$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/708aafaf-00b4-485b-854c-0b32ca30f57b/manifest.mft File: manifest.mft (raw, json) Hash identifier: bA6KhIvA3cda0HQCFGXDZ67TwlbdNt08sytcMqjpybY= Subject key identifier: 30:0B:0E:95:33:0D:2B:93:4C:87:EC:2F:ED:D7:22:3B:1A:4D:44:3C Authority key identifier: E7:CA:DA:5F:08:81:D7:7B:EA:48:B0:76:8A:37:66:B5:00:65:AF:08 Certificate issuer: /CN=A918806F0000/serialNumber=E7CADA5F0881D77BEA48B0768A3766B50065AF08 Certificate serial: 4B7CF346405365E38465415475FFEF4B860EC7BE Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/58raXwiB13vqSLB2ijdmtQBlrwg.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/708aafaf-00b4-485b-854c-0b32ca30f57b/manifest.mft Manifest number: 0661 Signing time: Thu 30 Jul 2026 00:03:26 +0000 Manifest this update: Thu 30 Jul 2026 00:03:26 +0000 Manifest next update: Mon 03 Aug 2026 00:03:26 +0000 Files and hashes: 1: 12e59001-35ac-4abf-858f-37b955a24b3f.crl (hash: LQLxHbMvA45s/OAJdJtbYTPIXiCQh28XIVSMr8f3Mbc=) 2: 381fc6e6-5d49-41bc-b584-d9437c68e3cd.roa (hash: M+i7XpsJD4p5Tk2yVGdLmGjDs5xTMXCNLVAUi3YO9fw=) 3: 49119734-9dbc-4bd4-98be-57e4ce078928.roa (hash: 0OedyNMwjL1I1p7rzryfdYD0nslES0i+43AbthFPFmE=) 4: 5663bf34-10ed-4309-a236-7466afd6f02f.roa (hash: aoaRIM84eruV/ISWBs3PJCPQb0sEmsLtTOcu1EdbsFA=) 5: cc2f7093-21a6-400f-9db1-93c2fe02bc1c.roa (hash: vbtxuyfgx9e6lLFR0CnUGCC1kgCTySw+Ljt4yM1fDb4=) 6: ea1d02aa-6d25-4b36-b42e-ba837d49e261.roa (hash: q5bh3h1LHQcXwRDCiiiYn6TP5+N60E0SyV4QnQBQL8c=) Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/708aafaf-00b4-485b-854c-0b32ca30f57b/12e59001-35ac-4abf-858f-37b955a24b3f.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/708aafaf-00b4-485b-854c-0b32ca30f57b/manifest.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/58raXwiB13vqSLB2ijdmtQBlrwg.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 03 Aug 2026 00:03:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4b:7c:f3:46:40:53:65:e3:84:65:41:54:75:ff:ef:4b:86:0e:c7:be Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A918806F0000, serialNumber=E7CADA5F0881D77BEA48B0768A3766B50065AF08 Validity Not Before: Jul 30 00:03:26 2026 GMT Not After : Aug 3 00:03:26 2026 GMT Subject: serialNumber=43028daede9cbe2784f0a03786ee823be4231b739d733feb11074ce4e0c079eb, CN=bb9a9116-f615-462e-a680-5266b327e0fa Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8d:7a:86:0d:be:df:47:90:bf:d7:2e:d3:14:6d: 86:70:ff:12:1f:95:6f:28:d0:63:c0:e5:57:04:0d: fd:63:7f:8f:13:33:23:3a:50:fe:55:84:27:ba:a8: 9a:9d:32:be:e1:2b:fa:4b:27:4c:27:c0:b2:c6:6e: 58:93:a9:9b:03:dd:0b:dd:e0:6f:a6:ab:0a:72:a9: 06:13:4b:74:13:f4:c4:f5:73:4f:21:1b:29:dc:94: 4e:f0:c8:09:d0:f1:1d:2f:3f:19:52:e3:c7:a9:60: 0c:3c:d0:c7:5a:52:6d:fe:84:f8:8e:b0:69:19:b3: 5e:fb:0a:41:97:d0:11:6f:e9:69:df:ea:1b:b4:16: 76:9c:d4:a0:65:1b:f8:af:ea:89:9b:ab:7a:4b:da: 0f:eb:4a:00:39:e6:4c:56:5a:89:d9:d8:60:c6:9c: 78:69:3d:f8:f5:11:23:88:82:9b:8a:cd:06:dd:bc: 0a:3d:4c:d3:54:e7:4b:14:d7:bf:ec:c9:35:86:af: 55:c5:47:85:f2:c4:d5:3e:f5:86:0d:70:8c:47:9e: 3c:6e:aa:c1:7f:f8:09:a3:69:90:b2:d6:a3:bc:d9: 91:7c:cb:a2:bd:3c:3f:df:61:d0:fd:17:2a:2d:7e: 1c:96:07:6f:a7:e8:65:e0:6f:a4:5c:89:4d:a0:c0: 3b:37 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 30:0B:0E:95:33:0D:2B:93:4C:87:EC:2F:ED:D7:22:3B:1A:4D:44:3C X509v3 Authority Key Identifier: keyid:E7:CA:DA:5F:08:81:D7:7B:EA:48:B0:76:8A:37:66:B5:00:65:AF:08 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/58raXwiB13vqSLB2ijdmtQBlrwg.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/708aafaf-00b4-485b-854c-0b32ca30f57b/manifest.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/708aafaf-00b4-485b-854c-0b32ca30f57b/12e59001-35ac-4abf-858f-37b955a24b3f.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 53:c3:a7:c8:bb:0f:3a:e6:6c:be:00:31:d6:6a:e2:64:b6:7e: dc:84:64:34:a2:bb:e7:19:dc:87:29:21:ba:03:77:89:cc:de: 73:00:3b:79:0d:1c:78:59:e7:5d:01:81:40:2a:ec:23:de:c2: 30:7b:f0:19:52:22:76:ea:ff:a2:d4:85:08:e5:7a:d3:ff:a1: 7e:db:e7:71:01:0e:8e:d9:b5:dc:b7:04:d2:c3:e0:75:5e:ab: 08:ed:3f:d4:f5:b7:5b:61:c3:9c:9f:60:38:4a:4f:b2:b1:f3: fe:e9:1d:d2:33:e6:d6:f8:d7:09:9a:15:3e:9c:dc:aa:d5:81: d3:73:46:ad:41:7b:3c:32:4e:2a:fc:f8:58:35:63:2f:9f:a6: 4a:12:69:56:da:25:d6:0c:7b:5a:84:ed:86:fe:61:d8:0c:ea: 7f:a1:c9:e6:6c:a1:3d:a4:7c:85:d4:e9:9c:e5:e7:55:e8:8b: 95:30:4c:88:18:e6:22:e7:96:fb:5d:c2:96:a6:7f:c8:75:82: 8b:96:d2:3d:ac:32:99:90:1e:42:db:02:4b:79:5f:cd:9d:38: 61:a9:39:7d:6d:20:32:b5:a7:a3:e2:17:57:25:0a:5c:d6:b0: c4:6b:7a:68:6c:a0:fc:dd:fb:a1:af:39:62:c0:61:b9:c8:d5: a6:7f:10:72 -----BEGIN CERTIFICATE----- MIIFlTCCBH2gAwIBAgIUS3zzRkBTZeOEZUFUdf/vS4YOx74wDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODgwNkYwMDAwMTEwLwYDVQQFEyhFN0NBREE1RjA4 ODFENzdCRUE0OEIwNzY4QTM3NjZCNTAwNjVBRjA4MB4XDTI2MDczMDAwMDMyNloX DTI2MDgwMzAwMDMyNlowejFJMEcGA1UEBRNANDMwMjhkYWVkZTljYmUyNzg0ZjBh MDM3ODZlZTgyM2JlNDIzMWI3MzlkNzMzZmViMTEwNzRjZTRlMGMwNzllYjEtMCsG A1UEAxMkYmI5YTkxMTYtZjYxNS00NjJlLWE2ODAtNTI2NmIzMjdlMGZhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjXqGDb7fR5C/1y7TFG2GcP8SH5Vv KNBjwOVXBA39Y3+PEzMjOlD+VYQnuqianTK+4Sv6SydMJ8Cyxm5Yk6mbA90L3eBv pqsKcqkGE0t0E/TE9XNPIRsp3JRO8MgJ0PEdLz8ZUuPHqWAMPNDHWlJt/oT4jrBp GbNe+wpBl9ARb+lp3+obtBZ2nNSgZRv4r+qJm6t6S9oP60oAOeZMVlqJ2dhgxpx4 aT349REjiIKbis0G3bwKPUzTVOdLFNe/7Mk1hq9VxUeF8sTVPvWGDXCMR548bqrB f/gJo2mQstajvNmRfMuivTw/32HQ/RcqLX4clgdvp+hl4G+kXIlNoMA7NwIDAQAB o4ICQTCCAj0wHQYDVR0OBBYEFDALDpUzDSuTTIfsL+3XIjsaTUQ8MB8GA1UdIwQY MBaAFOfK2l8Igdd76kiwdoo3ZrUAZa8IMA4GA1UdDwEB/wQEAwIHgDB+BggrBgEF BQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVw b3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi81OHJhWHdp QjEzdnFTTEIyaWpkbXRRQmxyd2cuY2VyMH8GCCsGAQUFBwELBHMwcTBvBggrBgEF BQcwC4ZjcnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5hbWF6b25hd3MuY29t L3ZvbHVtZS83MDhhYWZhZi0wMGI0LTQ4NWItODU0Yy0wYjMyY2EzMGY1N2IvbWFu aWZlc3QubWZ0MIGVBgNVHR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnBraS1y c3luYy51cy1lYXN0LTIuYW1hem9uYXdzLmNvbS92b2x1bWUvNzA4YWFmYWYtMDBi NC00ODViLTg1NGMtMGIzMmNhMzBmNTdiLzEyZTU5MDAxLTM1YWMtNGFiZi04NThm LTM3Yjk1NWEyNGIzZi5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggr BgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYw BKACBQAwDQYJKoZIhvcNAQELBQADggEBAFPDp8i7DzrmbL4AMdZq4mS2ftyEZDSi u+cZ3IcpIboDd4nM3nMAO3kNHHhZ510BgUAq7CPewjB78BlSInbq/6LUhQjletP/ oX7b53EBDo7Ztdy3BNLD4HVeqwjtP9T1t1thw5yfYDhKT7Kx8/7pHdIz5tb41wma FT6c3KrVgdNzRq1BezwyTir8+Fg1Yy+fpkoSaVbaJdYMe1qE7Yb+YdgM6n+hyeZs oT2kfIXU6Zzl51Xoi5UwTIgY5iLnlvtdwpamf8h1gouW0j2sMpmQHkLbAkt5X82d OGGpOX1tIDK1p6PiF1clClzWsMRremhsoPzd+6GvOWLAYbnI1aZ/EHI= -----END CERTIFICATE-----Generated at Thu Jul 30 12:22:44 2026 by rpki-client