$ rpki-client -vvvf rpki-rsync.us-east-2.amazonaws.com/volume/708aafaf-00b4-485b-854c-0b32ca30f57b/manifest.mft File: manifest.mft (raw, json) Hash identifier: bWQZiPs+NQdamU/XianoiAfk5X05axtAcm0cfHWeoAg= Subject key identifier: 4A:69:C1:B1:0A:3F:9B:C5:FD:C0:AC:69:D4:73:A9:76:D1:37:55:43 Authority key identifier: E7:CA:DA:5F:08:81:D7:7B:EA:48:B0:76:8A:37:66:B5:00:65:AF:08 Certificate issuer: /CN=A918806F0000/serialNumber=E7CADA5F0881D77BEA48B0768A3766B50065AF08 Certificate serial: 734966165D24F293D887937F69014BAC8FBC51AD Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/58raXwiB13vqSLB2ijdmtQBlrwg.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/708aafaf-00b4-485b-854c-0b32ca30f57b/manifest.mft Manifest number: 0695 Signing time: Sun 20 Sep 2026 00:08:40 +0000 Manifest this update: Sun 20 Sep 2026 00:08:40 +0000 Manifest next update: Thu 24 Sep 2026 00:08:40 +0000 Files and hashes: 1: 12e59001-35ac-4abf-858f-37b955a24b3f.crl (hash: dkmRg8XulSgqM6rVLBUD2+pDbHA7YJ4YUY+EtkwmQrU=) 2: 381fc6e6-5d49-41bc-b584-d9437c68e3cd.roa (hash: 8QqQOxAj3sRai6/BzOB2kV66/okkk7p8TzKsBaSwcWA=) 3: 49119734-9dbc-4bd4-98be-57e4ce078928.roa (hash: 0OedyNMwjL1I1p7rzryfdYD0nslES0i+43AbthFPFmE=) 4: 5663bf34-10ed-4309-a236-7466afd6f02f.roa (hash: aoaRIM84eruV/ISWBs3PJCPQb0sEmsLtTOcu1EdbsFA=) 5: cc2f7093-21a6-400f-9db1-93c2fe02bc1c.roa (hash: vbtxuyfgx9e6lLFR0CnUGCC1kgCTySw+Ljt4yM1fDb4=) 6: ea1d02aa-6d25-4b36-b42e-ba837d49e261.roa (hash: q5bh3h1LHQcXwRDCiiiYn6TP5+N60E0SyV4QnQBQL8c=) Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/708aafaf-00b4-485b-854c-0b32ca30f57b/12e59001-35ac-4abf-858f-37b955a24b3f.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/708aafaf-00b4-485b-854c-0b32ca30f57b/manifest.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/58raXwiB13vqSLB2ijdmtQBlrwg.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 24 Sep 2026 00:08:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 73:49:66:16:5d:24:f2:93:d8:87:93:7f:69:01:4b:ac:8f:bc:51:ad Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A918806F0000, serialNumber=E7CADA5F0881D77BEA48B0768A3766B50065AF08 Validity Not Before: Sep 20 00:08:40 2026 GMT Not After : Sep 24 00:08:40 2026 GMT Subject: serialNumber=6b78045615b28c16b14b1895f30276fbcbdb78992a68cb1877ea36619a2b980e, CN=bb9a9116-f615-462e-a680-5266b327e0fa Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:9b:f8:90:3f:e5:11:6d:85:dc:fe:be:ab:c1: 68:05:10:4f:b9:87:5d:59:d9:97:38:3e:43:76:c4: cd:56:0a:04:36:fc:36:b0:0f:73:5d:79:40:c8:73: d6:1a:ac:e5:8c:3e:4c:fc:3e:66:71:9c:ed:72:ab: 0c:c1:3a:8a:b3:20:df:55:ff:c3:1a:1c:8a:bc:2e: 1d:ae:93:f0:7a:76:d3:68:f8:1d:bd:4d:b4:f8:93: 16:46:f5:51:93:e7:40:2b:6d:e4:9e:d5:f1:4c:f8: c2:d2:2e:a3:47:59:58:ff:55:70:12:92:1e:e2:5b: 5e:3a:37:c5:e1:3e:18:62:1d:84:1b:02:ea:f0:9a: 26:cd:c9:c0:1a:6e:e3:70:00:b4:92:f9:5c:67:56: d2:a8:bf:41:6c:6c:55:26:04:b2:7a:fa:bd:37:3e: 94:ae:8f:78:7d:b4:93:27:7f:3d:f7:fd:15:9a:19: f2:c1:83:99:28:f8:fb:15:dc:8e:d1:6f:57:cb:ac: f2:a0:02:f7:ac:14:eb:c3:ab:97:92:0d:f7:9f:4b: f5:f3:a7:48:50:5c:b0:70:fd:0d:64:b2:2c:a2:dd: b7:b4:f4:d2:51:76:52:61:f4:82:bd:28:eb:eb:d5: 49:3a:d2:aa:cb:15:89:b6:c0:18:38:5a:79:1d:6c: c8:cb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4A:69:C1:B1:0A:3F:9B:C5:FD:C0:AC:69:D4:73:A9:76:D1:37:55:43 X509v3 Authority Key Identifier: keyid:E7:CA:DA:5F:08:81:D7:7B:EA:48:B0:76:8A:37:66:B5:00:65:AF:08 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/58raXwiB13vqSLB2ijdmtQBlrwg.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/708aafaf-00b4-485b-854c-0b32ca30f57b/manifest.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/708aafaf-00b4-485b-854c-0b32ca30f57b/12e59001-35ac-4abf-858f-37b955a24b3f.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 75:81:05:9d:39:f9:87:bc:2f:8b:14:ce:fb:48:31:d1:a2:3f: af:db:75:b5:3d:7e:69:cc:0a:6e:74:e9:f7:cc:34:c6:45:13: 91:10:8d:58:f9:e6:07:8d:b0:a2:38:00:77:86:37:63:cb:ee: da:f0:84:c7:cd:58:73:4d:14:c7:e1:59:42:9e:09:9d:1d:a7: 6e:40:3a:a3:69:35:e3:1a:56:77:d7:c2:9b:3f:b7:56:1e:5d: 27:c3:73:10:eb:bc:7a:59:ad:3b:cb:8f:13:b7:29:38:f7:f2: 3e:8c:ef:24:3c:d5:8a:e3:f1:ba:ce:d3:f3:30:8d:98:60:4b: 39:27:15:81:97:bf:0c:3e:a4:db:da:79:f3:13:0e:ea:08:b9: 60:02:1f:9d:ec:10:76:d5:d4:6a:28:10:fa:30:5b:4c:36:f3: d1:0e:dd:9c:26:0b:2b:a5:83:8c:dc:24:c7:6a:b4:b6:30:0b: 5c:69:c4:23:67:44:64:a5:30:4f:7b:cb:58:51:af:f2:ee:03: dd:dc:eb:24:47:88:43:ed:f6:b7:79:59:e9:aa:d4:84:fa:dc: 2d:c6:dc:0a:4c:ff:de:cf:11:7d:02:f2:ac:bb:ab:f8:66:1a: 9a:c2:91:d6:ea:fa:eb:39:9e:63:04:66:9d:5e:a4:12:5b:11: 52:98:d0:98 -----BEGIN CERTIFICATE----- MIIFlTCCBH2gAwIBAgIUc0lmFl0k8pPYh5N/aQFLrI+8Ua0wDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODgwNkYwMDAwMTEwLwYDVQQFEyhFN0NBREE1RjA4 ODFENzdCRUE0OEIwNzY4QTM3NjZCNTAwNjVBRjA4MB4XDTI2MDkyMDAwMDg0MFoX DTI2MDkyNDAwMDg0MFowejFJMEcGA1UEBRNANmI3ODA0NTYxNWIyOGMxNmIxNGIx ODk1ZjMwMjc2ZmJjYmRiNzg5OTJhNjhjYjE4NzdlYTM2NjE5YTJiOTgwZTEtMCsG A1UEAxMkYmI5YTkxMTYtZjYxNS00NjJlLWE2ODAtNTI2NmIzMjdlMGZhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAs5v4kD/lEW2F3P6+q8FoBRBPuYdd WdmXOD5DdsTNVgoENvw2sA9zXXlAyHPWGqzljD5M/D5mcZztcqsMwTqKsyDfVf/D GhyKvC4drpPwenbTaPgdvU20+JMWRvVRk+dAK23kntXxTPjC0i6jR1lY/1VwEpIe 4lteOjfF4T4YYh2EGwLq8JomzcnAGm7jcAC0kvlcZ1bSqL9BbGxVJgSyevq9Nz6U ro94fbSTJ3899/0VmhnywYOZKPj7FdyO0W9Xy6zyoAL3rBTrw6uXkg33n0v186dI UFywcP0NZLIsot23tPTSUXZSYfSCvSjr69VJOtKqyxWJtsAYOFp5HWzIywIDAQAB o4ICQTCCAj0wHQYDVR0OBBYEFEppwbEKP5vF/cCsadRzqXbRN1VDMB8GA1UdIwQY MBaAFOfK2l8Igdd76kiwdoo3ZrUAZa8IMA4GA1UdDwEB/wQEAwIHgDB+BggrBgEF BQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVw b3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi81OHJhWHdp QjEzdnFTTEIyaWpkbXRRQmxyd2cuY2VyMH8GCCsGAQUFBwELBHMwcTBvBggrBgEF BQcwC4ZjcnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5hbWF6b25hd3MuY29t L3ZvbHVtZS83MDhhYWZhZi0wMGI0LTQ4NWItODU0Yy0wYjMyY2EzMGY1N2IvbWFu aWZlc3QubWZ0MIGVBgNVHR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnBraS1y c3luYy51cy1lYXN0LTIuYW1hem9uYXdzLmNvbS92b2x1bWUvNzA4YWFmYWYtMDBi NC00ODViLTg1NGMtMGIzMmNhMzBmNTdiLzEyZTU5MDAxLTM1YWMtNGFiZi04NThm LTM3Yjk1NWEyNGIzZi5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggr BgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYw BKACBQAwDQYJKoZIhvcNAQELBQADggEBAHWBBZ05+Ye8L4sUzvtIMdGiP6/bdbU9 fmnMCm506ffMNMZFE5EQjVj55geNsKI4AHeGN2PL7trwhMfNWHNNFMfhWUKeCZ0d p25AOqNpNeMaVnfXwps/t1YeXSfDcxDrvHpZrTvLjxO3KTj38j6M7yQ81Yrj8brO 0/MwjZhgSzknFYGXvww+pNvaefMTDuoIuWACH53sEHbV1GooEPowW0w289EO3Zwm Cyulg4zcJMdqtLYwC1xpxCNnRGSlME97y1hRr/LuA93c6yRHiEPt9rd5Wemq1IT6 3C3G3ApM/97PEX0C8qy7q/hmGprCkdbq+us5nmMEZp1epBJbEVKY0Jg= -----END CERTIFICATE-----Generated at Sun Sep 20 21:45:48 2026 by rpki-client