$ rpki-client -vvvf rpki-rsync.us-east-2.amazonaws.com/volume/708aafaf-00b4-485b-854c-0b32ca30f57b/manifest.mft File: manifest.mft (raw, json) Hash identifier: ym5bJCccj32qmdvqp/JN8muDGZa0523+ej1gDTSw+s4= Subject key identifier: 28:97:8A:6A:03:FA:7B:25:76:3E:B4:1A:52:53:85:7C:83:F0:5D:C8 Authority key identifier: E7:CA:DA:5F:08:81:D7:7B:EA:48:B0:76:8A:37:66:B5:00:65:AF:08 Certificate issuer: /CN=A918806F0000/serialNumber=E7CADA5F0881D77BEA48B0768A3766B50065AF08 Certificate serial: 2A63196CE59D23C39B7CF0716D49870C6EFB526E Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/58raXwiB13vqSLB2ijdmtQBlrwg.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/708aafaf-00b4-485b-854c-0b32ca30f57b/manifest.mft Manifest number: 0685 Signing time: Fri 04 Sep 2026 00:06:16 +0000 Manifest this update: Fri 04 Sep 2026 00:06:16 +0000 Manifest next update: Tue 08 Sep 2026 00:06:16 +0000 Files and hashes: 1: 12e59001-35ac-4abf-858f-37b955a24b3f.crl (hash: 2wS64PvCXri/YPEZ1qBxxbLJtGTY9Q/s5G5xRYHb0n4=) 2: 381fc6e6-5d49-41bc-b584-d9437c68e3cd.roa (hash: 8QqQOxAj3sRai6/BzOB2kV66/okkk7p8TzKsBaSwcWA=) 3: 49119734-9dbc-4bd4-98be-57e4ce078928.roa (hash: 0OedyNMwjL1I1p7rzryfdYD0nslES0i+43AbthFPFmE=) 4: 5663bf34-10ed-4309-a236-7466afd6f02f.roa (hash: aoaRIM84eruV/ISWBs3PJCPQb0sEmsLtTOcu1EdbsFA=) 5: cc2f7093-21a6-400f-9db1-93c2fe02bc1c.roa (hash: vbtxuyfgx9e6lLFR0CnUGCC1kgCTySw+Ljt4yM1fDb4=) 6: ea1d02aa-6d25-4b36-b42e-ba837d49e261.roa (hash: q5bh3h1LHQcXwRDCiiiYn6TP5+N60E0SyV4QnQBQL8c=) Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/708aafaf-00b4-485b-854c-0b32ca30f57b/12e59001-35ac-4abf-858f-37b955a24b3f.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/708aafaf-00b4-485b-854c-0b32ca30f57b/manifest.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/58raXwiB13vqSLB2ijdmtQBlrwg.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 08 Sep 2026 00:06:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2a:63:19:6c:e5:9d:23:c3:9b:7c:f0:71:6d:49:87:0c:6e:fb:52:6e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A918806F0000, serialNumber=E7CADA5F0881D77BEA48B0768A3766B50065AF08 Validity Not Before: Sep 4 00:06:16 2026 GMT Not After : Sep 8 00:06:16 2026 GMT Subject: serialNumber=f3e99d87316c750b401ed608247d3b5aad1893a82513a790c7a2a374212032ea, CN=bb9a9116-f615-462e-a680-5266b327e0fa Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a6:24:94:70:49:00:ea:e5:df:09:79:dd:17:bc: 24:b0:50:ae:f2:2a:01:26:1a:ae:b1:01:53:ed:5c: 1f:ff:b0:e1:24:cf:62:2f:b7:c2:1c:16:2f:68:51: 79:23:a9:19:69:d9:43:e6:6a:69:1e:5b:b7:45:88: 45:ef:72:d6:a0:ff:8d:0d:a3:99:44:64:1e:ae:6f: 46:e5:7f:07:46:50:a4:7d:d9:c5:95:e4:c1:21:a9: ef:ec:bb:72:de:68:cf:bd:99:94:82:b5:29:e9:19: 5e:7f:bb:07:2a:9b:3d:20:30:50:05:b8:83:90:39: 8d:7d:e8:df:9c:67:20:de:ba:45:30:44:cb:f0:65: dc:c4:50:ba:12:3a:93:c8:07:8c:71:be:7b:83:19: dc:7a:62:2c:20:cc:64:ba:46:b1:85:a6:64:42:53: c8:d9:cb:b9:86:09:a8:cb:92:08:e3:6e:b4:ab:40: b5:b9:d5:b7:84:36:3c:64:9f:97:a0:61:35:3f:64: fd:f3:85:98:47:56:9b:8a:d9:eb:0e:9a:c8:5e:a9: 32:3a:f5:e0:f6:7e:21:22:c2:f8:de:d7:90:11:d3: 58:d5:60:85:81:0e:48:3e:4e:58:c2:1b:fe:aa:dc: 7d:ad:72:b8:b2:74:b4:1c:ec:00:a3:60:70:cf:b9: d6:35 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 28:97:8A:6A:03:FA:7B:25:76:3E:B4:1A:52:53:85:7C:83:F0:5D:C8 X509v3 Authority Key Identifier: keyid:E7:CA:DA:5F:08:81:D7:7B:EA:48:B0:76:8A:37:66:B5:00:65:AF:08 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/58raXwiB13vqSLB2ijdmtQBlrwg.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/708aafaf-00b4-485b-854c-0b32ca30f57b/manifest.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/708aafaf-00b4-485b-854c-0b32ca30f57b/12e59001-35ac-4abf-858f-37b955a24b3f.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 5a:ea:21:49:5a:0e:c8:c2:14:f8:f0:f5:c6:d8:47:e8:fc:ac: f9:e4:c4:83:13:13:2c:ee:63:c8:0e:ba:00:31:09:07:1e:22: c6:8c:c8:bc:82:b7:d4:2e:d0:b7:c3:78:c7:11:e1:cb:38:bb: de:23:d4:0e:d3:b7:38:b0:b3:08:d3:75:6e:a4:a5:25:b6:08: 6d:4e:a7:18:c6:0c:1c:29:79:29:ec:9e:4d:54:ce:3b:5f:d4: 1d:6c:e5:19:7a:ec:f2:ed:67:a3:2c:cf:fc:c0:1f:01:35:61: 54:f0:a7:23:3b:2f:2a:5d:af:3f:bf:79:b6:6b:69:7e:16:ae: 5c:00:47:c8:2d:5c:21:8d:3c:f7:50:bf:8e:da:43:60:89:3c: e6:6b:b2:34:1b:48:90:d3:86:b5:fd:8c:69:26:d8:0e:ad:99: 35:db:85:32:48:fd:3f:49:fd:11:f2:ef:2b:ff:fa:3f:b7:1d: 20:bd:58:41:d7:55:94:ad:47:c8:81:83:84:14:de:10:5d:d3: a9:24:ff:be:2a:54:9e:c6:d7:d7:61:9a:f9:1c:67:66:45:a2: 2c:78:e2:7a:23:b7:10:ec:9e:78:9c:23:25:d8:48:ba:f1:8e: 27:21:73:64:e7:9f:4a:78:58:3d:e6:1c:a2:09:7c:88:f2:20: 5d:40:17:09 -----BEGIN CERTIFICATE----- MIIFlTCCBH2gAwIBAgIUKmMZbOWdI8ObfPBxbUmHDG77Um4wDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODgwNkYwMDAwMTEwLwYDVQQFEyhFN0NBREE1RjA4 ODFENzdCRUE0OEIwNzY4QTM3NjZCNTAwNjVBRjA4MB4XDTI2MDkwNDAwMDYxNloX DTI2MDkwODAwMDYxNlowejFJMEcGA1UEBRNAZjNlOTlkODczMTZjNzUwYjQwMWVk NjA4MjQ3ZDNiNWFhZDE4OTNhODI1MTNhNzkwYzdhMmEzNzQyMTIwMzJlYTEtMCsG A1UEAxMkYmI5YTkxMTYtZjYxNS00NjJlLWE2ODAtNTI2NmIzMjdlMGZhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApiSUcEkA6uXfCXndF7wksFCu8ioB JhqusQFT7Vwf/7DhJM9iL7fCHBYvaFF5I6kZadlD5mppHlu3RYhF73LWoP+NDaOZ RGQerm9G5X8HRlCkfdnFleTBIanv7Lty3mjPvZmUgrUp6Rlef7sHKps9IDBQBbiD kDmNfejfnGcg3rpFMETL8GXcxFC6EjqTyAeMcb57gxncemIsIMxkukaxhaZkQlPI 2cu5hgmoy5II4260q0C1udW3hDY8ZJ+XoGE1P2T984WYR1abitnrDprIXqkyOvXg 9n4hIsL43teQEdNY1WCFgQ5IPk5Ywhv+qtx9rXK4snS0HOwAo2Bwz7nWNQIDAQAB o4ICQTCCAj0wHQYDVR0OBBYEFCiXimoD+nsldj60GlJThXyD8F3IMB8GA1UdIwQY MBaAFOfK2l8Igdd76kiwdoo3ZrUAZa8IMA4GA1UdDwEB/wQEAwIHgDB+BggrBgEF BQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVw b3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi81OHJhWHdp QjEzdnFTTEIyaWpkbXRRQmxyd2cuY2VyMH8GCCsGAQUFBwELBHMwcTBvBggrBgEF BQcwC4ZjcnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5hbWF6b25hd3MuY29t L3ZvbHVtZS83MDhhYWZhZi0wMGI0LTQ4NWItODU0Yy0wYjMyY2EzMGY1N2IvbWFu aWZlc3QubWZ0MIGVBgNVHR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnBraS1y c3luYy51cy1lYXN0LTIuYW1hem9uYXdzLmNvbS92b2x1bWUvNzA4YWFmYWYtMDBi NC00ODViLTg1NGMtMGIzMmNhMzBmNTdiLzEyZTU5MDAxLTM1YWMtNGFiZi04NThm LTM3Yjk1NWEyNGIzZi5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggr BgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYw BKACBQAwDQYJKoZIhvcNAQELBQADggEBAFrqIUlaDsjCFPjw9cbYR+j8rPnkxIMT EyzuY8gOugAxCQceIsaMyLyCt9Qu0LfDeMcR4cs4u94j1A7TtziwswjTdW6kpSW2 CG1OpxjGDBwpeSnsnk1Uzjtf1B1s5Rl67PLtZ6Msz/zAHwE1YVTwpyM7Lypdrz+/ ebZraX4WrlwAR8gtXCGNPPdQv47aQ2CJPOZrsjQbSJDThrX9jGkm2A6tmTXbhTJI /T9J/RHy7yv/+j+3HSC9WEHXVZStR8iBg4QU3hBd06kk/74qVJ7G19dhmvkcZ2ZF oix44nojtxDsnnicIyXYSLrxjichc2Tnn0p4WD3mHKIJfIjyIF1AFwk= -----END CERTIFICATE-----Generated at Fri Sep 4 12:12:04 2026 by rpki-client