$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/708aafaf-00b4-485b-854c-0b32ca30f57b/manifest.mft File: manifest.mft (raw, json) Hash identifier: OCt3daPRi+4TEGrlUItg2hY3+4j95PPpQqxVS72yc3c= Subject key identifier: 9B:1F:51:05:95:8C:B1:67:71:28:3B:C9:37:7E:8A:C5:37:36:5B:16 Authority key identifier: E7:CA:DA:5F:08:81:D7:7B:EA:48:B0:76:8A:37:66:B5:00:65:AF:08 Certificate issuer: /CN=A918806F0000/serialNumber=E7CADA5F0881D77BEA48B0768A3766B50065AF08 Certificate serial: 36802455B5D6E62380119D56432D292FCD83942E Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/58raXwiB13vqSLB2ijdmtQBlrwg.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/708aafaf-00b4-485b-854c-0b32ca30f57b/manifest.mft Manifest number: 0660 Signing time: Wed 29 Jul 2026 00:03:15 +0000 Manifest this update: Wed 29 Jul 2026 00:03:15 +0000 Manifest next update: Sun 02 Aug 2026 00:03:15 +0000 Files and hashes: 1: 12e59001-35ac-4abf-858f-37b955a24b3f.crl (hash: wqKZK64jCVAU5IdbdwG7kMH5zmksRV4AY0RA+8fz8OU=) 2: 381fc6e6-5d49-41bc-b584-d9437c68e3cd.roa (hash: M+i7XpsJD4p5Tk2yVGdLmGjDs5xTMXCNLVAUi3YO9fw=) 3: 49119734-9dbc-4bd4-98be-57e4ce078928.roa (hash: 0OedyNMwjL1I1p7rzryfdYD0nslES0i+43AbthFPFmE=) 4: 5663bf34-10ed-4309-a236-7466afd6f02f.roa (hash: aoaRIM84eruV/ISWBs3PJCPQb0sEmsLtTOcu1EdbsFA=) 5: cc2f7093-21a6-400f-9db1-93c2fe02bc1c.roa (hash: vbtxuyfgx9e6lLFR0CnUGCC1kgCTySw+Ljt4yM1fDb4=) 6: ea1d02aa-6d25-4b36-b42e-ba837d49e261.roa (hash: q5bh3h1LHQcXwRDCiiiYn6TP5+N60E0SyV4QnQBQL8c=) Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/708aafaf-00b4-485b-854c-0b32ca30f57b/12e59001-35ac-4abf-858f-37b955a24b3f.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/708aafaf-00b4-485b-854c-0b32ca30f57b/manifest.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/58raXwiB13vqSLB2ijdmtQBlrwg.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 02 Aug 2026 00:03:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 36:80:24:55:b5:d6:e6:23:80:11:9d:56:43:2d:29:2f:cd:83:94:2e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A918806F0000, serialNumber=E7CADA5F0881D77BEA48B0768A3766B50065AF08 Validity Not Before: Jul 29 00:03:15 2026 GMT Not After : Aug 2 00:03:15 2026 GMT Subject: serialNumber=96c1fd448ec90ccba780d4bd1eb583af50d4671eddd16264500227cd045d032a, CN=bb9a9116-f615-462e-a680-5266b327e0fa Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9f:1d:c5:7c:d3:56:5e:52:4c:5b:c0:c3:2a:98: 0e:d8:af:ae:54:be:c5:a7:6c:8f:99:2d:ec:f1:35: 1f:c0:8c:14:c6:8e:d9:c7:48:a8:b7:a8:fb:b9:8c: 6c:22:fb:49:a5:b5:62:22:76:76:90:d7:fe:f5:3a: 89:d8:d8:88:a4:2c:0e:bb:d4:49:b2:28:22:d5:37: 52:10:88:0a:f1:25:60:8f:65:01:b6:22:2f:fc:64: 9a:49:bf:0a:7d:d2:36:21:7c:54:f5:34:3e:4d:c8: 29:f7:ec:11:9a:dd:3a:73:a9:1b:15:88:ea:d7:63: ed:9c:57:97:7b:5b:b1:27:40:86:a3:e9:92:00:9a: e1:e4:ff:03:71:68:46:ec:3b:01:8e:67:5d:3f:b0: 79:68:7b:c3:b7:0e:e0:1f:a0:5a:37:10:9f:22:da: 1e:6a:26:cf:0a:f5:27:8b:45:33:3a:8f:50:10:da: 9e:b8:df:e4:04:82:4a:db:b3:a4:d2:a4:f5:64:36: 73:c2:38:72:18:3f:7c:53:79:af:50:95:37:a9:83: f1:c0:65:4c:ae:6c:39:d2:18:9f:0d:a3:66:a3:d7: 27:5d:7d:2b:f3:b9:1e:fc:87:35:8c:9e:60:86:83: 04:23:58:37:e7:f3:b0:47:79:6b:1c:9b:8f:da:f1: 46:ad Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9B:1F:51:05:95:8C:B1:67:71:28:3B:C9:37:7E:8A:C5:37:36:5B:16 X509v3 Authority Key Identifier: keyid:E7:CA:DA:5F:08:81:D7:7B:EA:48:B0:76:8A:37:66:B5:00:65:AF:08 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/58raXwiB13vqSLB2ijdmtQBlrwg.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/708aafaf-00b4-485b-854c-0b32ca30f57b/manifest.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/708aafaf-00b4-485b-854c-0b32ca30f57b/12e59001-35ac-4abf-858f-37b955a24b3f.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 80:5e:bf:d6:82:0f:20:57:95:f3:c3:93:b4:b5:9c:4d:61:9c: 2e:3c:19:cf:55:fa:ba:a2:01:b3:3d:d8:1f:ad:26:71:f3:b2: 92:b5:f2:90:65:a9:e5:95:01:e1:00:0b:b7:f7:95:34:34:5a: a4:76:db:88:7b:ab:ba:a0:73:1a:16:db:4a:e3:41:4e:62:ad: 50:f5:9a:7b:38:57:0e:b5:34:fe:4a:04:20:4e:de:26:f2:03: 0e:7d:7c:9c:e2:8b:11:3b:66:b5:7d:b1:f0:9d:a7:73:7c:51: 44:39:6f:9b:90:1e:49:a7:e9:4c:9f:c6:af:43:17:59:92:0a: 26:b2:b2:75:69:61:35:77:1f:ff:71:c6:71:e2:ed:fb:95:85: 7c:21:ed:35:ae:6c:08:b7:db:45:6d:2e:69:84:3a:a7:3b:47: 0c:a3:29:14:e8:57:a7:c0:b3:f7:82:f6:42:98:f8:85:47:49: 7d:48:64:c3:fb:81:b6:ac:08:d3:25:0f:d2:43:0b:6f:09:21: 10:4d:4d:41:ac:98:3b:6a:65:41:f7:ac:da:f5:9c:a9:c0:3e: 52:d1:e5:0d:de:76:7a:19:18:f4:be:71:22:a7:2e:11:48:00: b1:68:0d:2c:c6:85:28:e4:0b:3f:46:27:e3:0a:86:16:99:3b: 1d:24:b9:5b -----BEGIN CERTIFICATE----- MIIFlTCCBH2gAwIBAgIUNoAkVbXW5iOAEZ1WQy0pL82DlC4wDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODgwNkYwMDAwMTEwLwYDVQQFEyhFN0NBREE1RjA4 ODFENzdCRUE0OEIwNzY4QTM3NjZCNTAwNjVBRjA4MB4XDTI2MDcyOTAwMDMxNVoX DTI2MDgwMjAwMDMxNVowejFJMEcGA1UEBRNAOTZjMWZkNDQ4ZWM5MGNjYmE3ODBk NGJkMWViNTgzYWY1MGQ0NjcxZWRkZDE2MjY0NTAwMjI3Y2QwNDVkMDMyYTEtMCsG A1UEAxMkYmI5YTkxMTYtZjYxNS00NjJlLWE2ODAtNTI2NmIzMjdlMGZhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnx3FfNNWXlJMW8DDKpgO2K+uVL7F p2yPmS3s8TUfwIwUxo7Zx0iot6j7uYxsIvtJpbViInZ2kNf+9TqJ2NiIpCwOu9RJ sigi1TdSEIgK8SVgj2UBtiIv/GSaSb8KfdI2IXxU9TQ+Tcgp9+wRmt06c6kbFYjq 12PtnFeXe1uxJ0CGo+mSAJrh5P8DcWhG7DsBjmddP7B5aHvDtw7gH6BaNxCfItoe aibPCvUni0UzOo9QENqeuN/kBIJK27Ok0qT1ZDZzwjhyGD98U3mvUJU3qYPxwGVM rmw50hifDaNmo9cnXX0r87ke/Ic1jJ5ghoMEI1g35/OwR3lrHJuP2vFGrQIDAQAB o4ICQTCCAj0wHQYDVR0OBBYEFJsfUQWVjLFncSg7yTd+isU3NlsWMB8GA1UdIwQY MBaAFOfK2l8Igdd76kiwdoo3ZrUAZa8IMA4GA1UdDwEB/wQEAwIHgDB+BggrBgEF BQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVw b3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi81OHJhWHdp QjEzdnFTTEIyaWpkbXRRQmxyd2cuY2VyMH8GCCsGAQUFBwELBHMwcTBvBggrBgEF BQcwC4ZjcnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5hbWF6b25hd3MuY29t L3ZvbHVtZS83MDhhYWZhZi0wMGI0LTQ4NWItODU0Yy0wYjMyY2EzMGY1N2IvbWFu aWZlc3QubWZ0MIGVBgNVHR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnBraS1y c3luYy51cy1lYXN0LTIuYW1hem9uYXdzLmNvbS92b2x1bWUvNzA4YWFmYWYtMDBi NC00ODViLTg1NGMtMGIzMmNhMzBmNTdiLzEyZTU5MDAxLTM1YWMtNGFiZi04NThm LTM3Yjk1NWEyNGIzZi5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggr BgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYw BKACBQAwDQYJKoZIhvcNAQELBQADggEBAIBev9aCDyBXlfPDk7S1nE1hnC48Gc9V +rqiAbM92B+tJnHzspK18pBlqeWVAeEAC7f3lTQ0WqR224h7q7qgcxoW20rjQU5i rVD1mns4Vw61NP5KBCBO3ibyAw59fJziixE7ZrV9sfCdp3N8UUQ5b5uQHkmn6Uyf xq9DF1mSCiaysnVpYTV3H/9xxnHi7fuVhXwh7TWubAi320VtLmmEOqc7RwyjKRTo V6fAs/eC9kKY+IVHSX1IZMP7gbasCNMlD9JDC28JIRBNTUGsmDtqZUH3rNr1nKnA PlLR5Q3ednoZGPS+cSKnLhFIALFoDSzGhSjkCz9GJ+MKhhaZOx0kuVs= -----END CERTIFICATE-----Generated at Wed Jul 29 10:33:16 2026 by rpki-client