$ rpki-client -vvvf rpki-rsync.us-east-2.amazonaws.com/volume/708aafaf-00b4-485b-854c-0b32ca30f57b/manifest.mft File: manifest.mft (raw, json) Hash identifier: QdnVeLxx2xDfZzKiUHjzP7BcpjiHugHHpxtXKUHdoZE= Subject key identifier: 1B:4F:F6:77:DA:9D:6D:31:7E:8B:D6:FB:6A:9C:09:E9:1A:28:D3:C8 Authority key identifier: E7:CA:DA:5F:08:81:D7:7B:EA:48:B0:76:8A:37:66:B5:00:65:AF:08 Certificate issuer: /CN=A918806F0000/serialNumber=E7CADA5F0881D77BEA48B0768A3766B50065AF08 Certificate serial: 4BED292F4424603B94EA096F8D9FC69DD9CC15DA Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/58raXwiB13vqSLB2ijdmtQBlrwg.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/708aafaf-00b4-485b-854c-0b32ca30f57b/manifest.mft Manifest number: 06A4 Signing time: Mon 05 Oct 2026 00:00:21 +0000 Manifest this update: Mon 05 Oct 2026 00:00:21 +0000 Manifest next update: Fri 09 Oct 2026 00:00:21 +0000 Files and hashes: 1: 12e59001-35ac-4abf-858f-37b955a24b3f.crl (hash: ef6lDWv7PFO1lip7GYX/H2ozm54VoT1wCdxmHOS3jXA=) 2: 381fc6e6-5d49-41bc-b584-d9437c68e3cd.roa (hash: 8QqQOxAj3sRai6/BzOB2kV66/okkk7p8TzKsBaSwcWA=) 3: 49119734-9dbc-4bd4-98be-57e4ce078928.roa (hash: vsd8H0ZXROgbcMd/yOBF4Rr2WxC8q8haStlcApwRNV0=) 4: 5663bf34-10ed-4309-a236-7466afd6f02f.roa (hash: 3wN3pxcjzw7syiUxAt83nomcr89rOgXxIJI+jjtEZLw=) 5: cc2f7093-21a6-400f-9db1-93c2fe02bc1c.roa (hash: F1FArQzNTCGD4JZjh1LAuO6hCcCelvb9o6BkT+npT/g=) 6: ea1d02aa-6d25-4b36-b42e-ba837d49e261.roa (hash: UeN2/2dzuqoJ5gtGFCaoPuzhuQrQVJtF3xacIIrOp3o=) Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/708aafaf-00b4-485b-854c-0b32ca30f57b/12e59001-35ac-4abf-858f-37b955a24b3f.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/708aafaf-00b4-485b-854c-0b32ca30f57b/manifest.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/58raXwiB13vqSLB2ijdmtQBlrwg.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 09 Oct 2026 00:00:21 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4b:ed:29:2f:44:24:60:3b:94:ea:09:6f:8d:9f:c6:9d:d9:cc:15:da Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A918806F0000, serialNumber=E7CADA5F0881D77BEA48B0768A3766B50065AF08 Validity Not Before: Oct 5 00:00:21 2026 GMT Not After : Oct 9 00:00:21 2026 GMT Subject: serialNumber=23c81897d4cbf823f4b7eae19d5d332bbd953d6ffff593e0b147aa06a355c3c4, CN=bb9a9116-f615-462e-a680-5266b327e0fa Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f3:36:0a:ae:26:1d:62:a9:d2:be:14:fd:21:93: 7e:5d:df:0c:8b:f4:21:07:51:63:06:52:5c:cd:c8: 99:14:13:19:06:82:36:20:c6:f5:10:73:d5:a8:29: 5c:5c:d5:fa:93:cd:ce:af:da:ce:8d:c0:75:a8:8b: 43:f9:ef:21:45:cb:0e:69:d4:23:17:38:b4:a0:9c: 3e:0e:3e:05:bd:3c:b5:b0:7f:dd:0f:2c:40:a9:22: f7:cf:5e:1c:d3:4e:e2:93:7b:8d:b1:f2:d4:1b:f0: c4:ab:60:6d:a0:58:26:a5:a5:4a:92:9d:e0:23:f6: 75:81:11:d2:4a:ff:ac:9f:af:c9:87:0b:17:e5:49: 52:89:d9:ae:04:34:f5:c5:f6:3e:63:60:84:c5:fc: 8f:52:d8:b1:e0:e2:7d:05:69:1f:c0:f9:ea:ce:86: e0:68:7f:95:2b:60:7f:c6:d8:33:5a:8a:8e:7b:2b: d1:ae:2e:6f:2e:b9:c8:fa:e6:95:98:c4:42:4b:92: 0d:79:70:44:a7:e8:45:91:36:e6:3d:da:81:18:ab: bf:e5:55:0e:6b:0d:c2:79:23:2c:d8:73:3f:11:f1: dd:56:7f:72:64:20:32:bb:8f:c4:fd:ac:01:2e:e6: b1:1f:b1:05:ec:3c:77:c0:ee:13:ab:bd:74:e0:2a: 1d:f9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1B:4F:F6:77:DA:9D:6D:31:7E:8B:D6:FB:6A:9C:09:E9:1A:28:D3:C8 X509v3 Authority Key Identifier: keyid:E7:CA:DA:5F:08:81:D7:7B:EA:48:B0:76:8A:37:66:B5:00:65:AF:08 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/58raXwiB13vqSLB2ijdmtQBlrwg.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/708aafaf-00b4-485b-854c-0b32ca30f57b/manifest.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/708aafaf-00b4-485b-854c-0b32ca30f57b/12e59001-35ac-4abf-858f-37b955a24b3f.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 83:d7:02:60:a3:d2:db:3e:71:9f:d3:f4:c2:92:48:72:66:b6: bd:f2:ca:86:5c:9d:db:32:fb:fc:7f:e3:04:1f:02:56:95:eb: f6:a4:cd:a3:18:b6:26:e6:01:c6:01:dc:57:38:6c:6a:42:68: 32:47:bf:76:fb:75:a1:07:b2:f0:dd:da:4e:2e:da:7f:3b:25: d7:29:ae:cd:bf:e2:2c:35:b0:b4:d5:e3:a0:e5:75:87:75:21: f5:5a:a6:a6:2e:ef:44:b4:96:3a:da:52:b0:32:23:31:9b:1c: 66:83:d4:8c:57:df:59:1d:ed:e9:e4:0b:79:db:a7:4b:77:31: 66:73:d1:db:bc:18:b8:d6:97:d5:e5:91:90:95:de:19:4c:d2: a5:ad:d2:c6:ea:f8:2f:2b:df:91:b3:8b:69:5e:f4:ab:c6:c6: 98:ca:d0:f9:11:e1:c3:2e:3c:c1:bc:15:2b:8b:31:a7:26:23: 83:14:be:f0:9a:c3:17:77:09:24:90:fd:2b:37:2d:1b:79:4f: 5e:58:01:9c:b4:4b:59:2b:b6:dc:b5:62:16:b9:e2:4c:2d:ae: ee:e7:1b:4e:a7:c5:52:ec:94:be:8d:07:bc:e0:db:31:62:ea: c6:a6:65:2f:ef:dc:8a:e8:ee:a1:f0:69:69:5d:b8:02:cb:33: 31:01:7e:69 -----BEGIN CERTIFICATE----- MIIFlTCCBH2gAwIBAgIUS+0pL0QkYDuU6glvjZ/GndnMFdowDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODgwNkYwMDAwMTEwLwYDVQQFEyhFN0NBREE1RjA4 ODFENzdCRUE0OEIwNzY4QTM3NjZCNTAwNjVBRjA4MB4XDTI2MTAwNTAwMDAyMVoX DTI2MTAwOTAwMDAyMVowejFJMEcGA1UEBRNAMjNjODE4OTdkNGNiZjgyM2Y0Yjdl YWUxOWQ1ZDMzMmJiZDk1M2Q2ZmZmZjU5M2UwYjE0N2FhMDZhMzU1YzNjNDEtMCsG A1UEAxMkYmI5YTkxMTYtZjYxNS00NjJlLWE2ODAtNTI2NmIzMjdlMGZhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA8zYKriYdYqnSvhT9IZN+Xd8Mi/Qh B1FjBlJczciZFBMZBoI2IMb1EHPVqClcXNX6k83Or9rOjcB1qItD+e8hRcsOadQj Fzi0oJw+Dj4FvTy1sH/dDyxAqSL3z14c007ik3uNsfLUG/DEq2BtoFgmpaVKkp3g I/Z1gRHSSv+sn6/JhwsX5UlSidmuBDT1xfY+Y2CExfyPUtix4OJ9BWkfwPnqzobg aH+VK2B/xtgzWoqOeyvRri5vLrnI+uaVmMRCS5INeXBEp+hFkTbmPdqBGKu/5VUO aw3CeSMs2HM/EfHdVn9yZCAyu4/E/awBLuaxH7EF7Dx3wO4Tq7104Cod+QIDAQAB o4ICQTCCAj0wHQYDVR0OBBYEFBtP9nfanW0xfovW+2qcCekaKNPIMB8GA1UdIwQY MBaAFOfK2l8Igdd76kiwdoo3ZrUAZa8IMA4GA1UdDwEB/wQEAwIHgDB+BggrBgEF BQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVw b3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi81OHJhWHdp QjEzdnFTTEIyaWpkbXRRQmxyd2cuY2VyMH8GCCsGAQUFBwELBHMwcTBvBggrBgEF BQcwC4ZjcnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5hbWF6b25hd3MuY29t L3ZvbHVtZS83MDhhYWZhZi0wMGI0LTQ4NWItODU0Yy0wYjMyY2EzMGY1N2IvbWFu aWZlc3QubWZ0MIGVBgNVHR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnBraS1y c3luYy51cy1lYXN0LTIuYW1hem9uYXdzLmNvbS92b2x1bWUvNzA4YWFmYWYtMDBi NC00ODViLTg1NGMtMGIzMmNhMzBmNTdiLzEyZTU5MDAxLTM1YWMtNGFiZi04NThm LTM3Yjk1NWEyNGIzZi5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggr BgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYw BKACBQAwDQYJKoZIhvcNAQELBQADggEBAIPXAmCj0ts+cZ/T9MKSSHJmtr3yyoZc ndsy+/x/4wQfAlaV6/akzaMYtibmAcYB3Fc4bGpCaDJHv3b7daEHsvDd2k4u2n87 Jdcprs2/4iw1sLTV46DldYd1IfVapqYu70S0ljraUrAyIzGbHGaD1IxX31kd7enk C3nbp0t3MWZz0du8GLjWl9XlkZCV3hlM0qWt0sbq+C8r35Gzi2le9KvGxpjK0PkR 4cMuPMG8FSuLMacmI4MUvvCawxd3CSSQ/Ss3LRt5T15YAZy0S1krtty1Yha54kwt ru7nG06nxVLslL6NB7zg2zFi6samZS/v3Iro7qHwaWlduALLMzEBfmk= -----END CERTIFICATE-----Generated at Mon Oct 5 11:27:41 2026 by rpki-client