$ rpki-client -vvvf rpki-rsync.us-east-2.amazonaws.com/volume/708aafaf-00b4-485b-854c-0b32ca30f57b/manifest.mft File: manifest.mft (raw, json) Hash identifier: 2JOgag0h++MCcb+3gf/Ff2LFVHn0XR/OHpOz4AwLjiw= Subject key identifier: 93:77:3E:36:33:05:F4:75:F1:DF:2A:95:E1:1D:ED:1B:44:46:74:47 Authority key identifier: E7:CA:DA:5F:08:81:D7:7B:EA:48:B0:76:8A:37:66:B5:00:65:AF:08 Certificate issuer: /CN=A918806F0000/serialNumber=E7CADA5F0881D77BEA48B0768A3766B50065AF08 Certificate serial: 6BC36CDA5E58FE26DD695F3A107B41176EB32518 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/58raXwiB13vqSLB2ijdmtQBlrwg.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/708aafaf-00b4-485b-854c-0b32ca30f57b/manifest.mft Manifest number: 068C Signing time: Fri 11 Sep 2026 00:07:16 +0000 Manifest this update: Fri 11 Sep 2026 00:07:16 +0000 Manifest next update: Tue 15 Sep 2026 00:07:16 +0000 Files and hashes: 1: 12e59001-35ac-4abf-858f-37b955a24b3f.crl (hash: AlJvV3QyDmwr8gRKoVq5XqPYLgS6/cCBSMV6oKHMLMo=) 2: 381fc6e6-5d49-41bc-b584-d9437c68e3cd.roa (hash: 8QqQOxAj3sRai6/BzOB2kV66/okkk7p8TzKsBaSwcWA=) 3: 49119734-9dbc-4bd4-98be-57e4ce078928.roa (hash: 0OedyNMwjL1I1p7rzryfdYD0nslES0i+43AbthFPFmE=) 4: 5663bf34-10ed-4309-a236-7466afd6f02f.roa (hash: aoaRIM84eruV/ISWBs3PJCPQb0sEmsLtTOcu1EdbsFA=) 5: cc2f7093-21a6-400f-9db1-93c2fe02bc1c.roa (hash: vbtxuyfgx9e6lLFR0CnUGCC1kgCTySw+Ljt4yM1fDb4=) 6: ea1d02aa-6d25-4b36-b42e-ba837d49e261.roa (hash: q5bh3h1LHQcXwRDCiiiYn6TP5+N60E0SyV4QnQBQL8c=) Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/708aafaf-00b4-485b-854c-0b32ca30f57b/12e59001-35ac-4abf-858f-37b955a24b3f.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/708aafaf-00b4-485b-854c-0b32ca30f57b/manifest.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/58raXwiB13vqSLB2ijdmtQBlrwg.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 15 Sep 2026 00:07:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6b:c3:6c:da:5e:58:fe:26:dd:69:5f:3a:10:7b:41:17:6e:b3:25:18 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A918806F0000, serialNumber=E7CADA5F0881D77BEA48B0768A3766B50065AF08 Validity Not Before: Sep 11 00:07:16 2026 GMT Not After : Sep 15 00:07:16 2026 GMT Subject: serialNumber=0d714b04b1b3f01620173ae47c511b07accb7540fd021575338eb5c58200d37b, CN=bb9a9116-f615-462e-a680-5266b327e0fa Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a3:13:19:2e:02:1e:c3:a3:1e:76:97:b9:cd:fc: 23:10:1c:1b:66:ff:af:99:87:12:b2:8f:32:04:ab: 8e:01:77:d3:09:76:cc:9d:08:60:d0:b5:7c:fe:5b: 70:d0:17:f7:3b:83:f9:c3:25:0d:fe:21:0d:33:de: 0e:d8:69:01:cc:f5:0c:eb:7c:fd:e8:ad:94:40:3f: e4:d4:a2:e0:a6:9d:ca:24:64:db:12:50:ab:d3:9d: 81:c3:4e:5a:a0:6b:bb:71:68:bb:49:52:f1:8f:09: fb:d0:f8:9d:50:4d:ad:63:24:fc:ae:e0:3b:51:30: ce:97:4c:93:ba:fe:37:48:4b:2f:d3:ac:6b:1d:08: 49:d2:6c:a3:c3:6a:ce:34:80:09:35:c9:fc:f1:89: 09:83:63:b8:4c:5b:24:11:ac:58:6a:5a:e8:7e:12: 1c:14:ea:c8:45:36:c8:db:70:e6:f7:aa:91:9d:2d: 9d:65:71:6b:92:b4:aa:09:1d:c7:87:70:29:b7:e9: dd:2c:52:02:f7:72:2a:06:13:01:04:46:7c:54:46: 52:f2:18:28:b3:6c:cc:2b:4b:8a:77:2b:b6:d2:67: ea:4b:08:06:c4:00:99:c3:89:a9:3a:14:51:c3:09: 98:a1:4b:84:16:d4:af:5a:26:66:7b:40:96:16:68: 50:b5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 93:77:3E:36:33:05:F4:75:F1:DF:2A:95:E1:1D:ED:1B:44:46:74:47 X509v3 Authority Key Identifier: keyid:E7:CA:DA:5F:08:81:D7:7B:EA:48:B0:76:8A:37:66:B5:00:65:AF:08 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/58raXwiB13vqSLB2ijdmtQBlrwg.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/708aafaf-00b4-485b-854c-0b32ca30f57b/manifest.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/708aafaf-00b4-485b-854c-0b32ca30f57b/12e59001-35ac-4abf-858f-37b955a24b3f.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 0d:60:85:a4:03:e4:5a:9a:3c:12:24:ea:ca:52:c5:01:32:60: 53:5f:9b:0c:cd:13:90:7d:04:b2:6e:94:d4:60:54:26:ae:1a: 72:3e:b2:89:77:77:a1:db:ed:50:37:1c:c1:26:cc:7c:91:ef: 27:5e:c6:fc:14:0c:45:5c:0f:8f:d2:3a:7c:2d:01:39:19:a6: 6a:5c:6e:6a:d8:be:42:81:4f:b4:66:08:c9:ce:38:cc:25:05: c6:ff:26:3e:d0:1d:16:4c:d0:9a:01:38:cc:d6:9e:be:21:c3: 0e:14:66:4d:f2:a2:a7:7b:44:66:41:c0:37:ab:cc:eb:8e:3f: 6f:18:18:79:fb:ab:4d:e2:77:3f:df:9a:f8:8a:c8:7d:f9:18: a3:b7:17:3c:d2:c9:d6:e8:73:39:3b:22:0e:dc:c5:df:c1:d0: b8:49:1b:06:88:63:b3:39:ee:b6:13:f6:91:6c:0a:f6:9f:8f: c0:46:cd:8f:29:92:c2:f7:7f:9c:ac:9d:5a:d3:ee:db:10:b0: 7e:ad:8d:5e:83:6a:38:69:04:c4:f5:74:62:ee:da:8b:de:2d: 9d:f1:7a:73:9b:fc:0d:29:ce:c7:0c:56:6a:15:95:30:b8:9f: 67:a9:72:46:22:29:b3:f4:dd:3e:8f:e8:ac:9a:d1:a1:bc:77: fc:94:56:50 -----BEGIN CERTIFICATE----- MIIFlTCCBH2gAwIBAgIUa8Ns2l5Y/ibdaV86EHtBF26zJRgwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODgwNkYwMDAwMTEwLwYDVQQFEyhFN0NBREE1RjA4 ODFENzdCRUE0OEIwNzY4QTM3NjZCNTAwNjVBRjA4MB4XDTI2MDkxMTAwMDcxNloX DTI2MDkxNTAwMDcxNlowejFJMEcGA1UEBRNAMGQ3MTRiMDRiMWIzZjAxNjIwMTcz YWU0N2M1MTFiMDdhY2NiNzU0MGZkMDIxNTc1MzM4ZWI1YzU4MjAwZDM3YjEtMCsG A1UEAxMkYmI5YTkxMTYtZjYxNS00NjJlLWE2ODAtNTI2NmIzMjdlMGZhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoxMZLgIew6Medpe5zfwjEBwbZv+v mYcSso8yBKuOAXfTCXbMnQhg0LV8/ltw0Bf3O4P5wyUN/iENM94O2GkBzPUM63z9 6K2UQD/k1KLgpp3KJGTbElCr052Bw05aoGu7cWi7SVLxjwn70PidUE2tYyT8ruA7 UTDOl0yTuv43SEsv06xrHQhJ0myjw2rONIAJNcn88YkJg2O4TFskEaxYalrofhIc FOrIRTbI23Dm96qRnS2dZXFrkrSqCR3Hh3Apt+ndLFIC93IqBhMBBEZ8VEZS8hgo s2zMK0uKdyu20mfqSwgGxACZw4mpOhRRwwmYoUuEFtSvWiZme0CWFmhQtQIDAQAB o4ICQTCCAj0wHQYDVR0OBBYEFJN3PjYzBfR18d8qleEd7RtERnRHMB8GA1UdIwQY MBaAFOfK2l8Igdd76kiwdoo3ZrUAZa8IMA4GA1UdDwEB/wQEAwIHgDB+BggrBgEF BQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVw b3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi81OHJhWHdp QjEzdnFTTEIyaWpkbXRRQmxyd2cuY2VyMH8GCCsGAQUFBwELBHMwcTBvBggrBgEF BQcwC4ZjcnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5hbWF6b25hd3MuY29t L3ZvbHVtZS83MDhhYWZhZi0wMGI0LTQ4NWItODU0Yy0wYjMyY2EzMGY1N2IvbWFu aWZlc3QubWZ0MIGVBgNVHR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnBraS1y c3luYy51cy1lYXN0LTIuYW1hem9uYXdzLmNvbS92b2x1bWUvNzA4YWFmYWYtMDBi NC00ODViLTg1NGMtMGIzMmNhMzBmNTdiLzEyZTU5MDAxLTM1YWMtNGFiZi04NThm LTM3Yjk1NWEyNGIzZi5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggr BgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYw BKACBQAwDQYJKoZIhvcNAQELBQADggEBAA1ghaQD5FqaPBIk6spSxQEyYFNfmwzN E5B9BLJulNRgVCauGnI+sol3d6Hb7VA3HMEmzHyR7ydexvwUDEVcD4/SOnwtATkZ pmpcbmrYvkKBT7RmCMnOOMwlBcb/Jj7QHRZM0JoBOMzWnr4hww4UZk3yoqd7RGZB wDerzOuOP28YGHn7q03idz/fmviKyH35GKO3FzzSydboczk7Ig7cxd/B0LhJGwaI Y7M57rYT9pFsCvafj8BGzY8pksL3f5ysnVrT7tsQsH6tjV6DajhpBMT1dGLu2ove LZ3xenOb/A0pzscMVmoVlTC4n2epckYiKbP03T6P6Kya0aG8d/yUVlA= -----END CERTIFICATE-----Generated at Fri Sep 11 14:19:11 2026 by rpki-client