$ rpki-client -vvvf rpki-rsync.us-east-2.amazonaws.com/volume/708aafaf-00b4-485b-854c-0b32ca30f57b/manifest.mft File: manifest.mft (raw, json) Hash identifier: SG36IJsNOwLp5iizI1xWiD9xXm5DwXyszLKUvPGDrTo= Subject key identifier: 1C:EE:C5:91:DB:75:93:22:34:6E:90:6C:DB:DA:31:43:8E:CA:9A:DF Authority key identifier: E7:CA:DA:5F:08:81:D7:7B:EA:48:B0:76:8A:37:66:B5:00:65:AF:08 Certificate issuer: /CN=A918806F0000/serialNumber=E7CADA5F0881D77BEA48B0768A3766B50065AF08 Certificate serial: 2243DF9A993E7573798336467DAAC8B4B96D8956 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/58raXwiB13vqSLB2ijdmtQBlrwg.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/708aafaf-00b4-485b-854c-0b32ca30f57b/manifest.mft Manifest number: 069E Signing time: Tue 29 Sep 2026 00:10:09 +0000 Manifest this update: Tue 29 Sep 2026 00:10:09 +0000 Manifest next update: Sat 03 Oct 2026 00:10:09 +0000 Files and hashes: 1: 12e59001-35ac-4abf-858f-37b955a24b3f.crl (hash: nRWd72SPWYhnJ9kmypnmVRXXe8qroO+S047tFJ6tp1o=) 2: 381fc6e6-5d49-41bc-b584-d9437c68e3cd.roa (hash: 8QqQOxAj3sRai6/BzOB2kV66/okkk7p8TzKsBaSwcWA=) 3: 49119734-9dbc-4bd4-98be-57e4ce078928.roa (hash: 0OedyNMwjL1I1p7rzryfdYD0nslES0i+43AbthFPFmE=) 4: 5663bf34-10ed-4309-a236-7466afd6f02f.roa (hash: aoaRIM84eruV/ISWBs3PJCPQb0sEmsLtTOcu1EdbsFA=) 5: cc2f7093-21a6-400f-9db1-93c2fe02bc1c.roa (hash: vbtxuyfgx9e6lLFR0CnUGCC1kgCTySw+Ljt4yM1fDb4=) 6: ea1d02aa-6d25-4b36-b42e-ba837d49e261.roa (hash: q5bh3h1LHQcXwRDCiiiYn6TP5+N60E0SyV4QnQBQL8c=) Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/708aafaf-00b4-485b-854c-0b32ca30f57b/12e59001-35ac-4abf-858f-37b955a24b3f.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/708aafaf-00b4-485b-854c-0b32ca30f57b/manifest.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/58raXwiB13vqSLB2ijdmtQBlrwg.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 03 Oct 2026 00:10:09 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 22:43:df:9a:99:3e:75:73:79:83:36:46:7d:aa:c8:b4:b9:6d:89:56 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A918806F0000, serialNumber=E7CADA5F0881D77BEA48B0768A3766B50065AF08 Validity Not Before: Sep 29 00:10:09 2026 GMT Not After : Oct 3 00:10:09 2026 GMT Subject: serialNumber=860d33fec7fcf4898ecaa297dc2fe8c5b48affab243e046e86833fa87f420d53, CN=bb9a9116-f615-462e-a680-5266b327e0fa Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:6a:fc:08:af:92:36:a8:49:ad:23:53:e6:47: be:d0:53:15:2f:1a:d4:7d:82:1c:30:a8:ea:07:4b: ce:be:ea:0d:07:2f:fc:43:2c:c4:23:ea:81:ce:c9: aa:57:7a:e0:9a:93:78:fc:58:df:94:04:b8:d1:47: 64:9e:6c:91:39:25:74:df:ef:27:d9:f3:b6:64:ca: 3a:9a:20:90:a3:af:ae:4e:b4:b1:97:ee:80:9e:7e: 19:86:97:a6:40:f6:59:b7:bd:9a:03:8e:1b:65:04: 57:0b:ec:8f:a6:0d:1b:68:5d:2a:5a:96:4e:14:9d: 96:ac:40:de:e5:37:0d:e7:0f:6d:48:31:f4:2b:7d: 9b:63:ae:7d:9f:0e:9d:55:fe:47:d5:5d:9a:cf:98: 67:b7:75:1f:03:3c:28:aa:87:cd:4b:5c:5b:3d:41: 73:e6:8b:f1:30:07:e1:83:d3:97:de:bf:40:1d:88: fd:39:6a:4a:7e:fd:a9:36:dc:bc:57:0e:50:5e:be: e5:6d:6a:96:16:d2:85:90:37:cb:49:ee:12:41:5d: ee:89:8c:7e:94:32:40:e9:4f:88:54:3a:0b:9f:30: 58:f8:d8:f3:f3:59:9a:21:c7:ec:cf:dd:33:f4:3e: b6:d3:d5:a5:e0:85:d1:44:8e:2b:60:8c:cd:78:52: 05:c1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1C:EE:C5:91:DB:75:93:22:34:6E:90:6C:DB:DA:31:43:8E:CA:9A:DF X509v3 Authority Key Identifier: keyid:E7:CA:DA:5F:08:81:D7:7B:EA:48:B0:76:8A:37:66:B5:00:65:AF:08 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/58raXwiB13vqSLB2ijdmtQBlrwg.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/708aafaf-00b4-485b-854c-0b32ca30f57b/manifest.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/708aafaf-00b4-485b-854c-0b32ca30f57b/12e59001-35ac-4abf-858f-37b955a24b3f.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 76:ba:26:2c:b2:c9:90:ad:73:4c:40:93:be:fb:50:61:67:8b: d9:6b:10:a4:de:49:64:fa:28:21:aa:a4:5b:aa:f1:27:22:d0: f2:cf:e8:72:04:27:dd:1b:b5:e4:60:ab:be:2d:e9:2e:f2:8c: 43:4b:1b:ad:1c:b3:23:78:33:3c:46:18:a7:d6:d6:c9:3c:d6: e9:6c:5b:31:87:31:bf:cb:37:12:4e:3f:5d:d8:31:1a:c3:bd: 6b:12:bc:78:3e:4e:bc:0a:79:10:80:4f:3e:38:57:26:57:e3: 64:67:a2:54:12:9e:10:a8:11:19:66:a7:f6:cb:ae:bb:b5:a8: 00:92:7b:dc:dc:2c:30:55:eb:c1:7e:6c:2f:6a:e5:05:5e:f3: 89:2f:80:38:b4:e8:ba:5f:9a:2a:2a:6b:08:fb:1c:b2:7d:81: db:ff:c8:21:d7:c6:44:37:3f:f3:fa:ae:77:ec:ff:a7:e5:53: bb:d0:74:1f:95:ae:46:36:7e:39:7f:ec:e7:f8:c9:6c:9c:a4: cb:09:36:40:f2:e8:88:e2:8d:36:03:60:bb:ff:e8:4b:a1:de: b4:66:68:6a:9d:92:28:0f:8f:c8:be:aa:23:02:0b:7f:f7:8e: 41:2d:46:6c:3b:74:f0:d5:3c:3c:9e:7a:15:1f:be:09:26:6f: cf:b4:bb:7b -----BEGIN CERTIFICATE----- MIIFlTCCBH2gAwIBAgIUIkPfmpk+dXN5gzZGfarItLltiVYwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODgwNkYwMDAwMTEwLwYDVQQFEyhFN0NBREE1RjA4 ODFENzdCRUE0OEIwNzY4QTM3NjZCNTAwNjVBRjA4MB4XDTI2MDkyOTAwMTAwOVoX DTI2MTAwMzAwMTAwOVowejFJMEcGA1UEBRNAODYwZDMzZmVjN2ZjZjQ4OThlY2Fh Mjk3ZGMyZmU4YzViNDhhZmZhYjI0M2UwNDZlODY4MzNmYTg3ZjQyMGQ1MzEtMCsG A1UEAxMkYmI5YTkxMTYtZjYxNS00NjJlLWE2ODAtNTI2NmIzMjdlMGZhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqmr8CK+SNqhJrSNT5ke+0FMVLxrU fYIcMKjqB0vOvuoNBy/8QyzEI+qBzsmqV3rgmpN4/FjflAS40UdknmyROSV03+8n 2fO2ZMo6miCQo6+uTrSxl+6Ann4ZhpemQPZZt72aA44bZQRXC+yPpg0baF0qWpZO FJ2WrEDe5TcN5w9tSDH0K32bY659nw6dVf5H1V2az5hnt3UfAzwoqofNS1xbPUFz 5ovxMAfhg9OX3r9AHYj9OWpKfv2pNty8Vw5QXr7lbWqWFtKFkDfLSe4SQV3uiYx+ lDJA6U+IVDoLnzBY+Njz81maIcfsz90z9D6209Wl4IXRRI4rYIzNeFIFwQIDAQAB o4ICQTCCAj0wHQYDVR0OBBYEFBzuxZHbdZMiNG6QbNvaMUOOyprfMB8GA1UdIwQY MBaAFOfK2l8Igdd76kiwdoo3ZrUAZa8IMA4GA1UdDwEB/wQEAwIHgDB+BggrBgEF BQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVw b3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi81OHJhWHdp QjEzdnFTTEIyaWpkbXRRQmxyd2cuY2VyMH8GCCsGAQUFBwELBHMwcTBvBggrBgEF BQcwC4ZjcnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5hbWF6b25hd3MuY29t L3ZvbHVtZS83MDhhYWZhZi0wMGI0LTQ4NWItODU0Yy0wYjMyY2EzMGY1N2IvbWFu aWZlc3QubWZ0MIGVBgNVHR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnBraS1y c3luYy51cy1lYXN0LTIuYW1hem9uYXdzLmNvbS92b2x1bWUvNzA4YWFmYWYtMDBi NC00ODViLTg1NGMtMGIzMmNhMzBmNTdiLzEyZTU5MDAxLTM1YWMtNGFiZi04NThm LTM3Yjk1NWEyNGIzZi5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggr BgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYw BKACBQAwDQYJKoZIhvcNAQELBQADggEBAHa6JiyyyZCtc0xAk777UGFni9lrEKTe SWT6KCGqpFuq8Sci0PLP6HIEJ90bteRgq74t6S7yjENLG60csyN4MzxGGKfW1sk8 1ulsWzGHMb/LNxJOP13YMRrDvWsSvHg+TrwKeRCATz44VyZX42RnolQSnhCoERlm p/bLrru1qACSe9zcLDBV68F+bC9q5QVe84kvgDi06Lpfmioqawj7HLJ9gdv/yCHX xkQ3P/P6rnfs/6flU7vQdB+VrkY2fjl/7Of4yWycpMsJNkDy6IjijTYDYLv/6Euh 3rRmaGqdkigPj8i+qiMCC3/3jkEtRmw7dPDVPDyeehUfvgkmb8+0u3s= -----END CERTIFICATE-----Generated at Tue Sep 29 20:23:33 2026 by rpki-client