$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/708aafaf-00b4-485b-854c-0b32ca30f57b/manifest.mft File: manifest.mft (raw, json) Hash identifier: arSn4LKQwcgNZJNEIOa+gw9F7//mmifbM8nd9JpM1iY= Subject key identifier: C6:B0:E2:B2:E7:28:17:91:32:9A:CD:1A:1F:5F:AD:47:18:64:9E:BE Authority key identifier: E7:CA:DA:5F:08:81:D7:7B:EA:48:B0:76:8A:37:66:B5:00:65:AF:08 Certificate issuer: /CN=A918806F0000/serialNumber=E7CADA5F0881D77BEA48B0768A3766B50065AF08 Certificate serial: 2E6F3C330DDE364D99F9BAA9F29A1BD0F758713D Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/58raXwiB13vqSLB2ijdmtQBlrwg.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/708aafaf-00b4-485b-854c-0b32ca30f57b/manifest.mft Manifest number: 0666 Signing time: Tue 04 Aug 2026 00:00:07 +0000 Manifest this update: Tue 04 Aug 2026 00:00:07 +0000 Manifest next update: Sat 08 Aug 2026 00:00:07 +0000 Files and hashes: 1: 12e59001-35ac-4abf-858f-37b955a24b3f.crl (hash: CqfaFYGgluaq/9gzyEjV7ZkcPmTDxanel80DBrx/L4M=) 2: 381fc6e6-5d49-41bc-b584-d9437c68e3cd.roa (hash: 8QqQOxAj3sRai6/BzOB2kV66/okkk7p8TzKsBaSwcWA=) 3: 49119734-9dbc-4bd4-98be-57e4ce078928.roa (hash: 0OedyNMwjL1I1p7rzryfdYD0nslES0i+43AbthFPFmE=) 4: 5663bf34-10ed-4309-a236-7466afd6f02f.roa (hash: aoaRIM84eruV/ISWBs3PJCPQb0sEmsLtTOcu1EdbsFA=) 5: cc2f7093-21a6-400f-9db1-93c2fe02bc1c.roa (hash: vbtxuyfgx9e6lLFR0CnUGCC1kgCTySw+Ljt4yM1fDb4=) 6: ea1d02aa-6d25-4b36-b42e-ba837d49e261.roa (hash: q5bh3h1LHQcXwRDCiiiYn6TP5+N60E0SyV4QnQBQL8c=) Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/708aafaf-00b4-485b-854c-0b32ca30f57b/12e59001-35ac-4abf-858f-37b955a24b3f.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/708aafaf-00b4-485b-854c-0b32ca30f57b/manifest.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/58raXwiB13vqSLB2ijdmtQBlrwg.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 08 Aug 2026 00:00:07 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2e:6f:3c:33:0d:de:36:4d:99:f9:ba:a9:f2:9a:1b:d0:f7:58:71:3d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A918806F0000, serialNumber=E7CADA5F0881D77BEA48B0768A3766B50065AF08 Validity Not Before: Aug 4 00:00:07 2026 GMT Not After : Aug 8 00:00:07 2026 GMT Subject: serialNumber=bdf18de882db6c4e4a9bf0c08c6ce0c3a9209ed9adc7af681dd097bcf0d4999a, CN=bb9a9116-f615-462e-a680-5266b327e0fa Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dc:84:4a:03:f2:7d:56:74:f0:0b:5e:27:3b:03: f2:3f:4c:1d:7c:09:e8:0f:29:77:3f:e3:53:83:77: 26:82:7b:13:77:fc:df:2d:13:ad:89:b9:9b:92:5e: 76:66:50:2e:e2:58:df:95:7f:47:e4:ae:db:bf:cd: 01:64:ed:97:52:1b:a9:20:e5:fd:aa:a7:f0:99:e0: 3e:4d:77:73:88:5a:bd:55:01:ad:56:af:70:f6:ba: 80:0d:87:5d:46:be:40:91:0d:c4:74:2c:f7:e5:07: 29:f1:77:ae:0b:f7:08:90:5a:dd:91:fd:2b:9b:4e: f9:63:3d:85:6a:3f:b1:27:c3:fc:7f:b2:4b:ae:7c: 54:68:f3:80:10:02:40:ef:59:6f:15:a0:37:3c:fa: f6:c9:2e:01:6a:d2:d4:7d:2d:8d:81:8f:6e:be:59: 58:7c:6c:bb:33:25:68:a6:a4:98:23:b7:78:d6:e7: 47:48:c4:ee:26:95:55:a3:20:4a:02:25:29:01:80: 12:ba:75:56:40:ae:19:a5:ac:78:cf:09:fe:16:b3: 4f:ff:7e:28:b2:2f:4e:25:9a:ef:de:77:2d:d7:4c: 16:cf:98:a2:ad:d9:12:ea:f3:8c:9b:0d:28:3d:4d: a5:10:b2:2d:33:19:94:81:3f:0a:a1:f0:b0:bc:71: 53:a3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C6:B0:E2:B2:E7:28:17:91:32:9A:CD:1A:1F:5F:AD:47:18:64:9E:BE X509v3 Authority Key Identifier: keyid:E7:CA:DA:5F:08:81:D7:7B:EA:48:B0:76:8A:37:66:B5:00:65:AF:08 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/58raXwiB13vqSLB2ijdmtQBlrwg.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/708aafaf-00b4-485b-854c-0b32ca30f57b/manifest.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/708aafaf-00b4-485b-854c-0b32ca30f57b/12e59001-35ac-4abf-858f-37b955a24b3f.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 46:ac:21:ca:9c:78:40:08:11:f7:03:38:83:b1:eb:a0:cd:51: 36:11:6f:ce:3e:cb:66:64:05:47:bc:ee:d8:f1:f6:3e:89:dd: 05:12:86:7f:6a:8c:05:04:8d:aa:0e:c8:8a:60:44:3e:d9:c7: 3a:0d:33:99:b7:6c:39:fb:26:b7:ce:9d:fa:b6:22:a3:87:59: e3:06:8a:3c:50:8c:1e:50:ae:47:6a:94:68:6e:1c:ce:6c:65: b9:f4:4d:e3:e9:ba:e7:58:73:18:07:9a:25:d4:34:2f:ae:cd: 54:c0:b7:0a:96:4f:e5:f7:24:84:3b:dc:c2:d2:3b:99:70:9a: 47:5e:7e:59:46:cf:b1:60:05:bb:09:ef:94:1b:d2:04:c3:82: b2:f2:ec:ed:49:b8:5e:2a:fd:ac:04:6a:de:5a:a4:3c:7c:7c: 13:45:6b:f6:f1:27:1c:7e:71:1f:91:4a:b4:68:e4:dc:0e:86: 0c:3c:60:76:22:7b:0c:90:83:6e:96:86:7d:cc:80:d6:31:8c: 5a:42:2f:d3:f0:7b:8e:3b:43:a9:79:97:ed:bd:6f:c1:94:e6: b4:4e:dd:1d:4d:94:35:ab:82:a4:51:2e:40:a3:d5:11:cc:4a: a9:b1:ef:7d:98:dc:8e:4a:d3:81:8d:fa:51:0a:50:c1:dd:7d: d6:60:55:9a -----BEGIN CERTIFICATE----- MIIFlTCCBH2gAwIBAgIULm88Mw3eNk2Z+bqp8pob0PdYcT0wDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODgwNkYwMDAwMTEwLwYDVQQFEyhFN0NBREE1RjA4 ODFENzdCRUE0OEIwNzY4QTM3NjZCNTAwNjVBRjA4MB4XDTI2MDgwNDAwMDAwN1oX DTI2MDgwODAwMDAwN1owejFJMEcGA1UEBRNAYmRmMThkZTg4MmRiNmM0ZTRhOWJm MGMwOGM2Y2UwYzNhOTIwOWVkOWFkYzdhZjY4MWRkMDk3YmNmMGQ0OTk5YTEtMCsG A1UEAxMkYmI5YTkxMTYtZjYxNS00NjJlLWE2ODAtNTI2NmIzMjdlMGZhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3IRKA/J9VnTwC14nOwPyP0wdfAno Dyl3P+NTg3cmgnsTd/zfLROtibmbkl52ZlAu4ljflX9H5K7bv80BZO2XUhupIOX9 qqfwmeA+TXdziFq9VQGtVq9w9rqADYddRr5AkQ3EdCz35Qcp8XeuC/cIkFrdkf0r m075Yz2Faj+xJ8P8f7JLrnxUaPOAEAJA71lvFaA3PPr2yS4BatLUfS2NgY9uvllY fGy7MyVopqSYI7d41udHSMTuJpVVoyBKAiUpAYASunVWQK4Zpax4zwn+FrNP/34o si9OJZrv3nct10wWz5iirdkS6vOMmw0oPU2lELItMxmUgT8KofCwvHFTowIDAQAB o4ICQTCCAj0wHQYDVR0OBBYEFMaw4rLnKBeRMprNGh9frUcYZJ6+MB8GA1UdIwQY MBaAFOfK2l8Igdd76kiwdoo3ZrUAZa8IMA4GA1UdDwEB/wQEAwIHgDB+BggrBgEF BQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVw b3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi81OHJhWHdp QjEzdnFTTEIyaWpkbXRRQmxyd2cuY2VyMH8GCCsGAQUFBwELBHMwcTBvBggrBgEF BQcwC4ZjcnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5hbWF6b25hd3MuY29t L3ZvbHVtZS83MDhhYWZhZi0wMGI0LTQ4NWItODU0Yy0wYjMyY2EzMGY1N2IvbWFu aWZlc3QubWZ0MIGVBgNVHR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnBraS1y c3luYy51cy1lYXN0LTIuYW1hem9uYXdzLmNvbS92b2x1bWUvNzA4YWFmYWYtMDBi NC00ODViLTg1NGMtMGIzMmNhMzBmNTdiLzEyZTU5MDAxLTM1YWMtNGFiZi04NThm LTM3Yjk1NWEyNGIzZi5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggr BgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYw BKACBQAwDQYJKoZIhvcNAQELBQADggEBAEasIcqceEAIEfcDOIOx66DNUTYRb84+ y2ZkBUe87tjx9j6J3QUShn9qjAUEjaoOyIpgRD7ZxzoNM5m3bDn7JrfOnfq2IqOH WeMGijxQjB5QrkdqlGhuHM5sZbn0TePpuudYcxgHmiXUNC+uzVTAtwqWT+X3JIQ7 3MLSO5lwmkdefllGz7FgBbsJ75Qb0gTDgrLy7O1JuF4q/awEat5apDx8fBNFa/bx Jxx+cR+RSrRo5NwOhgw8YHYiewyQg26Whn3MgNYxjFpCL9Pwe447Q6l5l+29b8GU 5rRO3R1NlDWrgqRRLkCj1RHMSqmx732Y3I5K04GN+lEKUMHdfdZgVZo= -----END CERTIFICATE-----Generated at Tue Aug 4 01:24:34 2026 by rpki-client