$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/708aafaf-00b4-485b-854c-0b32ca30f57b/manifest.mft File: manifest.mft (raw, json) Hash identifier: 9T+54/xopChKhD/icrTm8i0un6Epc3agiiVXpujbhbA= Subject key identifier: 7A:81:D6:86:3C:F7:5D:E1:11:FF:DB:D8:79:AE:39:C5:F0:96:F0:E7 Authority key identifier: E7:CA:DA:5F:08:81:D7:7B:EA:48:B0:76:8A:37:66:B5:00:65:AF:08 Certificate issuer: /CN=A918806F0000/serialNumber=E7CADA5F0881D77BEA48B0768A3766B50065AF08 Certificate serial: 62AE282C2F5ABCB9098D4B42AF74CC6A95E558C6 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/58raXwiB13vqSLB2ijdmtQBlrwg.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/708aafaf-00b4-485b-854c-0b32ca30f57b/manifest.mft Manifest number: 065C Signing time: Sat 25 Jul 2026 00:02:33 +0000 Manifest this update: Sat 25 Jul 2026 00:02:33 +0000 Manifest next update: Wed 29 Jul 2026 00:02:33 +0000 Files and hashes: 1: 12e59001-35ac-4abf-858f-37b955a24b3f.crl (hash: 7Cm8rcMGWywqbtmJ+g5PgAteATK/f2bBkaxPOA2maTU=) 2: 381fc6e6-5d49-41bc-b584-d9437c68e3cd.roa (hash: M+i7XpsJD4p5Tk2yVGdLmGjDs5xTMXCNLVAUi3YO9fw=) 3: 49119734-9dbc-4bd4-98be-57e4ce078928.roa (hash: 0OedyNMwjL1I1p7rzryfdYD0nslES0i+43AbthFPFmE=) 4: 5663bf34-10ed-4309-a236-7466afd6f02f.roa (hash: aoaRIM84eruV/ISWBs3PJCPQb0sEmsLtTOcu1EdbsFA=) 5: cc2f7093-21a6-400f-9db1-93c2fe02bc1c.roa (hash: vbtxuyfgx9e6lLFR0CnUGCC1kgCTySw+Ljt4yM1fDb4=) 6: ea1d02aa-6d25-4b36-b42e-ba837d49e261.roa (hash: q5bh3h1LHQcXwRDCiiiYn6TP5+N60E0SyV4QnQBQL8c=) Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/708aafaf-00b4-485b-854c-0b32ca30f57b/12e59001-35ac-4abf-858f-37b955a24b3f.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/708aafaf-00b4-485b-854c-0b32ca30f57b/manifest.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/58raXwiB13vqSLB2ijdmtQBlrwg.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 29 Jul 2026 00:02:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 62:ae:28:2c:2f:5a:bc:b9:09:8d:4b:42:af:74:cc:6a:95:e5:58:c6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A918806F0000, serialNumber=E7CADA5F0881D77BEA48B0768A3766B50065AF08 Validity Not Before: Jul 25 00:02:33 2026 GMT Not After : Jul 29 00:02:33 2026 GMT Subject: serialNumber=19559032d3c08674bba55aa0125efd47e5ad70ce689148d81aeb337d2e397064, CN=bb9a9116-f615-462e-a680-5266b327e0fa Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:97:78:c6:ba:5e:1b:ad:4d:38:f9:2c:b8:7e:24: bb:23:4f:cb:71:23:99:55:ae:7c:d0:73:d5:4d:ab: 7e:de:9c:6e:45:cd:d5:c3:ae:99:29:3d:e8:f5:f6: f9:cd:2e:0b:93:37:f5:0e:b3:20:fc:1a:9e:8b:6d: 8a:5c:b4:d0:20:f8:69:48:da:77:70:ee:41:3f:7d: 93:2f:97:ec:1b:1b:f9:c4:f8:85:ad:18:cf:7e:41: c8:dd:2e:4c:ee:02:85:52:49:e1:0c:36:75:a6:f5: d6:71:d8:40:42:ca:a4:d7:03:51:28:59:ae:a5:dc: 00:d7:31:9f:94:22:a1:b3:d0:01:2e:ee:3c:05:98: 4a:ff:9a:36:52:ae:1c:3f:12:32:e9:5a:68:cc:e1: 91:52:e4:53:8e:5c:ed:ed:fc:f1:63:50:79:e1:f0: be:08:ed:d1:21:04:8d:83:4a:dd:1a:91:40:df:a0: 53:14:1f:37:c9:be:4a:72:9f:98:e2:55:b5:0b:20: 78:32:a8:7b:af:46:df:7b:39:b9:93:a7:b0:f8:03: eb:73:e4:9f:f7:72:90:a6:4e:5e:15:38:c0:0c:bd: c2:d6:a2:3a:54:92:4b:35:74:17:63:58:a4:c6:c1: 84:4a:c8:38:21:4b:e9:06:78:b5:b6:24:9c:0a:d0: 9c:61 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7A:81:D6:86:3C:F7:5D:E1:11:FF:DB:D8:79:AE:39:C5:F0:96:F0:E7 X509v3 Authority Key Identifier: keyid:E7:CA:DA:5F:08:81:D7:7B:EA:48:B0:76:8A:37:66:B5:00:65:AF:08 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/58raXwiB13vqSLB2ijdmtQBlrwg.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/708aafaf-00b4-485b-854c-0b32ca30f57b/manifest.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/708aafaf-00b4-485b-854c-0b32ca30f57b/12e59001-35ac-4abf-858f-37b955a24b3f.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 7c:28:83:45:1c:2d:40:37:6e:ab:de:c0:23:cb:8d:04:5d:df: 27:5a:7c:67:74:ed:a6:6b:63:c0:58:d0:66:f7:16:cc:6c:e1: 22:9d:f7:30:64:c8:67:8d:76:86:09:12:a8:96:20:c8:fc:da: cd:9d:5a:f9:5d:a8:48:da:f7:e2:ab:cf:cf:44:49:5f:7a:99: 6d:de:5c:8f:a2:23:8b:c2:f2:3c:dc:90:fc:e9:44:b5:2d:b9: 79:40:18:92:78:9f:bf:04:c4:23:26:b8:c3:31:7f:ea:1d:bf: b9:3a:5f:6b:f2:b0:1b:39:f4:4d:9e:63:a1:32:34:de:86:00: bf:74:a1:ac:7f:2d:3a:ff:9a:b4:f4:ed:81:8c:8f:8d:a6:ef: b9:dd:c1:c3:dc:81:3f:d4:b6:c1:12:05:4a:90:13:1f:20:fa: a8:f9:f0:05:99:a2:a3:b2:70:59:cb:03:e2:b3:d6:7a:8c:9a: 3e:39:52:46:32:3d:8e:7d:d8:f6:e5:17:9a:fa:93:25:d6:bc: 8f:29:76:cf:9d:59:34:2a:c0:61:6a:b8:94:7a:c5:66:b1:2d: ad:da:45:24:70:c3:12:63:80:51:b9:18:9a:d6:a1:ac:c5:b4: 8c:19:e6:c0:ec:88:01:d1:ff:b7:b1:fd:75:63:b0:a6:8b:b4: 54:24:18:a1 -----BEGIN CERTIFICATE----- MIIFlTCCBH2gAwIBAgIUYq4oLC9avLkJjUtCr3TMapXlWMYwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODgwNkYwMDAwMTEwLwYDVQQFEyhFN0NBREE1RjA4 ODFENzdCRUE0OEIwNzY4QTM3NjZCNTAwNjVBRjA4MB4XDTI2MDcyNTAwMDIzM1oX DTI2MDcyOTAwMDIzM1owejFJMEcGA1UEBRNAMTk1NTkwMzJkM2MwODY3NGJiYTU1 YWEwMTI1ZWZkNDdlNWFkNzBjZTY4OTE0OGQ4MWFlYjMzN2QyZTM5NzA2NDEtMCsG A1UEAxMkYmI5YTkxMTYtZjYxNS00NjJlLWE2ODAtNTI2NmIzMjdlMGZhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAl3jGul4brU04+Sy4fiS7I0/LcSOZ Va580HPVTat+3pxuRc3Vw66ZKT3o9fb5zS4Lkzf1DrMg/Bqei22KXLTQIPhpSNp3 cO5BP32TL5fsGxv5xPiFrRjPfkHI3S5M7gKFUknhDDZ1pvXWcdhAQsqk1wNRKFmu pdwA1zGflCKhs9ABLu48BZhK/5o2Uq4cPxIy6VpozOGRUuRTjlzt7fzxY1B54fC+ CO3RIQSNg0rdGpFA36BTFB83yb5Kcp+Y4lW1CyB4Mqh7r0bfezm5k6ew+APrc+Sf 93KQpk5eFTjADL3C1qI6VJJLNXQXY1ikxsGESsg4IUvpBni1tiScCtCcYQIDAQAB o4ICQTCCAj0wHQYDVR0OBBYEFHqB1oY8913hEf/b2HmuOcXwlvDnMB8GA1UdIwQY MBaAFOfK2l8Igdd76kiwdoo3ZrUAZa8IMA4GA1UdDwEB/wQEAwIHgDB+BggrBgEF BQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVw b3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi81OHJhWHdp QjEzdnFTTEIyaWpkbXRRQmxyd2cuY2VyMH8GCCsGAQUFBwELBHMwcTBvBggrBgEF BQcwC4ZjcnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5hbWF6b25hd3MuY29t L3ZvbHVtZS83MDhhYWZhZi0wMGI0LTQ4NWItODU0Yy0wYjMyY2EzMGY1N2IvbWFu aWZlc3QubWZ0MIGVBgNVHR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnBraS1y c3luYy51cy1lYXN0LTIuYW1hem9uYXdzLmNvbS92b2x1bWUvNzA4YWFmYWYtMDBi NC00ODViLTg1NGMtMGIzMmNhMzBmNTdiLzEyZTU5MDAxLTM1YWMtNGFiZi04NThm LTM3Yjk1NWEyNGIzZi5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggr BgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYw BKACBQAwDQYJKoZIhvcNAQELBQADggEBAHwog0UcLUA3bqvewCPLjQRd3ydafGd0 7aZrY8BY0Gb3Fsxs4SKd9zBkyGeNdoYJEqiWIMj82s2dWvldqEja9+Krz89ESV96 mW3eXI+iI4vC8jzckPzpRLUtuXlAGJJ4n78ExCMmuMMxf+odv7k6X2vysBs59E2e Y6EyNN6GAL90oax/LTr/mrT07YGMj42m77ndwcPcgT/UtsESBUqQEx8g+qj58AWZ oqOycFnLA+Kz1nqMmj45UkYyPY592PblF5r6kyXWvI8pds+dWTQqwGFquJR6xWax La3aRSRwwxJjgFG5GJrWoazFtIwZ5sDsiAHR/7ex/XVjsKaLtFQkGKE= -----END CERTIFICATE-----Generated at Sat Jul 25 21:03:22 2026 by rpki-client