d:74:0f:af:b6: 05:5a:31:ea:11:19:b9:1a:af:da:11:ae:4f:4e:09: 1e:58:d0:45:73:b8:d6:4f:67:35:61:fc:94:60:8c: 98:95:1b:a8:f9:99:75:28:1c:ca:79:1a:17:88:a7: 74:10:ef:40:65:ef:01:17:49:43:eb:19:76:10:8d: d6:7f:a9:e8:08:88:12:17:d8:85:f1:d9:1d:35:f0: ac:5f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 67:2E:37:90:A5:7D:58:AA:81:F8:62:3C:BF:71:95:CF:17:FE:49:B4 X509v3 Authority Key Identifier: keyid:E7:CA:DA:5F:08:81:D7:7B:EA:48:B0:76:8A:37:66:B5:00:65:AF:08 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/58raXwiB13vqSLB2ijdmtQBlrwg.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/708aafaf-00b4-485b-854c-0b32ca30f57b/manifest.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/708aafaf-00b4-485b-854c-0b32ca30f57b/12e59001-35ac-4abf-858f-37b955a24b3f.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 74:3f:b7:e2:c1:0c:6b:0a:e5:ac:56:04:5f:09:71:a6:1b:ea: b4:9b:f9:35:33:1e:33:ca:0f:6b:e9:12:55:89:72:81:1b:e5: 88:bc:2f:f7:20:f5:e3:04:c5:22:ac:aa:50:24:9a:ee:b3:8b: a4:25:3f:19:88:23:9a:5f:4f:c7:1c:ee:94:a6:98:95:50:6a: c1:e3:05:45:ec:aa:ee:c3:57:48:ab:d4:0d:6a:fa:bc:66:8d: b6:c7:3c:5c:b2:af:01:0f:3c:6c:b2:29:18:3d:32:e8:51:cf: cb:d5:9e:11:82:71:b1:c1:de:0a:e7:85:60:90:a4:24:2c:af: dd:7c:18:81:59:8f:7e:13:90:3f:34:a5:dd:22:57:c2:54:97: a5:bb:6d:fe:7a:ee:d2:04:71:88:69:d1:c7:1b:06:74:1d:77: 8b:13:b1:30:49:92:12:6b:6c:91:64:91:ef:07:ff:46:66:28: 66:02:7d:a2:4d:c6:f6:38:3f:05:9a:32:0a:65:c0:ad:97:6f: 75:10:de:a6:51:af:25:ba:98:c1:4d:b7:98:b7:bb:41:7d:5d: 09:46:bb:26:1b:a6:b1:d0:77:34:d5:38:80:b1:e5:47:cc:6a: 5f:2c:20:2b:3b:e7:3e:ad:eb:f3:1c:a0:2e:da:c4:0e:85:bc: 4f:40:d1:52 -----BEGIN CERTIFICATE----- MIIFlTCCBH2gAwIBAgIUKVjRwyFTxr2nkQ9pl5p7Jvd+k7YwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODgwNkYwMDAwMTEwLwYDVQQFEyhFN0NBREE1RjA4 ODFENzdCRUE0OEIwNzY4QTM3NjZCNTAwNjVBRjA4MB4XDTI2MDgxNjAwMDIzMloX DTI2MDgyMDAwMDIzMlowejFJMEcGA1UEBRNAOTI0MzRiZmIyNGY2NGVkMTZhM2Ey ZDg0NWM2YzUxOWQ2OThhYTU2YTQ2OGZkZDgyYjMyNGI3MzZjMTk0YzUyNDEtMCsG A1UEAxMkYmI5YTkxMTYtZjYxNS00NjJlLWE2ODAtNTI2NmIzMjdlMGZhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzq5ifouIgq7OC4OoK/SbPUSnvZQH 9eWCkXLcYzV+rOWvf8QXqU31bfBJO+SyF6lcPcGG0WIZ8KPqFZY2ClCR1HaRji/x +qHRTmRve0tNuCNFKWpqhI76lFLkk8xvSS83CG3OoWI54P9k7ATt7YN71Rxb0Tep OQ6kvOfAplqFqbNbh52Aszdk3UtoZCLDJdxFlg2ExmnklSRPyNILlFYSSiWnEfYg ph/x4zdQsHvCXXQPr7YFWjHqERm5Gq/aEa5PTgkeWNBFc7jWT2c1YfyUYIyYlRuo +Zl1KBzKeRoXiKd0EO9AZe8BF0lD6xl2EI3Wf6noCIgSF9iF8dkdNfCsXwIDAQAB o4ICQTCCAj0wHQYDVR0OBBYEFGcuN5ClfViqgfhiPL9xlc8X/km0MB8GA1UdIwQY MBaAFOfK2l8Igdd76kiwdoo3ZrUAZa8IMA4GA1UdDwEB/wQEAwIHgDB+BggrBgEF BQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVw b3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi81OHJhWHdp QjEzdnFTTEIyaWpkbXRRQmxyd2cuY2VyMH8GCCsGAQUFBwELBHMwcTBvBggrBgEF BQcwC4ZjcnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5hbWF6b25hd3MuY29t L3ZvbHVtZS83MDhhYWZhZi0wMGI0LTQ4NWItODU0Yy0wYjMyY2EzMGY1N2IvbWFu aWZlc3QubWZ0MIGVBgNVHR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnBraS1y c3luYy51cy1lYXN0LTIuYW1hem9uYXdzLmNvbS92b2x1bWUvNzA4YWFmYWYtMDBi NC00ODViLTg1NGMtMGIzMmNhMzBmNTdiLzEyZTU5MDAxLTM1YWMtNGFiZi04NThm LTM3Yjk1NWEyNGIzZi5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggr BgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYw BKACBQAwDQYJKoZIhvcNAQELBQADggEBAHQ/t+LBDGsK5axWBF8JcaYb6rSb+TUz HjPKD2vpElWJcoEb5Yi8L/cg9eMExSKsqlAkmu6zi6QlPxmII5pfT8cc7pSmmJVQ asHjBUXsqu7DV0ir1A1q+rxmjbbHPFyyrwEPPGyyKRg9MuhRz8vVnhGCcbHB3grn hWCQpCQsr918GIFZj34TkD80pd0iV8JUl6W7bf567tIEcYhp0ccbBnQdd4sTsTBJ khJrbJFkke8H/0ZmKGYCfaJNxvY4PwWaMgplwK2Xb3UQ3qZRryW6mMFNt5i3u0F9 XQlGuyYbprHQdzTVOICx5UfMal8sICs75z6t6/McoC7axA6FvE9A0VI= -----END CERTIFICATE-----Generated at Sun Aug 16 04:36:17 2026 by rpki-client