$ rpki-client -vvvf rpki-rsync.us-east-2.amazonaws.com/volume/708aafaf-00b4-485b-854c-0b32ca30f57b/manifest.mft File: manifest.mft (raw, json) Hash identifier: MqPUsEbPdyv3GnvFaAHrUSK7Q2kjSGRyXLyW5wRAXRo= Subject key identifier: 46:60:5F:DD:3F:4E:62:60:58:91:8B:3B:B4:55:7B:6E:0B:EE:66:40 Authority key identifier: E7:CA:DA:5F:08:81:D7:7B:EA:48:B0:76:8A:37:66:B5:00:65:AF:08 Certificate issuer: /CN=A918806F0000/serialNumber=E7CADA5F0881D77BEA48B0768A3766B50065AF08 Certificate serial: 19C980A928C87EC20196BB8225B70D6D5F631D05 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/58raXwiB13vqSLB2ijdmtQBlrwg.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/708aafaf-00b4-485b-854c-0b32ca30f57b/manifest.mft Manifest number: 0689 Signing time: Tue 08 Sep 2026 00:06:52 +0000 Manifest this update: Tue 08 Sep 2026 00:06:52 +0000 Manifest next update: Sat 12 Sep 2026 00:06:52 +0000 Files and hashes: 1: 12e59001-35ac-4abf-858f-37b955a24b3f.crl (hash: S94+GsrBFwtsnAErN3KcvpVgXnZIT6g3jHA44HAVQs0=) 2: 381fc6e6-5d49-41bc-b584-d9437c68e3cd.roa (hash: 8QqQOxAj3sRai6/BzOB2kV66/okkk7p8TzKsBaSwcWA=) 3: 49119734-9dbc-4bd4-98be-57e4ce078928.roa (hash: 0OedyNMwjL1I1p7rzryfdYD0nslES0i+43AbthFPFmE=) 4: 5663bf34-10ed-4309-a236-7466afd6f02f.roa (hash: aoaRIM84eruV/ISWBs3PJCPQb0sEmsLtTOcu1EdbsFA=) 5: cc2f7093-21a6-400f-9db1-93c2fe02bc1c.roa (hash: vbtxuyfgx9e6lLFR0CnUGCC1kgCTySw+Ljt4yM1fDb4=) 6: ea1d02aa-6d25-4b36-b42e-ba837d49e261.roa (hash: q5bh3h1LHQcXwRDCiiiYn6TP5+N60E0SyV4QnQBQL8c=) Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/708aafaf-00b4-485b-854c-0b32ca30f57b/12e59001-35ac-4abf-858f-37b955a24b3f.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/708aafaf-00b4-485b-854c-0b32ca30f57b/manifest.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/58raXwiB13vqSLB2ijdmtQBlrwg.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 12 Sep 2026 00:06:52 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 19:c9:80:a9:28:c8:7e:c2:01:96:bb:82:25:b7:0d:6d:5f:63:1d:05 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A918806F0000, serialNumber=E7CADA5F0881D77BEA48B0768A3766B50065AF08 Validity Not Before: Sep 8 00:06:52 2026 GMT Not After : Sep 12 00:06:52 2026 GMT Subject: serialNumber=0800a9fe998521686f31735ccf634150cdcb9c7137c1afbc050ea69183ed6296, CN=bb9a9116-f615-462e-a680-5266b327e0fa Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:f0:d9:84:d0:6f:a4:66:9b:46:21:eb:84:7a: cc:10:30:e7:64:bf:98:57:0f:e5:ea:52:96:ce:c3: 06:dd:fb:6e:fe:9a:06:6f:e8:3d:f8:06:7d:60:68: 9c:51:2b:2e:ad:3d:1d:48:20:3b:d7:e1:a7:52:c0: 8a:bc:28:f6:d5:ef:a3:f6:4c:3e:7d:bc:fc:b3:fc: b6:39:a8:86:3f:c1:a1:f7:ad:35:89:eb:7f:ba:52: ca:28:7e:c5:57:41:7a:5a:59:6e:2b:fa:6e:2d:6c: 24:e9:2d:29:2f:21:05:cd:32:23:14:ab:c9:24:7d: ae:97:86:9b:2a:1b:f4:23:72:99:20:cd:20:7f:f5: 21:fb:60:3e:20:46:d8:a0:f0:7e:94:52:a6:d9:7e: 15:96:4d:d0:e9:cb:6c:67:f9:39:cd:ee:8d:39:2c: 01:9d:10:77:7a:bd:37:aa:a9:87:a7:8f:46:f6:e3: 19:88:e6:f3:0b:e6:51:98:35:1c:37:86:86:ab:3e: df:f4:28:d7:ce:fb:f0:14:f1:6b:52:ab:e9:c8:f9: 7b:5b:bf:30:00:10:87:2e:2f:95:90:72:bb:55:97: 60:f1:f1:63:11:b4:4a:90:67:77:0c:42:62:b8:91: 72:5d:05:a3:f9:a9:7e:bb:8e:db:24:a6:25:7d:4f: 97:a9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 46:60:5F:DD:3F:4E:62:60:58:91:8B:3B:B4:55:7B:6E:0B:EE:66:40 X509v3 Authority Key Identifier: keyid:E7:CA:DA:5F:08:81:D7:7B:EA:48:B0:76:8A:37:66:B5:00:65:AF:08 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/58raXwiB13vqSLB2ijdmtQBlrwg.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/708aafaf-00b4-485b-854c-0b32ca30f57b/manifest.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/708aafaf-00b4-485b-854c-0b32ca30f57b/12e59001-35ac-4abf-858f-37b955a24b3f.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 01:61:cf:47:d3:cb:a9:71:9d:a6:85:d8:75:d7:63:9c:70:28: fd:1d:5c:2f:ec:47:0b:31:ec:49:7b:ad:af:22:13:11:31:c5: 57:89:33:48:9e:9a:61:fb:0f:f1:4d:ff:8a:0b:6a:04:e5:5c: 0c:95:88:79:b5:78:be:94:7e:84:3c:73:48:8a:45:92:a2:8e: 7c:af:ce:9d:95:0b:72:92:bb:fe:51:67:f6:54:7d:65:52:b5: 90:39:1d:65:67:1d:8c:40:94:27:5d:75:93:29:83:b5:45:b9: fd:88:f2:77:55:d9:f0:7c:ca:1a:9e:0c:71:54:ea:03:a0:95: 12:44:68:fc:3a:e3:74:d1:f9:76:68:05:89:9f:9f:43:c3:d7: 43:69:10:e8:8f:77:0e:59:49:6a:7d:48:aa:49:16:12:a1:07: 03:c3:a9:f1:f6:d6:a4:b2:40:8c:d1:48:98:14:e0:06:3b:69: 86:dd:f1:b8:94:90:3a:fa:8a:48:ff:04:ce:88:28:95:53:57: 15:fd:c5:b8:fc:aa:40:ff:07:09:8c:90:b2:0a:2c:bf:6a:6a: 2c:9e:a0:97:7a:a1:96:09:1a:04:e8:d5:09:59:b2:47:a5:a8: ad:5f:0e:27:4c:82:e3:01:f5:e9:97:ce:56:23:a1:f3:f6:c6: 6f:57:64:af -----BEGIN CERTIFICATE----- MIIFlTCCBH2gAwIBAgIUGcmAqSjIfsIBlruCJbcNbV9jHQUwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODgwNkYwMDAwMTEwLwYDVQQFEyhFN0NBREE1RjA4 ODFENzdCRUE0OEIwNzY4QTM3NjZCNTAwNjVBRjA4MB4XDTI2MDkwODAwMDY1MloX DTI2MDkxMjAwMDY1MlowejFJMEcGA1UEBRNAMDgwMGE5ZmU5OTg1MjE2ODZmMzE3 MzVjY2Y2MzQxNTBjZGNiOWM3MTM3YzFhZmJjMDUwZWE2OTE4M2VkNjI5NjEtMCsG A1UEAxMkYmI5YTkxMTYtZjYxNS00NjJlLWE2ODAtNTI2NmIzMjdlMGZhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwfDZhNBvpGabRiHrhHrMEDDnZL+Y Vw/l6lKWzsMG3ftu/poGb+g9+AZ9YGicUSsurT0dSCA71+GnUsCKvCj21e+j9kw+ fbz8s/y2OaiGP8Gh9601iet/ulLKKH7FV0F6WlluK/puLWwk6S0pLyEFzTIjFKvJ JH2ul4abKhv0I3KZIM0gf/Uh+2A+IEbYoPB+lFKm2X4Vlk3Q6ctsZ/k5ze6NOSwB nRB3er03qqmHp49G9uMZiObzC+ZRmDUcN4aGqz7f9CjXzvvwFPFrUqvpyPl7W78w ABCHLi+VkHK7VZdg8fFjEbRKkGd3DEJiuJFyXQWj+al+u47bJKYlfU+XqQIDAQAB o4ICQTCCAj0wHQYDVR0OBBYEFEZgX90/TmJgWJGLO7RVe24L7mZAMB8GA1UdIwQY MBaAFOfK2l8Igdd76kiwdoo3ZrUAZa8IMA4GA1UdDwEB/wQEAwIHgDB+BggrBgEF BQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVw b3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi81OHJhWHdp QjEzdnFTTEIyaWpkbXRRQmxyd2cuY2VyMH8GCCsGAQUFBwELBHMwcTBvBggrBgEF BQcwC4ZjcnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5hbWF6b25hd3MuY29t L3ZvbHVtZS83MDhhYWZhZi0wMGI0LTQ4NWItODU0Yy0wYjMyY2EzMGY1N2IvbWFu aWZlc3QubWZ0MIGVBgNVHR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnBraS1y c3luYy51cy1lYXN0LTIuYW1hem9uYXdzLmNvbS92b2x1bWUvNzA4YWFmYWYtMDBi NC00ODViLTg1NGMtMGIzMmNhMzBmNTdiLzEyZTU5MDAxLTM1YWMtNGFiZi04NThm LTM3Yjk1NWEyNGIzZi5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggr BgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYw BKACBQAwDQYJKoZIhvcNAQELBQADggEBAAFhz0fTy6lxnaaF2HXXY5xwKP0dXC/s Rwsx7El7ra8iExExxVeJM0iemmH7D/FN/4oLagTlXAyViHm1eL6UfoQ8c0iKRZKi jnyvzp2VC3KSu/5RZ/ZUfWVStZA5HWVnHYxAlCdddZMpg7VFuf2I8ndV2fB8yhqe DHFU6gOglRJEaPw643TR+XZoBYmfn0PD10NpEOiPdw5ZSWp9SKpJFhKhBwPDqfH2 1qSyQIzRSJgU4AY7aYbd8biUkDr6ikj/BM6IKJVTVxX9xbj8qkD/BwmMkLIKLL9q aiyeoJd6oZYJGgTo1QlZskelqK1fDidMguMB9emXzlYjofP2xm9XZK8= -----END CERTIFICATE-----Generated at Tue Sep 8 22:19:19 2026 by rpki-client