$ rpki-client -vvvf rpki-rsync.us-east-2.amazonaws.com/volume/708aafaf-00b4-485b-854c-0b32ca30f57b/manifest.mft File: manifest.mft (raw, json) Hash identifier: 4nb9k4otOPHbjTAwuEq8Bv5aqVC4mgzEwVK7buFJuDc= Subject key identifier: 33:B2:9D:B1:49:A4:4F:3C:13:26:62:78:A0:DA:FE:B2:CE:1E:F2:B6 Authority key identifier: E7:CA:DA:5F:08:81:D7:7B:EA:48:B0:76:8A:37:66:B5:00:65:AF:08 Certificate issuer: /CN=A918806F0000/serialNumber=E7CADA5F0881D77BEA48B0768A3766B50065AF08 Certificate serial: 5D3D6E680AD1A930AB9DFAF0A38CCDF61F71231B Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/58raXwiB13vqSLB2ijdmtQBlrwg.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/708aafaf-00b4-485b-854c-0b32ca30f57b/manifest.mft Manifest number: 068B Signing time: Thu 10 Sep 2026 00:07:08 +0000 Manifest this update: Thu 10 Sep 2026 00:07:08 +0000 Manifest next update: Mon 14 Sep 2026 00:07:08 +0000 Files and hashes: 1: 12e59001-35ac-4abf-858f-37b955a24b3f.crl (hash: rdn0QFIdLBtHggf+adTgDXqGhmyhn4cZvy5oibqwffg=) 2: 381fc6e6-5d49-41bc-b584-d9437c68e3cd.roa (hash: 8QqQOxAj3sRai6/BzOB2kV66/okkk7p8TzKsBaSwcWA=) 3: 49119734-9dbc-4bd4-98be-57e4ce078928.roa (hash: 0OedyNMwjL1I1p7rzryfdYD0nslES0i+43AbthFPFmE=) 4: 5663bf34-10ed-4309-a236-7466afd6f02f.roa (hash: aoaRIM84eruV/ISWBs3PJCPQb0sEmsLtTOcu1EdbsFA=) 5: cc2f7093-21a6-400f-9db1-93c2fe02bc1c.roa (hash: vbtxuyfgx9e6lLFR0CnUGCC1kgCTySw+Ljt4yM1fDb4=) 6: ea1d02aa-6d25-4b36-b42e-ba837d49e261.roa (hash: q5bh3h1LHQcXwRDCiiiYn6TP5+N60E0SyV4QnQBQL8c=) Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/708aafaf-00b4-485b-854c-0b32ca30f57b/12e59001-35ac-4abf-858f-37b955a24b3f.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/708aafaf-00b4-485b-854c-0b32ca30f57b/manifest.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/58raXwiB13vqSLB2ijdmtQBlrwg.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 14 Sep 2026 00:07:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5d:3d:6e:68:0a:d1:a9:30:ab:9d:fa:f0:a3:8c:cd:f6:1f:71:23:1b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A918806F0000, serialNumber=E7CADA5F0881D77BEA48B0768A3766B50065AF08 Validity Not Before: Sep 10 00:07:08 2026 GMT Not After : Sep 14 00:07:08 2026 GMT Subject: serialNumber=2cd2b71ea11aa63701093edc346cb1da7bcd245d3f1be37e7dc44d347c3b3ea5, CN=bb9a9116-f615-462e-a680-5266b327e0fa Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a6:95:1d:17:f1:c5:0f:7b:e7:bd:36:21:fa:d8: fe:31:6f:a9:92:31:c1:97:04:4d:92:a4:3a:b5:a6: c0:1c:65:82:48:7a:bb:ab:df:b0:b5:4b:b0:59:34: dc:c4:ca:3e:28:29:7d:28:52:31:7f:2d:22:92:9c: 42:8d:02:ae:58:da:b1:86:23:c5:e4:e3:9a:ae:79: d1:a3:74:4f:ab:04:1e:a2:9b:04:d2:08:d1:8a:4b: 0f:15:79:e4:df:ff:04:e2:87:40:5c:34:e2:4b:31: 12:91:27:99:86:23:83:ce:78:1a:a7:c0:17:23:e9: f6:0f:e0:0a:b1:21:07:3f:df:52:00:46:c5:7b:f8: 0f:14:57:67:eb:70:8b:2f:1a:b8:64:ea:14:34:ea: df:9a:c2:df:1e:08:c5:7b:e6:97:36:47:94:11:d2: 2c:e3:44:ec:85:37:35:8a:9b:31:c0:16:c5:98:e4: 96:85:7c:4e:de:69:bc:ee:39:f2:92:a1:c7:c1:eb: 01:f8:2c:a3:fe:1c:a0:bc:a9:f0:2e:5a:7f:1d:e4: 46:36:14:f5:05:78:dc:f1:9d:dc:72:c3:61:dc:c3: 60:1b:69:9a:e9:f6:c8:18:fb:0b:04:d7:6a:27:8c: 93:e0:ed:15:48:8b:57:2e:1e:d8:54:01:63:db:ed: f7:bb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 33:B2:9D:B1:49:A4:4F:3C:13:26:62:78:A0:DA:FE:B2:CE:1E:F2:B6 X509v3 Authority Key Identifier: keyid:E7:CA:DA:5F:08:81:D7:7B:EA:48:B0:76:8A:37:66:B5:00:65:AF:08 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/58raXwiB13vqSLB2ijdmtQBlrwg.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/708aafaf-00b4-485b-854c-0b32ca30f57b/manifest.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/708aafaf-00b4-485b-854c-0b32ca30f57b/12e59001-35ac-4abf-858f-37b955a24b3f.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 68:69:dc:8a:72:97:ee:f1:6e:89:b3:d1:ad:01:01:c5:af:4e: b8:43:0b:2c:83:ee:e4:74:1e:ac:94:c0:f4:7b:ef:4b:b4:a9: 1e:df:54:f1:28:4b:8f:e2:a0:4d:09:ce:32:8b:61:49:26:c4: d1:42:77:e5:ce:31:77:93:5f:9c:42:44:06:f7:be:03:4f:3d: 3f:3a:ee:74:aa:69:2b:ba:44:79:da:11:a4:89:f9:a9:39:20: 79:af:19:5b:f4:e2:c9:81:0a:ce:34:22:c1:61:b4:0e:de:19: ca:20:90:ad:7f:f4:75:09:79:6f:17:93:d3:36:8e:db:ec:75: 2a:26:07:fd:51:da:fe:98:74:1b:c1:b1:82:bf:ca:b0:48:84: dd:95:38:4c:5e:9b:43:1b:52:c6:fd:17:f2:ca:7f:f1:50:6a: 7f:8a:2d:01:91:36:57:37:44:6a:87:a1:78:1e:6b:b5:bb:b6: 41:44:37:ab:cb:a9:3d:75:98:a8:a0:d4:f0:0d:94:bb:d7:33: 7a:16:a1:15:44:88:fa:74:b3:00:27:99:76:b6:e9:f0:69:cc: a1:2a:5c:42:29:0c:1d:1d:d0:50:6b:2c:7f:c7:1b:86:da:7a: 96:81:33:47:75:52:20:f7:e5:5d:e2:1c:69:d4:56:53:a1:d4: 33:46:ca:4b -----BEGIN CERTIFICATE----- MIIFlTCCBH2gAwIBAgIUXT1uaArRqTCrnfrwo4zN9h9xIxswDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODgwNkYwMDAwMTEwLwYDVQQFEyhFN0NBREE1RjA4 ODFENzdCRUE0OEIwNzY4QTM3NjZCNTAwNjVBRjA4MB4XDTI2MDkxMDAwMDcwOFoX DTI2MDkxNDAwMDcwOFowejFJMEcGA1UEBRNAMmNkMmI3MWVhMTFhYTYzNzAxMDkz ZWRjMzQ2Y2IxZGE3YmNkMjQ1ZDNmMWJlMzdlN2RjNDRkMzQ3YzNiM2VhNTEtMCsG A1UEAxMkYmI5YTkxMTYtZjYxNS00NjJlLWE2ODAtNTI2NmIzMjdlMGZhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAppUdF/HFD3vnvTYh+tj+MW+pkjHB lwRNkqQ6tabAHGWCSHq7q9+wtUuwWTTcxMo+KCl9KFIxfy0ikpxCjQKuWNqxhiPF 5OOarnnRo3RPqwQeopsE0gjRiksPFXnk3/8E4odAXDTiSzESkSeZhiODzngap8AX I+n2D+AKsSEHP99SAEbFe/gPFFdn63CLLxq4ZOoUNOrfmsLfHgjFe+aXNkeUEdIs 40TshTc1ipsxwBbFmOSWhXxO3mm87jnykqHHwesB+Cyj/hygvKnwLlp/HeRGNhT1 BXjc8Z3ccsNh3MNgG2ma6fbIGPsLBNdqJ4yT4O0VSItXLh7YVAFj2+33uwIDAQAB o4ICQTCCAj0wHQYDVR0OBBYEFDOynbFJpE88EyZieKDa/rLOHvK2MB8GA1UdIwQY MBaAFOfK2l8Igdd76kiwdoo3ZrUAZa8IMA4GA1UdDwEB/wQEAwIHgDB+BggrBgEF BQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVw b3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi81OHJhWHdp QjEzdnFTTEIyaWpkbXRRQmxyd2cuY2VyMH8GCCsGAQUFBwELBHMwcTBvBggrBgEF BQcwC4ZjcnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5hbWF6b25hd3MuY29t L3ZvbHVtZS83MDhhYWZhZi0wMGI0LTQ4NWItODU0Yy0wYjMyY2EzMGY1N2IvbWFu aWZlc3QubWZ0MIGVBgNVHR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnBraS1y c3luYy51cy1lYXN0LTIuYW1hem9uYXdzLmNvbS92b2x1bWUvNzA4YWFmYWYtMDBi NC00ODViLTg1NGMtMGIzMmNhMzBmNTdiLzEyZTU5MDAxLTM1YWMtNGFiZi04NThm LTM3Yjk1NWEyNGIzZi5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggr BgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYw BKACBQAwDQYJKoZIhvcNAQELBQADggEBAGhp3Ipyl+7xbomz0a0BAcWvTrhDCyyD 7uR0HqyUwPR770u0qR7fVPEoS4/ioE0JzjKLYUkmxNFCd+XOMXeTX5xCRAb3vgNP PT867nSqaSu6RHnaEaSJ+ak5IHmvGVv04smBCs40IsFhtA7eGcogkK1/9HUJeW8X k9M2jtvsdSomB/1R2v6YdBvBsYK/yrBIhN2VOExem0MbUsb9F/LKf/FQan+KLQGR Nlc3RGqHoXgea7W7tkFEN6vLqT11mKig1PANlLvXM3oWoRVEiPp0swAnmXa26fBp zKEqXEIpDB0d0FBrLH/HG4baepaBM0d1UiD35V3iHGnUVlOh1DNGyks= -----END CERTIFICATE-----Generated at Thu Sep 10 10:11:47 2026 by rpki-client