$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/708aafaf-00b4-485b-854c-0b32ca30f57b/manifest.mft File: manifest.mft (raw, json) Hash identifier: yEIO/ydZsc30a2V2Lm1KdMdKRmlHl2vmDz4+nXsP9iw= Subject key identifier: 83:32:44:7B:DB:35:E8:82:6C:E0:F9:4B:F5:CA:63:4B:06:71:90:47 Authority key identifier: E7:CA:DA:5F:08:81:D7:7B:EA:48:B0:76:8A:37:66:B5:00:65:AF:08 Certificate issuer: /CN=A918806F0000/serialNumber=E7CADA5F0881D77BEA48B0768A3766B50065AF08 Certificate serial: 7A119A8D9541F2B7BC868B35FEF9C33684762B64 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/58raXwiB13vqSLB2ijdmtQBlrwg.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/708aafaf-00b4-485b-854c-0b32ca30f57b/manifest.mft Manifest number: 0663 Signing time: Sat 01 Aug 2026 00:03:39 +0000 Manifest this update: Sat 01 Aug 2026 00:03:39 +0000 Manifest next update: Wed 05 Aug 2026 00:03:39 +0000 Files and hashes: 1: 12e59001-35ac-4abf-858f-37b955a24b3f.crl (hash: 3QWL9DvV3A8FIeUwN5yFjpC1L//ZkgK8VdeCWDc3ei0=) 2: 381fc6e6-5d49-41bc-b584-d9437c68e3cd.roa (hash: M+i7XpsJD4p5Tk2yVGdLmGjDs5xTMXCNLVAUi3YO9fw=) 3: 49119734-9dbc-4bd4-98be-57e4ce078928.roa (hash: 0OedyNMwjL1I1p7rzryfdYD0nslES0i+43AbthFPFmE=) 4: 5663bf34-10ed-4309-a236-7466afd6f02f.roa (hash: aoaRIM84eruV/ISWBs3PJCPQb0sEmsLtTOcu1EdbsFA=) 5: cc2f7093-21a6-400f-9db1-93c2fe02bc1c.roa (hash: vbtxuyfgx9e6lLFR0CnUGCC1kgCTySw+Ljt4yM1fDb4=) 6: ea1d02aa-6d25-4b36-b42e-ba837d49e261.roa (hash: q5bh3h1LHQcXwRDCiiiYn6TP5+N60E0SyV4QnQBQL8c=) Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/708aafaf-00b4-485b-854c-0b32ca30f57b/12e59001-35ac-4abf-858f-37b955a24b3f.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/708aafaf-00b4-485b-854c-0b32ca30f57b/manifest.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/58raXwiB13vqSLB2ijdmtQBlrwg.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 05 Aug 2026 00:03:39 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7a:11:9a:8d:95:41:f2:b7:bc:86:8b:35:fe:f9:c3:36:84:76:2b:64 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A918806F0000, serialNumber=E7CADA5F0881D77BEA48B0768A3766B50065AF08 Validity Not Before: Aug 1 00:03:39 2026 GMT Not After : Aug 5 00:03:39 2026 GMT Subject: serialNumber=1d2dfd35ba469e26dce4c50fc424f3c2181cb2b972e97a5dcfe8fc4ca88eb5c7, CN=bb9a9116-f615-462e-a680-5266b327e0fa Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:c7:8e:cf:fa:07:01:7f:78:19:60:35:b7:48: 44:b6:b9:78:f5:32:a3:ed:ff:01:79:36:b6:65:d4: d9:b3:1b:75:19:eb:d4:50:c7:59:a6:05:c0:95:ec: a9:16:62:69:e9:97:eb:7b:e7:e3:d9:7c:aa:76:9c: dd:49:5b:83:e0:52:0f:32:77:d1:24:7e:c4:09:c3: d8:3b:f4:91:80:d6:97:35:fa:53:ed:81:bd:a2:ca: d3:e4:b4:70:b5:7c:ff:ee:6c:4b:64:d1:36:69:0c: cc:e3:c0:20:bb:83:17:42:3b:f5:61:df:e5:72:bd: 8e:3a:d8:0f:38:44:ef:73:a6:81:54:b3:5d:ee:77: f8:7d:81:ec:1b:13:02:38:2d:0e:c4:b5:ab:bd:3f: fa:2b:11:7e:4f:37:14:53:da:d8:fb:ed:0c:04:53: c6:40:1c:49:b0:fe:f3:82:5a:7b:91:9f:08:44:a3: a8:38:94:10:28:e8:ad:9b:12:54:15:a5:42:57:a0: 93:3a:bb:12:96:b2:7b:f9:09:d5:98:b5:ef:a3:5e: 88:22:fe:bd:4d:dc:c5:79:c1:fb:72:7f:29:a2:29: 0a:8d:5c:b3:e2:ee:04:7b:45:1f:df:cc:11:2c:9c: e3:c9:35:2c:b3:08:c6:0e:a8:2f:25:a1:1f:0b:69: 76:99 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 83:32:44:7B:DB:35:E8:82:6C:E0:F9:4B:F5:CA:63:4B:06:71:90:47 X509v3 Authority Key Identifier: keyid:E7:CA:DA:5F:08:81:D7:7B:EA:48:B0:76:8A:37:66:B5:00:65:AF:08 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/58raXwiB13vqSLB2ijdmtQBlrwg.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/708aafaf-00b4-485b-854c-0b32ca30f57b/manifest.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/708aafaf-00b4-485b-854c-0b32ca30f57b/12e59001-35ac-4abf-858f-37b955a24b3f.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 23:76:41:45:52:ef:ec:8c:e6:9e:92:32:34:5c:f2:6c:ae:50: 8f:fc:57:b2:de:d7:ef:2c:1d:50:e6:e1:d7:68:22:41:6d:74: 17:20:7c:8b:bc:b2:ca:66:07:56:23:a4:ca:66:1b:66:cc:f1: 1b:50:19:8e:98:1d:73:f6:c5:8a:75:7a:f0:38:97:05:79:cb: 3e:b8:28:15:b9:c8:66:11:36:11:c1:83:e0:a3:9f:93:4e:14: c9:9c:fd:81:05:e2:bb:47:d4:51:42:b3:e3:4c:4f:54:a0:22: 7a:2e:56:d7:61:b8:f0:3e:60:2b:d2:5e:a2:03:48:5c:50:49: e9:2e:55:b2:7c:31:23:69:c2:a7:7e:b9:12:8b:19:4d:1c:2e: 9e:c1:ac:78:b3:96:b2:c9:8e:ee:f0:c2:4a:f7:bc:65:56:42: 1a:7f:ab:f3:79:0b:47:ed:81:2b:ee:3f:0d:79:44:6b:19:55: fe:16:dd:3e:c7:a7:e3:07:88:7f:ff:d7:9b:46:df:2b:69:07: 41:29:c4:96:41:65:49:8f:df:98:f4:9d:6b:0d:58:20:b9:f9: 8c:9d:2f:4c:57:fb:dc:0a:ce:c6:a3:1f:e5:a9:8d:37:0e:1f: 63:ae:e0:51:b5:d3:f6:7f:f8:a1:85:7d:87:75:5e:22:bd:c2: fe:d2:27:cc -----BEGIN CERTIFICATE----- MIIFlTCCBH2gAwIBAgIUehGajZVB8re8hos1/vnDNoR2K2QwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODgwNkYwMDAwMTEwLwYDVQQFEyhFN0NBREE1RjA4 ODFENzdCRUE0OEIwNzY4QTM3NjZCNTAwNjVBRjA4MB4XDTI2MDgwMTAwMDMzOVoX DTI2MDgwNTAwMDMzOVowejFJMEcGA1UEBRNAMWQyZGZkMzViYTQ2OWUyNmRjZTRj NTBmYzQyNGYzYzIxODFjYjJiOTcyZTk3YTVkY2ZlOGZjNGNhODhlYjVjNzEtMCsG A1UEAxMkYmI5YTkxMTYtZjYxNS00NjJlLWE2ODAtNTI2NmIzMjdlMGZhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwMeOz/oHAX94GWA1t0hEtrl49TKj 7f8BeTa2ZdTZsxt1GevUUMdZpgXAleypFmJp6Zfre+fj2XyqdpzdSVuD4FIPMnfR JH7ECcPYO/SRgNaXNfpT7YG9osrT5LRwtXz/7mxLZNE2aQzM48Agu4MXQjv1Yd/l cr2OOtgPOETvc6aBVLNd7nf4fYHsGxMCOC0OxLWrvT/6KxF+TzcUU9rY++0MBFPG QBxJsP7zglp7kZ8IRKOoOJQQKOitmxJUFaVCV6CTOrsSlrJ7+QnVmLXvo16IIv69 TdzFecH7cn8poikKjVyz4u4Ee0Uf38wRLJzjyTUsswjGDqgvJaEfC2l2mQIDAQAB o4ICQTCCAj0wHQYDVR0OBBYEFIMyRHvbNeiCbOD5S/XKY0sGcZBHMB8GA1UdIwQY MBaAFOfK2l8Igdd76kiwdoo3ZrUAZa8IMA4GA1UdDwEB/wQEAwIHgDB+BggrBgEF BQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVw b3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi81OHJhWHdp QjEzdnFTTEIyaWpkbXRRQmxyd2cuY2VyMH8GCCsGAQUFBwELBHMwcTBvBggrBgEF BQcwC4ZjcnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5hbWF6b25hd3MuY29t L3ZvbHVtZS83MDhhYWZhZi0wMGI0LTQ4NWItODU0Yy0wYjMyY2EzMGY1N2IvbWFu aWZlc3QubWZ0MIGVBgNVHR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnBraS1y c3luYy51cy1lYXN0LTIuYW1hem9uYXdzLmNvbS92b2x1bWUvNzA4YWFmYWYtMDBi NC00ODViLTg1NGMtMGIzMmNhMzBmNTdiLzEyZTU5MDAxLTM1YWMtNGFiZi04NThm LTM3Yjk1NWEyNGIzZi5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggr BgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYw BKACBQAwDQYJKoZIhvcNAQELBQADggEBACN2QUVS7+yM5p6SMjRc8myuUI/8V7Le 1+8sHVDm4ddoIkFtdBcgfIu8sspmB1YjpMpmG2bM8RtQGY6YHXP2xYp1evA4lwV5 yz64KBW5yGYRNhHBg+Cjn5NOFMmc/YEF4rtH1FFCs+NMT1SgInouVtdhuPA+YCvS XqIDSFxQSekuVbJ8MSNpwqd+uRKLGU0cLp7BrHizlrLJju7wwkr3vGVWQhp/q/N5 C0ftgSvuPw15RGsZVf4W3T7Hp+MHiH//15tG3ytpB0EpxJZBZUmP35j0nWsNWCC5 +YydL0xX+9wKzsajH+WpjTcOH2Ou4FG10/Z/+KGFfYd1XiK9wv7SJ8w= -----END CERTIFICATE-----Generated at Sat Aug 1 12:41:18 2026 by rpki-client