$ rpki-client -vvvf rpki-rsync.us-east-2.amazonaws.com/volume/708aafaf-00b4-485b-854c-0b32ca30f57b/manifest.mft File: manifest.mft (raw, json) Hash identifier: UWou0lDSJgyJpr5lOx/pXouQHpjqVFDcqnUtzrponMU= Subject key identifier: 90:DA:FC:02:0F:3F:9E:7A:64:B1:C0:B6:FB:E3:DD:0A:4A:80:C8:C3 Authority key identifier: E7:CA:DA:5F:08:81:D7:7B:EA:48:B0:76:8A:37:66:B5:00:65:AF:08 Certificate issuer: /CN=A918806F0000/serialNumber=E7CADA5F0881D77BEA48B0768A3766B50065AF08 Certificate serial: 1D9469228AE7C1956EDDEB5885A8F83A9BEB1104 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/58raXwiB13vqSLB2ijdmtQBlrwg.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/708aafaf-00b4-485b-854c-0b32ca30f57b/manifest.mft Manifest number: 0693 Signing time: Fri 18 Sep 2026 00:08:18 +0000 Manifest this update: Fri 18 Sep 2026 00:08:18 +0000 Manifest next update: Tue 22 Sep 2026 00:08:18 +0000 Files and hashes: 1: 12e59001-35ac-4abf-858f-37b955a24b3f.crl (hash: 2/F9EOHYjvYJOMCrVuinR1pChpSqHmgjkvIUhnSJLs4=) 2: 381fc6e6-5d49-41bc-b584-d9437c68e3cd.roa (hash: 8QqQOxAj3sRai6/BzOB2kV66/okkk7p8TzKsBaSwcWA=) 3: 49119734-9dbc-4bd4-98be-57e4ce078928.roa (hash: 0OedyNMwjL1I1p7rzryfdYD0nslES0i+43AbthFPFmE=) 4: 5663bf34-10ed-4309-a236-7466afd6f02f.roa (hash: aoaRIM84eruV/ISWBs3PJCPQb0sEmsLtTOcu1EdbsFA=) 5: cc2f7093-21a6-400f-9db1-93c2fe02bc1c.roa (hash: vbtxuyfgx9e6lLFR0CnUGCC1kgCTySw+Ljt4yM1fDb4=) 6: ea1d02aa-6d25-4b36-b42e-ba837d49e261.roa (hash: q5bh3h1LHQcXwRDCiiiYn6TP5+N60E0SyV4QnQBQL8c=) Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/708aafaf-00b4-485b-854c-0b32ca30f57b/12e59001-35ac-4abf-858f-37b955a24b3f.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/708aafaf-00b4-485b-854c-0b32ca30f57b/manifest.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/58raXwiB13vqSLB2ijdmtQBlrwg.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 22 Sep 2026 00:08:18 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1d:94:69:22:8a:e7:c1:95:6e:dd:eb:58:85:a8:f8:3a:9b:eb:11:04 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A918806F0000, serialNumber=E7CADA5F0881D77BEA48B0768A3766B50065AF08 Validity Not Before: Sep 18 00:08:18 2026 GMT Not After : Sep 22 00:08:18 2026 GMT Subject: serialNumber=6b88f8a93d16cd51811b77d3a4f74c90966f1fd07911f4ff787a9aacad9a8189, CN=bb9a9116-f615-462e-a680-5266b327e0fa Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c9:a9:1b:9a:7c:28:e7:ce:3f:57:68:05:40:79: 41:a8:ea:f2:1f:9e:45:d3:56:c5:de:c7:51:76:86: 48:ac:ee:aa:ee:ed:ad:5e:24:d9:b5:1f:3e:73:67: c7:4c:cb:b4:41:f1:d7:b5:a0:77:bb:10:bd:bb:db: e8:e0:44:dd:8a:f2:dd:2a:43:a9:6e:60:04:5b:c0: d8:fb:c9:4f:82:4b:d9:60:0e:6f:61:70:9e:03:d0: a3:d9:d6:b8:49:79:9b:be:ab:77:ad:05:6c:75:2d: 0b:71:81:35:9b:33:e2:0a:9f:73:c6:af:2f:bb:7f: 1f:d3:c4:24:0e:8e:f5:24:da:8b:19:52:e6:1b:3a: 06:13:b9:34:28:79:a2:1f:f9:63:54:1b:2a:ce:73: e2:9d:99:5f:c6:27:e3:d7:cb:ad:84:68:3d:92:63: a7:41:08:bc:f3:94:f2:7a:7a:9e:db:23:51:6a:99: 72:db:31:6e:3f:0b:f4:76:09:88:9b:51:0f:66:4f: 93:3e:71:19:3d:01:d4:07:58:e5:35:84:67:7d:af: f0:81:c8:d4:68:b6:12:07:6d:d4:24:71:7b:aa:e2: 52:a4:4f:c3:6d:3c:e6:8a:36:ea:da:6b:2e:db:58: 83:3d:dd:4c:65:df:ce:0c:cb:f9:95:f8:50:fc:81: 66:15 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 90:DA:FC:02:0F:3F:9E:7A:64:B1:C0:B6:FB:E3:DD:0A:4A:80:C8:C3 X509v3 Authority Key Identifier: keyid:E7:CA:DA:5F:08:81:D7:7B:EA:48:B0:76:8A:37:66:B5:00:65:AF:08 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/58raXwiB13vqSLB2ijdmtQBlrwg.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/708aafaf-00b4-485b-854c-0b32ca30f57b/manifest.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/708aafaf-00b4-485b-854c-0b32ca30f57b/12e59001-35ac-4abf-858f-37b955a24b3f.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 80:d0:22:fc:13:23:f7:df:11:b6:ea:21:5c:23:b8:4b:40:74: 4e:d9:d5:9f:8b:ac:bb:6c:84:26:b6:eb:25:d1:1a:85:2e:72: 9f:31:26:2d:e5:45:2c:2f:1f:0f:19:fd:7d:62:57:b7:91:ba: 8d:97:54:50:3e:ef:35:5f:d6:dc:60:14:cc:f3:1b:97:7d:5a: 9b:1d:3a:93:e7:6c:f0:d9:a5:2b:0c:c7:ad:c1:30:24:be:84: dd:6b:03:52:20:e7:28:e9:87:4e:4b:4f:37:17:b5:77:c7:bc: 88:9a:2c:27:d0:34:95:0a:3e:ef:19:66:3c:c0:cb:4e:34:c9: 92:07:57:1a:a7:2a:e4:73:23:2a:04:2b:23:41:fc:55:93:09: 5f:b6:6a:b0:5f:62:d0:d0:45:a6:8d:fb:d6:47:7f:46:6a:02: 50:6d:3a:4d:06:6a:2a:4f:ef:3d:2f:ea:16:a2:88:bc:0c:5f: 1b:b1:8c:2f:08:0e:de:99:ed:f4:9d:1c:4f:9e:a1:b7:97:82: 9c:08:e8:d3:bc:11:07:ad:f1:79:0f:fc:4f:d6:ff:bd:91:ae: 9b:7b:75:bf:8f:89:56:5f:6c:d6:9e:5f:b1:af:37:0d:3e:89: 37:8f:f7:ed:88:fd:a8:91:c7:a3:93:5f:bb:e3:8c:5b:06:86: 36:01:e2:2d -----BEGIN CERTIFICATE----- MIIFlTCCBH2gAwIBAgIUHZRpIornwZVu3etYhaj4OpvrEQQwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODgwNkYwMDAwMTEwLwYDVQQFEyhFN0NBREE1RjA4 ODFENzdCRUE0OEIwNzY4QTM3NjZCNTAwNjVBRjA4MB4XDTI2MDkxODAwMDgxOFoX DTI2MDkyMjAwMDgxOFowejFJMEcGA1UEBRNANmI4OGY4YTkzZDE2Y2Q1MTgxMWI3 N2QzYTRmNzRjOTA5NjZmMWZkMDc5MTFmNGZmNzg3YTlhYWNhZDlhODE4OTEtMCsG A1UEAxMkYmI5YTkxMTYtZjYxNS00NjJlLWE2ODAtNTI2NmIzMjdlMGZhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyakbmnwo584/V2gFQHlBqOryH55F 01bF3sdRdoZIrO6q7u2tXiTZtR8+c2fHTMu0QfHXtaB3uxC9u9vo4ETdivLdKkOp bmAEW8DY+8lPgkvZYA5vYXCeA9Cj2da4SXmbvqt3rQVsdS0LcYE1mzPiCp9zxq8v u38f08QkDo71JNqLGVLmGzoGE7k0KHmiH/ljVBsqznPinZlfxifj18uthGg9kmOn QQi885Tyenqe2yNRaply2zFuPwv0dgmIm1EPZk+TPnEZPQHUB1jlNYRnfa/wgcjU aLYSB23UJHF7quJSpE/DbTzmijbq2msu21iDPd1MZd/ODMv5lfhQ/IFmFQIDAQAB o4ICQTCCAj0wHQYDVR0OBBYEFJDa/AIPP556ZLHAtvvj3QpKgMjDMB8GA1UdIwQY MBaAFOfK2l8Igdd76kiwdoo3ZrUAZa8IMA4GA1UdDwEB/wQEAwIHgDB+BggrBgEF BQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVw b3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi81OHJhWHdp QjEzdnFTTEIyaWpkbXRRQmxyd2cuY2VyMH8GCCsGAQUFBwELBHMwcTBvBggrBgEF BQcwC4ZjcnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5hbWF6b25hd3MuY29t L3ZvbHVtZS83MDhhYWZhZi0wMGI0LTQ4NWItODU0Yy0wYjMyY2EzMGY1N2IvbWFu aWZlc3QubWZ0MIGVBgNVHR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnBraS1y c3luYy51cy1lYXN0LTIuYW1hem9uYXdzLmNvbS92b2x1bWUvNzA4YWFmYWYtMDBi NC00ODViLTg1NGMtMGIzMmNhMzBmNTdiLzEyZTU5MDAxLTM1YWMtNGFiZi04NThm LTM3Yjk1NWEyNGIzZi5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggr BgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYw BKACBQAwDQYJKoZIhvcNAQELBQADggEBAIDQIvwTI/ffEbbqIVwjuEtAdE7Z1Z+L rLtshCa26yXRGoUucp8xJi3lRSwvHw8Z/X1iV7eRuo2XVFA+7zVf1txgFMzzG5d9 WpsdOpPnbPDZpSsMx63BMCS+hN1rA1Ig5yjph05LTzcXtXfHvIiaLCfQNJUKPu8Z ZjzAy040yZIHVxqnKuRzIyoEKyNB/FWTCV+2arBfYtDQRaaN+9ZHf0ZqAlBtOk0G aipP7z0v6haiiLwMXxuxjC8IDt6Z7fSdHE+eobeXgpwI6NO8EQet8XkP/E/W/72R rpt7db+PiVZfbNaeX7GvNw0+iTeP9+2I/aiRx6OTX7vjjFsGhjYB4i0= -----END CERTIFICATE-----Generated at Fri Sep 18 15:50:08 2026 by rpki-client