$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/708aafaf-00b4-485b-854c-0b32ca30f57b/manifest.mft File: manifest.mft (raw, json) Hash identifier: FCqShu5jFWX5gyxdtSxS86Dj4YF6h8HDSFZsDEvLYRQ= Subject key identifier: F7:33:64:5C:51:24:9F:21:52:A0:85:77:7C:EA:62:31:50:2C:28:44 Authority key identifier: E7:CA:DA:5F:08:81:D7:7B:EA:48:B0:76:8A:37:66:B5:00:65:AF:08 Certificate issuer: /CN=A918806F0000/serialNumber=E7CADA5F0881D77BEA48B0768A3766B50065AF08 Certificate serial: 1A5C7A307D912412AB765FB3633BE661E4209B5C Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/58raXwiB13vqSLB2ijdmtQBlrwg.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/708aafaf-00b4-485b-854c-0b32ca30f57b/manifest.mft Manifest number: 062C Signing time: Sun 07 Jun 2026 00:04:41 +0000 Manifest this update: Sun 07 Jun 2026 00:04:41 +0000 Manifest next update: Thu 11 Jun 2026 00:04:41 +0000 Files and hashes: 1: 12e59001-35ac-4abf-858f-37b955a24b3f.crl (hash: wYmBzc3+HCDX61GmZNZoek31liWTwM06WAIl3RACEOI=) 2: 381fc6e6-5d49-41bc-b584-d9437c68e3cd.roa (hash: M+i7XpsJD4p5Tk2yVGdLmGjDs5xTMXCNLVAUi3YO9fw=) 3: 49119734-9dbc-4bd4-98be-57e4ce078928.roa (hash: ixxf6ccd3osEyLmWkgkbiHVYyusTctrUjOhnPpMvlE4=) 4: 5663bf34-10ed-4309-a236-7466afd6f02f.roa (hash: pL63iKjbLOLYlourekfOR4Nmgu8cB/gmsl43BXFS/jc=) 5: cc2f7093-21a6-400f-9db1-93c2fe02bc1c.roa (hash: 64kuFuROhLtieOXlazTSy2bjQ+E6VKxKN/jo5XO5H34=) 6: ea1d02aa-6d25-4b36-b42e-ba837d49e261.roa (hash: ZpxX4uxdJxBRqoXrMr+4TjfM6a61MegoEvwGJaS8fgI=) Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/708aafaf-00b4-485b-854c-0b32ca30f57b/12e59001-35ac-4abf-858f-37b955a24b3f.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/708aafaf-00b4-485b-854c-0b32ca30f57b/manifest.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/58raXwiB13vqSLB2ijdmtQBlrwg.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 11 Jun 2026 00:04:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1a:5c:7a:30:7d:91:24:12:ab:76:5f:b3:63:3b:e6:61:e4:20:9b:5c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A918806F0000, serialNumber=E7CADA5F0881D77BEA48B0768A3766B50065AF08 Validity Not Before: Jun 7 00:04:41 2026 GMT Not After : Jun 11 00:04:41 2026 GMT Subject: serialNumber=136b5680d3b1f1c7922517f496fb478a4fe0868ceb501f59245e634b1cbeb0dc, CN=bb9a9116-f615-462e-a680-5266b327e0fa Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:98:02:83:15:e9:f2:33:00:86:13:1e:f4:ff:64: 29:fe:74:d6:40:e8:1d:91:c9:cf:dc:cc:2e:32:65: 15:ff:6f:57:23:c2:ff:55:0d:b4:cf:a4:08:fb:b0: a9:bc:d0:24:22:2f:01:35:49:a5:ab:58:bd:2a:b8: 12:65:52:9a:7b:82:c6:19:40:1d:5e:d8:62:cf:3e: 51:09:b9:20:84:56:0f:3e:7f:2c:e8:ba:e4:5a:2b: 72:d8:b8:8d:e3:4b:52:2a:af:98:8e:ff:b5:ba:8c: 5a:5c:f1:f2:4a:24:41:f2:e6:35:49:fc:e8:2d:9b: 1d:64:09:17:cf:4f:72:16:2e:45:8f:ea:9f:48:09: 38:8b:26:aa:76:0a:5c:e7:bc:b4:cb:ce:99:4c:bb: e5:6d:51:ce:b6:34:d8:5f:27:ab:b4:bb:62:7e:3e: cd:38:e6:88:0c:52:52:43:1b:4e:21:d1:15:88:d4: a3:b9:a8:ff:c5:e7:32:3d:34:4b:93:09:77:2c:1b: 59:eb:b7:f7:7e:47:eb:f2:86:cd:b0:34:84:93:08: 78:d2:6a:ec:ea:1c:4b:44:58:a6:7a:07:5f:48:b1: d7:09:0b:5d:4d:80:c3:4f:b1:aa:ae:53:f2:e9:13: 1e:8a:80:0f:0f:df:29:fa:95:8a:fd:11:f8:21:5f: 70:53 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F7:33:64:5C:51:24:9F:21:52:A0:85:77:7C:EA:62:31:50:2C:28:44 X509v3 Authority Key Identifier: keyid:E7:CA:DA:5F:08:81:D7:7B:EA:48:B0:76:8A:37:66:B5:00:65:AF:08 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/58raXwiB13vqSLB2ijdmtQBlrwg.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/708aafaf-00b4-485b-854c-0b32ca30f57b/manifest.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/708aafaf-00b4-485b-854c-0b32ca30f57b/12e59001-35ac-4abf-858f-37b955a24b3f.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 7e:72:86:68:ad:d2:20:2a:48:d6:6e:44:b4:9b:50:6a:c3:63: 31:7b:a3:29:f2:14:95:71:4c:44:c6:77:3d:33:1e:f4:57:97: 08:33:1a:6d:bb:04:54:be:cc:df:30:68:15:9b:8c:07:45:d5: 3e:df:c7:b7:3e:71:18:7d:ca:10:13:5d:45:81:85:b1:a8:0d: 76:4f:80:82:73:06:e2:7c:5f:fb:e8:b1:d4:ce:b9:4e:ab:5e: 4a:b7:64:69:f4:2f:00:e1:2f:23:ed:48:24:af:65:58:e9:28: 45:7a:f2:37:9a:02:8c:3a:d4:00:ac:70:f6:8e:a8:7c:6c:c5: 83:49:dd:1c:61:9c:5f:0f:4f:94:74:32:a4:6f:54:88:89:bb: 47:55:78:88:a8:77:cb:1a:1d:d9:1a:a7:ea:ac:29:d9:9a:07: 0e:dd:f5:82:34:12:83:eb:8c:5c:92:0a:f5:a5:6a:63:d7:7b: 16:7b:9c:4c:3c:9a:04:e9:3f:dc:67:9f:b9:bf:ff:81:68:c2: 94:8e:b4:7e:49:29:81:b7:f6:37:cb:9b:6a:c0:85:e8:c3:d1: fb:40:93:e1:32:c9:f9:f8:1f:3b:ee:87:c9:91:0d:ec:46:1d: bc:5b:90:ba:a3:b0:f5:13:f4:df:7f:b7:e5:52:15:02:f8:16: 54:0f:13:5d -----BEGIN CERTIFICATE----- MIIFlTCCBH2gAwIBAgIUGlx6MH2RJBKrdl+zYzvmYeQgm1wwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODgwNkYwMDAwMTEwLwYDVQQFEyhFN0NBREE1RjA4 ODFENzdCRUE0OEIwNzY4QTM3NjZCNTAwNjVBRjA4MB4XDTI2MDYwNzAwMDQ0MVoX DTI2MDYxMTAwMDQ0MVowejFJMEcGA1UEBRNAMTM2YjU2ODBkM2IxZjFjNzkyMjUx N2Y0OTZmYjQ3OGE0ZmUwODY4Y2ViNTAxZjU5MjQ1ZTYzNGIxY2JlYjBkYzEtMCsG A1UEAxMkYmI5YTkxMTYtZjYxNS00NjJlLWE2ODAtNTI2NmIzMjdlMGZhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmAKDFenyMwCGEx70/2Qp/nTWQOgd kcnP3MwuMmUV/29XI8L/VQ20z6QI+7CpvNAkIi8BNUmlq1i9KrgSZVKae4LGGUAd Xthizz5RCbkghFYPPn8s6LrkWity2LiN40tSKq+Yjv+1uoxaXPHySiRB8uY1Sfzo LZsdZAkXz09yFi5Fj+qfSAk4iyaqdgpc57y0y86ZTLvlbVHOtjTYXyertLtifj7N OOaIDFJSQxtOIdEViNSjuaj/xecyPTRLkwl3LBtZ67f3fkfr8obNsDSEkwh40mrs 6hxLRFimegdfSLHXCQtdTYDDT7GqrlPy6RMeioAPD98p+pWK/RH4IV9wUwIDAQAB o4ICQTCCAj0wHQYDVR0OBBYEFPczZFxRJJ8hUqCFd3zqYjFQLChEMB8GA1UdIwQY MBaAFOfK2l8Igdd76kiwdoo3ZrUAZa8IMA4GA1UdDwEB/wQEAwIHgDB+BggrBgEF BQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVw b3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi81OHJhWHdp QjEzdnFTTEIyaWpkbXRRQmxyd2cuY2VyMH8GCCsGAQUFBwELBHMwcTBvBggrBgEF BQcwC4ZjcnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5hbWF6b25hd3MuY29t L3ZvbHVtZS83MDhhYWZhZi0wMGI0LTQ4NWItODU0Yy0wYjMyY2EzMGY1N2IvbWFu aWZlc3QubWZ0MIGVBgNVHR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnBraS1y c3luYy51cy1lYXN0LTIuYW1hem9uYXdzLmNvbS92b2x1bWUvNzA4YWFmYWYtMDBi NC00ODViLTg1NGMtMGIzMmNhMzBmNTdiLzEyZTU5MDAxLTM1YWMtNGFiZi04NThm LTM3Yjk1NWEyNGIzZi5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggr BgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYw BKACBQAwDQYJKoZIhvcNAQELBQADggEBAH5yhmit0iAqSNZuRLSbUGrDYzF7oyny FJVxTETGdz0zHvRXlwgzGm27BFS+zN8waBWbjAdF1T7fx7c+cRh9yhATXUWBhbGo DXZPgIJzBuJ8X/vosdTOuU6rXkq3ZGn0LwDhLyPtSCSvZVjpKEV68jeaAow61ACs cPaOqHxsxYNJ3RxhnF8PT5R0MqRvVIiJu0dVeIiod8saHdkap+qsKdmaBw7d9YI0 EoPrjFySCvWlamPXexZ7nEw8mgTpP9xnn7m//4FowpSOtH5JKYG39jfLm2rAhejD 0ftAk+Eyyfn4Hzvuh8mRDexGHbxbkLqjsPUT9N9/t+VSFQL4FlQPE10= -----END CERTIFICATE-----Generated at Sun Jun 7 19:48:19 2026 by rpki-client