$ rpki-client -vvvf rpki-rsync.us-east-2.amazonaws.com/volume/708aafaf-00b4-485b-854c-0b32ca30f57b/manifest.mft File: manifest.mft (raw, json) Hash identifier: u9w3g5RY+p8aZvxS0XU9jRMlY5LtFCWbKRNPsKV7diQ= Subject key identifier: 12:7F:29:45:15:10:F1:C2:27:E0:21:03:7E:F2:4C:F8:3A:3A:49:40 Authority key identifier: E7:CA:DA:5F:08:81:D7:7B:EA:48:B0:76:8A:37:66:B5:00:65:AF:08 Certificate issuer: /CN=A918806F0000/serialNumber=E7CADA5F0881D77BEA48B0768A3766B50065AF08 Certificate serial: 2D0055241D42F4CE47B1DCA2F128987A98B96FDD Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/58raXwiB13vqSLB2ijdmtQBlrwg.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/708aafaf-00b4-485b-854c-0b32ca30f57b/manifest.mft Manifest number: 0688 Signing time: Mon 07 Sep 2026 00:06:47 +0000 Manifest this update: Mon 07 Sep 2026 00:06:47 +0000 Manifest next update: Fri 11 Sep 2026 00:06:47 +0000 Files and hashes: 1: 12e59001-35ac-4abf-858f-37b955a24b3f.crl (hash: DSWpcGU53VmdrkTqLa2py8qwd0Z9I0r2eJwQuiThpqM=) 2: 381fc6e6-5d49-41bc-b584-d9437c68e3cd.roa (hash: 8QqQOxAj3sRai6/BzOB2kV66/okkk7p8TzKsBaSwcWA=) 3: 49119734-9dbc-4bd4-98be-57e4ce078928.roa (hash: 0OedyNMwjL1I1p7rzryfdYD0nslES0i+43AbthFPFmE=) 4: 5663bf34-10ed-4309-a236-7466afd6f02f.roa (hash: aoaRIM84eruV/ISWBs3PJCPQb0sEmsLtTOcu1EdbsFA=) 5: cc2f7093-21a6-400f-9db1-93c2fe02bc1c.roa (hash: vbtxuyfgx9e6lLFR0CnUGCC1kgCTySw+Ljt4yM1fDb4=) 6: ea1d02aa-6d25-4b36-b42e-ba837d49e261.roa (hash: q5bh3h1LHQcXwRDCiiiYn6TP5+N60E0SyV4QnQBQL8c=) Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/708aafaf-00b4-485b-854c-0b32ca30f57b/12e59001-35ac-4abf-858f-37b955a24b3f.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/708aafaf-00b4-485b-854c-0b32ca30f57b/manifest.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/58raXwiB13vqSLB2ijdmtQBlrwg.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 11 Sep 2026 00:06:47 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2d:00:55:24:1d:42:f4:ce:47:b1:dc:a2:f1:28:98:7a:98:b9:6f:dd Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A918806F0000, serialNumber=E7CADA5F0881D77BEA48B0768A3766B50065AF08 Validity Not Before: Sep 7 00:06:47 2026 GMT Not After : Sep 11 00:06:47 2026 GMT Subject: serialNumber=7a7f9fea28e882cd991b0d712bd7bbb4698d7bbb538f710de9635a09e2bed36e, CN=bb9a9116-f615-462e-a680-5266b327e0fa Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:bc:f9:d1:4b:a4:f8:99:03:a6:65:85:d0:23: 48:56:bc:05:9f:dd:a8:b4:79:d3:64:6e:5f:99:db: 8b:5c:bf:9d:30:c2:cd:28:32:f2:0a:c2:03:de:0d: e9:e7:03:cc:da:e8:e4:86:3f:b0:c3:2b:ab:b1:9b: d3:08:48:86:98:07:77:6a:17:32:95:a0:50:3d:0e: 01:f7:16:3a:bc:d2:e6:12:ce:95:c3:39:d9:7d:80: fe:57:9a:48:1d:f7:cb:21:dd:8a:de:59:43:2b:63: 30:29:7a:91:ed:2a:4d:25:c2:57:77:2c:a4:4a:00: 47:ac:b1:76:b8:49:ef:0b:8c:50:4f:2c:24:25:35: cf:c7:41:75:da:e3:91:35:cc:7d:65:15:11:e2:5b: 40:85:a7:8e:74:f0:ae:1c:0e:84:dc:31:2e:97:5b: e6:78:82:b8:a8:a5:e9:53:db:e3:7f:ba:dc:fb:06: 57:91:72:eb:87:9e:e4:7a:54:fb:78:a8:85:a8:cc: 72:c6:1e:11:2e:49:22:df:21:3f:91:e2:5f:04:9d: fe:76:55:5a:1e:ee:6d:0c:91:0d:ee:c3:ad:b5:aa: e1:fe:96:5f:0b:a6:42:38:f9:81:a6:03:4e:ea:0c: 9d:c5:84:23:bf:4b:74:16:7d:2a:67:19:43:7a:48: 19:5f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 12:7F:29:45:15:10:F1:C2:27:E0:21:03:7E:F2:4C:F8:3A:3A:49:40 X509v3 Authority Key Identifier: keyid:E7:CA:DA:5F:08:81:D7:7B:EA:48:B0:76:8A:37:66:B5:00:65:AF:08 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/58raXwiB13vqSLB2ijdmtQBlrwg.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/708aafaf-00b4-485b-854c-0b32ca30f57b/manifest.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/708aafaf-00b4-485b-854c-0b32ca30f57b/12e59001-35ac-4abf-858f-37b955a24b3f.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 5a:e2:63:3f:24:38:ab:e5:fd:cf:8a:c5:52:4c:f0:b2:bc:6c: 8a:92:80:02:ea:e4:75:42:39:c7:6d:51:29:22:95:91:11:22: b8:ab:cf:57:56:c2:3c:98:5d:39:39:fa:64:96:05:20:89:6d: 86:f1:53:45:24:70:e4:a5:c9:62:91:00:a6:f4:39:59:fd:8e: 60:98:7a:72:13:d2:0c:15:93:84:f3:62:19:42:3d:1b:34:05: 1f:fa:ad:39:86:15:88:b2:89:c8:37:d0:a9:fa:d3:f7:01:7d: 49:e6:11:87:68:6c:ba:1e:d7:8e:1a:62:ce:83:48:80:42:d3: ca:8b:e5:6a:0b:6d:36:e0:12:a0:6f:83:98:98:82:85:1a:18: 8a:33:85:1b:a0:11:f4:98:70:9a:e1:9f:5f:94:f2:b7:c5:4b: 0b:81:7e:60:a2:f7:ef:06:ab:0c:cc:6f:59:92:4b:d4:79:6f: 2c:07:54:69:34:43:58:9a:bc:a1:c4:8f:09:84:00:5b:f9:ac: f6:2e:b0:9c:21:e8:09:a7:77:8f:a2:95:f9:e8:a8:78:6a:ec: a5:80:52:4e:53:e8:4b:21:7d:d9:36:f7:a8:bd:6f:4f:44:ef: 63:08:c0:d1:af:28:24:aa:97:98:50:59:12:d6:d4:e1:15:f8: 6c:18:b5:52 -----BEGIN CERTIFICATE----- MIIFlTCCBH2gAwIBAgIULQBVJB1C9M5Hsdyi8SiYepi5b90wDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODgwNkYwMDAwMTEwLwYDVQQFEyhFN0NBREE1RjA4 ODFENzdCRUE0OEIwNzY4QTM3NjZCNTAwNjVBRjA4MB4XDTI2MDkwNzAwMDY0N1oX DTI2MDkxMTAwMDY0N1owejFJMEcGA1UEBRNAN2E3ZjlmZWEyOGU4ODJjZDk5MWIw ZDcxMmJkN2JiYjQ2OThkN2JiYjUzOGY3MTBkZTk2MzVhMDllMmJlZDM2ZTEtMCsG A1UEAxMkYmI5YTkxMTYtZjYxNS00NjJlLWE2ODAtNTI2NmIzMjdlMGZhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAp7z50Uuk+JkDpmWF0CNIVrwFn92o tHnTZG5fmduLXL+dMMLNKDLyCsID3g3p5wPM2ujkhj+wwyursZvTCEiGmAd3ahcy laBQPQ4B9xY6vNLmEs6VwznZfYD+V5pIHffLId2K3llDK2MwKXqR7SpNJcJXdyyk SgBHrLF2uEnvC4xQTywkJTXPx0F12uORNcx9ZRUR4ltAhaeOdPCuHA6E3DEul1vm eIK4qKXpU9vjf7rc+wZXkXLrh57kelT7eKiFqMxyxh4RLkki3yE/keJfBJ3+dlVa Hu5tDJEN7sOttarh/pZfC6ZCOPmBpgNO6gydxYQjv0t0Fn0qZxlDekgZXwIDAQAB o4ICQTCCAj0wHQYDVR0OBBYEFBJ/KUUVEPHCJ+AhA37yTPg6OklAMB8GA1UdIwQY MBaAFOfK2l8Igdd76kiwdoo3ZrUAZa8IMA4GA1UdDwEB/wQEAwIHgDB+BggrBgEF BQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVw b3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi81OHJhWHdp QjEzdnFTTEIyaWpkbXRRQmxyd2cuY2VyMH8GCCsGAQUFBwELBHMwcTBvBggrBgEF BQcwC4ZjcnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5hbWF6b25hd3MuY29t L3ZvbHVtZS83MDhhYWZhZi0wMGI0LTQ4NWItODU0Yy0wYjMyY2EzMGY1N2IvbWFu aWZlc3QubWZ0MIGVBgNVHR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnBraS1y c3luYy51cy1lYXN0LTIuYW1hem9uYXdzLmNvbS92b2x1bWUvNzA4YWFmYWYtMDBi NC00ODViLTg1NGMtMGIzMmNhMzBmNTdiLzEyZTU5MDAxLTM1YWMtNGFiZi04NThm LTM3Yjk1NWEyNGIzZi5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggr BgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYw BKACBQAwDQYJKoZIhvcNAQELBQADggEBAFriYz8kOKvl/c+KxVJM8LK8bIqSgALq 5HVCOcdtUSkilZERIrirz1dWwjyYXTk5+mSWBSCJbYbxU0UkcOSlyWKRAKb0OVn9 jmCYenIT0gwVk4TzYhlCPRs0BR/6rTmGFYiyicg30Kn60/cBfUnmEYdobLoe144a Ys6DSIBC08qL5WoLbTbgEqBvg5iYgoUaGIozhRugEfSYcJrhn1+U8rfFSwuBfmCi 9+8GqwzMb1mSS9R5bywHVGk0Q1iavKHEjwmEAFv5rPYusJwh6Amnd4+ilfnoqHhq 7KWAUk5T6Eshfdk296i9b09E72MIwNGvKCSql5hQWRLW1OEV+GwYtVI= -----END CERTIFICATE-----Generated at Mon Sep 7 17:03:20 2026 by rpki-client