$ rpki-client -vvvf rpki-rsync.us-east-2.amazonaws.com/volume/708aafaf-00b4-485b-854c-0b32ca30f57b/manifest.mft File: manifest.mft (raw, json) Hash identifier: yeJrugxQQb1JWYo5i0+7s7ZnNrE246nqVwGSaFXGUAk= Subject key identifier: 18:97:FC:A8:14:E6:97:C2:86:58:83:08:87:56:77:D0:19:AF:D9:07 Authority key identifier: E7:CA:DA:5F:08:81:D7:7B:EA:48:B0:76:8A:37:66:B5:00:65:AF:08 Certificate issuer: /CN=A918806F0000/serialNumber=E7CADA5F0881D77BEA48B0768A3766B50065AF08 Certificate serial: 79B5A430CA6F59FE8B8C018D3934BACC1C3A4A3B Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/58raXwiB13vqSLB2ijdmtQBlrwg.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/708aafaf-00b4-485b-854c-0b32ca30f57b/manifest.mft Manifest number: 069B Signing time: Sat 26 Sep 2026 00:09:42 +0000 Manifest this update: Sat 26 Sep 2026 00:09:42 +0000 Manifest next update: Wed 30 Sep 2026 00:09:42 +0000 Files and hashes: 1: 12e59001-35ac-4abf-858f-37b955a24b3f.crl (hash: Wl9OkELLbveDhH8EF0NgkgssFboWvSBLRY+qzBvhoK4=) 2: 381fc6e6-5d49-41bc-b584-d9437c68e3cd.roa (hash: 8QqQOxAj3sRai6/BzOB2kV66/okkk7p8TzKsBaSwcWA=) 3: 49119734-9dbc-4bd4-98be-57e4ce078928.roa (hash: 0OedyNMwjL1I1p7rzryfdYD0nslES0i+43AbthFPFmE=) 4: 5663bf34-10ed-4309-a236-7466afd6f02f.roa (hash: aoaRIM84eruV/ISWBs3PJCPQb0sEmsLtTOcu1EdbsFA=) 5: cc2f7093-21a6-400f-9db1-93c2fe02bc1c.roa (hash: vbtxuyfgx9e6lLFR0CnUGCC1kgCTySw+Ljt4yM1fDb4=) 6: ea1d02aa-6d25-4b36-b42e-ba837d49e261.roa (hash: q5bh3h1LHQcXwRDCiiiYn6TP5+N60E0SyV4QnQBQL8c=) Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/708aafaf-00b4-485b-854c-0b32ca30f57b/12e59001-35ac-4abf-858f-37b955a24b3f.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/708aafaf-00b4-485b-854c-0b32ca30f57b/manifest.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/58raXwiB13vqSLB2ijdmtQBlrwg.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 30 Sep 2026 00:09:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 79:b5:a4:30:ca:6f:59:fe:8b:8c:01:8d:39:34:ba:cc:1c:3a:4a:3b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A918806F0000, serialNumber=E7CADA5F0881D77BEA48B0768A3766B50065AF08 Validity Not Before: Sep 26 00:09:42 2026 GMT Not After : Sep 30 00:09:42 2026 GMT Subject: serialNumber=0071f629712eebb4299d5c723fc868c679dbf2f51291988f1dffe2d9aceba44d, CN=bb9a9116-f615-462e-a680-5266b327e0fa Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:b1:7f:ea:1a:3f:58:19:ef:a7:3d:31:69:ec: 6d:3a:5d:c4:ed:5a:c3:93:1d:a4:05:d4:f4:fc:de: f1:e1:49:b5:0d:88:2a:1b:8f:6c:8b:a4:de:68:70: c9:91:c1:9d:ea:f0:a4:85:b2:43:e2:d6:54:57:db: 9e:64:c4:2c:5f:b9:9e:94:86:d2:ac:21:89:f9:32: d7:f4:cc:c2:49:d2:90:03:ea:a2:22:e4:3e:c3:52: bd:a1:27:5c:71:79:e5:8a:67:a1:f0:f8:69:ea:f8: 45:eb:d3:43:d5:33:d0:3a:18:28:6c:be:86:ee:61: 78:28:51:f3:d7:a9:c1:fd:5f:d5:14:d4:1c:c8:03: 44:c4:ac:9b:a6:91:d1:22:e5:31:42:9b:21:4f:b2: e9:3b:61:b2:c9:67:f8:c1:f9:db:19:c6:98:ee:53: 56:b4:3f:e0:f5:4e:5b:a9:81:e4:fb:89:a0:2d:9a: 08:77:19:09:18:bd:06:19:bb:db:d5:a3:66:f0:c8: 73:98:e1:05:5c:37:ff:19:82:2c:3a:05:c9:fb:3e: 26:88:e3:d7:57:46:2d:16:10:61:11:0c:99:11:09: c2:5c:c7:b2:0d:ed:f6:b0:79:23:fb:5f:86:c4:1c: 4f:c4:f4:46:bf:99:d6:8a:27:dd:6b:68:6d:cc:d4: d7:f1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 18:97:FC:A8:14:E6:97:C2:86:58:83:08:87:56:77:D0:19:AF:D9:07 X509v3 Authority Key Identifier: keyid:E7:CA:DA:5F:08:81:D7:7B:EA:48:B0:76:8A:37:66:B5:00:65:AF:08 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/58raXwiB13vqSLB2ijdmtQBlrwg.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/708aafaf-00b4-485b-854c-0b32ca30f57b/manifest.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/708aafaf-00b4-485b-854c-0b32ca30f57b/12e59001-35ac-4abf-858f-37b955a24b3f.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 15:66:d7:80:51:2b:e7:96:a5:54:e3:61:14:07:41:c4:c0:95: c7:d7:3e:49:44:82:f6:bb:59:8a:86:1f:f6:be:a5:34:4c:4a: 2e:45:58:95:dc:17:2a:83:01:e8:6e:ef:07:b4:1a:58:3d:3a: 32:42:5f:7d:5f:19:33:dd:9c:fc:7d:35:04:96:17:e0:c8:4b: 01:f0:c4:be:cd:67:38:b2:5b:83:2f:98:52:50:c8:cc:05:e9: 40:b5:98:91:a1:15:70:b0:14:4f:f1:9b:c3:66:d4:ce:0e:95: 3c:aa:27:4d:d5:1d:5d:34:17:14:2d:b0:85:55:10:bd:5e:ed: 22:2c:92:a1:54:e4:43:17:ac:9c:d2:4c:b1:0d:a7:f6:a1:14: 28:b8:cd:6b:2b:6a:9e:cc:fe:1c:f6:02:52:25:be:f5:c1:9a: 00:88:29:82:bf:1f:90:f1:ab:e3:21:5e:e6:2b:23:2c:35:d2: c8:db:3d:d5:f7:58:9e:dd:dc:17:b8:7b:60:92:37:b7:31:e8: 23:37:eb:59:bc:21:96:50:2b:79:2e:20:b1:68:26:f7:87:5d: aa:80:c5:ee:a5:1e:e3:af:45:58:2d:c7:aa:37:1a:ec:2c:fc: 2e:27:21:83:e6:c1:0f:3a:3e:3e:d1:36:6b:b1:5a:cf:a8:a9: a8:23:ef:7e -----BEGIN CERTIFICATE----- MIIFlTCCBH2gAwIBAgIUebWkMMpvWf6LjAGNOTS6zBw6SjswDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODgwNkYwMDAwMTEwLwYDVQQFEyhFN0NBREE1RjA4 ODFENzdCRUE0OEIwNzY4QTM3NjZCNTAwNjVBRjA4MB4XDTI2MDkyNjAwMDk0MloX DTI2MDkzMDAwMDk0MlowejFJMEcGA1UEBRNAMDA3MWY2Mjk3MTJlZWJiNDI5OWQ1 YzcyM2ZjODY4YzY3OWRiZjJmNTEyOTE5ODhmMWRmZmUyZDlhY2ViYTQ0ZDEtMCsG A1UEAxMkYmI5YTkxMTYtZjYxNS00NjJlLWE2ODAtNTI2NmIzMjdlMGZhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAu7F/6ho/WBnvpz0xaextOl3E7VrD kx2kBdT0/N7x4Um1DYgqG49si6TeaHDJkcGd6vCkhbJD4tZUV9ueZMQsX7melIbS rCGJ+TLX9MzCSdKQA+qiIuQ+w1K9oSdccXnlimeh8Php6vhF69ND1TPQOhgobL6G 7mF4KFHz16nB/V/VFNQcyANExKybppHRIuUxQpshT7LpO2GyyWf4wfnbGcaY7lNW tD/g9U5bqYHk+4mgLZoIdxkJGL0GGbvb1aNm8MhzmOEFXDf/GYIsOgXJ+z4miOPX V0YtFhBhEQyZEQnCXMeyDe32sHkj+1+GxBxPxPRGv5nWiifda2htzNTX8QIDAQAB o4ICQTCCAj0wHQYDVR0OBBYEFBiX/KgU5pfChliDCIdWd9AZr9kHMB8GA1UdIwQY MBaAFOfK2l8Igdd76kiwdoo3ZrUAZa8IMA4GA1UdDwEB/wQEAwIHgDB+BggrBgEF BQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVw b3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi81OHJhWHdp QjEzdnFTTEIyaWpkbXRRQmxyd2cuY2VyMH8GCCsGAQUFBwELBHMwcTBvBggrBgEF BQcwC4ZjcnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5hbWF6b25hd3MuY29t L3ZvbHVtZS83MDhhYWZhZi0wMGI0LTQ4NWItODU0Yy0wYjMyY2EzMGY1N2IvbWFu aWZlc3QubWZ0MIGVBgNVHR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnBraS1y c3luYy51cy1lYXN0LTIuYW1hem9uYXdzLmNvbS92b2x1bWUvNzA4YWFmYWYtMDBi NC00ODViLTg1NGMtMGIzMmNhMzBmNTdiLzEyZTU5MDAxLTM1YWMtNGFiZi04NThm LTM3Yjk1NWEyNGIzZi5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggr BgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYw BKACBQAwDQYJKoZIhvcNAQELBQADggEBABVm14BRK+eWpVTjYRQHQcTAlcfXPklE gva7WYqGH/a+pTRMSi5FWJXcFyqDAehu7we0Glg9OjJCX31fGTPdnPx9NQSWF+DI SwHwxL7NZziyW4MvmFJQyMwF6UC1mJGhFXCwFE/xm8Nm1M4OlTyqJ03VHV00FxQt sIVVEL1e7SIskqFU5EMXrJzSTLENp/ahFCi4zWsrap7M/hz2AlIlvvXBmgCIKYK/ H5Dxq+MhXuYrIyw10sjbPdX3WJ7d3Be4e2CSN7cx6CM361m8IZZQK3kuILFoJveH XaqAxe6lHuOvRVgtx6o3Guws/C4nIYPmwQ86Pj7RNmuxWs+oqagj734= -----END CERTIFICATE-----Generated at Sat Sep 26 18:09:23 2026 by rpki-client