$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/708aafaf-00b4-485b-854c-0b32ca30f57b/manifest.mft File: manifest.mft (raw, json) Hash identifier: rd21dujapzqUU1usMDh82QgwmQIW6hZAYhWJU/KkdnU= Subject key identifier: DC:80:90:7A:52:E6:56:B4:DB:71:C2:A6:E1:59:AF:0C:05:0A:81:CB Authority key identifier: E7:CA:DA:5F:08:81:D7:7B:EA:48:B0:76:8A:37:66:B5:00:65:AF:08 Certificate issuer: /CN=A918806F0000/serialNumber=E7CADA5F0881D77BEA48B0768A3766B50065AF08 Certificate serial: 19F0703D2E9CAE682E9A4971D669020F9C4A73B8 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/58raXwiB13vqSLB2ijdmtQBlrwg.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/708aafaf-00b4-485b-854c-0b32ca30f57b/manifest.mft Manifest number: 0630 Signing time: Thu 11 Jun 2026 00:05:28 +0000 Manifest this update: Thu 11 Jun 2026 00:05:28 +0000 Manifest next update: Mon 15 Jun 2026 00:05:28 +0000 Files and hashes: 1: 12e59001-35ac-4abf-858f-37b955a24b3f.crl (hash: BYe8OJQwcOSEFEVnuRmUZUYj+2iZubL1E9unr39yy2w=) 2: 381fc6e6-5d49-41bc-b584-d9437c68e3cd.roa (hash: M+i7XpsJD4p5Tk2yVGdLmGjDs5xTMXCNLVAUi3YO9fw=) 3: 49119734-9dbc-4bd4-98be-57e4ce078928.roa (hash: ixxf6ccd3osEyLmWkgkbiHVYyusTctrUjOhnPpMvlE4=) 4: 5663bf34-10ed-4309-a236-7466afd6f02f.roa (hash: pL63iKjbLOLYlourekfOR4Nmgu8cB/gmsl43BXFS/jc=) 5: cc2f7093-21a6-400f-9db1-93c2fe02bc1c.roa (hash: 64kuFuROhLtieOXlazTSy2bjQ+E6VKxKN/jo5XO5H34=) 6: ea1d02aa-6d25-4b36-b42e-ba837d49e261.roa (hash: ZpxX4uxdJxBRqoXrMr+4TjfM6a61MegoEvwGJaS8fgI=) Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/708aafaf-00b4-485b-854c-0b32ca30f57b/12e59001-35ac-4abf-858f-37b955a24b3f.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/708aafaf-00b4-485b-854c-0b32ca30f57b/manifest.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/58raXwiB13vqSLB2ijdmtQBlrwg.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 15 Jun 2026 00:05:28 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 19:f0:70:3d:2e:9c:ae:68:2e:9a:49:71:d6:69:02:0f:9c:4a:73:b8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A918806F0000, serialNumber=E7CADA5F0881D77BEA48B0768A3766B50065AF08 Validity Not Before: Jun 11 00:05:28 2026 GMT Not After : Jun 15 00:05:28 2026 GMT Subject: serialNumber=6532ff1867ab8a1fafe8e8f104dd08b4fc7aa0682937770dc622b27ee40edb47, CN=bb9a9116-f615-462e-a680-5266b327e0fa Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:cd:b0:0a:c7:19:3e:2d:e9:f3:3d:47:e9:96: 13:96:86:c2:72:c1:9e:84:a3:03:33:92:6c:09:35: 7c:d8:66:94:11:94:c2:68:24:dc:69:ef:db:d5:35: da:03:8f:3d:0a:ba:0e:0a:78:46:74:53:2b:d4:36: 85:6c:6f:13:a7:f5:25:d2:4a:08:0f:7c:a0:cf:aa: 08:97:0d:6e:bc:01:8f:6a:bb:e2:34:65:3a:ff:c3: d1:1b:c1:de:32:1d:82:92:63:bc:81:0d:de:ce:51: e3:7f:68:d9:1b:fd:95:78:97:bd:06:5d:5b:55:90: cc:bc:8b:d4:6a:30:50:09:c6:67:c2:ae:31:2a:56: 36:37:52:a1:12:19:ad:1d:ee:d7:17:a5:29:a5:29: f2:0f:d0:d0:db:92:b1:0e:67:4a:a8:62:88:5c:e3: 52:20:6e:98:9a:02:8b:3c:cc:7c:23:45:72:e7:2c: 48:ba:53:d6:65:e2:a0:b3:7d:7b:1b:a3:80:36:f3: 5e:94:8d:e6:79:62:ae:f1:d8:3a:cd:59:f7:33:c9: c4:bc:ab:f6:b2:56:6e:33:b2:50:00:25:da:42:82: 6c:69:4d:8a:e5:5c:82:f6:ba:ff:03:dd:73:86:ce: 03:8e:db:5f:bb:f7:0d:7f:07:3f:25:b2:b3:ac:d4: 2d:65 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DC:80:90:7A:52:E6:56:B4:DB:71:C2:A6:E1:59:AF:0C:05:0A:81:CB X509v3 Authority Key Identifier: keyid:E7:CA:DA:5F:08:81:D7:7B:EA:48:B0:76:8A:37:66:B5:00:65:AF:08 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/58raXwiB13vqSLB2ijdmtQBlrwg.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/708aafaf-00b4-485b-854c-0b32ca30f57b/manifest.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/708aafaf-00b4-485b-854c-0b32ca30f57b/12e59001-35ac-4abf-858f-37b955a24b3f.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 87:41:2c:52:09:8f:c1:be:2e:44:c2:3c:cd:c0:32:b1:fd:23: 67:37:9a:e0:48:ff:a4:5c:f4:e4:6e:b4:de:5b:53:29:3b:c3: 2f:24:81:3b:1a:2b:e5:0b:62:f7:de:98:9d:0e:09:00:56:b8: 16:ec:15:be:a2:25:69:a5:2b:70:7e:cd:ae:43:c5:24:be:05: 3b:c8:15:31:db:d3:0d:05:bc:1b:95:ce:cd:3f:13:3a:60:28: 9e:df:1a:22:ea:d7:b1:08:54:c9:04:a4:a5:cc:7c:d1:e2:a8: ab:a7:11:63:f9:0a:d2:41:ae:ae:cb:86:89:ba:f8:2f:20:99: 46:9e:f2:4a:6b:1f:35:47:03:7a:ef:49:b9:14:62:4e:a8:53: 63:42:17:41:5b:bf:ea:c9:4d:27:14:98:b5:c7:24:1a:e9:d4: 72:50:aa:74:9a:ab:91:27:1e:0e:17:4c:df:0a:64:da:48:91: 64:e3:14:7f:4f:bf:95:95:ba:db:96:71:52:12:c3:4d:4c:4c: 30:c4:8d:b2:24:b9:e2:54:64:ae:12:a3:5e:03:2b:ae:c3:69: 00:49:ad:de:12:ef:52:b8:b1:e5:3b:9a:fb:f7:2e:eb:dd:f0: 7e:be:c6:97:e1:f3:c7:6a:92:e4:58:2e:99:b3:89:fb:14:ac: a6:6e:20:7f -----BEGIN CERTIFICATE----- MIIFlTCCBH2gAwIBAgIUGfBwPS6crmgumklx1mkCD5xKc7gwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODgwNkYwMDAwMTEwLwYDVQQFEyhFN0NBREE1RjA4 ODFENzdCRUE0OEIwNzY4QTM3NjZCNTAwNjVBRjA4MB4XDTI2MDYxMTAwMDUyOFoX DTI2MDYxNTAwMDUyOFowejFJMEcGA1UEBRNANjUzMmZmMTg2N2FiOGExZmFmZThl OGYxMDRkZDA4YjRmYzdhYTA2ODI5Mzc3NzBkYzYyMmIyN2VlNDBlZGI0NzEtMCsG A1UEAxMkYmI5YTkxMTYtZjYxNS00NjJlLWE2ODAtNTI2NmIzMjdlMGZhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxc2wCscZPi3p8z1H6ZYTlobCcsGe hKMDM5JsCTV82GaUEZTCaCTcae/b1TXaA489CroOCnhGdFMr1DaFbG8Tp/Ul0koI D3ygz6oIlw1uvAGParviNGU6/8PRG8HeMh2CkmO8gQ3ezlHjf2jZG/2VeJe9Bl1b VZDMvIvUajBQCcZnwq4xKlY2N1KhEhmtHe7XF6UppSnyD9DQ25KxDmdKqGKIXONS IG6YmgKLPMx8I0Vy5yxIulPWZeKgs317G6OANvNelI3meWKu8dg6zVn3M8nEvKv2 slZuM7JQACXaQoJsaU2K5VyC9rr/A91zhs4Djttfu/cNfwc/JbKzrNQtZQIDAQAB o4ICQTCCAj0wHQYDVR0OBBYEFNyAkHpS5la023HCpuFZrwwFCoHLMB8GA1UdIwQY MBaAFOfK2l8Igdd76kiwdoo3ZrUAZa8IMA4GA1UdDwEB/wQEAwIHgDB+BggrBgEF BQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVw b3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi81OHJhWHdp QjEzdnFTTEIyaWpkbXRRQmxyd2cuY2VyMH8GCCsGAQUFBwELBHMwcTBvBggrBgEF BQcwC4ZjcnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5hbWF6b25hd3MuY29t L3ZvbHVtZS83MDhhYWZhZi0wMGI0LTQ4NWItODU0Yy0wYjMyY2EzMGY1N2IvbWFu aWZlc3QubWZ0MIGVBgNVHR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnBraS1y c3luYy51cy1lYXN0LTIuYW1hem9uYXdzLmNvbS92b2x1bWUvNzA4YWFmYWYtMDBi NC00ODViLTg1NGMtMGIzMmNhMzBmNTdiLzEyZTU5MDAxLTM1YWMtNGFiZi04NThm LTM3Yjk1NWEyNGIzZi5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggr BgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYw BKACBQAwDQYJKoZIhvcNAQELBQADggEBAIdBLFIJj8G+LkTCPM3AMrH9I2c3muBI /6Rc9ORutN5bUyk7wy8kgTsaK+ULYvfemJ0OCQBWuBbsFb6iJWmlK3B+za5DxSS+ BTvIFTHb0w0FvBuVzs0/EzpgKJ7fGiLq17EIVMkEpKXMfNHiqKunEWP5CtJBrq7L hom6+C8gmUae8kprHzVHA3rvSbkUYk6oU2NCF0Fbv+rJTScUmLXHJBrp1HJQqnSa q5EnHg4XTN8KZNpIkWTjFH9Pv5WVutuWcVISw01MTDDEjbIkueJUZK4So14DK67D aQBJrd4S71K4seU7mvv3Luvd8H6+xpfh88dqkuRYLpmzifsUrKZuIH8= -----END CERTIFICATE-----Generated at Thu Jun 11 03:08:50 2026 by rpki-client