$ rpki-client -vvvf rpki-rsync.us-east-2.amazonaws.com/volume/708aafaf-00b4-485b-854c-0b32ca30f57b/manifest.mft File: manifest.mft (raw, json) Hash identifier: gpR/ZucO1PgngH9lOBJ7S+ixlz+ivsojCqCdOkBIiXI= Subject key identifier: 2A:E4:1E:C4:87:2D:9F:DE:6B:02:76:FE:12:73:74:98:57:50:AC:41 Authority key identifier: E7:CA:DA:5F:08:81:D7:7B:EA:48:B0:76:8A:37:66:B5:00:65:AF:08 Certificate issuer: /CN=A918806F0000/serialNumber=E7CADA5F0881D77BEA48B0768A3766B50065AF08 Certificate serial: 0257DAD275223E916CE623D89BE5794C56E62618 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/58raXwiB13vqSLB2ijdmtQBlrwg.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/708aafaf-00b4-485b-854c-0b32ca30f57b/manifest.mft Manifest number: 069D Signing time: Mon 28 Sep 2026 00:09:59 +0000 Manifest this update: Mon 28 Sep 2026 00:09:59 +0000 Manifest next update: Fri 02 Oct 2026 00:09:59 +0000 Files and hashes: 1: 12e59001-35ac-4abf-858f-37b955a24b3f.crl (hash: lgZuRpBZBKI5sVnYfq6Y0yAkK0ETrDNpuZQ4K5kQylE=) 2: 381fc6e6-5d49-41bc-b584-d9437c68e3cd.roa (hash: 8QqQOxAj3sRai6/BzOB2kV66/okkk7p8TzKsBaSwcWA=) 3: 49119734-9dbc-4bd4-98be-57e4ce078928.roa (hash: 0OedyNMwjL1I1p7rzryfdYD0nslES0i+43AbthFPFmE=) 4: 5663bf34-10ed-4309-a236-7466afd6f02f.roa (hash: aoaRIM84eruV/ISWBs3PJCPQb0sEmsLtTOcu1EdbsFA=) 5: cc2f7093-21a6-400f-9db1-93c2fe02bc1c.roa (hash: vbtxuyfgx9e6lLFR0CnUGCC1kgCTySw+Ljt4yM1fDb4=) 6: ea1d02aa-6d25-4b36-b42e-ba837d49e261.roa (hash: q5bh3h1LHQcXwRDCiiiYn6TP5+N60E0SyV4QnQBQL8c=) Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/708aafaf-00b4-485b-854c-0b32ca30f57b/12e59001-35ac-4abf-858f-37b955a24b3f.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/708aafaf-00b4-485b-854c-0b32ca30f57b/manifest.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/58raXwiB13vqSLB2ijdmtQBlrwg.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 02 Oct 2026 00:09:59 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 02:57:da:d2:75:22:3e:91:6c:e6:23:d8:9b:e5:79:4c:56:e6:26:18 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A918806F0000, serialNumber=E7CADA5F0881D77BEA48B0768A3766B50065AF08 Validity Not Before: Sep 28 00:09:59 2026 GMT Not After : Oct 2 00:09:59 2026 GMT Subject: serialNumber=edf468e9d848102e2232314fe7c5a3984db7c61df1672efbd06f6fd4e28c6427, CN=bb9a9116-f615-462e-a680-5266b327e0fa Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a0:b4:e9:56:14:36:f8:fb:0a:48:38:a3:0d:18: cd:29:f6:66:6d:1d:1c:bf:4b:ff:34:51:df:6a:4a: a2:52:5b:a9:5b:05:00:a8:85:43:c0:ac:5d:d2:23: 7d:c7:8b:0f:53:44:42:21:90:d3:d2:b4:d1:61:f3: 4c:17:a7:82:6a:69:5b:76:6f:7e:42:ec:d9:cb:b0: 29:d8:ae:c1:64:71:bf:c4:d7:ac:46:0a:52:b2:02: fd:87:5c:a5:e9:a2:27:cc:cf:15:2b:f8:32:df:f9: cd:42:36:91:8f:c7:88:23:4b:75:88:3b:61:c0:07: 30:26:49:a1:96:18:33:29:c8:69:3d:7d:82:97:69: b9:78:b2:91:33:d7:f4:1e:e5:5e:dd:b1:79:dc:c5: 11:3f:34:67:ab:aa:84:a8:4f:93:58:3d:e4:27:42: a3:65:3e:9d:b9:a9:e4:51:a5:a5:9a:6a:8e:4f:eb: cc:54:14:f2:ec:d1:2a:f0:25:e9:b3:d6:77:23:62: cc:50:5b:b4:11:0d:ee:1b:24:32:5e:5c:d0:71:e2: 38:1f:88:de:ad:2f:fb:29:a8:e9:b2:f0:0a:67:cd: 69:11:7f:2e:16:b6:5b:fd:46:2d:e0:44:f6:0a:c9: 3c:75:e1:24:79:1d:db:2b:6b:b9:77:ee:67:a8:e1: 07:45 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2A:E4:1E:C4:87:2D:9F:DE:6B:02:76:FE:12:73:74:98:57:50:AC:41 X509v3 Authority Key Identifier: keyid:E7:CA:DA:5F:08:81:D7:7B:EA:48:B0:76:8A:37:66:B5:00:65:AF:08 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/58raXwiB13vqSLB2ijdmtQBlrwg.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/708aafaf-00b4-485b-854c-0b32ca30f57b/manifest.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/708aafaf-00b4-485b-854c-0b32ca30f57b/12e59001-35ac-4abf-858f-37b955a24b3f.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 3b:90:d1:56:bc:5c:9f:9a:da:86:28:38:a4:a5:d1:78:72:65: bb:e4:a5:41:19:51:02:a9:f7:15:ab:20:e7:f5:a7:77:d5:62: aa:aa:4a:76:6f:1e:56:d1:cd:73:37:4d:be:74:6e:7b:37:ab: 7d:ee:98:58:35:bb:64:61:11:c3:59:bf:a4:9a:fc:c9:af:f3: 59:20:67:48:be:56:ed:7f:e2:de:d5:35:7e:bc:e9:ef:be:df: 13:5f:e9:ad:ee:f5:ef:31:1d:94:e3:3c:da:8b:75:7f:3e:40: 01:81:32:ee:6c:a9:ba:a1:b2:25:44:3f:63:83:85:82:11:16: 2f:83:61:2a:75:73:6d:9a:f8:92:95:96:95:60:10:48:eb:ee: 41:48:be:75:18:15:a6:13:49:92:35:03:05:b8:e7:87:ab:e5: 0d:9c:9f:b0:0f:0f:7f:be:1d:c4:ca:0b:73:76:ae:45:98:ea: 06:1b:70:46:4a:37:5b:b6:d4:57:99:82:90:8b:5a:61:4f:98: 74:8b:9f:63:09:ad:21:21:33:67:eb:34:71:61:f4:e0:10:ed: 56:17:d3:df:98:e4:48:6a:5d:6f:e2:97:b6:a2:df:cd:1f:3e: 82:64:a5:40:f5:c9:a0:36:95:02:36:5c:bc:a6:a3:bd:b0:40: f3:e8:07:08 -----BEGIN CERTIFICATE----- MIIFlTCCBH2gAwIBAgIUAlfa0nUiPpFs5iPYm+V5TFbmJhgwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODgwNkYwMDAwMTEwLwYDVQQFEyhFN0NBREE1RjA4 ODFENzdCRUE0OEIwNzY4QTM3NjZCNTAwNjVBRjA4MB4XDTI2MDkyODAwMDk1OVoX DTI2MTAwMjAwMDk1OVowejFJMEcGA1UEBRNAZWRmNDY4ZTlkODQ4MTAyZTIyMzIz MTRmZTdjNWEzOTg0ZGI3YzYxZGYxNjcyZWZiZDA2ZjZmZDRlMjhjNjQyNzEtMCsG A1UEAxMkYmI5YTkxMTYtZjYxNS00NjJlLWE2ODAtNTI2NmIzMjdlMGZhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoLTpVhQ2+PsKSDijDRjNKfZmbR0c v0v/NFHfakqiUlupWwUAqIVDwKxd0iN9x4sPU0RCIZDT0rTRYfNMF6eCamlbdm9+ QuzZy7Ap2K7BZHG/xNesRgpSsgL9h1yl6aInzM8VK/gy3/nNQjaRj8eII0t1iDth wAcwJkmhlhgzKchpPX2Cl2m5eLKRM9f0HuVe3bF53MURPzRnq6qEqE+TWD3kJ0Kj ZT6duankUaWlmmqOT+vMVBTy7NEq8CXps9Z3I2LMUFu0EQ3uGyQyXlzQceI4H4je rS/7KajpsvAKZ81pEX8uFrZb/UYt4ET2Csk8deEkeR3bK2u5d+5nqOEHRQIDAQAB o4ICQTCCAj0wHQYDVR0OBBYEFCrkHsSHLZ/eawJ2/hJzdJhXUKxBMB8GA1UdIwQY MBaAFOfK2l8Igdd76kiwdoo3ZrUAZa8IMA4GA1UdDwEB/wQEAwIHgDB+BggrBgEF BQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVw b3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi81OHJhWHdp QjEzdnFTTEIyaWpkbXRRQmxyd2cuY2VyMH8GCCsGAQUFBwELBHMwcTBvBggrBgEF BQcwC4ZjcnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5hbWF6b25hd3MuY29t L3ZvbHVtZS83MDhhYWZhZi0wMGI0LTQ4NWItODU0Yy0wYjMyY2EzMGY1N2IvbWFu aWZlc3QubWZ0MIGVBgNVHR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnBraS1y c3luYy51cy1lYXN0LTIuYW1hem9uYXdzLmNvbS92b2x1bWUvNzA4YWFmYWYtMDBi NC00ODViLTg1NGMtMGIzMmNhMzBmNTdiLzEyZTU5MDAxLTM1YWMtNGFiZi04NThm LTM3Yjk1NWEyNGIzZi5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggr BgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYw BKACBQAwDQYJKoZIhvcNAQELBQADggEBADuQ0Va8XJ+a2oYoOKSl0XhyZbvkpUEZ UQKp9xWrIOf1p3fVYqqqSnZvHlbRzXM3Tb50bns3q33umFg1u2RhEcNZv6Sa/Mmv 81kgZ0i+Vu1/4t7VNX686e++3xNf6a3u9e8xHZTjPNqLdX8+QAGBMu5sqbqhsiVE P2ODhYIRFi+DYSp1c22a+JKVlpVgEEjr7kFIvnUYFaYTSZI1AwW454er5Q2cn7AP D3++HcTKC3N2rkWY6gYbcEZKN1u21FeZgpCLWmFPmHSLn2MJrSEhM2frNHFh9OAQ 7VYX09+Y5EhqXW/il7ai380fPoJkpUD1yaA2lQI2XLymo72wQPPoBwg= -----END CERTIFICATE-----Generated at Mon Sep 28 23:49:29 2026 by rpki-client