$ rpki-client -vvvf rpki-rsync.us-east-2.amazonaws.com/volume/708aafaf-00b4-485b-854c-0b32ca30f57b/manifest.mft File: manifest.mft (raw, json) Hash identifier: EcMj4M6DI7Yki4rc+XDx8PpUXlYccyisOc8ihZFWMZY= Subject key identifier: 82:CB:23:39:ED:68:06:3C:F2:EB:E3:35:5F:86:C6:56:B0:E9:7F:BD Authority key identifier: E7:CA:DA:5F:08:81:D7:7B:EA:48:B0:76:8A:37:66:B5:00:65:AF:08 Certificate issuer: /CN=A918806F0000/serialNumber=E7CADA5F0881D77BEA48B0768A3766B50065AF08 Certificate serial: 2EFE7D8BF3C2C8F13E2A7F9C25538F98FE7C9741 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/58raXwiB13vqSLB2ijdmtQBlrwg.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/708aafaf-00b4-485b-854c-0b32ca30f57b/manifest.mft Manifest number: 067F Signing time: Sat 29 Aug 2026 00:05:18 +0000 Manifest this update: Sat 29 Aug 2026 00:05:18 +0000 Manifest next update: Wed 02 Sep 2026 00:05:18 +0000 Files and hashes: 1: 12e59001-35ac-4abf-858f-37b955a24b3f.crl (hash: C24BBCAMSAx4bFD7jdb/SR+34Uw+ZeGtNltnunJpyk8=) 2: 381fc6e6-5d49-41bc-b584-d9437c68e3cd.roa (hash: 8QqQOxAj3sRai6/BzOB2kV66/okkk7p8TzKsBaSwcWA=) 3: 49119734-9dbc-4bd4-98be-57e4ce078928.roa (hash: 0OedyNMwjL1I1p7rzryfdYD0nslES0i+43AbthFPFmE=) 4: 5663bf34-10ed-4309-a236-7466afd6f02f.roa (hash: aoaRIM84eruV/ISWBs3PJCPQb0sEmsLtTOcu1EdbsFA=) 5: cc2f7093-21a6-400f-9db1-93c2fe02bc1c.roa (hash: vbtxuyfgx9e6lLFR0CnUGCC1kgCTySw+Ljt4yM1fDb4=) 6: ea1d02aa-6d25-4b36-b42e-ba837d49e261.roa (hash: q5bh3h1LHQcXwRDCiiiYn6TP5+N60E0SyV4QnQBQL8c=) Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/708aafaf-00b4-485b-854c-0b32ca30f57b/12e59001-35ac-4abf-858f-37b955a24b3f.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/708aafaf-00b4-485b-854c-0b32ca30f57b/manifest.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/58raXwiB13vqSLB2ijdmtQBlrwg.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 02 Sep 2026 00:05:18 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2e:fe:7d:8b:f3:c2:c8:f1:3e:2a:7f:9c:25:53:8f:98:fe:7c:97:41 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A918806F0000, serialNumber=E7CADA5F0881D77BEA48B0768A3766B50065AF08 Validity Not Before: Aug 29 00:05:18 2026 GMT Not After : Sep 2 00:05:18 2026 GMT Subject: serialNumber=2464f144dd6a27149cb45f349e58b5641c9a196a75ae6563abae27524d1963fe, CN=bb9a9116-f615-462e-a680-5266b327e0fa Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:df:13:6a:ac:0e:e3:32:1d:7f:75:d7:59:d3:de: db:1f:6e:9a:c8:23:e1:d7:8e:e0:14:b3:b1:45:56: 46:c6:37:ea:4a:ff:2e:4c:c6:81:66:70:37:41:04: 40:09:a3:ad:b3:91:d1:d2:c8:2a:8e:01:7d:71:36: 8d:f1:61:c7:01:f0:81:42:f2:23:8d:75:f9:c5:ad: 86:c3:a9:09:f9:af:34:5e:91:b7:f1:a8:4c:00:a5: 0e:fd:66:5f:5f:45:5a:b6:e2:ea:3e:f1:98:a9:0a: 1f:e0:c8:86:ad:18:9d:f8:d9:fe:4d:68:2b:44:d5: 5c:29:2d:4d:e7:40:4c:76:49:be:15:e3:cd:bd:99: 9a:b3:c2:2e:2a:c9:ac:86:62:31:50:df:d9:de:2b: 34:c1:28:ba:41:3c:33:16:a4:62:70:94:a5:4d:68: 95:c8:50:be:66:94:38:e1:6e:b1:21:2e:58:f8:db: 67:38:17:91:c4:aa:5b:32:de:73:05:1b:ff:b8:ac: 6e:3d:a7:7e:16:73:c2:01:29:f6:81:87:e1:94:37: a0:db:17:65:2d:78:f2:2c:43:fc:53:54:12:65:d4: f7:17:55:c5:c2:34:41:c6:09:9a:a0:cf:4c:b6:ca: 40:c9:a0:e3:59:30:6d:cd:40:a7:60:b2:12:a9:e8: 56:f1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 82:CB:23:39:ED:68:06:3C:F2:EB:E3:35:5F:86:C6:56:B0:E9:7F:BD X509v3 Authority Key Identifier: keyid:E7:CA:DA:5F:08:81:D7:7B:EA:48:B0:76:8A:37:66:B5:00:65:AF:08 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/58raXwiB13vqSLB2ijdmtQBlrwg.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/708aafaf-00b4-485b-854c-0b32ca30f57b/manifest.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/708aafaf-00b4-485b-854c-0b32ca30f57b/12e59001-35ac-4abf-858f-37b955a24b3f.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 12:85:84:70:1a:12:42:ab:9a:29:83:bf:f2:19:8e:a6:fd:79: e2:48:ca:ac:89:c7:f8:32:0f:44:d7:0a:9f:79:19:16:b9:be: 17:e1:d9:3d:d1:ae:84:3b:34:e4:88:eb:b8:43:d3:74:01:88: e8:f4:f8:ba:44:b5:57:a6:10:10:c1:50:67:c9:16:9c:76:29: ba:23:5c:17:c8:22:af:a7:7c:40:b9:6f:fd:9f:d8:b3:2e:1f: b8:38:db:dc:90:3c:ff:99:fc:17:a9:0c:1f:0a:f7:61:75:45: 9d:a0:ad:84:5e:d8:bd:db:49:3b:79:aa:30:d4:73:41:df:14: f1:26:ab:02:97:7b:6b:4f:1a:9e:a5:78:e0:bc:c0:07:d8:f7: 2e:52:ca:d5:a2:36:5e:ed:f2:20:ce:2d:01:e4:06:22:e6:5d: f1:77:d5:2a:d3:b9:db:03:fc:a0:81:b1:55:c7:2a:99:c8:c0: 84:30:b1:c5:16:d5:85:3d:f9:0c:4c:06:54:a2:6e:a1:82:84: ac:b4:db:47:af:9b:3c:8f:93:3e:87:16:cb:b8:ce:dc:bf:9c: 83:ed:1f:41:64:ea:4d:f6:b4:0b:9d:75:f0:0d:5c:0b:9f:be: 12:45:fa:b7:f4:9e:63:88:bc:1d:71:a2:2d:e7:9a:bf:3a:74: 31:df:d4:db -----BEGIN CERTIFICATE----- MIIFlTCCBH2gAwIBAgIULv59i/PCyPE+Kn+cJVOPmP58l0EwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODgwNkYwMDAwMTEwLwYDVQQFEyhFN0NBREE1RjA4 ODFENzdCRUE0OEIwNzY4QTM3NjZCNTAwNjVBRjA4MB4XDTI2MDgyOTAwMDUxOFoX DTI2MDkwMjAwMDUxOFowejFJMEcGA1UEBRNAMjQ2NGYxNDRkZDZhMjcxNDljYjQ1 ZjM0OWU1OGI1NjQxYzlhMTk2YTc1YWU2NTYzYWJhZTI3NTI0ZDE5NjNmZTEtMCsG A1UEAxMkYmI5YTkxMTYtZjYxNS00NjJlLWE2ODAtNTI2NmIzMjdlMGZhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3xNqrA7jMh1/dddZ097bH26ayCPh 147gFLOxRVZGxjfqSv8uTMaBZnA3QQRACaOts5HR0sgqjgF9cTaN8WHHAfCBQvIj jXX5xa2Gw6kJ+a80XpG38ahMAKUO/WZfX0VatuLqPvGYqQof4MiGrRid+Nn+TWgr RNVcKS1N50BMdkm+FePNvZmas8IuKsmshmIxUN/Z3is0wSi6QTwzFqRicJSlTWiV yFC+ZpQ44W6xIS5Y+NtnOBeRxKpbMt5zBRv/uKxuPad+FnPCASn2gYfhlDeg2xdl LXjyLEP8U1QSZdT3F1XFwjRBxgmaoM9MtspAyaDjWTBtzUCnYLISqehW8QIDAQAB o4ICQTCCAj0wHQYDVR0OBBYEFILLIzntaAY88uvjNV+Gxlaw6X+9MB8GA1UdIwQY MBaAFOfK2l8Igdd76kiwdoo3ZrUAZa8IMA4GA1UdDwEB/wQEAwIHgDB+BggrBgEF BQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVw b3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi81OHJhWHdp QjEzdnFTTEIyaWpkbXRRQmxyd2cuY2VyMH8GCCsGAQUFBwELBHMwcTBvBggrBgEF BQcwC4ZjcnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5hbWF6b25hd3MuY29t L3ZvbHVtZS83MDhhYWZhZi0wMGI0LTQ4NWItODU0Yy0wYjMyY2EzMGY1N2IvbWFu aWZlc3QubWZ0MIGVBgNVHR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnBraS1y c3luYy51cy1lYXN0LTIuYW1hem9uYXdzLmNvbS92b2x1bWUvNzA4YWFmYWYtMDBi NC00ODViLTg1NGMtMGIzMmNhMzBmNTdiLzEyZTU5MDAxLTM1YWMtNGFiZi04NThm LTM3Yjk1NWEyNGIzZi5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggr BgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYw BKACBQAwDQYJKoZIhvcNAQELBQADggEBABKFhHAaEkKrmimDv/IZjqb9eeJIyqyJ x/gyD0TXCp95GRa5vhfh2T3RroQ7NOSI67hD03QBiOj0+LpEtVemEBDBUGfJFpx2 KbojXBfIIq+nfEC5b/2f2LMuH7g429yQPP+Z/BepDB8K92F1RZ2grYRe2L3bSTt5 qjDUc0HfFPEmqwKXe2tPGp6leOC8wAfY9y5SytWiNl7t8iDOLQHkBiLmXfF31SrT udsD/KCBsVXHKpnIwIQwscUW1YU9+QxMBlSibqGChKy020evmzyPkz6HFsu4zty/ nIPtH0Fk6k32tAuddfANXAufvhJF+rf0nmOIvB1xoi3nmr86dDHf1Ns= -----END CERTIFICATE-----Generated at Sat Aug 29 21:28:39 2026 by rpki-client