$ rpki-client -vvvf rpki-rsync.us-east-2.amazonaws.com/volume/708aafaf-00b4-485b-854c-0b32ca30f57b/manifest.mft File: manifest.mft (raw, json) Hash identifier: OFxesGI+qN5x+lc6wa4mMQK7LTMeJkBt0BS0/06I9nE= Subject key identifier: AB:50:BF:96:67:17:D8:FF:78:A0:86:D8:CD:A2:33:08:F4:BC:15:2C Authority key identifier: E7:CA:DA:5F:08:81:D7:7B:EA:48:B0:76:8A:37:66:B5:00:65:AF:08 Certificate issuer: /CN=A918806F0000/serialNumber=E7CADA5F0881D77BEA48B0768A3766B50065AF08 Certificate serial: 74357FF3A0F05FF76EB88DBBFF7BDE9C4BE1E237 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/58raXwiB13vqSLB2ijdmtQBlrwg.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/708aafaf-00b4-485b-854c-0b32ca30f57b/manifest.mft Manifest number: 0678 Signing time: Sat 22 Aug 2026 00:03:41 +0000 Manifest this update: Sat 22 Aug 2026 00:03:41 +0000 Manifest next update: Wed 26 Aug 2026 00:03:41 +0000 Files and hashes: 1: 12e59001-35ac-4abf-858f-37b955a24b3f.crl (hash: VcrgLdP3zl3ElatwHFTZDMAGrqof7d4HWOAJg11N3DM=) 2: 381fc6e6-5d49-41bc-b584-d9437c68e3cd.roa (hash: 8QqQOxAj3sRai6/BzOB2kV66/okkk7p8TzKsBaSwcWA=) 3: 49119734-9dbc-4bd4-98be-57e4ce078928.roa (hash: 0OedyNMwjL1I1p7rzryfdYD0nslES0i+43AbthFPFmE=) 4: 5663bf34-10ed-4309-a236-7466afd6f02f.roa (hash: aoaRIM84eruV/ISWBs3PJCPQb0sEmsLtTOcu1EdbsFA=) 5: cc2f7093-21a6-400f-9db1-93c2fe02bc1c.roa (hash: vbtxuyfgx9e6lLFR0CnUGCC1kgCTySw+Ljt4yM1fDb4=) 6: ea1d02aa-6d25-4b36-b42e-ba837d49e261.roa (hash: q5bh3h1LHQcXwRDCiiiYn6TP5+N60E0SyV4QnQBQL8c=) Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/708aafaf-00b4-485b-854c-0b32ca30f57b/12e59001-35ac-4abf-858f-37b955a24b3f.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/708aafaf-00b4-485b-854c-0b32ca30f57b/manifest.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/58raXwiB13vqSLB2ijdmtQBlrwg.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 26 Aug 2026 00:03:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 74:35:7f:f3:a0:f0:5f:f7:6e:b8:8d:bb:ff:7b:de:9c:4b:e1:e2:37 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A918806F0000, serialNumber=E7CADA5F0881D77BEA48B0768A3766B50065AF08 Validity Not Before: Aug 22 00:03:41 2026 GMT Not After : Aug 26 00:03:41 2026 GMT Subject: serialNumber=6418500c3fbcb9f865118b1984ccfd5084ed297cd7b7683e9a784c01b373fda3, CN=bb9a9116-f615-462e-a680-5266b327e0fa Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:e6:f7:29:0b:39:fd:ca:11:22:18:2c:d2:88: fa:97:a8:ed:0d:93:23:e1:ad:f9:ac:53:51:2b:72: a9:b8:0a:ca:ec:f9:31:32:98:8a:2a:f4:60:11:c6: 50:e8:f7:eb:54:ba:ec:e5:47:0b:d4:f4:11:cf:d5: 98:c5:9b:3f:61:71:4c:43:66:a9:31:4a:f4:4d:c4: bc:d4:5d:d5:55:83:93:33:30:f5:63:d0:a7:5b:86: 03:96:b5:af:e1:f3:fc:a4:6d:9f:db:ae:7a:4f:4d: 0e:75:2e:6f:3b:91:a2:14:5b:24:d1:b1:5e:94:5b: 9c:3f:84:f6:b9:08:49:6c:dc:56:19:31:74:05:3b: 48:7c:ba:8d:f6:ca:73:b1:79:2c:45:3c:f6:85:f1: 78:da:30:c7:04:09:0b:35:3a:67:0a:e7:42:ad:55: ed:9b:cc:b1:cb:d9:71:b2:f0:80:bd:96:76:1c:76: 6e:20:50:81:58:45:ea:d8:6b:f8:c9:a5:a1:38:1a: de:42:9e:8d:37:bc:98:36:ac:6a:1b:b5:8b:f9:ca: 00:51:86:b4:0e:9c:0c:b4:9e:da:b3:0e:3d:61:00: b9:3a:a7:1f:74:38:be:59:49:30:18:0e:37:df:9c: 0d:42:df:1d:dc:0f:2f:d9:0e:37:15:5c:db:7e:8d: dc:25 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AB:50:BF:96:67:17:D8:FF:78:A0:86:D8:CD:A2:33:08:F4:BC:15:2C X509v3 Authority Key Identifier: keyid:E7:CA:DA:5F:08:81:D7:7B:EA:48:B0:76:8A:37:66:B5:00:65:AF:08 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/58raXwiB13vqSLB2ijdmtQBlrwg.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/708aafaf-00b4-485b-854c-0b32ca30f57b/manifest.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/708aafaf-00b4-485b-854c-0b32ca30f57b/12e59001-35ac-4abf-858f-37b955a24b3f.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 18:98:ff:72:d1:43:0d:61:f1:b5:53:e3:63:8e:b1:ea:27:85: b3:32:a7:41:ae:80:1f:62:db:95:9a:5f:f2:f1:1b:f0:35:26: c1:df:b2:9e:c6:78:d7:60:eb:0d:fc:cb:eb:21:78:0b:ab:b8: d3:77:fd:3a:c6:e9:25:bf:a0:ad:c1:42:50:b9:dc:32:e9:c5: 34:95:b0:d4:26:47:ce:32:8c:f1:d4:db:75:38:cf:0d:5f:60: 4b:93:84:90:a5:6d:fb:17:35:97:83:84:52:72:f1:5b:c8:2d: 33:28:a5:1a:83:70:f1:57:45:d4:db:7e:1d:e5:10:3e:dc:ab: 9f:1a:d3:88:9b:ad:93:ea:3a:ad:58:6c:e4:e4:e0:a6:35:6f: 11:95:b2:60:a6:4e:a8:cd:f5:2d:93:ce:10:fa:2f:c4:57:70: 26:0c:b4:07:5e:30:ae:8d:f1:e0:97:37:c9:82:9e:8a:af:28: f5:68:eb:0f:b9:56:37:b7:3b:79:b6:be:4f:94:5c:f2:cf:3c: 66:ab:64:22:bd:85:46:31:a1:76:f3:1f:b5:e0:e2:d9:72:39: d7:39:5c:41:5c:7b:47:0e:12:49:00:a8:04:67:7c:db:98:7f: 4b:49:d6:66:4e:73:34:c9:67:0e:e2:18:7b:e8:33:45:62:8d: d0:7e:df:87 -----BEGIN CERTIFICATE----- MIIFlTCCBH2gAwIBAgIUdDV/86DwX/duuI27/3venEvh4jcwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODgwNkYwMDAwMTEwLwYDVQQFEyhFN0NBREE1RjA4 ODFENzdCRUE0OEIwNzY4QTM3NjZCNTAwNjVBRjA4MB4XDTI2MDgyMjAwMDM0MVoX DTI2MDgyNjAwMDM0MVowejFJMEcGA1UEBRNANjQxODUwMGMzZmJjYjlmODY1MTE4 YjE5ODRjY2ZkNTA4NGVkMjk3Y2Q3Yjc2ODNlOWE3ODRjMDFiMzczZmRhMzEtMCsG A1UEAxMkYmI5YTkxMTYtZjYxNS00NjJlLWE2ODAtNTI2NmIzMjdlMGZhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAv+b3KQs5/coRIhgs0oj6l6jtDZMj 4a35rFNRK3KpuArK7PkxMpiKKvRgEcZQ6PfrVLrs5UcL1PQRz9WYxZs/YXFMQ2ap MUr0TcS81F3VVYOTMzD1Y9CnW4YDlrWv4fP8pG2f2656T00OdS5vO5GiFFsk0bFe lFucP4T2uQhJbNxWGTF0BTtIfLqN9spzsXksRTz2hfF42jDHBAkLNTpnCudCrVXt m8yxy9lxsvCAvZZ2HHZuIFCBWEXq2Gv4yaWhOBreQp6NN7yYNqxqG7WL+coAUYa0 DpwMtJ7asw49YQC5OqcfdDi+WUkwGA4335wNQt8d3A8v2Q43FVzbfo3cJQIDAQAB o4ICQTCCAj0wHQYDVR0OBBYEFKtQv5ZnF9j/eKCG2M2iMwj0vBUsMB8GA1UdIwQY MBaAFOfK2l8Igdd76kiwdoo3ZrUAZa8IMA4GA1UdDwEB/wQEAwIHgDB+BggrBgEF BQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVw b3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi81OHJhWHdp QjEzdnFTTEIyaWpkbXRRQmxyd2cuY2VyMH8GCCsGAQUFBwELBHMwcTBvBggrBgEF BQcwC4ZjcnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5hbWF6b25hd3MuY29t L3ZvbHVtZS83MDhhYWZhZi0wMGI0LTQ4NWItODU0Yy0wYjMyY2EzMGY1N2IvbWFu aWZlc3QubWZ0MIGVBgNVHR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnBraS1y c3luYy51cy1lYXN0LTIuYW1hem9uYXdzLmNvbS92b2x1bWUvNzA4YWFmYWYtMDBi NC00ODViLTg1NGMtMGIzMmNhMzBmNTdiLzEyZTU5MDAxLTM1YWMtNGFiZi04NThm LTM3Yjk1NWEyNGIzZi5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggr BgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYw BKACBQAwDQYJKoZIhvcNAQELBQADggEBABiY/3LRQw1h8bVT42OOseonhbMyp0Gu gB9i25WaX/LxG/A1JsHfsp7GeNdg6w38y+sheAuruNN3/TrG6SW/oK3BQlC53DLp xTSVsNQmR84yjPHU23U4zw1fYEuThJClbfsXNZeDhFJy8VvILTMopRqDcPFXRdTb fh3lED7cq58a04ibrZPqOq1YbOTk4KY1bxGVsmCmTqjN9S2TzhD6L8RXcCYMtAde MK6N8eCXN8mCnoqvKPVo6w+5Vje3O3m2vk+UXPLPPGarZCK9hUYxoXbzH7Xg4tly Odc5XEFce0cOEkkAqARnfNuYf0tJ1mZOczTJZw7iGHvoM0VijdB+34c= -----END CERTIFICATE-----Generated at Sat Aug 22 20:53:59 2026 by rpki-client