$ rpki-client -vvvf rpki-rsync.us-east-2.amazonaws.com/volume/708aafaf-00b4-485b-854c-0b32ca30f57b/manifest.mft File: manifest.mft (raw, json) Hash identifier: SRYa5nwyuMHtRO1PFs3BJEaOHThk5+rwsMhLXjuc+44= Subject key identifier: DF:41:E5:68:CF:9F:F3:D9:9E:97:3F:9E:90:5C:24:64:8B:5E:B0:C4 Authority key identifier: E7:CA:DA:5F:08:81:D7:7B:EA:48:B0:76:8A:37:66:B5:00:65:AF:08 Certificate issuer: /CN=A918806F0000/serialNumber=E7CADA5F0881D77BEA48B0768A3766B50065AF08 Certificate serial: 5F2D6A131CB08DB1E02DBF5910D90A5EAE95FB55 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/58raXwiB13vqSLB2ijdmtQBlrwg.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/708aafaf-00b4-485b-854c-0b32ca30f57b/manifest.mft Manifest number: 069F Signing time: Wed 30 Sep 2026 00:10:22 +0000 Manifest this update: Wed 30 Sep 2026 00:10:22 +0000 Manifest next update: Sun 04 Oct 2026 00:10:22 +0000 Files and hashes: 1: 12e59001-35ac-4abf-858f-37b955a24b3f.crl (hash: kg2ycpyYK6yenb+2PfOZNTNCYp1XSeuh1hfFbbe3Kmc=) 2: 381fc6e6-5d49-41bc-b584-d9437c68e3cd.roa (hash: 8QqQOxAj3sRai6/BzOB2kV66/okkk7p8TzKsBaSwcWA=) 3: 49119734-9dbc-4bd4-98be-57e4ce078928.roa (hash: 0OedyNMwjL1I1p7rzryfdYD0nslES0i+43AbthFPFmE=) 4: 5663bf34-10ed-4309-a236-7466afd6f02f.roa (hash: aoaRIM84eruV/ISWBs3PJCPQb0sEmsLtTOcu1EdbsFA=) 5: cc2f7093-21a6-400f-9db1-93c2fe02bc1c.roa (hash: vbtxuyfgx9e6lLFR0CnUGCC1kgCTySw+Ljt4yM1fDb4=) 6: ea1d02aa-6d25-4b36-b42e-ba837d49e261.roa (hash: q5bh3h1LHQcXwRDCiiiYn6TP5+N60E0SyV4QnQBQL8c=) Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/708aafaf-00b4-485b-854c-0b32ca30f57b/12e59001-35ac-4abf-858f-37b955a24b3f.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/708aafaf-00b4-485b-854c-0b32ca30f57b/manifest.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/58raXwiB13vqSLB2ijdmtQBlrwg.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 04 Oct 2026 00:10:22 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5f:2d:6a:13:1c:b0:8d:b1:e0:2d:bf:59:10:d9:0a:5e:ae:95:fb:55 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A918806F0000, serialNumber=E7CADA5F0881D77BEA48B0768A3766B50065AF08 Validity Not Before: Sep 30 00:10:22 2026 GMT Not After : Oct 4 00:10:22 2026 GMT Subject: serialNumber=f9acf01a9ae6996d5332014fd2b93986e21e801803bb76f39f4625d5941800e4, CN=bb9a9116-f615-462e-a680-5266b327e0fa Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a1:05:8f:b2:e3:42:37:ce:59:e5:54:d3:25:a5: 53:9c:3c:42:6e:49:0c:f2:e1:b3:5d:63:42:f3:7a: 2b:5f:27:c0:35:a6:dc:86:eb:d6:a1:9b:38:6e:1f: 1d:eb:f3:23:60:50:e4:33:69:9c:d9:f7:8d:3e:2c: 12:d9:3f:b8:b4:4b:4d:8b:98:2f:18:0a:88:48:48: 19:af:70:8e:e1:07:02:40:4b:52:34:f9:f8:02:9c: 3d:1d:2e:ca:7b:53:dd:6a:8d:c3:2e:dc:38:36:b4: 26:b9:4e:d5:ed:41:8d:b7:86:a5:c9:7c:b7:0f:c0: 1a:2c:9c:98:95:ea:e0:62:a5:8e:18:be:82:34:7f: 75:a6:30:c4:2d:dd:11:26:41:58:53:6f:90:fe:8c: 0b:08:16:ce:b0:a5:5f:88:6e:a6:5d:66:46:da:1c: 57:64:69:05:5a:2d:b5:16:a8:80:b5:62:f0:aa:71: 76:e3:7c:1b:0d:fd:de:01:85:9e:20:ea:6c:7d:21: 27:d7:eb:91:28:b8:d8:48:3d:16:5e:ae:80:bc:6c: c4:35:75:05:87:dc:b5:59:8c:be:18:0a:ae:84:8e: 0d:8d:6f:4e:04:ab:1d:cd:95:a6:b6:7e:a1:17:8d: 35:ce:6f:80:fb:f1:5a:5b:71:f8:e0:12:b7:5b:17: a4:b9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DF:41:E5:68:CF:9F:F3:D9:9E:97:3F:9E:90:5C:24:64:8B:5E:B0:C4 X509v3 Authority Key Identifier: keyid:E7:CA:DA:5F:08:81:D7:7B:EA:48:B0:76:8A:37:66:B5:00:65:AF:08 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/58raXwiB13vqSLB2ijdmtQBlrwg.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/708aafaf-00b4-485b-854c-0b32ca30f57b/manifest.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/708aafaf-00b4-485b-854c-0b32ca30f57b/12e59001-35ac-4abf-858f-37b955a24b3f.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 22:71:e0:99:a4:46:56:42:59:86:3c:c9:cb:43:4d:18:65:f4: 8e:34:67:30:91:a9:32:33:30:33:4d:4a:57:00:0a:54:cb:8a: c0:0d:ba:ac:f7:a9:22:33:5b:a2:77:34:e1:71:28:a1:21:d5: ad:8d:47:bb:e7:e1:82:2e:b8:ae:76:f6:31:16:2e:a7:b1:fd: 2b:a3:1a:e2:f2:f2:66:cd:1e:7e:d6:e3:2a:d5:fa:d6:41:f6: 8f:62:5a:2f:51:42:7b:01:72:6b:80:91:5d:71:5a:4e:e0:3b: aa:cc:fe:4d:35:40:45:0d:10:06:69:02:ab:fd:82:5d:66:fe: 11:b6:15:d4:24:2d:58:f9:13:57:a3:5a:37:8f:c6:ee:fa:fe: f3:4e:40:05:67:73:eb:89:3c:f0:3f:7e:d8:97:b2:87:99:44: 42:3e:1a:6b:f8:a0:00:bb:b5:24:99:90:f2:3f:22:51:81:86: 92:e6:28:08:31:ab:13:1f:8f:37:82:2f:96:77:5b:96:e4:c3: af:57:a8:e4:dd:ee:92:d0:3a:b5:a6:6f:64:75:94:b1:88:ac: 3c:2e:b3:57:21:11:a9:89:38:40:3f:57:e3:26:aa:0e:fd:5a: 7b:b4:fd:ff:70:43:06:1e:0e:e1:53:47:5a:9d:d5:c7:c5:cd: 5b:17:48:57 -----BEGIN CERTIFICATE----- MIIFlTCCBH2gAwIBAgIUXy1qExywjbHgLb9ZENkKXq6V+1UwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODgwNkYwMDAwMTEwLwYDVQQFEyhFN0NBREE1RjA4 ODFENzdCRUE0OEIwNzY4QTM3NjZCNTAwNjVBRjA4MB4XDTI2MDkzMDAwMTAyMloX DTI2MTAwNDAwMTAyMlowejFJMEcGA1UEBRNAZjlhY2YwMWE5YWU2OTk2ZDUzMzIw MTRmZDJiOTM5ODZlMjFlODAxODAzYmI3NmYzOWY0NjI1ZDU5NDE4MDBlNDEtMCsG A1UEAxMkYmI5YTkxMTYtZjYxNS00NjJlLWE2ODAtNTI2NmIzMjdlMGZhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoQWPsuNCN85Z5VTTJaVTnDxCbkkM 8uGzXWNC83orXyfANabchuvWoZs4bh8d6/MjYFDkM2mc2feNPiwS2T+4tEtNi5gv GAqISEgZr3CO4QcCQEtSNPn4Apw9HS7Ke1Pdao3DLtw4NrQmuU7V7UGNt4alyXy3 D8AaLJyYlergYqWOGL6CNH91pjDELd0RJkFYU2+Q/owLCBbOsKVfiG6mXWZG2hxX ZGkFWi21FqiAtWLwqnF243wbDf3eAYWeIOpsfSEn1+uRKLjYSD0WXq6AvGzENXUF h9y1WYy+GAquhI4NjW9OBKsdzZWmtn6hF401zm+A+/FaW3H44BK3WxekuQIDAQAB o4ICQTCCAj0wHQYDVR0OBBYEFN9B5WjPn/PZnpc/npBcJGSLXrDEMB8GA1UdIwQY MBaAFOfK2l8Igdd76kiwdoo3ZrUAZa8IMA4GA1UdDwEB/wQEAwIHgDB+BggrBgEF BQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVw b3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi81OHJhWHdp QjEzdnFTTEIyaWpkbXRRQmxyd2cuY2VyMH8GCCsGAQUFBwELBHMwcTBvBggrBgEF BQcwC4ZjcnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5hbWF6b25hd3MuY29t L3ZvbHVtZS83MDhhYWZhZi0wMGI0LTQ4NWItODU0Yy0wYjMyY2EzMGY1N2IvbWFu aWZlc3QubWZ0MIGVBgNVHR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnBraS1y c3luYy51cy1lYXN0LTIuYW1hem9uYXdzLmNvbS92b2x1bWUvNzA4YWFmYWYtMDBi NC00ODViLTg1NGMtMGIzMmNhMzBmNTdiLzEyZTU5MDAxLTM1YWMtNGFiZi04NThm LTM3Yjk1NWEyNGIzZi5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggr BgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYw BKACBQAwDQYJKoZIhvcNAQELBQADggEBACJx4JmkRlZCWYY8yctDTRhl9I40ZzCR qTIzMDNNSlcAClTLisANuqz3qSIzW6J3NOFxKKEh1a2NR7vn4YIuuK529jEWLqex /SujGuLy8mbNHn7W4yrV+tZB9o9iWi9RQnsBcmuAkV1xWk7gO6rM/k01QEUNEAZp Aqv9gl1m/hG2FdQkLVj5E1ejWjePxu76/vNOQAVnc+uJPPA/ftiXsoeZREI+Gmv4 oAC7tSSZkPI/IlGBhpLmKAgxqxMfjzeCL5Z3W5bkw69XqOTd7pLQOrWmb2R1lLGI rDwus1chEamJOEA/V+Mmqg79Wnu0/f9wQwYeDuFTR1qd1cfFzVsXSFc= -----END CERTIFICATE-----Generated at Wed Sep 30 09:32:43 2026 by rpki-client