$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/708aafaf-00b4-485b-854c-0b32ca30f57b/manifest.mft File: manifest.mft (raw, json) Hash identifier: IxM7Esp+T5P9UEx2fOjA8F6eYH4wXT8dRInJoZA1iR8= Subject key identifier: D7:05:4D:CF:42:7F:A1:49:AD:1A:B5:80:91:D0:5E:E1:85:36:2F:33 Authority key identifier: E7:CA:DA:5F:08:81:D7:7B:EA:48:B0:76:8A:37:66:B5:00:65:AF:08 Certificate issuer: /CN=A918806F0000/serialNumber=E7CADA5F0881D77BEA48B0768A3766B50065AF08 Certificate serial: 093E8F5FBA411F4D6FD2D471B067D92C0C2626C5 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/58raXwiB13vqSLB2ijdmtQBlrwg.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/708aafaf-00b4-485b-854c-0b32ca30f57b/manifest.mft Manifest number: 0664 Signing time: Sun 02 Aug 2026 00:03:47 +0000 Manifest this update: Sun 02 Aug 2026 00:03:47 +0000 Manifest next update: Thu 06 Aug 2026 00:03:47 +0000 Files and hashes: 1: 12e59001-35ac-4abf-858f-37b955a24b3f.crl (hash: WQElHfodfGrbO1F4RHWcgPL4VLq9IZuufhqtDMlHa7o=) 2: 381fc6e6-5d49-41bc-b584-d9437c68e3cd.roa (hash: M+i7XpsJD4p5Tk2yVGdLmGjDs5xTMXCNLVAUi3YO9fw=) 3: 49119734-9dbc-4bd4-98be-57e4ce078928.roa (hash: 0OedyNMwjL1I1p7rzryfdYD0nslES0i+43AbthFPFmE=) 4: 5663bf34-10ed-4309-a236-7466afd6f02f.roa (hash: aoaRIM84eruV/ISWBs3PJCPQb0sEmsLtTOcu1EdbsFA=) 5: cc2f7093-21a6-400f-9db1-93c2fe02bc1c.roa (hash: vbtxuyfgx9e6lLFR0CnUGCC1kgCTySw+Ljt4yM1fDb4=) 6: ea1d02aa-6d25-4b36-b42e-ba837d49e261.roa (hash: q5bh3h1LHQcXwRDCiiiYn6TP5+N60E0SyV4QnQBQL8c=) Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/708aafaf-00b4-485b-854c-0b32ca30f57b/12e59001-35ac-4abf-858f-37b955a24b3f.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/708aafaf-00b4-485b-854c-0b32ca30f57b/manifest.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/58raXwiB13vqSLB2ijdmtQBlrwg.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 06 Aug 2026 00:03:47 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 09:3e:8f:5f:ba:41:1f:4d:6f:d2:d4:71:b0:67:d9:2c:0c:26:26:c5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A918806F0000, serialNumber=E7CADA5F0881D77BEA48B0768A3766B50065AF08 Validity Not Before: Aug 2 00:03:47 2026 GMT Not After : Aug 6 00:03:47 2026 GMT Subject: serialNumber=971a9c5156db063ef0662f7352905207a599ba7a51bd2cb3703a3bef5601fc26, CN=bb9a9116-f615-462e-a680-5266b327e0fa Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a1:ad:c3:94:ec:32:a6:88:f7:e2:33:a3:65:7f: b8:b8:6a:c9:a2:84:16:6c:90:6e:b2:a3:4a:c3:67: e5:f7:24:10:3a:ce:46:e1:b9:ca:41:c2:ac:c4:5a: b7:ca:e9:6e:2e:cb:35:5e:fc:90:d9:73:b9:e4:46: 8b:e5:6a:da:0c:4e:15:ac:06:9d:d0:c8:c7:11:65: 51:7f:cf:2f:f7:c2:2c:84:24:f6:5a:90:4e:7c:b2: 6f:30:78:85:8d:01:76:1b:d3:c4:97:29:97:84:c9: 1c:15:d6:26:df:ac:74:e2:70:30:04:71:e2:b0:74: 80:19:3c:2c:9e:f7:c7:5c:7f:4a:c0:9b:13:d9:2e: af:f9:f8:81:5d:b3:0c:85:2f:53:e2:90:94:66:fc: f9:eb:87:1e:d5:4f:5f:57:87:27:22:91:26:c9:65: 73:70:03:ec:52:92:e3:41:a7:82:78:60:2c:cd:6f: d1:3d:63:1e:70:be:7e:53:87:97:af:08:5a:67:a7: 0e:fb:98:de:cf:ec:7c:5b:9d:cf:e1:22:f1:46:90: a1:d7:44:bb:7a:0f:18:93:97:aa:59:48:bb:0a:4c: 6c:55:5f:02:f6:6e:97:a1:d0:f6:73:87:83:0b:8b: 76:df:37:4f:a0:39:ba:fb:41:60:e3:f6:1e:4e:a1: 02:8d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D7:05:4D:CF:42:7F:A1:49:AD:1A:B5:80:91:D0:5E:E1:85:36:2F:33 X509v3 Authority Key Identifier: keyid:E7:CA:DA:5F:08:81:D7:7B:EA:48:B0:76:8A:37:66:B5:00:65:AF:08 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/58raXwiB13vqSLB2ijdmtQBlrwg.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/708aafaf-00b4-485b-854c-0b32ca30f57b/manifest.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/708aafaf-00b4-485b-854c-0b32ca30f57b/12e59001-35ac-4abf-858f-37b955a24b3f.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 29:b1:93:c7:82:c9:bc:a8:4b:c4:ea:c4:6f:6f:54:1a:3f:18: 4c:66:0f:47:ca:34:e8:d5:3c:d0:10:c3:3b:bd:af:6f:43:c2: 2f:69:ea:7e:32:82:ed:b3:97:57:94:47:ec:7c:cb:01:35:14: ab:79:8a:6d:bd:c4:ad:31:d2:77:f5:a0:24:d5:87:83:c6:2b: 48:87:d4:e1:23:a8:fb:3a:d8:45:1f:3c:02:9e:9b:bb:8c:d5: 52:5d:c4:df:5c:99:3d:1a:1b:4d:1a:57:1c:69:00:7f:ab:ed: 66:2f:a6:de:7e:1f:88:75:59:8d:68:e6:30:25:90:92:3c:0e: 46:4b:45:5d:6e:ff:d1:2c:77:4a:bc:88:65:9a:eb:a7:a8:a3: c3:c7:b1:79:34:a2:03:17:9e:e6:1c:5f:3f:e4:73:af:04:ee: 8e:0f:4f:be:af:23:4f:f0:af:29:52:aa:6b:7b:13:f3:a8:bc: 0a:82:74:30:ca:7d:5f:13:4a:a9:56:33:99:8a:9c:db:97:68: 13:28:1d:ac:25:53:97:5e:d6:08:9d:4a:38:0c:bc:78:54:7c: f8:3f:99:69:13:0b:4b:4d:07:76:5c:9b:5c:ab:96:78:ed:6c: 63:58:60:39:c8:d2:a6:26:7f:aa:f2:04:88:4e:91:ed:dc:df: 53:ea:0a:8e -----BEGIN CERTIFICATE----- MIIFlTCCBH2gAwIBAgIUCT6PX7pBH01v0tRxsGfZLAwmJsUwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODgwNkYwMDAwMTEwLwYDVQQFEyhFN0NBREE1RjA4 ODFENzdCRUE0OEIwNzY4QTM3NjZCNTAwNjVBRjA4MB4XDTI2MDgwMjAwMDM0N1oX DTI2MDgwNjAwMDM0N1owejFJMEcGA1UEBRNAOTcxYTljNTE1NmRiMDYzZWYwNjYy ZjczNTI5MDUyMDdhNTk5YmE3YTUxYmQyY2IzNzAzYTNiZWY1NjAxZmMyNjEtMCsG A1UEAxMkYmI5YTkxMTYtZjYxNS00NjJlLWE2ODAtNTI2NmIzMjdlMGZhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoa3DlOwypoj34jOjZX+4uGrJooQW bJBusqNKw2fl9yQQOs5G4bnKQcKsxFq3yuluLss1XvyQ2XO55EaL5WraDE4VrAad 0MjHEWVRf88v98IshCT2WpBOfLJvMHiFjQF2G9PElymXhMkcFdYm36x04nAwBHHi sHSAGTwsnvfHXH9KwJsT2S6v+fiBXbMMhS9T4pCUZvz564ce1U9fV4cnIpEmyWVz cAPsUpLjQaeCeGAszW/RPWMecL5+U4eXrwhaZ6cO+5jez+x8W53P4SLxRpCh10S7 eg8Yk5eqWUi7CkxsVV8C9m6XodD2c4eDC4t23zdPoDm6+0Fg4/YeTqECjQIDAQAB o4ICQTCCAj0wHQYDVR0OBBYEFNcFTc9Cf6FJrRq1gJHQXuGFNi8zMB8GA1UdIwQY MBaAFOfK2l8Igdd76kiwdoo3ZrUAZa8IMA4GA1UdDwEB/wQEAwIHgDB+BggrBgEF BQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVw b3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi81OHJhWHdp QjEzdnFTTEIyaWpkbXRRQmxyd2cuY2VyMH8GCCsGAQUFBwELBHMwcTBvBggrBgEF BQcwC4ZjcnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5hbWF6b25hd3MuY29t L3ZvbHVtZS83MDhhYWZhZi0wMGI0LTQ4NWItODU0Yy0wYjMyY2EzMGY1N2IvbWFu aWZlc3QubWZ0MIGVBgNVHR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnBraS1y c3luYy51cy1lYXN0LTIuYW1hem9uYXdzLmNvbS92b2x1bWUvNzA4YWFmYWYtMDBi NC00ODViLTg1NGMtMGIzMmNhMzBmNTdiLzEyZTU5MDAxLTM1YWMtNGFiZi04NThm LTM3Yjk1NWEyNGIzZi5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggr BgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYw BKACBQAwDQYJKoZIhvcNAQELBQADggEBACmxk8eCybyoS8TqxG9vVBo/GExmD0fK NOjVPNAQwzu9r29Dwi9p6n4ygu2zl1eUR+x8ywE1FKt5im29xK0x0nf1oCTVh4PG K0iH1OEjqPs62EUfPAKem7uM1VJdxN9cmT0aG00aVxxpAH+r7WYvpt5+H4h1WY1o 5jAlkJI8DkZLRV1u/9Esd0q8iGWa66eoo8PHsXk0ogMXnuYcXz/kc68E7o4PT76v I0/wrylSqmt7E/OovAqCdDDKfV8TSqlWM5mKnNuXaBMoHawlU5de1gidSjgMvHhU fPg/mWkTC0tNB3Zcm1yrlnjtbGNYYDnI0qYmf6ryBIhOke3c31PqCo4= -----END CERTIFICATE-----Generated at Sun Aug 2 22:35:42 2026 by rpki-client