$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/708aafaf-00b4-485b-854c-0b32ca30f57b/manifest.mft File: manifest.mft (raw, json) Hash identifier: +n5F3IKIBxgIqihl0DCUST9ypR8Qq1yDnGiDWQ39LEY= Subject key identifier: 1F:95:C8:0E:D6:C1:53:DD:7C:26:E5:9C:71:CA:76:3F:B1:86:81:97 Authority key identifier: E7:CA:DA:5F:08:81:D7:7B:EA:48:B0:76:8A:37:66:B5:00:65:AF:08 Certificate issuer: /CN=A918806F0000/serialNumber=E7CADA5F0881D77BEA48B0768A3766B50065AF08 Certificate serial: 5945A2668189415C0E5DB9800CF30FB4B03C71F7 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/58raXwiB13vqSLB2ijdmtQBlrwg.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/708aafaf-00b4-485b-854c-0b32ca30f57b/manifest.mft Manifest number: 066E Signing time: Wed 12 Aug 2026 00:01:41 +0000 Manifest this update: Wed 12 Aug 2026 00:01:41 +0000 Manifest next update: Sun 16 Aug 2026 00:01:41 +0000 Files and hashes: 1: 12e59001-35ac-4abf-858f-37b955a24b3f.crl (hash: pSgtmIMG8uCQsGha9y5Qq93+GXN1Ry9s91ajNPDCjow=) 2: 381fc6e6-5d49-41bc-b584-d9437c68e3cd.roa (hash: 8QqQOxAj3sRai6/BzOB2kV66/okkk7p8TzKsBaSwcWA=) 3: 49119734-9dbc-4bd4-98be-57e4ce078928.roa (hash: 0OedyNMwjL1I1p7rzryfdYD0nslES0i+43AbthFPFmE=) 4: 5663bf34-10ed-4309-a236-7466afd6f02f.roa (hash: aoaRIM84eruV/ISWBs3PJCPQb0sEmsLtTOcu1EdbsFA=) 5: cc2f7093-21a6-400f-9db1-93c2fe02bc1c.roa (hash: vbtxuyfgx9e6lLFR0CnUGCC1kgCTySw+Ljt4yM1fDb4=) 6: ea1d02aa-6d25-4b36-b42e-ba837d49e261.roa (hash: q5bh3h1LHQcXwRDCiiiYn6TP5+N60E0SyV4QnQBQL8c=) Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/708aafaf-00b4-485b-854c-0b32ca30f57b/12e59001-35ac-4abf-858f-37b955a24b3f.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/708aafaf-00b4-485b-854c-0b32ca30f57b/manifest.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/58raXwiB13vqSLB2ijdmtQBlrwg.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 16 Aug 2026 00:01:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 59:45:a2:66:81:89:41:5c:0e:5d:b9:80:0c:f3:0f:b4:b0:3c:71:f7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A918806F0000, serialNumber=E7CADA5F0881D77BEA48B0768A3766B50065AF08 Validity Not Before: Aug 12 00:01:41 2026 GMT Not After : Aug 16 00:01:41 2026 GMT Subject: serialNumber=fe5581cefc758e8f8d39cffa6343dd4c9349859134be80b93e23409d49f8a69a, CN=bb9a9116-f615-462e-a680-5266b327e0fa Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:ef:68:36:22:7c:f6:f6:72:86:ec:5c:4a:54: 0d:c8:2f:aa:00:3e:07:bd:30:a6:2c:bd:60:f5:fb: 78:22:01:77:88:b2:87:9d:3d:1a:85:aa:0e:79:32: b0:ed:f0:78:73:5c:b4:56:f8:a4:89:42:c4:9c:10: c7:31:a4:7c:bb:e5:91:7d:16:e3:38:21:08:01:6f: d0:21:45:80:93:60:77:8b:54:28:f3:9a:80:b6:53: ae:b5:c0:57:2b:8a:fd:16:f7:27:84:ef:6d:ef:d8: 25:e2:a7:ac:df:8a:09:99:50:93:b8:1b:a4:80:e2: 63:ec:29:f2:01:53:5f:cc:e4:9a:50:94:3f:90:c5: da:18:78:4b:43:4d:47:1f:7a:5b:76:12:57:2c:f0: 7e:a9:8d:04:36:9a:59:5e:de:c2:16:e3:f0:90:cc: 55:d2:6a:af:a7:c2:dd:4f:e2:2f:68:39:74:cb:6d: 5a:f9:32:9c:7b:43:30:16:54:9a:2d:86:1e:f0:de: fc:c4:0b:66:6f:54:ed:b4:cd:b9:09:fc:4e:e3:f6: 11:4d:7a:2e:22:f6:4c:ac:68:5f:90:bf:43:04:2e: f5:f7:ab:09:b7:a4:45:1d:6d:2a:e8:91:1e:49:39: ca:72:e7:de:2f:49:66:61:93:a5:1e:56:68:f2:03: 47:2b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1F:95:C8:0E:D6:C1:53:DD:7C:26:E5:9C:71:CA:76:3F:B1:86:81:97 X509v3 Authority Key Identifier: keyid:E7:CA:DA:5F:08:81:D7:7B:EA:48:B0:76:8A:37:66:B5:00:65:AF:08 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/58raXwiB13vqSLB2ijdmtQBlrwg.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/708aafaf-00b4-485b-854c-0b32ca30f57b/manifest.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/708aafaf-00b4-485b-854c-0b32ca30f57b/12e59001-35ac-4abf-858f-37b955a24b3f.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 27:af:5b:1f:00:26:d4:c3:8e:fc:88:14:25:bd:ef:67:d0:9f: 6f:a4:08:7f:22:44:f9:6f:99:ff:2f:00:e6:09:59:97:5b:b9: 48:29:ea:79:41:09:e9:9e:84:69:52:25:c4:d1:e4:1a:f9:a9: a7:4c:16:82:00:af:b8:22:f6:56:81:91:17:ee:7c:7d:2f:9d: f4:09:a3:99:1a:3a:a7:04:11:54:d1:92:3e:bf:77:49:39:9e: 90:81:35:80:47:6b:89:88:f3:d4:7e:13:cc:ec:01:4c:ed:57: 97:6e:eb:2b:44:5a:c9:92:3f:c1:7c:ff:d4:2c:71:dc:6e:0f: 38:3a:ad:97:94:ce:55:77:e9:14:a2:45:60:2b:34:f3:c6:71: 3c:bf:67:fd:42:fc:32:0d:bc:92:61:19:fa:08:28:45:09:d1: b1:7d:4b:91:10:b5:a7:6c:a4:82:b7:60:b4:3d:6f:54:41:c1: 1f:80:91:5a:ed:a1:c7:e0:cf:6b:10:87:11:c6:96:8e:c4:2b: 4b:aa:22:ec:e2:3d:58:71:8b:5f:98:47:59:15:9c:e9:9f:d2: 03:8c:27:01:6d:85:41:84:d1:10:da:0d:01:46:73:39:29:7a: 11:5e:4d:33:3b:60:4a:f0:dc:4f:1d:c1:94:44:eb:82:cf:23: 5e:e7:e8:fe -----BEGIN CERTIFICATE----- MIIFlTCCBH2gAwIBAgIUWUWiZoGJQVwOXbmADPMPtLA8cfcwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODgwNkYwMDAwMTEwLwYDVQQFEyhFN0NBREE1RjA4 ODFENzdCRUE0OEIwNzY4QTM3NjZCNTAwNjVBRjA4MB4XDTI2MDgxMjAwMDE0MVoX DTI2MDgxNjAwMDE0MVowejFJMEcGA1UEBRNAZmU1NTgxY2VmYzc1OGU4ZjhkMzlj ZmZhNjM0M2RkNGM5MzQ5ODU5MTM0YmU4MGI5M2UyMzQwOWQ0OWY4YTY5YTEtMCsG A1UEAxMkYmI5YTkxMTYtZjYxNS00NjJlLWE2ODAtNTI2NmIzMjdlMGZhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAx+9oNiJ89vZyhuxcSlQNyC+qAD4H vTCmLL1g9ft4IgF3iLKHnT0ahaoOeTKw7fB4c1y0VvikiULEnBDHMaR8u+WRfRbj OCEIAW/QIUWAk2B3i1Qo85qAtlOutcBXK4r9FvcnhO9t79gl4qes34oJmVCTuBuk gOJj7CnyAVNfzOSaUJQ/kMXaGHhLQ01HH3pbdhJXLPB+qY0ENppZXt7CFuPwkMxV 0mqvp8LdT+IvaDl0y21a+TKce0MwFlSaLYYe8N78xAtmb1TttM25CfxO4/YRTXou IvZMrGhfkL9DBC7196sJt6RFHW0q6JEeSTnKcufeL0lmYZOlHlZo8gNHKwIDAQAB o4ICQTCCAj0wHQYDVR0OBBYEFB+VyA7WwVPdfCblnHHKdj+xhoGXMB8GA1UdIwQY MBaAFOfK2l8Igdd76kiwdoo3ZrUAZa8IMA4GA1UdDwEB/wQEAwIHgDB+BggrBgEF BQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVw b3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi81OHJhWHdp QjEzdnFTTEIyaWpkbXRRQmxyd2cuY2VyMH8GCCsGAQUFBwELBHMwcTBvBggrBgEF BQcwC4ZjcnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5hbWF6b25hd3MuY29t L3ZvbHVtZS83MDhhYWZhZi0wMGI0LTQ4NWItODU0Yy0wYjMyY2EzMGY1N2IvbWFu aWZlc3QubWZ0MIGVBgNVHR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnBraS1y c3luYy51cy1lYXN0LTIuYW1hem9uYXdzLmNvbS92b2x1bWUvNzA4YWFmYWYtMDBi NC00ODViLTg1NGMtMGIzMmNhMzBmNTdiLzEyZTU5MDAxLTM1YWMtNGFiZi04NThm LTM3Yjk1NWEyNGIzZi5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggr BgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYw BKACBQAwDQYJKoZIhvcNAQELBQADggEBACevWx8AJtTDjvyIFCW972fQn2+kCH8i RPlvmf8vAOYJWZdbuUgp6nlBCemehGlSJcTR5Br5qadMFoIAr7gi9laBkRfufH0v nfQJo5kaOqcEEVTRkj6/d0k5npCBNYBHa4mI89R+E8zsAUztV5du6ytEWsmSP8F8 /9QscdxuDzg6rZeUzlV36RSiRWArNPPGcTy/Z/1C/DINvJJhGfoIKEUJ0bF9S5EQ tadspIK3YLQ9b1RBwR+AkVrtocfgz2sQhxHGlo7EK0uqIuziPVhxi1+YR1kVnOmf 0gOMJwFthUGE0RDaDQFGczkpehFeTTM7YErw3E8dwZRE64LPI17n6P4= -----END CERTIFICATE-----Generated at Wed Aug 12 12:32:40 2026 by rpki-client