$ rpki-client -vvvf rpki-rsync.us-east-2.amazonaws.com/volume/708aafaf-00b4-485b-854c-0b32ca30f57b/manifest.mft File: manifest.mft (raw, json) Hash identifier: Er7zdOgCqWIItWti9mv5hZQaZJkYsWNeh/A+9TgsrUY= Subject key identifier: 6D:B1:20:D4:18:98:CE:42:8F:6B:5B:CF:B3:4B:3C:5D:4F:9E:3E:0B Authority key identifier: E7:CA:DA:5F:08:81:D7:7B:EA:48:B0:76:8A:37:66:B5:00:65:AF:08 Certificate issuer: /CN=A918806F0000/serialNumber=E7CADA5F0881D77BEA48B0768A3766B50065AF08 Certificate serial: 7CCC73F082AAE7AA6837AA8E3DDAAB2FE480BA8B Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/58raXwiB13vqSLB2ijdmtQBlrwg.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/708aafaf-00b4-485b-854c-0b32ca30f57b/manifest.mft Manifest number: 0699 Signing time: Thu 24 Sep 2026 00:09:27 +0000 Manifest this update: Thu 24 Sep 2026 00:09:27 +0000 Manifest next update: Mon 28 Sep 2026 00:09:27 +0000 Files and hashes: 1: 12e59001-35ac-4abf-858f-37b955a24b3f.crl (hash: MflVZUiP39sOs4W6e+xaYzWABGP4/1ghYjWff9mpVGc=) 2: 381fc6e6-5d49-41bc-b584-d9437c68e3cd.roa (hash: 8QqQOxAj3sRai6/BzOB2kV66/okkk7p8TzKsBaSwcWA=) 3: 49119734-9dbc-4bd4-98be-57e4ce078928.roa (hash: 0OedyNMwjL1I1p7rzryfdYD0nslES0i+43AbthFPFmE=) 4: 5663bf34-10ed-4309-a236-7466afd6f02f.roa (hash: aoaRIM84eruV/ISWBs3PJCPQb0sEmsLtTOcu1EdbsFA=) 5: cc2f7093-21a6-400f-9db1-93c2fe02bc1c.roa (hash: vbtxuyfgx9e6lLFR0CnUGCC1kgCTySw+Ljt4yM1fDb4=) 6: ea1d02aa-6d25-4b36-b42e-ba837d49e261.roa (hash: q5bh3h1LHQcXwRDCiiiYn6TP5+N60E0SyV4QnQBQL8c=) Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/708aafaf-00b4-485b-854c-0b32ca30f57b/12e59001-35ac-4abf-858f-37b955a24b3f.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/708aafaf-00b4-485b-854c-0b32ca30f57b/manifest.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/58raXwiB13vqSLB2ijdmtQBlrwg.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 28 Sep 2026 00:09:27 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7c:cc:73:f0:82:aa:e7:aa:68:37:aa:8e:3d:da:ab:2f:e4:80:ba:8b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A918806F0000, serialNumber=E7CADA5F0881D77BEA48B0768A3766B50065AF08 Validity Not Before: Sep 24 00:09:27 2026 GMT Not After : Sep 28 00:09:27 2026 GMT Subject: serialNumber=d8687303f9136a88fa6cf66f93c06bae1ef7b84fab4bde209b0ae54232ecdf11, CN=bb9a9116-f615-462e-a680-5266b327e0fa Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:4f:42:31:50:d5:c1:9c:26:c4:97:52:e9:0f: 90:11:d8:96:ce:6e:b4:54:ed:7a:1d:3b:5e:8c:8e: bf:44:20:c9:bf:f3:21:d4:20:7b:bd:e2:26:b8:90: 72:9e:18:41:28:be:89:6a:ac:c5:f1:a0:e0:e5:6f: 20:a9:88:a2:ed:32:8d:a7:fe:0b:b7:57:0c:0a:6d: b6:88:1b:9f:1a:cc:92:db:df:4a:9e:08:db:fa:9c: 96:dd:5a:f8:84:7e:90:a8:b8:3a:44:6b:a0:24:6d: ba:d5:04:56:85:f4:d8:7e:e4:a9:3c:3b:57:85:72: fa:32:d3:c1:1a:ea:5e:46:65:03:73:b7:d2:a2:bf: af:8c:e5:65:4c:ad:69:03:88:17:da:10:8c:ad:b3: f5:60:26:10:0d:eb:f5:9a:c8:aa:ab:e1:79:2b:19: b4:62:07:d1:8c:aa:4a:4a:2e:80:d9:16:29:5b:fa: 4a:ff:d7:17:3b:98:8f:b8:78:fe:b6:3f:2b:f1:e4: 28:aa:02:40:76:f8:6f:63:5b:e7:b9:f1:8b:46:c3: e3:c9:17:7e:c3:fb:19:a1:b9:3f:e8:e8:b0:a7:17: 77:73:74:0a:ea:5c:b0:ec:68:f4:a8:3a:44:ea:fb: 3c:50:2a:6b:3f:f9:69:8f:55:73:1c:e5:84:e3:e3: 61:4d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6D:B1:20:D4:18:98:CE:42:8F:6B:5B:CF:B3:4B:3C:5D:4F:9E:3E:0B X509v3 Authority Key Identifier: keyid:E7:CA:DA:5F:08:81:D7:7B:EA:48:B0:76:8A:37:66:B5:00:65:AF:08 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/58raXwiB13vqSLB2ijdmtQBlrwg.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/708aafaf-00b4-485b-854c-0b32ca30f57b/manifest.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/708aafaf-00b4-485b-854c-0b32ca30f57b/12e59001-35ac-4abf-858f-37b955a24b3f.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 29:42:78:b0:c0:62:de:a7:f1:19:b8:c6:b9:a5:22:61:09:0e: 2c:82:4a:4c:a8:ec:de:dc:a2:39:cb:47:8b:10:a0:29:fc:33: 84:1c:27:0d:18:9c:5d:38:81:ea:8c:22:d9:e5:2a:80:ba:ce: bb:f2:0e:f6:bc:fb:b1:fc:02:89:e0:0d:a1:6a:c9:51:83:1c: 40:1d:24:1f:cf:f4:bf:ef:88:43:17:0a:ea:f1:6a:b3:90:34: 98:43:e7:f7:5d:16:02:8b:50:14:aa:57:78:c8:43:a9:10:49: be:c5:58:52:26:77:d6:6f:e7:db:18:13:6d:2d:47:72:d6:b1: d7:1b:3b:1b:89:39:72:4b:ee:bc:21:71:22:c6:9d:2b:61:e7: e5:29:db:a1:ea:06:33:b9:26:78:33:5d:d5:53:6e:5e:82:87: 4c:c9:ff:dd:c4:ca:8c:b0:e2:78:99:61:bd:e0:82:39:b5:32: ac:3d:66:15:9c:39:99:d8:e1:16:99:b2:db:4a:c8:5e:6c:7d: 28:4f:dc:38:3e:ef:42:85:57:e6:6b:58:bd:f4:65:89:5c:27: 1a:9c:3e:fd:ce:42:38:7e:fc:08:f8:f7:34:6f:eb:09:4f:21: d3:32:6f:37:ba:e7:0d:78:a8:42:b7:9a:72:e2:96:74:64:7b: 8f:76:a7:97 -----BEGIN CERTIFICATE----- MIIFlTCCBH2gAwIBAgIUfMxz8IKq56poN6qOPdqrL+SAuoswDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODgwNkYwMDAwMTEwLwYDVQQFEyhFN0NBREE1RjA4 ODFENzdCRUE0OEIwNzY4QTM3NjZCNTAwNjVBRjA4MB4XDTI2MDkyNDAwMDkyN1oX DTI2MDkyODAwMDkyN1owejFJMEcGA1UEBRNAZDg2ODczMDNmOTEzNmE4OGZhNmNm NjZmOTNjMDZiYWUxZWY3Yjg0ZmFiNGJkZTIwOWIwYWU1NDIzMmVjZGYxMTEtMCsG A1UEAxMkYmI5YTkxMTYtZjYxNS00NjJlLWE2ODAtNTI2NmIzMjdlMGZhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwE9CMVDVwZwmxJdS6Q+QEdiWzm60 VO16HTtejI6/RCDJv/Mh1CB7veImuJBynhhBKL6JaqzF8aDg5W8gqYii7TKNp/4L t1cMCm22iBufGsyS299Kngjb+pyW3Vr4hH6QqLg6RGugJG261QRWhfTYfuSpPDtX hXL6MtPBGupeRmUDc7fSor+vjOVlTK1pA4gX2hCMrbP1YCYQDev1msiqq+F5Kxm0 YgfRjKpKSi6A2RYpW/pK/9cXO5iPuHj+tj8r8eQoqgJAdvhvY1vnufGLRsPjyRd+ w/sZobk/6Oiwpxd3c3QK6lyw7Gj0qDpE6vs8UCprP/lpj1VzHOWE4+NhTQIDAQAB o4ICQTCCAj0wHQYDVR0OBBYEFG2xINQYmM5Cj2tbz7NLPF1Pnj4LMB8GA1UdIwQY MBaAFOfK2l8Igdd76kiwdoo3ZrUAZa8IMA4GA1UdDwEB/wQEAwIHgDB+BggrBgEF BQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVw b3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi81OHJhWHdp QjEzdnFTTEIyaWpkbXRRQmxyd2cuY2VyMH8GCCsGAQUFBwELBHMwcTBvBggrBgEF BQcwC4ZjcnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5hbWF6b25hd3MuY29t L3ZvbHVtZS83MDhhYWZhZi0wMGI0LTQ4NWItODU0Yy0wYjMyY2EzMGY1N2IvbWFu aWZlc3QubWZ0MIGVBgNVHR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnBraS1y c3luYy51cy1lYXN0LTIuYW1hem9uYXdzLmNvbS92b2x1bWUvNzA4YWFmYWYtMDBi NC00ODViLTg1NGMtMGIzMmNhMzBmNTdiLzEyZTU5MDAxLTM1YWMtNGFiZi04NThm LTM3Yjk1NWEyNGIzZi5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggr BgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYw BKACBQAwDQYJKoZIhvcNAQELBQADggEBAClCeLDAYt6n8Rm4xrmlImEJDiyCSkyo 7N7cojnLR4sQoCn8M4QcJw0YnF04geqMItnlKoC6zrvyDva8+7H8AongDaFqyVGD HEAdJB/P9L/viEMXCurxarOQNJhD5/ddFgKLUBSqV3jIQ6kQSb7FWFImd9Zv59sY E20tR3LWsdcbOxuJOXJL7rwhcSLGnSth5+Up26HqBjO5JngzXdVTbl6Ch0zJ/93E yoyw4niZYb3ggjm1Mqw9ZhWcOZnY4RaZsttKyF5sfShP3Dg+70KFV+ZrWL30ZYlc JxqcPv3OQjh+/Aj49zRv6wlPIdMybze65w14qEK3mnLilnRke492p5c= -----END CERTIFICATE-----Generated at Thu Sep 24 17:34:04 2026 by rpki-client