$ rpki-client -vvvf rpki-rsync.us-east-2.amazonaws.com/volume/708aafaf-00b4-485b-854c-0b32ca30f57b/manifest.mft File: manifest.mft (raw, json) Hash identifier: RaL/d/g5EOTTPmd3BojGQZ0Hrh8UuD8ye6dCWaldnNA= Subject key identifier: 64:E3:72:AA:D0:D3:1C:20:59:09:08:07:59:4F:FD:E3:CD:EA:96:D8 Authority key identifier: E7:CA:DA:5F:08:81:D7:7B:EA:48:B0:76:8A:37:66:B5:00:65:AF:08 Certificate issuer: /CN=A918806F0000/serialNumber=E7CADA5F0881D77BEA48B0768A3766B50065AF08 Certificate serial: 7F87B72639D53B696DFB890AFC994BCCA4D3F067 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/58raXwiB13vqSLB2ijdmtQBlrwg.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/708aafaf-00b4-485b-854c-0b32ca30f57b/manifest.mft Manifest number: 0681 Signing time: Mon 31 Aug 2026 00:05:44 +0000 Manifest this update: Mon 31 Aug 2026 00:05:44 +0000 Manifest next update: Fri 04 Sep 2026 00:05:44 +0000 Files and hashes: 1: 12e59001-35ac-4abf-858f-37b955a24b3f.crl (hash: yFNY5EvVaD8LG92z+hgAfJxH2xrvC4vHzLjYImEkFb0=) 2: 381fc6e6-5d49-41bc-b584-d9437c68e3cd.roa (hash: 8QqQOxAj3sRai6/BzOB2kV66/okkk7p8TzKsBaSwcWA=) 3: 49119734-9dbc-4bd4-98be-57e4ce078928.roa (hash: 0OedyNMwjL1I1p7rzryfdYD0nslES0i+43AbthFPFmE=) 4: 5663bf34-10ed-4309-a236-7466afd6f02f.roa (hash: aoaRIM84eruV/ISWBs3PJCPQb0sEmsLtTOcu1EdbsFA=) 5: cc2f7093-21a6-400f-9db1-93c2fe02bc1c.roa (hash: vbtxuyfgx9e6lLFR0CnUGCC1kgCTySw+Ljt4yM1fDb4=) 6: ea1d02aa-6d25-4b36-b42e-ba837d49e261.roa (hash: q5bh3h1LHQcXwRDCiiiYn6TP5+N60E0SyV4QnQBQL8c=) Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/708aafaf-00b4-485b-854c-0b32ca30f57b/12e59001-35ac-4abf-858f-37b955a24b3f.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/708aafaf-00b4-485b-854c-0b32ca30f57b/manifest.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/58raXwiB13vqSLB2ijdmtQBlrwg.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 04 Sep 2026 00:05:44 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7f:87:b7:26:39:d5:3b:69:6d:fb:89:0a:fc:99:4b:cc:a4:d3:f0:67 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A918806F0000, serialNumber=E7CADA5F0881D77BEA48B0768A3766B50065AF08 Validity Not Before: Aug 31 00:05:44 2026 GMT Not After : Sep 4 00:05:44 2026 GMT Subject: serialNumber=41e044b93f7c69758ccd4f3c6be0e87be85d16cd39f77890326960fd0bc8573a, CN=bb9a9116-f615-462e-a680-5266b327e0fa Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cd:6a:eb:8e:eb:2e:86:a1:25:d2:16:78:66:2f: 91:3a:7e:55:7c:6f:8e:45:6a:11:ec:9d:25:3f:1e: de:ae:41:45:29:58:d1:f4:7e:35:1b:7f:62:e0:5d: 6f:cb:d5:f9:27:6a:aa:35:b8:c8:e1:da:b8:1a:a2: 4c:70:e8:e0:6e:2b:70:ee:77:be:4c:0e:02:dd:de: 80:66:e5:b5:5a:44:0d:9e:cd:03:de:ac:03:ae:58: 26:3c:26:d0:6b:3c:93:38:eb:5b:b2:65:71:47:c0: 1c:a2:e6:22:3a:d9:0b:fb:a2:47:16:32:a8:ed:ac: c7:0c:40:bf:2a:63:be:12:37:1c:6b:a7:2a:9e:de: b1:f0:84:af:b4:f4:15:1f:e5:3f:cb:f5:46:d5:4e: 75:23:d2:2c:f3:95:65:dc:ff:ee:47:ad:1a:50:1a: 96:81:7c:1b:c2:db:b7:e1:5b:7f:70:46:13:15:72: 67:2f:e1:4e:75:ab:e8:09:9a:fc:53:f2:d0:c6:03: 4e:36:2b:f7:54:b4:02:c9:92:f1:d7:11:92:e9:ce: 3e:41:e8:d7:dc:77:6a:7e:a4:c1:f9:64:0a:ec:1f: a3:3d:c3:51:a5:20:38:a1:ee:71:9f:22:b5:fb:97: 24:be:a8:10:63:b1:5e:26:08:79:e0:50:33:0a:2c: b3:bf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 64:E3:72:AA:D0:D3:1C:20:59:09:08:07:59:4F:FD:E3:CD:EA:96:D8 X509v3 Authority Key Identifier: keyid:E7:CA:DA:5F:08:81:D7:7B:EA:48:B0:76:8A:37:66:B5:00:65:AF:08 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/58raXwiB13vqSLB2ijdmtQBlrwg.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/708aafaf-00b4-485b-854c-0b32ca30f57b/manifest.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/708aafaf-00b4-485b-854c-0b32ca30f57b/12e59001-35ac-4abf-858f-37b955a24b3f.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 80:85:00:00:15:90:78:24:ca:1c:f1:28:7b:9f:ad:73:33:5e: 7d:0b:53:28:a8:62:af:25:9d:d0:22:a7:ae:1d:b7:87:ce:62: d7:25:cf:2d:7d:98:20:6d:cd:d0:9a:77:11:ac:92:1c:21:fa: b0:c7:f4:63:3d:af:8d:49:f2:99:a9:ec:dd:fb:c7:a3:2c:6e: 1d:57:f9:0f:b8:e7:08:d8:88:ab:db:5d:f1:22:ad:bd:fe:eb: f3:3c:da:e6:44:f8:20:9b:e0:54:3e:f4:d7:03:db:2b:30:96: cd:25:6a:cb:a9:01:fd:a6:5c:bc:13:5c:4d:c4:52:9d:c1:24: 8c:e9:74:47:47:84:88:50:22:a9:71:77:2a:9a:87:2e:b7:34: 20:03:b4:9c:71:85:3a:8f:ca:f9:23:6f:c9:9f:6d:f9:0e:0b: 6a:c1:e7:ec:bb:0b:46:0e:ce:2a:ed:a4:71:3b:1d:54:36:50: 44:6f:71:6f:17:e1:01:8f:4b:12:61:88:9b:1e:85:1e:bb:fb: 3b:e6:87:54:e1:d6:7c:81:db:98:81:97:b7:4c:13:94:7a:51: c3:7d:bf:4a:4b:82:7b:5d:0b:84:de:5c:4b:a3:fc:c5:0a:8a: 64:bf:45:42:e7:db:81:c0:12:e0:16:41:5f:03:c5:78:f2:aa: 02:68:15:0b -----BEGIN CERTIFICATE----- MIIFlTCCBH2gAwIBAgIUf4e3JjnVO2lt+4kK/JlLzKTT8GcwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODgwNkYwMDAwMTEwLwYDVQQFEyhFN0NBREE1RjA4 ODFENzdCRUE0OEIwNzY4QTM3NjZCNTAwNjVBRjA4MB4XDTI2MDgzMTAwMDU0NFoX DTI2MDkwNDAwMDU0NFowejFJMEcGA1UEBRNANDFlMDQ0YjkzZjdjNjk3NThjY2Q0 ZjNjNmJlMGU4N2JlODVkMTZjZDM5Zjc3ODkwMzI2OTYwZmQwYmM4NTczYTEtMCsG A1UEAxMkYmI5YTkxMTYtZjYxNS00NjJlLWE2ODAtNTI2NmIzMjdlMGZhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzWrrjusuhqEl0hZ4Zi+ROn5VfG+O RWoR7J0lPx7erkFFKVjR9H41G39i4F1vy9X5J2qqNbjI4dq4GqJMcOjgbitw7ne+ TA4C3d6AZuW1WkQNns0D3qwDrlgmPCbQazyTOOtbsmVxR8AcouYiOtkL+6JHFjKo 7azHDEC/KmO+Ejcca6cqnt6x8ISvtPQVH+U/y/VG1U51I9Is85Vl3P/uR60aUBqW gXwbwtu34Vt/cEYTFXJnL+FOdavoCZr8U/LQxgNONiv3VLQCyZLx1xGS6c4+QejX 3HdqfqTB+WQK7B+jPcNRpSA4oe5xnyK1+5ckvqgQY7FeJgh54FAzCiyzvwIDAQAB o4ICQTCCAj0wHQYDVR0OBBYEFGTjcqrQ0xwgWQkIB1lP/ePN6pbYMB8GA1UdIwQY MBaAFOfK2l8Igdd76kiwdoo3ZrUAZa8IMA4GA1UdDwEB/wQEAwIHgDB+BggrBgEF BQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVw b3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi81OHJhWHdp QjEzdnFTTEIyaWpkbXRRQmxyd2cuY2VyMH8GCCsGAQUFBwELBHMwcTBvBggrBgEF BQcwC4ZjcnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5hbWF6b25hd3MuY29t L3ZvbHVtZS83MDhhYWZhZi0wMGI0LTQ4NWItODU0Yy0wYjMyY2EzMGY1N2IvbWFu aWZlc3QubWZ0MIGVBgNVHR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnBraS1y c3luYy51cy1lYXN0LTIuYW1hem9uYXdzLmNvbS92b2x1bWUvNzA4YWFmYWYtMDBi NC00ODViLTg1NGMtMGIzMmNhMzBmNTdiLzEyZTU5MDAxLTM1YWMtNGFiZi04NThm LTM3Yjk1NWEyNGIzZi5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggr BgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYw BKACBQAwDQYJKoZIhvcNAQELBQADggEBAICFAAAVkHgkyhzxKHufrXMzXn0LUyio Yq8lndAip64dt4fOYtclzy19mCBtzdCadxGskhwh+rDH9GM9r41J8pmp7N37x6Ms bh1X+Q+45wjYiKvbXfEirb3+6/M82uZE+CCb4FQ+9NcD2yswls0lasupAf2mXLwT XE3EUp3BJIzpdEdHhIhQIqlxdyqahy63NCADtJxxhTqPyvkjb8mfbfkOC2rB5+y7 C0YOzirtpHE7HVQ2UERvcW8X4QGPSxJhiJsehR67+zvmh1Th1nyB25iBl7dME5R6 UcN9v0pLgntdC4TeXEuj/MUKimS/RULn24HAEuAWQV8DxXjyqgJoFQs= -----END CERTIFICATE-----Generated at Mon Aug 31 07:38:16 2026 by rpki-client