$ rpki-client -vvvf rpki-rsync.us-east-2.amazonaws.com/volume/708aafaf-00b4-485b-854c-0b32ca30f57b/manifest.mft File: manifest.mft (raw, json) Hash identifier: N1QzcmQaFkHPZ2TDd2+8ek5X0Xq7thU9if8IOrF1B2M= Subject key identifier: DA:38:06:FD:E3:6E:89:F4:D0:3A:3B:A2:A0:77:0A:51:B0:92:3F:FA Authority key identifier: E7:CA:DA:5F:08:81:D7:7B:EA:48:B0:76:8A:37:66:B5:00:65:AF:08 Certificate issuer: /CN=A918806F0000/serialNumber=E7CADA5F0881D77BEA48B0768A3766B50065AF08 Certificate serial: 7FFD606CFA2698F5982C55BFAC46DBED59C6A755 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/58raXwiB13vqSLB2ijdmtQBlrwg.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/708aafaf-00b4-485b-854c-0b32ca30f57b/manifest.mft Manifest number: 0684 Signing time: Thu 03 Sep 2026 00:06:08 +0000 Manifest this update: Thu 03 Sep 2026 00:06:08 +0000 Manifest next update: Mon 07 Sep 2026 00:06:08 +0000 Files and hashes: 1: 12e59001-35ac-4abf-858f-37b955a24b3f.crl (hash: WHcaJdUME+HrdXOGbop9uo3R5Hyh8pIWkafUM3NA1eg=) 2: 381fc6e6-5d49-41bc-b584-d9437c68e3cd.roa (hash: 8QqQOxAj3sRai6/BzOB2kV66/okkk7p8TzKsBaSwcWA=) 3: 49119734-9dbc-4bd4-98be-57e4ce078928.roa (hash: 0OedyNMwjL1I1p7rzryfdYD0nslES0i+43AbthFPFmE=) 4: 5663bf34-10ed-4309-a236-7466afd6f02f.roa (hash: aoaRIM84eruV/ISWBs3PJCPQb0sEmsLtTOcu1EdbsFA=) 5: cc2f7093-21a6-400f-9db1-93c2fe02bc1c.roa (hash: vbtxuyfgx9e6lLFR0CnUGCC1kgCTySw+Ljt4yM1fDb4=) 6: ea1d02aa-6d25-4b36-b42e-ba837d49e261.roa (hash: q5bh3h1LHQcXwRDCiiiYn6TP5+N60E0SyV4QnQBQL8c=) Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/708aafaf-00b4-485b-854c-0b32ca30f57b/12e59001-35ac-4abf-858f-37b955a24b3f.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/708aafaf-00b4-485b-854c-0b32ca30f57b/manifest.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/58raXwiB13vqSLB2ijdmtQBlrwg.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 07 Sep 2026 00:06:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7f:fd:60:6c:fa:26:98:f5:98:2c:55:bf:ac:46:db:ed:59:c6:a7:55 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A918806F0000, serialNumber=E7CADA5F0881D77BEA48B0768A3766B50065AF08 Validity Not Before: Sep 3 00:06:08 2026 GMT Not After : Sep 7 00:06:08 2026 GMT Subject: serialNumber=76aa8658d087a9e6e3e75a20b25be781f4382a450c7d4ab2be5034d890c37766, CN=bb9a9116-f615-462e-a680-5266b327e0fa Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:21:e6:97:86:73:02:96:bf:42:a6:64:95:99: 5b:09:00:9b:d5:cb:6a:d3:bb:de:4e:23:9b:4a:23: ee:b4:58:13:51:11:5b:8a:aa:1a:e4:ea:f6:2a:f6: 53:cc:ed:3c:d4:99:88:cf:a3:a8:e0:13:a3:85:a9: 1d:87:d1:a4:e7:e4:5f:c6:be:23:10:81:c0:72:ed: a4:1b:97:e6:79:44:07:f1:98:70:29:77:32:9c:13: 57:68:3f:66:cd:66:95:28:28:96:0c:6a:15:f4:b6: 1a:74:10:33:51:73:1b:e5:6b:90:a2:b2:0e:a9:26: 75:2a:bb:cc:66:1b:52:c8:ee:85:d9:ea:b6:66:ef: b3:cb:7c:da:44:91:c9:c4:86:25:74:c7:c9:3c:2f: e1:20:c5:92:6b:48:f3:a9:b4:cc:e3:b9:c2:ba:40: 0d:0d:d9:a7:74:29:7a:91:7d:26:ae:e7:26:ec:04: 64:cd:00:fa:03:d9:60:94:52:91:ce:3d:84:0c:67: 86:3b:d0:90:40:e4:44:92:12:1c:b7:f7:3b:be:b7: 19:2f:29:f0:a7:d3:ae:6e:df:38:a4:e3:df:7b:6c: 7b:96:c2:af:27:c3:73:16:ed:6f:8a:60:9a:a4:79: a6:c2:8e:78:11:54:5a:be:6e:86:d4:4b:85:c7:fa: 25:9f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DA:38:06:FD:E3:6E:89:F4:D0:3A:3B:A2:A0:77:0A:51:B0:92:3F:FA X509v3 Authority Key Identifier: keyid:E7:CA:DA:5F:08:81:D7:7B:EA:48:B0:76:8A:37:66:B5:00:65:AF:08 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/58raXwiB13vqSLB2ijdmtQBlrwg.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/708aafaf-00b4-485b-854c-0b32ca30f57b/manifest.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/708aafaf-00b4-485b-854c-0b32ca30f57b/12e59001-35ac-4abf-858f-37b955a24b3f.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 80:7f:5a:2e:69:e4:3a:07:8b:79:5e:46:ea:c1:70:47:55:19: 12:fd:11:f2:de:60:fe:7d:c5:8f:80:28:d7:0e:39:eb:71:25: d7:7f:b8:53:7c:fc:1a:5c:31:39:9f:1e:2c:bf:3c:92:d8:8a: b0:5f:ea:4d:77:9c:11:67:b2:4b:f4:63:8e:ca:f5:71:45:96: d4:35:0b:83:07:f9:88:2f:cf:d1:52:33:ad:0c:cb:19:c8:df: 58:84:94:31:2e:47:c7:7d:59:8e:61:b7:eb:a2:81:44:9e:62: af:0a:14:df:62:18:4d:fb:a2:f3:6d:4b:f2:9b:70:b6:75:d9: ef:8b:2b:3f:7d:7a:a5:3c:f3:a3:a3:a6:a5:84:f7:16:8e:83: 1f:d0:ad:31:0d:fc:e0:da:88:c6:00:98:86:4e:55:05:72:67: a0:e4:65:90:49:fc:7a:fd:f5:c7:9c:c0:59:19:c3:ab:bb:af: 1a:12:04:6c:d8:2d:14:4c:1a:ab:93:da:fc:2a:f1:c5:45:46: 19:9b:8f:5b:f6:43:23:e8:6a:fc:0a:5e:56:3d:0a:1f:b7:00: 72:96:85:95:dc:e9:04:92:f5:cb:64:5c:43:2b:ca:4f:02:c9: 94:66:2c:a2:2b:15:c8:50:d0:ca:84:04:1c:a1:50:82:3c:47: 16:1b:2b:03 -----BEGIN CERTIFICATE----- MIIFlTCCBH2gAwIBAgIUf/1gbPommPWYLFW/rEbb7VnGp1UwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODgwNkYwMDAwMTEwLwYDVQQFEyhFN0NBREE1RjA4 ODFENzdCRUE0OEIwNzY4QTM3NjZCNTAwNjVBRjA4MB4XDTI2MDkwMzAwMDYwOFoX DTI2MDkwNzAwMDYwOFowejFJMEcGA1UEBRNANzZhYTg2NThkMDg3YTllNmUzZTc1 YTIwYjI1YmU3ODFmNDM4MmE0NTBjN2Q0YWIyYmU1MDM0ZDg5MGMzNzc2NjEtMCsG A1UEAxMkYmI5YTkxMTYtZjYxNS00NjJlLWE2ODAtNTI2NmIzMjdlMGZhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtSHml4ZzApa/QqZklZlbCQCb1ctq 07veTiObSiPutFgTURFbiqoa5Or2KvZTzO081JmIz6Oo4BOjhakdh9Gk5+Rfxr4j EIHAcu2kG5fmeUQH8ZhwKXcynBNXaD9mzWaVKCiWDGoV9LYadBAzUXMb5WuQorIO qSZ1KrvMZhtSyO6F2eq2Zu+zy3zaRJHJxIYldMfJPC/hIMWSa0jzqbTM47nCukAN DdmndCl6kX0mrucm7ARkzQD6A9lglFKRzj2EDGeGO9CQQOREkhIct/c7vrcZLynw p9Oubt84pOPfe2x7lsKvJ8NzFu1vimCapHmmwo54EVRavm6G1EuFx/olnwIDAQAB o4ICQTCCAj0wHQYDVR0OBBYEFNo4Bv3jbon00Do7oqB3ClGwkj/6MB8GA1UdIwQY MBaAFOfK2l8Igdd76kiwdoo3ZrUAZa8IMA4GA1UdDwEB/wQEAwIHgDB+BggrBgEF BQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVw b3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi81OHJhWHdp QjEzdnFTTEIyaWpkbXRRQmxyd2cuY2VyMH8GCCsGAQUFBwELBHMwcTBvBggrBgEF BQcwC4ZjcnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5hbWF6b25hd3MuY29t L3ZvbHVtZS83MDhhYWZhZi0wMGI0LTQ4NWItODU0Yy0wYjMyY2EzMGY1N2IvbWFu aWZlc3QubWZ0MIGVBgNVHR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnBraS1y c3luYy51cy1lYXN0LTIuYW1hem9uYXdzLmNvbS92b2x1bWUvNzA4YWFmYWYtMDBi NC00ODViLTg1NGMtMGIzMmNhMzBmNTdiLzEyZTU5MDAxLTM1YWMtNGFiZi04NThm LTM3Yjk1NWEyNGIzZi5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggr BgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYw BKACBQAwDQYJKoZIhvcNAQELBQADggEBAIB/Wi5p5DoHi3leRurBcEdVGRL9EfLe YP59xY+AKNcOOetxJdd/uFN8/BpcMTmfHiy/PJLYirBf6k13nBFnskv0Y47K9XFF ltQ1C4MH+Ygvz9FSM60MyxnI31iElDEuR8d9WY5ht+uigUSeYq8KFN9iGE37ovNt S/KbcLZ12e+LKz99eqU886OjpqWE9xaOgx/QrTEN/ODaiMYAmIZOVQVyZ6DkZZBJ /Hr99cecwFkZw6u7rxoSBGzYLRRMGquT2vwq8cVFRhmbj1v2QyPoavwKXlY9Ch+3 AHKWhZXc6QSS9ctkXEMryk8CyZRmLKIrFchQ0MqEBByhUII8RxYbKwM= -----END CERTIFICATE-----Generated at Thu Sep 3 17:16:47 2026 by rpki-client