$ rpki-client -vvvf rpki-rsync.us-east-2.amazonaws.com/volume/708aafaf-00b4-485b-854c-0b32ca30f57b/manifest.mft File: manifest.mft (raw, json) Hash identifier: awcJyMSMdah/Ac/FAt+LeuXbPt3GrZvhokiJofFYIqE= Subject key identifier: 0F:38:1C:72:2C:21:8D:88:BF:80:C2:CD:28:B7:86:A5:76:80:11:34 Authority key identifier: E7:CA:DA:5F:08:81:D7:7B:EA:48:B0:76:8A:37:66:B5:00:65:AF:08 Certificate issuer: /CN=A918806F0000/serialNumber=E7CADA5F0881D77BEA48B0768A3766B50065AF08 Certificate serial: 0E575AF7DCAD7BFB61AF62CF062646AD9E09AAAD Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/58raXwiB13vqSLB2ijdmtQBlrwg.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/708aafaf-00b4-485b-854c-0b32ca30f57b/manifest.mft Manifest number: 067E Signing time: Fri 28 Aug 2026 00:05:09 +0000 Manifest this update: Fri 28 Aug 2026 00:05:09 +0000 Manifest next update: Tue 01 Sep 2026 00:05:09 +0000 Files and hashes: 1: 12e59001-35ac-4abf-858f-37b955a24b3f.crl (hash: q/n4nwNVyXNr9EsE088e656uPkr595P9q1GLdjd58WQ=) 2: 381fc6e6-5d49-41bc-b584-d9437c68e3cd.roa (hash: 8QqQOxAj3sRai6/BzOB2kV66/okkk7p8TzKsBaSwcWA=) 3: 49119734-9dbc-4bd4-98be-57e4ce078928.roa (hash: 0OedyNMwjL1I1p7rzryfdYD0nslES0i+43AbthFPFmE=) 4: 5663bf34-10ed-4309-a236-7466afd6f02f.roa (hash: aoaRIM84eruV/ISWBs3PJCPQb0sEmsLtTOcu1EdbsFA=) 5: cc2f7093-21a6-400f-9db1-93c2fe02bc1c.roa (hash: vbtxuyfgx9e6lLFR0CnUGCC1kgCTySw+Ljt4yM1fDb4=) 6: ea1d02aa-6d25-4b36-b42e-ba837d49e261.roa (hash: q5bh3h1LHQcXwRDCiiiYn6TP5+N60E0SyV4QnQBQL8c=) Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/708aafaf-00b4-485b-854c-0b32ca30f57b/12e59001-35ac-4abf-858f-37b955a24b3f.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/708aafaf-00b4-485b-854c-0b32ca30f57b/manifest.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/58raXwiB13vqSLB2ijdmtQBlrwg.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 01 Sep 2026 00:05:09 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0e:57:5a:f7:dc:ad:7b:fb:61:af:62:cf:06:26:46:ad:9e:09:aa:ad Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A918806F0000, serialNumber=E7CADA5F0881D77BEA48B0768A3766B50065AF08 Validity Not Before: Aug 28 00:05:09 2026 GMT Not After : Sep 1 00:05:09 2026 GMT Subject: serialNumber=c5cb7a16f466d8c9a1aeec62f8c421c672e9979bfc3bf1b43cc091e676ce81e1, CN=bb9a9116-f615-462e-a680-5266b327e0fa Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:4c:8c:13:f7:3d:d8:ea:79:f7:41:0e:d1:01: 6b:1a:ec:1b:fb:dd:29:4a:59:e7:6c:a2:7c:8d:d0: b0:d9:32:07:1b:27:4e:3f:08:15:39:fe:21:5d:40: 32:a8:ac:ab:2f:17:dc:36:a9:39:07:b1:73:26:fd: bb:16:79:ec:fe:90:26:42:1a:12:51:8c:37:1f:25: 20:af:02:bb:52:59:ca:c1:d5:2d:10:a8:b1:6e:0f: 1b:09:89:65:26:0f:46:c7:e4:71:3d:e7:d7:51:1e: 88:ac:02:56:e1:37:ff:c1:5a:f6:12:c9:3e:d3:c0: 4e:29:82:54:30:9e:86:a0:67:e4:9c:3b:b8:e5:2b: d7:1f:5b:17:c4:4d:d7:9b:2a:51:32:54:aa:66:0c: 9e:39:a1:de:7e:63:d5:63:13:bc:ca:a6:49:4f:bb: e3:fe:c0:9a:7c:52:b1:07:f2:9d:86:ff:97:1a:6b: a7:1d:20:ee:06:ef:19:ce:9d:6a:92:a0:b8:e0:01: f2:d1:a7:d3:fb:a2:0c:a9:b8:61:83:f9:76:1f:ff: 57:1c:e5:df:78:8d:80:da:35:4d:cb:53:34:74:ce: 78:5d:45:24:0f:d7:f6:17:e4:14:cf:b1:8d:e0:05: 82:b3:f7:e9:70:0b:54:e0:36:b1:e8:35:ff:72:65: fa:19 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0F:38:1C:72:2C:21:8D:88:BF:80:C2:CD:28:B7:86:A5:76:80:11:34 X509v3 Authority Key Identifier: keyid:E7:CA:DA:5F:08:81:D7:7B:EA:48:B0:76:8A:37:66:B5:00:65:AF:08 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/58raXwiB13vqSLB2ijdmtQBlrwg.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/708aafaf-00b4-485b-854c-0b32ca30f57b/manifest.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/708aafaf-00b4-485b-854c-0b32ca30f57b/12e59001-35ac-4abf-858f-37b955a24b3f.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 6a:c2:17:91:ca:81:79:74:21:90:33:fa:aa:60:0a:3e:da:19: 77:2a:f2:1c:6c:ea:c3:b1:16:1e:0a:89:d3:2c:f3:25:e5:8d: 62:6a:83:5a:cc:9f:7c:bb:f3:e7:2f:60:87:16:ee:8a:3e:8d: 3c:8e:1f:55:01:8f:b6:ce:e0:95:b5:cf:e9:8d:d9:48:1d:87: 64:4b:dc:cb:d5:c2:07:4f:e0:a3:40:78:fd:8e:90:76:d6:50: f4:dc:4c:55:82:7e:7b:f9:29:a1:9e:03:3f:30:f0:46:d8:a8: 99:18:8a:8d:c4:e5:48:36:ab:ce:e7:ce:9e:b3:10:30:65:f1: a5:42:cc:e1:18:ec:40:fe:cd:4f:ee:c0:80:85:26:42:c8:b9: e0:46:f2:3f:26:87:f7:7e:a6:1c:aa:d6:76:19:ba:7c:4f:14: 19:61:49:07:1c:5f:13:7e:5a:0c:59:0f:cc:db:d2:81:0b:70: 8b:ab:b1:7e:5d:1f:f6:dd:68:41:3b:22:3f:8d:68:6d:0e:47: 6b:28:20:e1:6f:67:6d:65:25:69:b5:36:8f:d0:88:97:7e:12: f5:02:f1:ff:c2:7a:55:1f:63:01:a8:d1:64:e3:01:27:85:0b: 52:e8:b2:92:60:f6:14:d7:5d:c5:db:3a:31:71:62:5c:c3:28: b7:1c:50:df -----BEGIN CERTIFICATE----- MIIFlTCCBH2gAwIBAgIUDlda99yte/thr2LPBiZGrZ4Jqq0wDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODgwNkYwMDAwMTEwLwYDVQQFEyhFN0NBREE1RjA4 ODFENzdCRUE0OEIwNzY4QTM3NjZCNTAwNjVBRjA4MB4XDTI2MDgyODAwMDUwOVoX DTI2MDkwMTAwMDUwOVowejFJMEcGA1UEBRNAYzVjYjdhMTZmNDY2ZDhjOWExYWVl YzYyZjhjNDIxYzY3MmU5OTc5YmZjM2JmMWI0M2NjMDkxZTY3NmNlODFlMTEtMCsG A1UEAxMkYmI5YTkxMTYtZjYxNS00NjJlLWE2ODAtNTI2NmIzMjdlMGZhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxUyME/c92Op590EO0QFrGuwb+90p SlnnbKJ8jdCw2TIHGydOPwgVOf4hXUAyqKyrLxfcNqk5B7FzJv27Fnns/pAmQhoS UYw3HyUgrwK7UlnKwdUtEKixbg8bCYllJg9Gx+RxPefXUR6IrAJW4Tf/wVr2Esk+ 08BOKYJUMJ6GoGfknDu45SvXH1sXxE3XmypRMlSqZgyeOaHefmPVYxO8yqZJT7vj /sCafFKxB/Kdhv+XGmunHSDuBu8Zzp1qkqC44AHy0afT+6IMqbhhg/l2H/9XHOXf eI2A2jVNy1M0dM54XUUkD9f2F+QUz7GN4AWCs/fpcAtU4Dax6DX/cmX6GQIDAQAB o4ICQTCCAj0wHQYDVR0OBBYEFA84HHIsIY2Iv4DCzSi3hqV2gBE0MB8GA1UdIwQY MBaAFOfK2l8Igdd76kiwdoo3ZrUAZa8IMA4GA1UdDwEB/wQEAwIHgDB+BggrBgEF BQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVw b3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi81OHJhWHdp QjEzdnFTTEIyaWpkbXRRQmxyd2cuY2VyMH8GCCsGAQUFBwELBHMwcTBvBggrBgEF BQcwC4ZjcnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5hbWF6b25hd3MuY29t L3ZvbHVtZS83MDhhYWZhZi0wMGI0LTQ4NWItODU0Yy0wYjMyY2EzMGY1N2IvbWFu aWZlc3QubWZ0MIGVBgNVHR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnBraS1y c3luYy51cy1lYXN0LTIuYW1hem9uYXdzLmNvbS92b2x1bWUvNzA4YWFmYWYtMDBi NC00ODViLTg1NGMtMGIzMmNhMzBmNTdiLzEyZTU5MDAxLTM1YWMtNGFiZi04NThm LTM3Yjk1NWEyNGIzZi5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggr BgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYw BKACBQAwDQYJKoZIhvcNAQELBQADggEBAGrCF5HKgXl0IZAz+qpgCj7aGXcq8hxs 6sOxFh4KidMs8yXljWJqg1rMn3y78+cvYIcW7oo+jTyOH1UBj7bO4JW1z+mN2Ugd h2RL3MvVwgdP4KNAeP2OkHbWUPTcTFWCfnv5KaGeAz8w8EbYqJkYio3E5Ug2q87n zp6zEDBl8aVCzOEY7ED+zU/uwICFJkLIueBG8j8mh/d+phyq1nYZunxPFBlhSQcc XxN+WgxZD8zb0oELcIursX5dH/bdaEE7Ij+NaG0OR2soIOFvZ21lJWm1No/QiJd+ EvUC8f/CelUfYwGo0WTjASeFC1LospJg9hTXXcXbOjFxYlzDKLccUN8= -----END CERTIFICATE-----Generated at Fri Aug 28 17:41:14 2026 by rpki-client