$ rpki-client -vvvf rpki-rsync.us-east-2.amazonaws.com/volume/708aafaf-00b4-485b-854c-0b32ca30f57b/manifest.mft File: manifest.mft (raw, json) Hash identifier: 3NfWcOYaJj3tExVAtbISWWh8olMUUGKWirCFLEJGHcw= Subject key identifier: 16:1F:93:06:54:8A:1D:09:58:A9:CE:7E:9B:95:F0:11:C3:4B:EC:F5 Authority key identifier: E7:CA:DA:5F:08:81:D7:7B:EA:48:B0:76:8A:37:66:B5:00:65:AF:08 Certificate issuer: /CN=A918806F0000/serialNumber=E7CADA5F0881D77BEA48B0768A3766B50065AF08 Certificate serial: 27112324362E0C5419B91F4A47A61CC06FB7F23E Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/58raXwiB13vqSLB2ijdmtQBlrwg.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/708aafaf-00b4-485b-854c-0b32ca30f57b/manifest.mft Manifest number: 0697 Signing time: Tue 22 Sep 2026 00:09:09 +0000 Manifest this update: Tue 22 Sep 2026 00:09:09 +0000 Manifest next update: Sat 26 Sep 2026 00:09:09 +0000 Files and hashes: 1: 12e59001-35ac-4abf-858f-37b955a24b3f.crl (hash: ltNT44NnESNh34XvvyUQ/3A0v0f4K6sq5hTT5ZFkTVo=) 2: 381fc6e6-5d49-41bc-b584-d9437c68e3cd.roa (hash: 8QqQOxAj3sRai6/BzOB2kV66/okkk7p8TzKsBaSwcWA=) 3: 49119734-9dbc-4bd4-98be-57e4ce078928.roa (hash: 0OedyNMwjL1I1p7rzryfdYD0nslES0i+43AbthFPFmE=) 4: 5663bf34-10ed-4309-a236-7466afd6f02f.roa (hash: aoaRIM84eruV/ISWBs3PJCPQb0sEmsLtTOcu1EdbsFA=) 5: cc2f7093-21a6-400f-9db1-93c2fe02bc1c.roa (hash: vbtxuyfgx9e6lLFR0CnUGCC1kgCTySw+Ljt4yM1fDb4=) 6: ea1d02aa-6d25-4b36-b42e-ba837d49e261.roa (hash: q5bh3h1LHQcXwRDCiiiYn6TP5+N60E0SyV4QnQBQL8c=) Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/708aafaf-00b4-485b-854c-0b32ca30f57b/12e59001-35ac-4abf-858f-37b955a24b3f.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/708aafaf-00b4-485b-854c-0b32ca30f57b/manifest.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/58raXwiB13vqSLB2ijdmtQBlrwg.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 26 Sep 2026 00:09:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 27:11:23:24:36:2e:0c:54:19:b9:1f:4a:47:a6:1c:c0:6f:b7:f2:3e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A918806F0000, serialNumber=E7CADA5F0881D77BEA48B0768A3766B50065AF08 Validity Not Before: Sep 22 00:09:09 2026 GMT Not After : Sep 26 00:09:09 2026 GMT Subject: serialNumber=b425d252a54d3b2570724e7ee2943d354a82907e164b583c9dbaedd62ab895ac, CN=bb9a9116-f615-462e-a680-5266b327e0fa Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a1:c5:c1:33:78:38:0b:57:b1:d0:a3:27:bc:76: e2:84:2e:76:8a:c4:73:f8:38:01:bb:2c:58:50:19: c3:01:f3:4a:f9:5d:78:49:88:11:67:f5:e3:1b:e3: 82:6d:20:e4:63:d5:85:6b:43:36:13:b6:0b:eb:b2: 12:ca:b9:c0:3b:46:30:ce:fc:57:b4:cc:f6:af:22: a7:c0:c4:af:af:a0:90:4e:94:c8:6e:db:8a:d7:4e: 10:be:7a:41:e4:cc:43:6d:10:27:6a:89:b0:b5:f5: 06:86:00:b4:36:d3:9c:9b:97:94:64:4d:cd:d2:61: ce:c1:78:76:f0:ae:b5:28:4f:dc:7c:68:fa:b1:ae: 43:74:30:ef:64:ee:d3:11:1c:26:51:e9:32:e7:9f: 39:55:56:25:78:ef:24:af:8a:81:b8:fe:72:d7:e2: 2c:05:ed:7a:eb:d7:0f:7b:f4:66:32:a0:60:e7:53: 9e:6b:52:60:c8:20:39:57:37:fa:22:f2:c5:d5:50: f3:b8:11:99:b4:68:07:fd:14:45:1b:f6:da:77:39: fe:fd:1d:36:02:11:94:69:89:67:26:b7:92:bb:38: 96:db:2c:0a:80:82:0d:e9:ae:38:4f:f0:da:c4:83: d1:2d:99:76:c2:0b:8c:18:90:31:f6:b9:50:bb:fb: c8:6f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 16:1F:93:06:54:8A:1D:09:58:A9:CE:7E:9B:95:F0:11:C3:4B:EC:F5 X509v3 Authority Key Identifier: keyid:E7:CA:DA:5F:08:81:D7:7B:EA:48:B0:76:8A:37:66:B5:00:65:AF:08 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/58raXwiB13vqSLB2ijdmtQBlrwg.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/708aafaf-00b4-485b-854c-0b32ca30f57b/manifest.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/708aafaf-00b4-485b-854c-0b32ca30f57b/12e59001-35ac-4abf-858f-37b955a24b3f.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 64:b0:24:7e:86:5f:9a:d0:e8:ed:a1:8f:d7:42:7f:2e:26:54: 22:07:81:57:be:2d:d6:f0:a7:c2:2b:ad:56:58:0f:c0:a4:5c: 13:f6:01:75:a6:0f:25:9d:2d:25:81:3a:38:85:aa:3b:15:9f: 5d:81:aa:a3:66:33:1c:c8:9c:80:81:ec:bc:07:e4:8e:f7:08: 95:4c:79:6a:86:d9:84:af:9c:01:da:f2:ac:a1:a4:65:26:81: 23:44:86:8c:46:7e:a4:f1:50:80:28:79:8a:d6:45:59:59:5b: d3:23:0e:9f:ed:3b:e9:be:44:1a:2c:40:95:36:00:98:b0:99: 27:1f:54:b9:2c:3f:da:1c:c6:1f:37:f9:25:1a:15:93:9b:2b: 73:b1:26:b2:80:cb:25:11:17:b4:10:ea:b4:ca:37:ee:f0:24: 67:82:f8:30:65:16:f4:6e:a3:94:bf:de:44:94:e7:bd:d3:26: 8e:fc:db:66:ed:73:73:39:7c:ec:41:03:04:08:94:b5:85:47: b5:7a:4a:e1:b2:48:03:aa:c0:b6:17:32:81:9f:6b:89:b8:66: 69:28:47:64:2c:de:53:00:a0:bf:91:b5:13:19:5f:73:95:fb: 16:41:42:90:e0:8e:30:13:42:40:f3:0b:9c:bf:09:03:69:02: 6f:32:3c:b3 -----BEGIN CERTIFICATE----- MIIFlTCCBH2gAwIBAgIUJxEjJDYuDFQZuR9KR6YcwG+38j4wDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODgwNkYwMDAwMTEwLwYDVQQFEyhFN0NBREE1RjA4 ODFENzdCRUE0OEIwNzY4QTM3NjZCNTAwNjVBRjA4MB4XDTI2MDkyMjAwMDkwOVoX DTI2MDkyNjAwMDkwOVowejFJMEcGA1UEBRNAYjQyNWQyNTJhNTRkM2IyNTcwNzI0 ZTdlZTI5NDNkMzU0YTgyOTA3ZTE2NGI1ODNjOWRiYWVkZDYyYWI4OTVhYzEtMCsG A1UEAxMkYmI5YTkxMTYtZjYxNS00NjJlLWE2ODAtNTI2NmIzMjdlMGZhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAocXBM3g4C1ex0KMnvHbihC52isRz +DgBuyxYUBnDAfNK+V14SYgRZ/XjG+OCbSDkY9WFa0M2E7YL67ISyrnAO0YwzvxX tMz2ryKnwMSvr6CQTpTIbtuK104QvnpB5MxDbRAnaomwtfUGhgC0NtOcm5eUZE3N 0mHOwXh28K61KE/cfGj6sa5DdDDvZO7TERwmUeky5585VVYleO8kr4qBuP5y1+Is Be1669cPe/RmMqBg51Oea1JgyCA5Vzf6IvLF1VDzuBGZtGgH/RRFG/badzn+/R02 AhGUaYlnJreSuziW2ywKgIIN6a44T/DaxIPRLZl2wguMGJAx9rlQu/vIbwIDAQAB o4ICQTCCAj0wHQYDVR0OBBYEFBYfkwZUih0JWKnOfpuV8BHDS+z1MB8GA1UdIwQY MBaAFOfK2l8Igdd76kiwdoo3ZrUAZa8IMA4GA1UdDwEB/wQEAwIHgDB+BggrBgEF BQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVw b3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi81OHJhWHdp QjEzdnFTTEIyaWpkbXRRQmxyd2cuY2VyMH8GCCsGAQUFBwELBHMwcTBvBggrBgEF BQcwC4ZjcnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5hbWF6b25hd3MuY29t L3ZvbHVtZS83MDhhYWZhZi0wMGI0LTQ4NWItODU0Yy0wYjMyY2EzMGY1N2IvbWFu aWZlc3QubWZ0MIGVBgNVHR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnBraS1y c3luYy51cy1lYXN0LTIuYW1hem9uYXdzLmNvbS92b2x1bWUvNzA4YWFmYWYtMDBi NC00ODViLTg1NGMtMGIzMmNhMzBmNTdiLzEyZTU5MDAxLTM1YWMtNGFiZi04NThm LTM3Yjk1NWEyNGIzZi5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggr BgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYw BKACBQAwDQYJKoZIhvcNAQELBQADggEBAGSwJH6GX5rQ6O2hj9dCfy4mVCIHgVe+ Ldbwp8IrrVZYD8CkXBP2AXWmDyWdLSWBOjiFqjsVn12BqqNmMxzInICB7LwH5I73 CJVMeWqG2YSvnAHa8qyhpGUmgSNEhoxGfqTxUIAoeYrWRVlZW9MjDp/tO+m+RBos QJU2AJiwmScfVLksP9ocxh83+SUaFZObK3OxJrKAyyURF7QQ6rTKN+7wJGeC+DBl FvRuo5S/3kSU573TJo7822btc3M5fOxBAwQIlLWFR7V6SuGySAOqwLYXMoGfa4m4 ZmkoR2Qs3lMAoL+RtRMZX3OV+xZBQpDgjjATQkDzC5y/CQNpAm8yPLM= -----END CERTIFICATE-----Generated at Tue Sep 22 11:59:47 2026 by rpki-client