$ rpki-client -vvvf rpki-rsync.us-east-2.amazonaws.com/volume/708aafaf-00b4-485b-854c-0b32ca30f57b/manifest.mft File: manifest.mft (raw, json) Hash identifier: gvvmK9VtGU/OCQ02N6UEkip5CAK+FlnLedim+ihhlyE= Subject key identifier: C1:54:48:06:74:B8:A9:3D:04:E6:C5:FC:0B:B5:74:4D:5D:83:DC:00 Authority key identifier: E7:CA:DA:5F:08:81:D7:7B:EA:48:B0:76:8A:37:66:B5:00:65:AF:08 Certificate issuer: /CN=A918806F0000/serialNumber=E7CADA5F0881D77BEA48B0768A3766B50065AF08 Certificate serial: 3DA11922C04BDCEE7F6329F6504FD9A574FAEAA1 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/58raXwiB13vqSLB2ijdmtQBlrwg.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/708aafaf-00b4-485b-854c-0b32ca30f57b/manifest.mft Manifest number: 069C Signing time: Sun 27 Sep 2026 00:09:51 +0000 Manifest this update: Sun 27 Sep 2026 00:09:51 +0000 Manifest next update: Thu 01 Oct 2026 00:09:51 +0000 Files and hashes: 1: 12e59001-35ac-4abf-858f-37b955a24b3f.crl (hash: SY809gj1voNQFt8zPYajA0tKusqIPrX2F+Do8lfLUCU=) 2: 381fc6e6-5d49-41bc-b584-d9437c68e3cd.roa (hash: 8QqQOxAj3sRai6/BzOB2kV66/okkk7p8TzKsBaSwcWA=) 3: 49119734-9dbc-4bd4-98be-57e4ce078928.roa (hash: 0OedyNMwjL1I1p7rzryfdYD0nslES0i+43AbthFPFmE=) 4: 5663bf34-10ed-4309-a236-7466afd6f02f.roa (hash: aoaRIM84eruV/ISWBs3PJCPQb0sEmsLtTOcu1EdbsFA=) 5: cc2f7093-21a6-400f-9db1-93c2fe02bc1c.roa (hash: vbtxuyfgx9e6lLFR0CnUGCC1kgCTySw+Ljt4yM1fDb4=) 6: ea1d02aa-6d25-4b36-b42e-ba837d49e261.roa (hash: q5bh3h1LHQcXwRDCiiiYn6TP5+N60E0SyV4QnQBQL8c=) Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/708aafaf-00b4-485b-854c-0b32ca30f57b/12e59001-35ac-4abf-858f-37b955a24b3f.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/708aafaf-00b4-485b-854c-0b32ca30f57b/manifest.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/58raXwiB13vqSLB2ijdmtQBlrwg.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 01 Oct 2026 00:09:51 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3d:a1:19:22:c0:4b:dc:ee:7f:63:29:f6:50:4f:d9:a5:74:fa:ea:a1 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A918806F0000, serialNumber=E7CADA5F0881D77BEA48B0768A3766B50065AF08 Validity Not Before: Sep 27 00:09:51 2026 GMT Not After : Oct 1 00:09:51 2026 GMT Subject: serialNumber=984bbb5c5999c21a57510796d86f7e106dfc4bbc075d8781347dd53566082822, CN=bb9a9116-f615-462e-a680-5266b327e0fa Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:5c:22:d9:75:2c:c1:17:8d:2f:14:cb:7c:a2: 53:90:28:c4:6c:a4:3e:1b:6b:16:3f:ec:4b:47:82: fc:de:6e:f9:91:c8:0b:f2:73:a1:78:6b:0f:48:5b: d1:4b:ae:1e:b9:d7:bc:53:c3:5e:c5:2c:39:4f:2b: 0f:63:72:fe:77:4e:6d:ed:ca:e2:bf:71:0f:17:d3: db:4c:22:11:bd:c6:af:fc:28:1c:12:6a:17:25:56: f0:51:4a:df:95:5f:f3:07:71:07:dc:8e:b7:7f:ca: c5:91:14:dd:6b:ad:a8:8d:c8:c4:1c:52:21:4e:5d: 25:b8:67:98:62:f9:6f:d2:28:2d:3f:61:28:06:65: 19:69:75:dc:ed:79:9a:ba:a1:e5:cd:24:90:a7:0c: 35:c0:9a:db:13:86:b6:05:e7:3c:81:5b:e2:47:0c: a7:8e:ef:c5:1b:75:2e:17:b9:14:23:d6:8f:98:41: fd:50:69:e4:ba:03:c7:3b:68:8c:db:4f:d2:b2:ca: 6b:bf:0d:4e:3d:86:72:fe:89:2f:ef:91:53:b8:28: a2:54:f2:63:0c:60:76:32:00:15:e8:8a:6d:cf:a9: fa:7a:03:2b:fa:ff:82:01:38:a2:01:69:34:e9:24: 3f:e7:48:5c:7d:28:1a:07:67:5c:5f:82:72:77:be: 07:d1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C1:54:48:06:74:B8:A9:3D:04:E6:C5:FC:0B:B5:74:4D:5D:83:DC:00 X509v3 Authority Key Identifier: keyid:E7:CA:DA:5F:08:81:D7:7B:EA:48:B0:76:8A:37:66:B5:00:65:AF:08 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/58raXwiB13vqSLB2ijdmtQBlrwg.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/708aafaf-00b4-485b-854c-0b32ca30f57b/manifest.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/708aafaf-00b4-485b-854c-0b32ca30f57b/12e59001-35ac-4abf-858f-37b955a24b3f.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 56:69:2a:72:29:8b:04:a9:fb:50:82:b7:ca:d1:4b:59:6b:c3: 0d:08:f2:d2:c2:da:84:19:b8:a5:47:6c:f5:3e:75:14:b0:80: e0:bc:fc:5e:f4:74:8c:2c:5e:df:4f:da:79:52:72:69:3c:2d: e7:b4:97:39:15:f3:87:09:75:8c:c2:fe:cd:f3:1e:89:eb:4b: 24:b7:67:62:15:2e:51:9b:43:11:c9:db:b4:2c:1c:0d:3b:5c: 46:6c:61:64:25:db:a4:bf:65:df:9b:ff:73:3c:cf:70:7a:7c: 9e:fc:15:26:9d:8c:ae:18:b2:74:6f:d5:db:02:6e:0d:e7:b0: 80:24:f1:0a:d3:26:3d:e5:da:50:d8:20:35:33:c0:c4:a8:d6: 89:19:ca:fe:2f:0a:68:be:a2:3e:13:68:ca:78:bd:8e:d6:7d: 1e:49:24:c0:52:bd:61:69:3c:cb:8b:fe:ec:ec:ea:47:8f:77: e1:27:7e:1a:3d:f6:ff:4d:4b:70:1f:7e:a9:bc:7c:f7:9b:f3: 52:f6:fb:1b:c5:d2:dd:e8:f7:e6:04:32:9a:00:57:bc:94:50: f2:b1:11:2f:48:4f:ff:24:e7:c8:27:71:bb:36:e3:e4:13:7b: de:ef:46:a8:59:10:1b:6a:a8:a0:4b:ae:3b:78:1d:51:fb:21: fe:57:8e:45 -----BEGIN CERTIFICATE----- MIIFlTCCBH2gAwIBAgIUPaEZIsBL3O5/Yyn2UE/ZpXT66qEwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODgwNkYwMDAwMTEwLwYDVQQFEyhFN0NBREE1RjA4 ODFENzdCRUE0OEIwNzY4QTM3NjZCNTAwNjVBRjA4MB4XDTI2MDkyNzAwMDk1MVoX DTI2MTAwMTAwMDk1MVowejFJMEcGA1UEBRNAOTg0YmJiNWM1OTk5YzIxYTU3NTEw Nzk2ZDg2ZjdlMTA2ZGZjNGJiYzA3NWQ4NzgxMzQ3ZGQ1MzU2NjA4MjgyMjEtMCsG A1UEAxMkYmI5YTkxMTYtZjYxNS00NjJlLWE2ODAtNTI2NmIzMjdlMGZhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxFwi2XUswReNLxTLfKJTkCjEbKQ+ G2sWP+xLR4L83m75kcgL8nOheGsPSFvRS64eude8U8NexSw5TysPY3L+d05t7cri v3EPF9PbTCIRvcav/CgcEmoXJVbwUUrflV/zB3EH3I63f8rFkRTda62ojcjEHFIh Tl0luGeYYvlv0igtP2EoBmUZaXXc7XmauqHlzSSQpww1wJrbE4a2Bec8gVviRwyn ju/FG3UuF7kUI9aPmEH9UGnkugPHO2iM20/Sssprvw1OPYZy/okv75FTuCiiVPJj DGB2MgAV6Iptz6n6egMr+v+CATiiAWk06SQ/50hcfSgaB2dcX4Jyd74H0QIDAQAB o4ICQTCCAj0wHQYDVR0OBBYEFMFUSAZ0uKk9BObF/Au1dE1dg9wAMB8GA1UdIwQY MBaAFOfK2l8Igdd76kiwdoo3ZrUAZa8IMA4GA1UdDwEB/wQEAwIHgDB+BggrBgEF BQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVw b3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi81OHJhWHdp QjEzdnFTTEIyaWpkbXRRQmxyd2cuY2VyMH8GCCsGAQUFBwELBHMwcTBvBggrBgEF BQcwC4ZjcnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5hbWF6b25hd3MuY29t L3ZvbHVtZS83MDhhYWZhZi0wMGI0LTQ4NWItODU0Yy0wYjMyY2EzMGY1N2IvbWFu aWZlc3QubWZ0MIGVBgNVHR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnBraS1y c3luYy51cy1lYXN0LTIuYW1hem9uYXdzLmNvbS92b2x1bWUvNzA4YWFmYWYtMDBi NC00ODViLTg1NGMtMGIzMmNhMzBmNTdiLzEyZTU5MDAxLTM1YWMtNGFiZi04NThm LTM3Yjk1NWEyNGIzZi5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggr BgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYw BKACBQAwDQYJKoZIhvcNAQELBQADggEBAFZpKnIpiwSp+1CCt8rRS1lrww0I8tLC 2oQZuKVHbPU+dRSwgOC8/F70dIwsXt9P2nlScmk8Lee0lzkV84cJdYzC/s3zHonr SyS3Z2IVLlGbQxHJ27QsHA07XEZsYWQl26S/Zd+b/3M8z3B6fJ78FSadjK4YsnRv 1dsCbg3nsIAk8QrTJj3l2lDYIDUzwMSo1okZyv4vCmi+oj4TaMp4vY7WfR5JJMBS vWFpPMuL/uzs6kePd+Enfho99v9NS3Affqm8fPeb81L2+xvF0t3o9+YEMpoAV7yU UPKxES9IT/8k58gncbs24+QTe97vRqhZEBtqqKBLrjt4HVH7If5XjkU= -----END CERTIFICATE-----Generated at Sun Sep 27 19:18:45 2026 by rpki-client