$ rpki-client -vvvf rpki-rsync.us-east-2.amazonaws.com/volume/708aafaf-00b4-485b-854c-0b32ca30f57b/manifest.mft File: manifest.mft (raw, json) Hash identifier: BgviEjF41Nd3DMAts+w8OBOoOZdDpavQrnUsTUlxqws= Subject key identifier: 19:FB:32:22:9F:72:50:D1:A4:84:93:42:3B:4C:B4:9C:BB:07:66:57 Authority key identifier: E7:CA:DA:5F:08:81:D7:7B:EA:48:B0:76:8A:37:66:B5:00:65:AF:08 Certificate issuer: /CN=A918806F0000/serialNumber=E7CADA5F0881D77BEA48B0768A3766B50065AF08 Certificate serial: 5EFBCF4077FF4F387C10464000AEDFB050E56B05 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/58raXwiB13vqSLB2ijdmtQBlrwg.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/708aafaf-00b4-485b-854c-0b32ca30f57b/manifest.mft Manifest number: 0677 Signing time: Fri 21 Aug 2026 00:03:30 +0000 Manifest this update: Fri 21 Aug 2026 00:03:30 +0000 Manifest next update: Tue 25 Aug 2026 00:03:30 +0000 Files and hashes: 1: 12e59001-35ac-4abf-858f-37b955a24b3f.crl (hash: 0Y53+ielsTt0t43b7NFxQN1lf7mYaReorsT97gUdwRQ=) 2: 381fc6e6-5d49-41bc-b584-d9437c68e3cd.roa (hash: 8QqQOxAj3sRai6/BzOB2kV66/okkk7p8TzKsBaSwcWA=) 3: 49119734-9dbc-4bd4-98be-57e4ce078928.roa (hash: 0OedyNMwjL1I1p7rzryfdYD0nslES0i+43AbthFPFmE=) 4: 5663bf34-10ed-4309-a236-7466afd6f02f.roa (hash: aoaRIM84eruV/ISWBs3PJCPQb0sEmsLtTOcu1EdbsFA=) 5: cc2f7093-21a6-400f-9db1-93c2fe02bc1c.roa (hash: vbtxuyfgx9e6lLFR0CnUGCC1kgCTySw+Ljt4yM1fDb4=) 6: ea1d02aa-6d25-4b36-b42e-ba837d49e261.roa (hash: q5bh3h1LHQcXwRDCiiiYn6TP5+N60E0SyV4QnQBQL8c=) Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/708aafaf-00b4-485b-854c-0b32ca30f57b/12e59001-35ac-4abf-858f-37b955a24b3f.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/708aafaf-00b4-485b-854c-0b32ca30f57b/manifest.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/58raXwiB13vqSLB2ijdmtQBlrwg.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 25 Aug 2026 00:03:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5e:fb:cf:40:77:ff:4f:38:7c:10:46:40:00:ae:df:b0:50:e5:6b:05 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A918806F0000, serialNumber=E7CADA5F0881D77BEA48B0768A3766B50065AF08 Validity Not Before: Aug 21 00:03:30 2026 GMT Not After : Aug 25 00:03:30 2026 GMT Subject: serialNumber=43470a25c039cc60c8a2afa3834938812c57afca109ac1c19507406f1d0de21a, CN=bb9a9116-f615-462e-a680-5266b327e0fa Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:64:74:74:5e:32:11:82:3c:2d:92:00:37:87: a6:c0:f9:33:60:6b:e7:54:f9:fd:27:a4:5e:80:48: 23:56:91:36:8b:ee:ea:77:5b:d8:31:19:6f:23:47: ed:d2:64:3a:c1:ea:b2:ff:73:a3:4c:f8:66:ff:61: d0:d3:8d:77:bc:d7:15:4b:55:65:56:75:5a:83:ee: 53:20:b6:37:52:ee:d1:a6:3f:ab:c1:7e:4d:c5:45: e6:5f:cd:27:c9:e5:0e:a5:45:25:16:93:4f:0a:c4: 20:89:f9:f2:bc:74:87:b7:29:f9:f1:0a:5e:40:9e: d0:42:f5:fc:80:30:da:f3:b1:41:61:c4:96:61:75: d9:42:24:0d:bb:11:69:89:a3:5b:20:47:e7:d0:55: fd:dd:e1:b5:88:59:4b:b2:d5:a5:cd:5a:e9:58:8c: d9:35:e9:71:df:0c:a3:34:ce:88:26:bc:b5:c5:d2: 7d:1c:95:05:57:45:58:93:20:f1:82:d3:71:47:da: 18:92:63:20:47:35:3e:96:90:42:e1:73:94:b2:54: e0:31:c4:f2:c4:ae:73:c2:b2:6e:43:3e:b3:4c:cd: 78:1c:04:e3:18:11:43:57:d3:74:78:4b:c0:d8:62: ea:eb:bf:34:02:1a:d6:af:77:9a:74:3a:7e:a4:92: c2:d1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 19:FB:32:22:9F:72:50:D1:A4:84:93:42:3B:4C:B4:9C:BB:07:66:57 X509v3 Authority Key Identifier: keyid:E7:CA:DA:5F:08:81:D7:7B:EA:48:B0:76:8A:37:66:B5:00:65:AF:08 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/58raXwiB13vqSLB2ijdmtQBlrwg.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/708aafaf-00b4-485b-854c-0b32ca30f57b/manifest.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/708aafaf-00b4-485b-854c-0b32ca30f57b/12e59001-35ac-4abf-858f-37b955a24b3f.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 10:d4:42:76:50:c7:fc:b3:4f:0f:87:78:b5:70:b4:64:9d:95: 84:3b:f1:5d:45:00:0a:74:9c:55:57:e0:b3:a0:03:8e:ba:74: ae:55:5c:ba:2a:1f:95:ed:b4:ac:83:a2:89:b2:84:c9:60:39: 57:d6:61:3b:3e:ef:10:d0:e0:4e:98:19:ff:e6:59:34:14:59: 21:93:89:70:62:ce:12:c5:c3:81:09:91:75:9e:84:6a:95:cb: d0:2a:a7:2a:0a:b3:c5:33:a9:44:9d:1d:33:4a:53:44:4d:d6: 2f:29:b2:64:8f:27:de:b4:20:56:ce:cc:eb:4d:38:c8:36:2f: e8:a9:cc:fc:99:c3:b8:bc:4f:f1:a3:ad:1f:05:a0:98:3d:8b: 3c:24:b0:50:6a:68:a6:08:29:02:e3:cc:ca:60:32:97:04:e7: 06:eb:a3:bf:8b:b6:b6:22:67:ab:2e:bd:99:18:8e:13:eb:49: 74:05:00:71:e6:5b:6c:93:31:64:fc:95:ce:0a:64:8d:59:4c: fb:74:29:0b:f4:5c:37:54:1b:93:62:7e:e7:5a:35:7b:4f:69: d0:7f:0d:31:5c:47:79:81:71:1e:17:4c:4f:d3:ad:79:4c:74: c1:ac:e1:19:82:f6:51:1f:dc:e5:44:4b:88:a5:e7:12:66:45: e0:2e:be:dd -----BEGIN CERTIFICATE----- MIIFlTCCBH2gAwIBAgIUXvvPQHf/Tzh8EEZAAK7fsFDlawUwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODgwNkYwMDAwMTEwLwYDVQQFEyhFN0NBREE1RjA4 ODFENzdCRUE0OEIwNzY4QTM3NjZCNTAwNjVBRjA4MB4XDTI2MDgyMTAwMDMzMFoX DTI2MDgyNTAwMDMzMFowejFJMEcGA1UEBRNANDM0NzBhMjVjMDM5Y2M2MGM4YTJh ZmEzODM0OTM4ODEyYzU3YWZjYTEwOWFjMWMxOTUwNzQwNmYxZDBkZTIxYTEtMCsG A1UEAxMkYmI5YTkxMTYtZjYxNS00NjJlLWE2ODAtNTI2NmIzMjdlMGZhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAr2R0dF4yEYI8LZIAN4emwPkzYGvn VPn9J6RegEgjVpE2i+7qd1vYMRlvI0ft0mQ6weqy/3OjTPhm/2HQ0413vNcVS1Vl VnVag+5TILY3Uu7Rpj+rwX5NxUXmX80nyeUOpUUlFpNPCsQgifnyvHSHtyn58Qpe QJ7QQvX8gDDa87FBYcSWYXXZQiQNuxFpiaNbIEfn0FX93eG1iFlLstWlzVrpWIzZ Nelx3wyjNM6IJry1xdJ9HJUFV0VYkyDxgtNxR9oYkmMgRzU+lpBC4XOUslTgMcTy xK5zwrJuQz6zTM14HATjGBFDV9N0eEvA2GLq6780AhrWr3eadDp+pJLC0QIDAQAB o4ICQTCCAj0wHQYDVR0OBBYEFBn7MiKfclDRpISTQjtMtJy7B2ZXMB8GA1UdIwQY MBaAFOfK2l8Igdd76kiwdoo3ZrUAZa8IMA4GA1UdDwEB/wQEAwIHgDB+BggrBgEF BQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVw b3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi81OHJhWHdp QjEzdnFTTEIyaWpkbXRRQmxyd2cuY2VyMH8GCCsGAQUFBwELBHMwcTBvBggrBgEF BQcwC4ZjcnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5hbWF6b25hd3MuY29t L3ZvbHVtZS83MDhhYWZhZi0wMGI0LTQ4NWItODU0Yy0wYjMyY2EzMGY1N2IvbWFu aWZlc3QubWZ0MIGVBgNVHR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnBraS1y c3luYy51cy1lYXN0LTIuYW1hem9uYXdzLmNvbS92b2x1bWUvNzA4YWFmYWYtMDBi NC00ODViLTg1NGMtMGIzMmNhMzBmNTdiLzEyZTU5MDAxLTM1YWMtNGFiZi04NThm LTM3Yjk1NWEyNGIzZi5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggr BgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYw BKACBQAwDQYJKoZIhvcNAQELBQADggEBABDUQnZQx/yzTw+HeLVwtGSdlYQ78V1F AAp0nFVX4LOgA466dK5VXLoqH5XttKyDoomyhMlgOVfWYTs+7xDQ4E6YGf/mWTQU WSGTiXBizhLFw4EJkXWehGqVy9AqpyoKs8UzqUSdHTNKU0RN1i8psmSPJ960IFbO zOtNOMg2L+ipzPyZw7i8T/GjrR8FoJg9izwksFBqaKYIKQLjzMpgMpcE5wbro7+L trYiZ6suvZkYjhPrSXQFAHHmW2yTMWT8lc4KZI1ZTPt0KQv0XDdUG5NifudaNXtP adB/DTFcR3mBcR4XTE/TrXlMdMGs4RmC9lEf3OVES4il5xJmReAuvt0= -----END CERTIFICATE-----Generated at Fri Aug 21 23:21:37 2026 by rpki-client