$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/708aafaf-00b4-485b-854c-0b32ca30f57b/manifest.mft File: manifest.mft (raw, json) Hash identifier: ma4SzzhmeR9QthFDKKUm3OHHcfbOLkge/pJ/MerzPhQ= Subject key identifier: 48:D9:79:1F:94:77:99:CA:3A:99:14:C7:E8:34:E6:91:F0:52:84:23 Authority key identifier: E7:CA:DA:5F:08:81:D7:7B:EA:48:B0:76:8A:37:66:B5:00:65:AF:08 Certificate issuer: /CN=A918806F0000/serialNumber=E7CADA5F0881D77BEA48B0768A3766B50065AF08 Certificate serial: 7A3FAC813440B8B6D0691743BE8C88FF01766CA8 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/58raXwiB13vqSLB2ijdmtQBlrwg.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/708aafaf-00b4-485b-854c-0b32ca30f57b/manifest.mft Manifest number: 0670 Signing time: Fri 14 Aug 2026 00:02:07 +0000 Manifest this update: Fri 14 Aug 2026 00:02:07 +0000 Manifest next update: Tue 18 Aug 2026 00:02:07 +0000 Files and hashes: 1: 12e59001-35ac-4abf-858f-37b955a24b3f.crl (hash: LGk8FmbEJkFmFfgZa9vxMSrlvBwwD/uAfG7Lx9++kQc=) 2: 381fc6e6-5d49-41bc-b584-d9437c68e3cd.roa (hash: 8QqQOxAj3sRai6/BzOB2kV66/okkk7p8TzKsBaSwcWA=) 3: 49119734-9dbc-4bd4-98be-57e4ce078928.roa (hash: 0OedyNMwjL1I1p7rzryfdYD0nslES0i+43AbthFPFmE=) 4: 5663bf34-10ed-4309-a236-7466afd6f02f.roa (hash: aoaRIM84eruV/ISWBs3PJCPQb0sEmsLtTOcu1EdbsFA=) 5: cc2f7093-21a6-400f-9db1-93c2fe02bc1c.roa (hash: vbtxuyfgx9e6lLFR0CnUGCC1kgCTySw+Ljt4yM1fDb4=) 6: ea1d02aa-6d25-4b36-b42e-ba837d49e261.roa (hash: q5bh3h1LHQcXwRDCiiiYn6TP5+N60E0SyV4QnQBQL8c=) Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/708aafaf-00b4-485b-854c-0b32ca30f57b/12e59001-35ac-4abf-858f-37b955a24b3f.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/708aafaf-00b4-485b-854c-0b32ca30f57b/manifest.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/58raXwiB13vqSLB2ijdmtQBlrwg.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 18 Aug 2026 00:02:07 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7a:3f:ac:81:34:40:b8:b6:d0:69:17:43:be:8c:88:ff:01:76:6c:a8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A918806F0000, serialNumber=E7CADA5F0881D77BEA48B0768A3766B50065AF08 Validity Not Before: Aug 14 00:02:07 2026 GMT Not After : Aug 18 00:02:07 2026 GMT Subject: serialNumber=a440cb6c5d651a3cd00cba0d87c0972faf1b72c187754883627b107532ec67fe, CN=bb9a9116-f615-462e-a680-5266b327e0fa Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e7:52:87:91:b8:a5:f9:70:2d:7f:59:81:6c:28: 76:b5:13:61:0a:c8:04:c0:f1:de:14:be:99:92:ec: aa:75:f6:4d:3c:cb:02:63:0f:4b:2b:30:8b:8f:32: 71:b3:8d:bf:2f:06:d3:ec:f8:29:0d:38:90:f3:cf: 25:df:a8:9e:60:a3:f4:9b:d4:23:ba:1a:81:78:33: ea:21:22:f2:aa:39:9e:d8:4e:fb:d0:64:d1:12:ab: a2:eb:4e:fd:4e:70:07:3f:f2:65:f3:7b:b7:b5:53: 58:74:d2:21:96:77:44:d2:d0:09:7d:86:af:88:47: 8f:6b:92:64:ae:72:d0:f5:15:53:d4:74:81:78:bb: d5:c7:4d:50:cf:44:f2:d0:04:aa:d7:90:29:03:b1: 4d:06:63:e8:d3:8e:78:d7:63:01:0a:04:04:31:44: f9:c3:e8:f5:df:a6:32:f5:af:ef:c6:ce:28:b4:ad: fc:ce:0c:42:e9:51:ad:c6:d8:60:78:2d:f1:39:05: 0a:7f:29:bc:20:b6:21:42:c1:08:1b:9b:03:64:57: ce:02:0c:97:57:2e:ed:13:6e:35:ce:85:89:1a:0a: c4:0e:cf:4d:1d:0a:77:d1:5b:36:42:e8:92:72:bb: 9d:15:b5:4f:0c:cb:f4:dd:02:ec:42:c6:44:22:01: 47:83 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 48:D9:79:1F:94:77:99:CA:3A:99:14:C7:E8:34:E6:91:F0:52:84:23 X509v3 Authority Key Identifier: keyid:E7:CA:DA:5F:08:81:D7:7B:EA:48:B0:76:8A:37:66:B5:00:65:AF:08 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/58raXwiB13vqSLB2ijdmtQBlrwg.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/708aafaf-00b4-485b-854c-0b32ca30f57b/manifest.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/708aafaf-00b4-485b-854c-0b32ca30f57b/12e59001-35ac-4abf-858f-37b955a24b3f.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 6e:e5:19:fd:f6:33:26:bf:23:28:c8:12:01:77:19:b6:f0:02: d4:b9:52:b7:a5:dd:9b:12:7b:8f:7b:4d:cb:44:2e:bf:fc:f6: 70:78:96:2d:38:03:f3:40:84:7a:40:16:c6:bd:e0:27:bc:5e: 64:28:cf:7f:01:ec:d1:30:9e:eb:e8:1f:29:c1:e9:c9:05:4a: 48:23:32:d7:5f:3f:02:bf:2e:af:6f:6f:3f:27:d9:75:2d:0b: 52:66:0c:41:54:86:c0:f6:3e:91:3e:cb:30:ce:d5:49:f6:4a: d3:c0:ac:c7:a7:d9:59:4e:bd:15:97:9e:85:80:51:3c:46:2c: 4e:84:48:27:f2:59:70:1a:3f:f1:00:61:5b:f8:b1:4e:d4:b8: b6:b7:e6:b2:9c:cc:08:fc:0c:c3:b5:f5:07:90:b8:f5:20:f1: 2d:e7:82:d4:3c:42:a3:4f:35:34:7b:76:43:cf:5f:c4:e4:5a: d9:19:8f:42:8a:e4:b8:39:a5:82:e9:9e:45:11:00:b5:7e:d8: 6a:aa:01:30:55:81:d6:96:2f:e3:8c:82:42:7a:d0:96:33:5f: d1:af:88:b3:6c:f4:98:3b:b4:b9:13:9e:04:28:58:76:d3:4b: ac:b4:7f:09:2c:75:09:0b:85:67:74:cf:d1:25:79:19:5f:90: 38:65:b5:c3 -----BEGIN CERTIFICATE----- MIIFlTCCBH2gAwIBAgIUej+sgTRAuLbQaRdDvoyI/wF2bKgwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODgwNkYwMDAwMTEwLwYDVQQFEyhFN0NBREE1RjA4 ODFENzdCRUE0OEIwNzY4QTM3NjZCNTAwNjVBRjA4MB4XDTI2MDgxNDAwMDIwN1oX DTI2MDgxODAwMDIwN1owejFJMEcGA1UEBRNAYTQ0MGNiNmM1ZDY1MWEzY2QwMGNi YTBkODdjMDk3MmZhZjFiNzJjMTg3NzU0ODgzNjI3YjEwNzUzMmVjNjdmZTEtMCsG A1UEAxMkYmI5YTkxMTYtZjYxNS00NjJlLWE2ODAtNTI2NmIzMjdlMGZhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA51KHkbil+XAtf1mBbCh2tRNhCsgE wPHeFL6ZkuyqdfZNPMsCYw9LKzCLjzJxs42/LwbT7PgpDTiQ888l36ieYKP0m9Qj uhqBeDPqISLyqjme2E770GTREqui6079TnAHP/Jl83u3tVNYdNIhlndE0tAJfYav iEePa5JkrnLQ9RVT1HSBeLvVx01Qz0Ty0ASq15ApA7FNBmPo045412MBCgQEMUT5 w+j136Yy9a/vxs4otK38zgxC6VGtxthgeC3xOQUKfym8ILYhQsEIG5sDZFfOAgyX Vy7tE241zoWJGgrEDs9NHQp30Vs2QuiScrudFbVPDMv03QLsQsZEIgFHgwIDAQAB o4ICQTCCAj0wHQYDVR0OBBYEFEjZeR+Ud5nKOpkUx+g05pHwUoQjMB8GA1UdIwQY MBaAFOfK2l8Igdd76kiwdoo3ZrUAZa8IMA4GA1UdDwEB/wQEAwIHgDB+BggrBgEF BQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVw b3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi81OHJhWHdp QjEzdnFTTEIyaWpkbXRRQmxyd2cuY2VyMH8GCCsGAQUFBwELBHMwcTBvBggrBgEF BQcwC4ZjcnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5hbWF6b25hd3MuY29t L3ZvbHVtZS83MDhhYWZhZi0wMGI0LTQ4NWItODU0Yy0wYjMyY2EzMGY1N2IvbWFu aWZlc3QubWZ0MIGVBgNVHR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnBraS1y c3luYy51cy1lYXN0LTIuYW1hem9uYXdzLmNvbS92b2x1bWUvNzA4YWFmYWYtMDBi NC00ODViLTg1NGMtMGIzMmNhMzBmNTdiLzEyZTU5MDAxLTM1YWMtNGFiZi04NThm LTM3Yjk1NWEyNGIzZi5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggr BgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYw BKACBQAwDQYJKoZIhvcNAQELBQADggEBAG7lGf32Mya/IyjIEgF3GbbwAtS5Urel 3ZsSe497TctELr/89nB4li04A/NAhHpAFsa94Ce8XmQoz38B7NEwnuvoHynB6ckF SkgjMtdfPwK/Lq9vbz8n2XUtC1JmDEFUhsD2PpE+yzDO1Un2StPArMen2VlOvRWX noWAUTxGLE6ESCfyWXAaP/EAYVv4sU7UuLa35rKczAj8DMO19QeQuPUg8S3ngtQ8 QqNPNTR7dkPPX8TkWtkZj0KK5Lg5pYLpnkURALV+2GqqATBVgdaWL+OMgkJ60JYz X9GviLNs9Jg7tLkTngQoWHbTS6y0fwksdQkLhWd0z9EleRlfkDhltcM= -----END CERTIFICATE-----Generated at Fri Aug 14 04:52:49 2026 by rpki-client