$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/708aafaf-00b4-485b-854c-0b32ca30f57b/manifest.mft File: manifest.mft (raw, json) Hash identifier: 9FfrjnIDtKYn3DMI7S2Pcdhm2TTQ1TYqDwbMLhmmHlw= Subject key identifier: 43:00:3D:92:C7:57:CF:C3:83:0A:B0:65:38:75:AE:A8:D5:0E:96:DA Authority key identifier: E7:CA:DA:5F:08:81:D7:7B:EA:48:B0:76:8A:37:66:B5:00:65:AF:08 Certificate issuer: /CN=A918806F0000/serialNumber=E7CADA5F0881D77BEA48B0768A3766B50065AF08 Certificate serial: 36CACA2051CAA6C20A8B243D7C696EE5A6A3FAF9 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/58raXwiB13vqSLB2ijdmtQBlrwg.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/708aafaf-00b4-485b-854c-0b32ca30f57b/manifest.mft Manifest number: 0667 Signing time: Wed 05 Aug 2026 00:00:25 +0000 Manifest this update: Wed 05 Aug 2026 00:00:25 +0000 Manifest next update: Sun 09 Aug 2026 00:00:25 +0000 Files and hashes: 1: 12e59001-35ac-4abf-858f-37b955a24b3f.crl (hash: dLuqdJgHCowXPA6uT2zkQmJwQErP/GglcXKIBGdCAuQ=) 2: 381fc6e6-5d49-41bc-b584-d9437c68e3cd.roa (hash: 8QqQOxAj3sRai6/BzOB2kV66/okkk7p8TzKsBaSwcWA=) 3: 49119734-9dbc-4bd4-98be-57e4ce078928.roa (hash: 0OedyNMwjL1I1p7rzryfdYD0nslES0i+43AbthFPFmE=) 4: 5663bf34-10ed-4309-a236-7466afd6f02f.roa (hash: aoaRIM84eruV/ISWBs3PJCPQb0sEmsLtTOcu1EdbsFA=) 5: cc2f7093-21a6-400f-9db1-93c2fe02bc1c.roa (hash: vbtxuyfgx9e6lLFR0CnUGCC1kgCTySw+Ljt4yM1fDb4=) 6: ea1d02aa-6d25-4b36-b42e-ba837d49e261.roa (hash: q5bh3h1LHQcXwRDCiiiYn6TP5+N60E0SyV4QnQBQL8c=) Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/708aafaf-00b4-485b-854c-0b32ca30f57b/12e59001-35ac-4abf-858f-37b955a24b3f.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/708aafaf-00b4-485b-854c-0b32ca30f57b/manifest.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/58raXwiB13vqSLB2ijdmtQBlrwg.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 09 Aug 2026 00:00:25 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 36:ca:ca:20:51:ca:a6:c2:0a:8b:24:3d:7c:69:6e:e5:a6:a3:fa:f9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A918806F0000, serialNumber=E7CADA5F0881D77BEA48B0768A3766B50065AF08 Validity Not Before: Aug 5 00:00:25 2026 GMT Not After : Aug 9 00:00:25 2026 GMT Subject: serialNumber=e946adf0714e24ddd6a11744fd18edc4ffdfb879361b66d4813f02c1d1e0e396, CN=bb9a9116-f615-462e-a680-5266b327e0fa Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:42:63:e3:be:31:61:e0:56:b9:a5:91:63:68: d2:cb:7d:4c:9e:85:7b:ed:93:fc:76:48:7e:49:72: c0:f1:89:89:d1:2a:36:78:e8:61:17:67:69:0b:ae: 31:62:3d:4b:a7:b6:8c:60:c7:c8:dd:5b:e0:d9:fc: f0:0b:41:ba:75:9e:6f:c0:d4:2e:47:45:93:a0:80: 23:e2:a1:aa:63:b1:62:71:fa:91:a2:88:12:69:ef: a9:1c:32:3a:c6:07:d3:27:df:ab:a9:c2:45:d4:7e: 67:2f:a8:93:1f:80:f2:6f:66:d1:57:2c:93:c4:eb: 9f:69:57:7b:1a:38:93:3a:a8:39:d8:29:dc:e7:c3: c7:33:ee:9f:46:e6:ac:d7:f2:b4:f7:b4:e8:2d:7e: 7b:56:7c:7f:16:45:b9:fa:cf:8f:9d:ad:7e:ff:da: d2:e9:44:83:a6:a8:c4:65:43:12:33:c6:35:0a:33: 2e:93:bc:3e:fd:46:28:03:36:e3:ad:e6:67:a1:be: b4:e1:e6:7b:8f:7c:e8:52:d2:74:10:99:35:d9:7b: 27:31:5b:56:91:08:4b:4d:76:97:39:2e:67:dd:99: 98:77:ae:36:46:dc:fd:7d:70:f7:56:6d:c1:a6:82: 29:e7:2d:cb:23:21:09:db:51:5d:2f:7b:04:be:42: 6c:43 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 43:00:3D:92:C7:57:CF:C3:83:0A:B0:65:38:75:AE:A8:D5:0E:96:DA X509v3 Authority Key Identifier: keyid:E7:CA:DA:5F:08:81:D7:7B:EA:48:B0:76:8A:37:66:B5:00:65:AF:08 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/58raXwiB13vqSLB2ijdmtQBlrwg.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/708aafaf-00b4-485b-854c-0b32ca30f57b/manifest.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/708aafaf-00b4-485b-854c-0b32ca30f57b/12e59001-35ac-4abf-858f-37b955a24b3f.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 10:d2:bd:a1:fa:ac:92:1b:56:ed:32:04:05:0e:11:92:51:be: b4:63:5c:84:d6:6b:98:2f:5e:1c:0f:b0:c8:db:b2:c6:8d:74: 20:67:35:ab:77:73:c0:f6:69:34:d9:87:8d:e0:26:b4:13:01: 10:13:75:7c:2e:ba:68:29:be:f5:f6:6c:28:76:d3:99:d8:ea: 09:be:ba:38:e7:e7:d1:2f:3c:2e:a4:d3:fd:d8:27:7e:ba:65: 40:af:c6:b6:29:d7:c3:76:9d:23:2d:67:c7:c0:7c:e9:f9:74: cd:94:e5:56:05:c3:64:77:a4:cc:f4:c8:e5:35:db:e8:a7:bb: 5d:65:c0:e1:50:fa:f0:b3:d9:82:29:6d:45:db:51:bb:fe:c7: 97:9f:90:9c:ad:52:ab:9d:22:0a:ef:6a:d5:de:4b:14:02:dd: 0c:91:24:27:d7:c0:66:31:a6:3f:80:d2:8a:6c:7b:de:bb:da: 2c:cd:72:77:3b:98:89:b7:2c:7d:8b:ef:66:18:e7:05:19:a8: 40:d0:0e:cf:68:4a:36:b7:11:68:9b:41:fb:2a:31:d0:c6:13: cd:f2:b3:72:f4:60:f4:4f:c7:22:8e:5a:6d:19:8e:51:bc:99: 51:f0:ed:e7:dc:33:3e:7a:f1:1d:83:cd:1f:04:80:75:9f:6b: d8:bd:9a:c1 -----BEGIN CERTIFICATE----- MIIFlTCCBH2gAwIBAgIUNsrKIFHKpsIKiyQ9fGlu5aaj+vkwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODgwNkYwMDAwMTEwLwYDVQQFEyhFN0NBREE1RjA4 ODFENzdCRUE0OEIwNzY4QTM3NjZCNTAwNjVBRjA4MB4XDTI2MDgwNTAwMDAyNVoX DTI2MDgwOTAwMDAyNVowejFJMEcGA1UEBRNAZTk0NmFkZjA3MTRlMjRkZGQ2YTEx NzQ0ZmQxOGVkYzRmZmRmYjg3OTM2MWI2NmQ0ODEzZjAyYzFkMWUwZTM5NjEtMCsG A1UEAxMkYmI5YTkxMTYtZjYxNS00NjJlLWE2ODAtNTI2NmIzMjdlMGZhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqUJj474xYeBWuaWRY2jSy31MnoV7 7ZP8dkh+SXLA8YmJ0So2eOhhF2dpC64xYj1Lp7aMYMfI3Vvg2fzwC0G6dZ5vwNQu R0WToIAj4qGqY7FicfqRoogSae+pHDI6xgfTJ9+rqcJF1H5nL6iTH4Dyb2bRVyyT xOufaVd7GjiTOqg52Cnc58PHM+6fRuas1/K097ToLX57Vnx/FkW5+s+Pna1+/9rS 6USDpqjEZUMSM8Y1CjMuk7w+/UYoAzbjreZnob604eZ7j3zoUtJ0EJk12XsnMVtW kQhLTXaXOS5n3ZmYd642Rtz9fXD3Vm3BpoIp5y3LIyEJ21FdL3sEvkJsQwIDAQAB o4ICQTCCAj0wHQYDVR0OBBYEFEMAPZLHV8/DgwqwZTh1rqjVDpbaMB8GA1UdIwQY MBaAFOfK2l8Igdd76kiwdoo3ZrUAZa8IMA4GA1UdDwEB/wQEAwIHgDB+BggrBgEF BQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVw b3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi81OHJhWHdp QjEzdnFTTEIyaWpkbXRRQmxyd2cuY2VyMH8GCCsGAQUFBwELBHMwcTBvBggrBgEF BQcwC4ZjcnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5hbWF6b25hd3MuY29t L3ZvbHVtZS83MDhhYWZhZi0wMGI0LTQ4NWItODU0Yy0wYjMyY2EzMGY1N2IvbWFu aWZlc3QubWZ0MIGVBgNVHR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnBraS1y c3luYy51cy1lYXN0LTIuYW1hem9uYXdzLmNvbS92b2x1bWUvNzA4YWFmYWYtMDBi NC00ODViLTg1NGMtMGIzMmNhMzBmNTdiLzEyZTU5MDAxLTM1YWMtNGFiZi04NThm LTM3Yjk1NWEyNGIzZi5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggr BgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYw BKACBQAwDQYJKoZIhvcNAQELBQADggEBABDSvaH6rJIbVu0yBAUOEZJRvrRjXITW a5gvXhwPsMjbssaNdCBnNat3c8D2aTTZh43gJrQTARATdXwuumgpvvX2bCh205nY 6gm+ujjn59EvPC6k0/3YJ366ZUCvxrYp18N2nSMtZ8fAfOn5dM2U5VYFw2R3pMz0 yOU12+inu11lwOFQ+vCz2YIpbUXbUbv+x5efkJytUqudIgrvatXeSxQC3QyRJCfX wGYxpj+A0opse9672izNcnc7mIm3LH2L72YY5wUZqEDQDs9oSja3EWibQfsqMdDG E83ys3L0YPRPxyKOWm0ZjlG8mVHw7efcMz568R2DzR8EgHWfa9i9msE= -----END CERTIFICATE-----Generated at Wed Aug 5 11:10:32 2026 by rpki-client