$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/708aafaf-00b4-485b-854c-0b32ca30f57b/manifest.mft File: manifest.mft (raw, json) Hash identifier: jzi8/ci0I6pu7hjoelWVGbxZoiCLv7VZN6tTn6CPgQA= Subject key identifier: 7C:D9:D4:F5:1A:2B:EB:3E:56:CC:0C:1C:E3:B0:CB:1F:99:D9:27:86 Authority key identifier: E7:CA:DA:5F:08:81:D7:7B:EA:48:B0:76:8A:37:66:B5:00:65:AF:08 Certificate issuer: /CN=A918806F0000/serialNumber=E7CADA5F0881D77BEA48B0768A3766B50065AF08 Certificate serial: 4484E53D3ABA237541B8B22DF7595F823DE512C8 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/58raXwiB13vqSLB2ijdmtQBlrwg.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/708aafaf-00b4-485b-854c-0b32ca30f57b/manifest.mft Manifest number: 065A Signing time: Thu 23 Jul 2026 00:02:10 +0000 Manifest this update: Thu 23 Jul 2026 00:02:10 +0000 Manifest next update: Mon 27 Jul 2026 00:02:10 +0000 Files and hashes: 1: 12e59001-35ac-4abf-858f-37b955a24b3f.crl (hash: R2CAn+nGC3M1AOt8my5onCxY3fwZnYd6Pe6qMiRWW7Y=) 2: 381fc6e6-5d49-41bc-b584-d9437c68e3cd.roa (hash: M+i7XpsJD4p5Tk2yVGdLmGjDs5xTMXCNLVAUi3YO9fw=) 3: 49119734-9dbc-4bd4-98be-57e4ce078928.roa (hash: 0OedyNMwjL1I1p7rzryfdYD0nslES0i+43AbthFPFmE=) 4: 5663bf34-10ed-4309-a236-7466afd6f02f.roa (hash: aoaRIM84eruV/ISWBs3PJCPQb0sEmsLtTOcu1EdbsFA=) 5: cc2f7093-21a6-400f-9db1-93c2fe02bc1c.roa (hash: vbtxuyfgx9e6lLFR0CnUGCC1kgCTySw+Ljt4yM1fDb4=) 6: ea1d02aa-6d25-4b36-b42e-ba837d49e261.roa (hash: q5bh3h1LHQcXwRDCiiiYn6TP5+N60E0SyV4QnQBQL8c=) Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/708aafaf-00b4-485b-854c-0b32ca30f57b/12e59001-35ac-4abf-858f-37b955a24b3f.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/708aafaf-00b4-485b-854c-0b32ca30f57b/manifest.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/58raXwiB13vqSLB2ijdmtQBlrwg.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 27 Jul 2026 00:02:10 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 44:84:e5:3d:3a:ba:23:75:41:b8:b2:2d:f7:59:5f:82:3d:e5:12:c8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A918806F0000, serialNumber=E7CADA5F0881D77BEA48B0768A3766B50065AF08 Validity Not Before: Jul 23 00:02:10 2026 GMT Not After : Jul 27 00:02:10 2026 GMT Subject: serialNumber=58e9b75fd927495ef492d2d53c441107f07788cea89ad9197758a8b3edfdd98a, CN=bb9a9116-f615-462e-a680-5266b327e0fa Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:c3:1a:69:68:e3:88:1c:c0:63:99:61:fd:0b: e5:89:77:53:cf:86:6b:a5:5a:69:3a:1a:5c:a4:65: ae:b7:68:c2:db:86:00:c9:41:5b:8a:45:2c:4e:e8: a7:09:1d:c2:7a:0e:c4:e5:29:50:cc:c4:35:da:b2: 01:1d:02:96:61:fa:e4:1c:78:74:f5:a3:3d:96:44: e3:42:8b:ea:36:bb:ce:ba:aa:97:ae:f6:ad:88:6c: 3b:bc:02:8e:71:b9:e4:f5:54:50:98:fb:a6:ad:6d: 74:cd:39:ec:c7:23:bd:14:df:e0:90:6a:84:ea:cc: fa:26:bb:5d:a7:82:37:b2:e6:d7:d4:81:6d:67:6e: b8:01:09:ec:dc:ba:94:89:0a:ef:d5:ac:11:ad:55: 1e:de:27:8a:f6:49:8c:41:54:6f:4b:85:fc:d9:f6: 40:05:51:b8:07:e5:c0:c0:26:73:e8:33:20:6b:cc: 88:cc:8c:4b:d0:df:7c:8b:27:34:a0:d0:89:dc:06: 49:f4:0b:b5:c6:69:c8:f6:cf:db:ec:9b:7d:8e:a2: 18:36:ec:ba:4e:47:8a:95:3d:30:6f:d8:f8:c7:21: 82:29:76:66:56:65:f7:79:58:7b:4d:fc:77:b6:3d: bb:d7:bf:8f:51:2a:12:c7:b4:e6:8b:3e:75:8d:96: c6:1f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7C:D9:D4:F5:1A:2B:EB:3E:56:CC:0C:1C:E3:B0:CB:1F:99:D9:27:86 X509v3 Authority Key Identifier: keyid:E7:CA:DA:5F:08:81:D7:7B:EA:48:B0:76:8A:37:66:B5:00:65:AF:08 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/58raXwiB13vqSLB2ijdmtQBlrwg.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/708aafaf-00b4-485b-854c-0b32ca30f57b/manifest.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/708aafaf-00b4-485b-854c-0b32ca30f57b/12e59001-35ac-4abf-858f-37b955a24b3f.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 1c:db:97:1a:55:10:fb:59:bf:86:24:b6:0d:74:0d:db:9f:da: 87:ee:cf:b9:57:cf:6a:20:13:a9:32:d4:9f:47:d9:a9:65:e8: eb:6d:20:e6:19:a4:a4:b5:78:37:84:43:3d:37:33:02:b0:ec: a9:0f:b3:ef:4a:85:8f:db:90:92:27:5a:ed:07:3e:51:23:3f: 24:d8:64:e7:09:72:3f:21:19:55:a3:ae:4b:85:72:6a:04:39: a9:47:d4:18:2f:f3:f5:86:de:d4:35:4d:6d:fd:20:99:23:39: fd:58:89:43:01:f1:c2:2b:3c:84:d6:24:ae:27:41:af:d1:75: 1d:34:a5:4c:3c:e3:f5:90:f7:09:fe:68:19:6b:3a:b9:41:df: 13:38:c3:7d:46:19:b0:48:83:37:03:a2:b0:b2:c2:8e:19:ae: fb:55:3c:ff:bc:72:2c:3f:15:24:f3:b4:18:2f:c7:c2:70:c5: b1:64:6b:b3:f7:0e:60:63:2f:f5:ab:84:f8:e7:37:e4:65:df: 7d:0e:de:9b:44:45:68:3b:ae:3e:1f:29:de:73:83:3a:b7:8a: 5e:78:e0:1c:15:4f:be:6b:1b:fd:07:f2:e0:46:7a:aa:cc:d8: 61:a3:ed:4f:5d:fd:85:a1:e5:dd:01:e7:81:32:6f:18:91:d5: 1d:b0:d2:a4 -----BEGIN CERTIFICATE----- MIIFlTCCBH2gAwIBAgIURITlPTq6I3VBuLIt91lfgj3lEsgwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODgwNkYwMDAwMTEwLwYDVQQFEyhFN0NBREE1RjA4 ODFENzdCRUE0OEIwNzY4QTM3NjZCNTAwNjVBRjA4MB4XDTI2MDcyMzAwMDIxMFoX DTI2MDcyNzAwMDIxMFowejFJMEcGA1UEBRNANThlOWI3NWZkOTI3NDk1ZWY0OTJk MmQ1M2M0NDExMDdmMDc3ODhjZWE4OWFkOTE5Nzc1OGE4YjNlZGZkZDk4YTEtMCsG A1UEAxMkYmI5YTkxMTYtZjYxNS00NjJlLWE2ODAtNTI2NmIzMjdlMGZhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwsMaaWjjiBzAY5lh/QvliXdTz4Zr pVppOhpcpGWut2jC24YAyUFbikUsTuinCR3Ceg7E5SlQzMQ12rIBHQKWYfrkHHh0 9aM9lkTjQovqNrvOuqqXrvatiGw7vAKOcbnk9VRQmPumrW10zTnsxyO9FN/gkGqE 6sz6Jrtdp4I3subX1IFtZ264AQns3LqUiQrv1awRrVUe3ieK9kmMQVRvS4X82fZA BVG4B+XAwCZz6DMga8yIzIxL0N98iyc0oNCJ3AZJ9Au1xmnI9s/b7Jt9jqIYNuy6 TkeKlT0wb9j4xyGCKXZmVmX3eVh7Tfx3tj2717+PUSoSx7Tmiz51jZbGHwIDAQAB o4ICQTCCAj0wHQYDVR0OBBYEFHzZ1PUaK+s+VswMHOOwyx+Z2SeGMB8GA1UdIwQY MBaAFOfK2l8Igdd76kiwdoo3ZrUAZa8IMA4GA1UdDwEB/wQEAwIHgDB+BggrBgEF BQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVw b3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi81OHJhWHdp QjEzdnFTTEIyaWpkbXRRQmxyd2cuY2VyMH8GCCsGAQUFBwELBHMwcTBvBggrBgEF BQcwC4ZjcnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5hbWF6b25hd3MuY29t L3ZvbHVtZS83MDhhYWZhZi0wMGI0LTQ4NWItODU0Yy0wYjMyY2EzMGY1N2IvbWFu aWZlc3QubWZ0MIGVBgNVHR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnBraS1y c3luYy51cy1lYXN0LTIuYW1hem9uYXdzLmNvbS92b2x1bWUvNzA4YWFmYWYtMDBi NC00ODViLTg1NGMtMGIzMmNhMzBmNTdiLzEyZTU5MDAxLTM1YWMtNGFiZi04NThm LTM3Yjk1NWEyNGIzZi5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggr BgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYw BKACBQAwDQYJKoZIhvcNAQELBQADggEBABzblxpVEPtZv4Yktg10Dduf2ofuz7lX z2ogE6ky1J9H2all6OttIOYZpKS1eDeEQz03MwKw7KkPs+9KhY/bkJInWu0HPlEj PyTYZOcJcj8hGVWjrkuFcmoEOalH1Bgv8/WG3tQ1TW39IJkjOf1YiUMB8cIrPITW JK4nQa/RdR00pUw84/WQ9wn+aBlrOrlB3xM4w31GGbBIgzcDorCywo4ZrvtVPP+8 ciw/FSTztBgvx8JwxbFka7P3DmBjL/WrhPjnN+Rl330O3ptERWg7rj4fKd5zgzq3 il544BwVT75rG/0H8uBGeqrM2GGj7U9d/YWh5d0B54EybxiR1R2w0qQ= -----END CERTIFICATE-----Generated at Thu Jul 23 16:36:21 2026 by rpki-client