$ rpki-client -vvvf rpki-rsync.us-east-2.amazonaws.com/volume/708aafaf-00b4-485b-854c-0b32ca30f57b/manifest.mft File: manifest.mft (raw, json) Hash identifier: PhdGlsy/bbQ3oPXegWI64C9EljbIDY6MFTnTcU1jbVk= Subject key identifier: 63:60:31:92:8A:A9:EF:B0:35:F4:39:C5:14:22:44:CD:EA:82:2E:F1 Authority key identifier: E7:CA:DA:5F:08:81:D7:7B:EA:48:B0:76:8A:37:66:B5:00:65:AF:08 Certificate issuer: /CN=A918806F0000/serialNumber=E7CADA5F0881D77BEA48B0768A3766B50065AF08 Certificate serial: 1744736DBBB82131D185D28E0749D694A9C3BA20 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/58raXwiB13vqSLB2ijdmtQBlrwg.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/708aafaf-00b4-485b-854c-0b32ca30f57b/manifest.mft Manifest number: 0680 Signing time: Sun 30 Aug 2026 00:05:28 +0000 Manifest this update: Sun 30 Aug 2026 00:05:28 +0000 Manifest next update: Thu 03 Sep 2026 00:05:28 +0000 Files and hashes: 1: 12e59001-35ac-4abf-858f-37b955a24b3f.crl (hash: N8E4ukA9FVZKWG8RY4AobjrYSVZCs0qXLaaixcVo16A=) 2: 381fc6e6-5d49-41bc-b584-d9437c68e3cd.roa (hash: 8QqQOxAj3sRai6/BzOB2kV66/okkk7p8TzKsBaSwcWA=) 3: 49119734-9dbc-4bd4-98be-57e4ce078928.roa (hash: 0OedyNMwjL1I1p7rzryfdYD0nslES0i+43AbthFPFmE=) 4: 5663bf34-10ed-4309-a236-7466afd6f02f.roa (hash: aoaRIM84eruV/ISWBs3PJCPQb0sEmsLtTOcu1EdbsFA=) 5: cc2f7093-21a6-400f-9db1-93c2fe02bc1c.roa (hash: vbtxuyfgx9e6lLFR0CnUGCC1kgCTySw+Ljt4yM1fDb4=) 6: ea1d02aa-6d25-4b36-b42e-ba837d49e261.roa (hash: q5bh3h1LHQcXwRDCiiiYn6TP5+N60E0SyV4QnQBQL8c=) Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/708aafaf-00b4-485b-854c-0b32ca30f57b/12e59001-35ac-4abf-858f-37b955a24b3f.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/708aafaf-00b4-485b-854c-0b32ca30f57b/manifest.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/58raXwiB13vqSLB2ijdmtQBlrwg.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 03 Sep 2026 00:05:28 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 17:44:73:6d:bb:b8:21:31:d1:85:d2:8e:07:49:d6:94:a9:c3:ba:20 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A918806F0000, serialNumber=E7CADA5F0881D77BEA48B0768A3766B50065AF08 Validity Not Before: Aug 30 00:05:28 2026 GMT Not After : Sep 3 00:05:28 2026 GMT Subject: serialNumber=e2a1ad79ee3a3e616fdb3bb7a794b98efff18d225e0f5a62a68ade3d3c461c63, CN=bb9a9116-f615-462e-a680-5266b327e0fa Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:0a:0b:c7:cd:fe:30:c2:80:3c:00:f3:34:f2: 9e:3f:5a:0c:16:b5:ed:ad:0c:ed:16:e4:9c:51:e5: b1:2b:89:d1:ba:7b:67:8b:fe:e7:c6:43:1d:b2:86: 9c:20:2f:be:0c:96:e1:c3:0d:29:56:f0:36:c8:94: 21:54:16:a9:8c:dd:cf:a4:7c:9b:1c:24:c5:d2:19: 1c:db:e3:88:41:10:e5:f7:27:af:82:e9:55:4f:05: c8:cc:f9:db:14:a4:e9:38:2b:a5:06:73:b1:5c:70: 63:2a:ff:fb:17:22:35:33:ae:7c:41:1a:de:93:32: e2:a8:6c:f2:2b:71:24:a9:00:2d:6e:30:89:24:5c: 3e:c2:d5:eb:79:b0:ac:d6:18:67:18:30:f8:a9:1c: 71:64:a0:75:a9:87:df:7d:ae:c6:7e:56:61:2c:e4: bf:64:2e:a0:da:c4:71:ba:78:1a:ee:28:b0:d6:f6: 23:4c:91:6e:b3:03:fa:54:17:3b:f3:cb:b8:70:f7: 7f:b5:a0:df:e9:8d:58:a0:22:44:cf:b4:c7:6c:b7: 76:d0:c6:ff:fa:13:7d:bd:62:21:d0:dc:29:92:ef: d0:19:0f:20:82:a6:16:43:ac:9f:cd:8c:cf:8b:e0: f9:0e:eb:54:77:4a:ef:31:ae:bd:62:97:b5:4a:07: 96:73 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 63:60:31:92:8A:A9:EF:B0:35:F4:39:C5:14:22:44:CD:EA:82:2E:F1 X509v3 Authority Key Identifier: keyid:E7:CA:DA:5F:08:81:D7:7B:EA:48:B0:76:8A:37:66:B5:00:65:AF:08 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/58raXwiB13vqSLB2ijdmtQBlrwg.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/708aafaf-00b4-485b-854c-0b32ca30f57b/manifest.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/708aafaf-00b4-485b-854c-0b32ca30f57b/12e59001-35ac-4abf-858f-37b955a24b3f.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 30:0a:fa:34:3a:a4:e7:9f:76:1e:6e:b9:2d:aa:d7:54:81:98: b4:26:8d:b0:46:85:0c:53:99:c4:65:a7:bf:82:14:14:50:24: a8:bd:a3:ec:02:cf:e5:fa:f9:9c:c5:d9:15:45:ba:b2:4a:f7: 1a:1d:4b:89:8e:4a:89:73:cd:42:44:ac:0c:42:08:33:25:25: 59:5d:04:3e:7a:9c:03:f1:04:cd:99:b8:28:e2:68:c4:3f:a2: 0c:8f:ba:5c:2a:d1:a0:6d:45:bd:f5:ee:4b:4d:e0:11:d1:08: 7b:9b:1a:51:0f:34:e6:39:65:a4:3a:d0:31:84:c4:30:92:22: 29:17:46:40:cf:dd:d9:92:34:26:c4:7a:7b:c0:e7:3d:32:2c: 2b:80:1e:68:cb:31:ba:07:98:3e:6a:fd:83:44:1f:ee:2a:8d: 37:5c:5a:e2:37:ac:a6:fb:c5:07:83:d4:fd:82:57:7e:5c:eb: 66:17:fb:b8:1d:71:88:0d:22:50:af:55:25:10:18:97:d3:6c: ed:3a:ca:44:d3:fa:f8:d5:f9:28:12:b0:c8:81:d5:7f:ab:65: 6a:ea:78:9e:44:96:a1:e2:f5:a0:68:ad:a0:89:aa:5b:7b:2a: 77:29:6a:26:46:03:f2:50:e6:3c:98:fc:d4:45:66:b2:6e:00: 37:d6:12:c2 -----BEGIN CERTIFICATE----- MIIFlTCCBH2gAwIBAgIUF0Rzbbu4ITHRhdKOB0nWlKnDuiAwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODgwNkYwMDAwMTEwLwYDVQQFEyhFN0NBREE1RjA4 ODFENzdCRUE0OEIwNzY4QTM3NjZCNTAwNjVBRjA4MB4XDTI2MDgzMDAwMDUyOFoX DTI2MDkwMzAwMDUyOFowejFJMEcGA1UEBRNAZTJhMWFkNzllZTNhM2U2MTZmZGIz YmI3YTc5NGI5OGVmZmYxOGQyMjVlMGY1YTYyYTY4YWRlM2QzYzQ2MWM2MzEtMCsG A1UEAxMkYmI5YTkxMTYtZjYxNS00NjJlLWE2ODAtNTI2NmIzMjdlMGZhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApwoLx83+MMKAPADzNPKeP1oMFrXt rQztFuScUeWxK4nRuntni/7nxkMdsoacIC++DJbhww0pVvA2yJQhVBapjN3PpHyb HCTF0hkc2+OIQRDl9yevgulVTwXIzPnbFKTpOCulBnOxXHBjKv/7FyI1M658QRre kzLiqGzyK3EkqQAtbjCJJFw+wtXrebCs1hhnGDD4qRxxZKB1qYfffa7GflZhLOS/ ZC6g2sRxunga7iiw1vYjTJFuswP6VBc788u4cPd/taDf6Y1YoCJEz7THbLd20Mb/ +hN9vWIh0Nwpku/QGQ8ggqYWQ6yfzYzPi+D5DutUd0rvMa69Ype1SgeWcwIDAQAB o4ICQTCCAj0wHQYDVR0OBBYEFGNgMZKKqe+wNfQ5xRQiRM3qgi7xMB8GA1UdIwQY MBaAFOfK2l8Igdd76kiwdoo3ZrUAZa8IMA4GA1UdDwEB/wQEAwIHgDB+BggrBgEF BQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVw b3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi81OHJhWHdp QjEzdnFTTEIyaWpkbXRRQmxyd2cuY2VyMH8GCCsGAQUFBwELBHMwcTBvBggrBgEF BQcwC4ZjcnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5hbWF6b25hd3MuY29t L3ZvbHVtZS83MDhhYWZhZi0wMGI0LTQ4NWItODU0Yy0wYjMyY2EzMGY1N2IvbWFu aWZlc3QubWZ0MIGVBgNVHR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnBraS1y c3luYy51cy1lYXN0LTIuYW1hem9uYXdzLmNvbS92b2x1bWUvNzA4YWFmYWYtMDBi NC00ODViLTg1NGMtMGIzMmNhMzBmNTdiLzEyZTU5MDAxLTM1YWMtNGFiZi04NThm LTM3Yjk1NWEyNGIzZi5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggr BgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYw BKACBQAwDQYJKoZIhvcNAQELBQADggEBADAK+jQ6pOefdh5uuS2q11SBmLQmjbBG hQxTmcRlp7+CFBRQJKi9o+wCz+X6+ZzF2RVFurJK9xodS4mOSolzzUJErAxCCDMl JVldBD56nAPxBM2ZuCjiaMQ/ogyPulwq0aBtRb317ktN4BHRCHubGlEPNOY5ZaQ6 0DGExDCSIikXRkDP3dmSNCbEenvA5z0yLCuAHmjLMboHmD5q/YNEH+4qjTdcWuI3 rKb7xQeD1P2CV35c62YX+7gdcYgNIlCvVSUQGJfTbO06ykTT+vjV+SgSsMiB1X+r ZWrqeJ5ElqHi9aBoraCJqlt7KncpaiZGA/JQ5jyY/NRFZrJuADfWEsI= -----END CERTIFICATE-----Generated at Sun Aug 30 18:05:33 2026 by rpki-client