$ rpki-client -vvvf rpki-rsync.us-east-2.amazonaws.com/volume/708aafaf-00b4-485b-854c-0b32ca30f57b/manifest.mft File: manifest.mft (raw, json) Hash identifier: RTyIiB1tXBu8UrA6lLRqr5PNa31DiAMoyhApAaLzs7U= Subject key identifier: 3E:C9:72:0B:0A:7C:4F:B2:7E:8F:4C:C0:52:73:0C:27:40:97:0F:0B Authority key identifier: E7:CA:DA:5F:08:81:D7:7B:EA:48:B0:76:8A:37:66:B5:00:65:AF:08 Certificate issuer: /CN=A918806F0000/serialNumber=E7CADA5F0881D77BEA48B0768A3766B50065AF08 Certificate serial: 2421B3928CEEBA1E13F349B413F1D8AF08BDA7F1 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/58raXwiB13vqSLB2ijdmtQBlrwg.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/708aafaf-00b4-485b-854c-0b32ca30f57b/manifest.mft Manifest number: 0683 Signing time: Wed 02 Sep 2026 00:06:01 +0000 Manifest this update: Wed 02 Sep 2026 00:06:01 +0000 Manifest next update: Sun 06 Sep 2026 00:06:01 +0000 Files and hashes: 1: 12e59001-35ac-4abf-858f-37b955a24b3f.crl (hash: +87iiqDZJnZYbvUmMdTf+P7yZ8/4FT2ZdTYY9rg+4zQ=) 2: 381fc6e6-5d49-41bc-b584-d9437c68e3cd.roa (hash: 8QqQOxAj3sRai6/BzOB2kV66/okkk7p8TzKsBaSwcWA=) 3: 49119734-9dbc-4bd4-98be-57e4ce078928.roa (hash: 0OedyNMwjL1I1p7rzryfdYD0nslES0i+43AbthFPFmE=) 4: 5663bf34-10ed-4309-a236-7466afd6f02f.roa (hash: aoaRIM84eruV/ISWBs3PJCPQb0sEmsLtTOcu1EdbsFA=) 5: cc2f7093-21a6-400f-9db1-93c2fe02bc1c.roa (hash: vbtxuyfgx9e6lLFR0CnUGCC1kgCTySw+Ljt4yM1fDb4=) 6: ea1d02aa-6d25-4b36-b42e-ba837d49e261.roa (hash: q5bh3h1LHQcXwRDCiiiYn6TP5+N60E0SyV4QnQBQL8c=) Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/708aafaf-00b4-485b-854c-0b32ca30f57b/12e59001-35ac-4abf-858f-37b955a24b3f.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/708aafaf-00b4-485b-854c-0b32ca30f57b/manifest.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/58raXwiB13vqSLB2ijdmtQBlrwg.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 06 Sep 2026 00:06:01 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 24:21:b3:92:8c:ee:ba:1e:13:f3:49:b4:13:f1:d8:af:08:bd:a7:f1 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A918806F0000, serialNumber=E7CADA5F0881D77BEA48B0768A3766B50065AF08 Validity Not Before: Sep 2 00:06:01 2026 GMT Not After : Sep 6 00:06:01 2026 GMT Subject: serialNumber=ad0f12ab21eb11cac7911d3b27fda251e4453b1ea39783a225ac918bcb7a7102, CN=bb9a9116-f615-462e-a680-5266b327e0fa Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e3:cc:a6:b0:7d:c2:63:88:d2:e1:64:12:b4:73: 4f:7b:a8:c2:d7:ca:32:5e:78:03:9e:ef:99:27:ae: 7c:d1:57:1a:c1:f5:5a:22:7c:86:f2:d9:ba:ca:66: 21:f1:b5:a3:94:e4:70:5c:d6:ab:90:33:5b:b4:67: e9:ce:66:f2:d9:f6:e0:77:45:21:1f:71:62:0e:17: b4:d4:fc:22:3d:ff:ab:63:fd:95:ff:58:3b:d6:75: e2:c3:6d:30:29:3a:a4:55:12:b3:73:12:d4:89:ac: 0d:61:0f:25:c8:3e:5a:79:09:14:9a:8c:09:c8:70: 69:ee:58:bb:11:70:18:fb:d1:d8:2c:b8:a1:30:48: ea:59:64:8a:e8:be:ed:f6:67:bf:83:b5:e2:77:d4: 5a:b5:9a:6d:d5:64:67:3c:42:41:b3:3e:76:a3:a8: 12:b0:e8:b1:3c:72:6c:89:8d:fa:eb:65:13:aa:5f: 7c:c5:19:bb:06:89:db:81:53:a4:10:06:ca:ba:d8: f8:e8:8e:d6:c5:cc:49:23:5d:e8:e2:fc:71:8a:67: 06:40:48:44:ca:95:ce:2d:05:5c:9a:2e:f3:3f:53: 84:81:b6:8c:c1:13:51:8c:f9:e3:ca:26:8e:68:05: 22:d8:34:7e:6d:59:d0:fb:22:95:7e:c4:4f:1e:c5: 64:3d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3E:C9:72:0B:0A:7C:4F:B2:7E:8F:4C:C0:52:73:0C:27:40:97:0F:0B X509v3 Authority Key Identifier: keyid:E7:CA:DA:5F:08:81:D7:7B:EA:48:B0:76:8A:37:66:B5:00:65:AF:08 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/58raXwiB13vqSLB2ijdmtQBlrwg.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/708aafaf-00b4-485b-854c-0b32ca30f57b/manifest.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/708aafaf-00b4-485b-854c-0b32ca30f57b/12e59001-35ac-4abf-858f-37b955a24b3f.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 74:26:05:5f:f2:ec:00:bb:75:df:0f:a6:47:64:a8:6d:87:62: 92:74:79:d2:f2:43:2c:ee:81:a6:3e:73:62:5d:0b:73:b1:aa: 40:6f:a5:31:ed:a0:7f:de:0e:d0:f7:c9:c2:4e:38:cc:3e:cc: 28:9c:90:0b:ee:17:f9:25:04:97:13:d5:db:38:64:17:05:fa: b0:02:b8:12:7d:73:50:aa:1d:67:21:44:18:86:32:96:fd:96: 4e:c7:7a:09:43:f0:9b:fd:a0:eb:88:d9:7e:14:63:c1:fb:41: c0:1c:c1:c5:ed:07:af:29:02:ee:13:f0:e6:2f:2a:07:23:8d: e7:f4:58:95:02:9e:33:cc:48:36:fd:e9:31:bc:51:6a:f0:da: 9f:b9:53:27:61:48:59:46:81:d9:46:9c:27:fe:b0:ef:97:14: aa:9c:bf:33:33:3d:25:ed:ff:bd:29:43:32:1b:78:12:d4:5b: b5:40:12:68:a4:47:ce:73:fd:08:68:7b:87:b8:58:c3:47:73: 22:bc:9e:c9:9a:65:fb:9b:6a:12:cb:9b:8f:34:aa:83:47:bb: b0:b0:bc:9d:96:a6:be:8c:90:12:49:7f:72:f5:4b:15:68:5a: 5c:00:59:5c:a8:e6:e6:79:25:81:09:2c:46:08:be:da:63:de: 55:13:26:6c -----BEGIN CERTIFICATE----- MIIFlTCCBH2gAwIBAgIUJCGzkozuuh4T80m0E/HYrwi9p/EwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODgwNkYwMDAwMTEwLwYDVQQFEyhFN0NBREE1RjA4 ODFENzdCRUE0OEIwNzY4QTM3NjZCNTAwNjVBRjA4MB4XDTI2MDkwMjAwMDYwMVoX DTI2MDkwNjAwMDYwMVowejFJMEcGA1UEBRNAYWQwZjEyYWIyMWViMTFjYWM3OTEx ZDNiMjdmZGEyNTFlNDQ1M2IxZWEzOTc4M2EyMjVhYzkxOGJjYjdhNzEwMjEtMCsG A1UEAxMkYmI5YTkxMTYtZjYxNS00NjJlLWE2ODAtNTI2NmIzMjdlMGZhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA48ymsH3CY4jS4WQStHNPe6jC18oy XngDnu+ZJ6580VcawfVaInyG8tm6ymYh8bWjlORwXNarkDNbtGfpzmby2fbgd0Uh H3FiDhe01PwiPf+rY/2V/1g71nXiw20wKTqkVRKzcxLUiawNYQ8lyD5aeQkUmowJ yHBp7li7EXAY+9HYLLihMEjqWWSK6L7t9me/g7Xid9RatZpt1WRnPEJBsz52o6gS sOixPHJsiY3662UTql98xRm7BonbgVOkEAbKutj46I7WxcxJI13o4vxximcGQEhE ypXOLQVcmi7zP1OEgbaMwRNRjPnjyiaOaAUi2DR+bVnQ+yKVfsRPHsVkPQIDAQAB o4ICQTCCAj0wHQYDVR0OBBYEFD7JcgsKfE+yfo9MwFJzDCdAlw8LMB8GA1UdIwQY MBaAFOfK2l8Igdd76kiwdoo3ZrUAZa8IMA4GA1UdDwEB/wQEAwIHgDB+BggrBgEF BQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVw b3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi81OHJhWHdp QjEzdnFTTEIyaWpkbXRRQmxyd2cuY2VyMH8GCCsGAQUFBwELBHMwcTBvBggrBgEF BQcwC4ZjcnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5hbWF6b25hd3MuY29t L3ZvbHVtZS83MDhhYWZhZi0wMGI0LTQ4NWItODU0Yy0wYjMyY2EzMGY1N2IvbWFu aWZlc3QubWZ0MIGVBgNVHR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnBraS1y c3luYy51cy1lYXN0LTIuYW1hem9uYXdzLmNvbS92b2x1bWUvNzA4YWFmYWYtMDBi NC00ODViLTg1NGMtMGIzMmNhMzBmNTdiLzEyZTU5MDAxLTM1YWMtNGFiZi04NThm LTM3Yjk1NWEyNGIzZi5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggr BgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYw BKACBQAwDQYJKoZIhvcNAQELBQADggEBAHQmBV/y7AC7dd8PpkdkqG2HYpJ0edLy QyzugaY+c2JdC3OxqkBvpTHtoH/eDtD3ycJOOMw+zCickAvuF/klBJcT1ds4ZBcF +rACuBJ9c1CqHWchRBiGMpb9lk7HeglD8Jv9oOuI2X4UY8H7QcAcwcXtB68pAu4T 8OYvKgcjjef0WJUCnjPMSDb96TG8UWrw2p+5UydhSFlGgdlGnCf+sO+XFKqcvzMz PSXt/70pQzIbeBLUW7VAEmikR85z/Qhoe4e4WMNHcyK8nsmaZfubahLLm480qoNH u7CwvJ2Wpr6MkBJJf3L1SxVoWlwAWVyo5uZ5JYEJLEYIvtpj3lUTJmw= -----END CERTIFICATE-----Generated at Wed Sep 2 16:01:26 2026 by rpki-client