$ rpki-client -vvvf rpki-rsync.us-east-2.amazonaws.com/volume/708aafaf-00b4-485b-854c-0b32ca30f57b/manifest.mft File: manifest.mft (raw, json) Hash identifier: x7+xHzpoDTgWnxp5uPEyga1fC/l9LCSmjNtkW3BpT+s= Subject key identifier: 9A:58:78:62:D3:A1:85:7A:C9:50:77:12:77:B6:2B:B2:08:77:04:97 Authority key identifier: E7:CA:DA:5F:08:81:D7:7B:EA:48:B0:76:8A:37:66:B5:00:65:AF:08 Certificate issuer: /CN=A918806F0000/serialNumber=E7CADA5F0881D77BEA48B0768A3766B50065AF08 Certificate serial: 50CF94A3300CF3D76060AD74B1315970D0F87C30 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/58raXwiB13vqSLB2ijdmtQBlrwg.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/708aafaf-00b4-485b-854c-0b32ca30f57b/manifest.mft Manifest number: 0686 Signing time: Sat 05 Sep 2026 00:06:27 +0000 Manifest this update: Sat 05 Sep 2026 00:06:27 +0000 Manifest next update: Wed 09 Sep 2026 00:06:27 +0000 Files and hashes: 1: 12e59001-35ac-4abf-858f-37b955a24b3f.crl (hash: Bu4g5wcdTdLu6nPh+mVXQumsuKbOs/iVVCOukVv7PT8=) 2: 381fc6e6-5d49-41bc-b584-d9437c68e3cd.roa (hash: 8QqQOxAj3sRai6/BzOB2kV66/okkk7p8TzKsBaSwcWA=) 3: 49119734-9dbc-4bd4-98be-57e4ce078928.roa (hash: 0OedyNMwjL1I1p7rzryfdYD0nslES0i+43AbthFPFmE=) 4: 5663bf34-10ed-4309-a236-7466afd6f02f.roa (hash: aoaRIM84eruV/ISWBs3PJCPQb0sEmsLtTOcu1EdbsFA=) 5: cc2f7093-21a6-400f-9db1-93c2fe02bc1c.roa (hash: vbtxuyfgx9e6lLFR0CnUGCC1kgCTySw+Ljt4yM1fDb4=) 6: ea1d02aa-6d25-4b36-b42e-ba837d49e261.roa (hash: q5bh3h1LHQcXwRDCiiiYn6TP5+N60E0SyV4QnQBQL8c=) Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/708aafaf-00b4-485b-854c-0b32ca30f57b/12e59001-35ac-4abf-858f-37b955a24b3f.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/708aafaf-00b4-485b-854c-0b32ca30f57b/manifest.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/58raXwiB13vqSLB2ijdmtQBlrwg.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 09 Sep 2026 00:06:27 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 50:cf:94:a3:30:0c:f3:d7:60:60:ad:74:b1:31:59:70:d0:f8:7c:30 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A918806F0000, serialNumber=E7CADA5F0881D77BEA48B0768A3766B50065AF08 Validity Not Before: Sep 5 00:06:27 2026 GMT Not After : Sep 9 00:06:27 2026 GMT Subject: serialNumber=e0c235c5f1df71726306fcdd705f6aec863313a27e8aead65256e5fdac9ffddc, CN=bb9a9116-f615-462e-a680-5266b327e0fa Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:db:4c:83:95:9b:f4:1d:b0:dc:c1:a7:04:f3:60: ad:00:d8:70:48:c6:78:c0:52:fe:8f:ba:ec:ce:1d: e1:5d:1c:7b:2b:c9:60:4d:91:fd:0f:88:e3:43:ff: fc:8d:5b:7e:98:46:0a:bd:da:01:85:1d:83:db:c2: 10:fa:c8:fb:55:db:4a:43:79:e7:6b:b8:c5:dc:df: 4b:fc:e5:0d:91:bd:1e:8d:00:41:c3:c3:57:fd:ba: be:fe:79:f0:24:c0:58:fe:37:9e:22:8c:bf:55:0e: f6:57:51:45:cb:91:07:a8:1a:33:41:6a:88:3b:9b: ac:bd:34:97:9d:21:0b:ca:d4:3c:b1:2e:7f:98:f6: 95:ae:d8:00:f1:e6:8a:98:cf:6c:c4:c2:5c:f8:d5: d8:32:57:f4:09:9d:e7:b3:ad:76:25:f2:97:a7:62: bf:5d:4f:a5:36:62:f3:c6:73:00:d4:b3:e0:f3:88: c5:eb:3e:51:7c:c4:dc:01:ed:aa:11:72:99:93:8b: 91:48:29:e9:d6:67:63:3b:60:59:b2:81:e4:6e:4a: ef:9e:60:8d:94:70:53:9b:90:62:6a:ba:8e:f6:2d: 55:c0:9e:6d:8b:67:d1:47:37:59:fd:a4:f1:89:1c: 7a:39:75:c5:7b:ee:96:3d:27:d0:d7:fb:02:dd:40: b9:35 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9A:58:78:62:D3:A1:85:7A:C9:50:77:12:77:B6:2B:B2:08:77:04:97 X509v3 Authority Key Identifier: keyid:E7:CA:DA:5F:08:81:D7:7B:EA:48:B0:76:8A:37:66:B5:00:65:AF:08 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/58raXwiB13vqSLB2ijdmtQBlrwg.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/708aafaf-00b4-485b-854c-0b32ca30f57b/manifest.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/708aafaf-00b4-485b-854c-0b32ca30f57b/12e59001-35ac-4abf-858f-37b955a24b3f.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 5a:d7:f1:02:3e:73:b1:98:7b:5e:8a:6f:40:4b:f0:66:d9:a4: f2:67:b8:8e:9f:84:f1:bb:07:91:9e:e0:ef:a2:9f:5d:1b:60: a9:7a:28:61:67:50:2b:9f:65:16:9d:25:0a:72:fc:16:84:3f: 7b:97:45:b3:5d:84:6d:70:e1:6c:39:e8:b6:b9:6a:2b:4e:e8: ef:35:82:c1:a1:4a:28:2c:fa:f2:cb:31:ae:5e:80:6c:39:45: 51:d1:4b:a7:b2:f0:cb:b4:f3:a4:65:92:86:3c:b9:a9:5a:e0: bb:84:a9:14:2e:33:36:38:94:75:ee:5c:5d:30:78:a1:87:4f: ac:84:08:44:9e:d0:db:6d:4b:11:78:bf:47:5c:11:e5:ba:4e: 8f:1a:60:30:ba:27:f7:31:14:20:a5:18:e8:32:36:49:8e:40: 58:a7:9d:4e:fb:25:e6:4c:3c:5d:24:51:e9:45:7f:b7:ea:e3: 81:d5:c7:c2:bf:05:63:ee:ff:d7:f0:b7:ee:b2:84:b2:a9:c2: cd:8c:a5:51:10:45:38:3a:3d:74:29:09:3c:ee:52:97:98:6d: 10:76:ff:ef:45:5e:cd:28:0d:85:a7:11:ae:78:1a:04:0f:4d: 1a:f7:1d:11:1c:80:c0:a1:7b:0d:5b:24:e0:89:83:df:5c:85: fe:65:65:d5 -----BEGIN CERTIFICATE----- MIIFlTCCBH2gAwIBAgIUUM+UozAM89dgYK10sTFZcND4fDAwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODgwNkYwMDAwMTEwLwYDVQQFEyhFN0NBREE1RjA4 ODFENzdCRUE0OEIwNzY4QTM3NjZCNTAwNjVBRjA4MB4XDTI2MDkwNTAwMDYyN1oX DTI2MDkwOTAwMDYyN1owejFJMEcGA1UEBRNAZTBjMjM1YzVmMWRmNzE3MjYzMDZm Y2RkNzA1ZjZhZWM4NjMzMTNhMjdlOGFlYWQ2NTI1NmU1ZmRhYzlmZmRkYzEtMCsG A1UEAxMkYmI5YTkxMTYtZjYxNS00NjJlLWE2ODAtNTI2NmIzMjdlMGZhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA20yDlZv0HbDcwacE82CtANhwSMZ4 wFL+j7rszh3hXRx7K8lgTZH9D4jjQ//8jVt+mEYKvdoBhR2D28IQ+sj7VdtKQ3nn a7jF3N9L/OUNkb0ejQBBw8NX/bq+/nnwJMBY/jeeIoy/VQ72V1FFy5EHqBozQWqI O5usvTSXnSELytQ8sS5/mPaVrtgA8eaKmM9sxMJc+NXYMlf0CZ3ns612JfKXp2K/ XU+lNmLzxnMA1LPg84jF6z5RfMTcAe2qEXKZk4uRSCnp1mdjO2BZsoHkbkrvnmCN lHBTm5BiarqO9i1VwJ5ti2fRRzdZ/aTxiRx6OXXFe+6WPSfQ1/sC3UC5NQIDAQAB o4ICQTCCAj0wHQYDVR0OBBYEFJpYeGLToYV6yVB3Ene2K7IIdwSXMB8GA1UdIwQY MBaAFOfK2l8Igdd76kiwdoo3ZrUAZa8IMA4GA1UdDwEB/wQEAwIHgDB+BggrBgEF BQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVw b3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi81OHJhWHdp QjEzdnFTTEIyaWpkbXRRQmxyd2cuY2VyMH8GCCsGAQUFBwELBHMwcTBvBggrBgEF BQcwC4ZjcnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5hbWF6b25hd3MuY29t L3ZvbHVtZS83MDhhYWZhZi0wMGI0LTQ4NWItODU0Yy0wYjMyY2EzMGY1N2IvbWFu aWZlc3QubWZ0MIGVBgNVHR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnBraS1y c3luYy51cy1lYXN0LTIuYW1hem9uYXdzLmNvbS92b2x1bWUvNzA4YWFmYWYtMDBi NC00ODViLTg1NGMtMGIzMmNhMzBmNTdiLzEyZTU5MDAxLTM1YWMtNGFiZi04NThm LTM3Yjk1NWEyNGIzZi5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggr BgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYw BKACBQAwDQYJKoZIhvcNAQELBQADggEBAFrX8QI+c7GYe16Kb0BL8GbZpPJnuI6f hPG7B5Ge4O+in10bYKl6KGFnUCufZRadJQpy/BaEP3uXRbNdhG1w4Ww56La5aitO 6O81gsGhSigs+vLLMa5egGw5RVHRS6ey8Mu086RlkoY8uala4LuEqRQuMzY4lHXu XF0weKGHT6yECESe0NttSxF4v0dcEeW6To8aYDC6J/cxFCClGOgyNkmOQFinnU77 JeZMPF0kUelFf7fq44HVx8K/BWPu/9fwt+6yhLKpws2MpVEQRTg6PXQpCTzuUpeY bRB2/+9FXs0oDYWnEa54GgQPTRr3HREcgMChew1bJOCJg99chf5lZdU= -----END CERTIFICATE-----Generated at Sat Sep 5 17:39:16 2026 by rpki-client