$ rpki-client -vvvf rpki-rsync.us-east-2.amazonaws.com/volume/708aafaf-00b4-485b-854c-0b32ca30f57b/manifest.mft File: manifest.mft (raw, json) Hash identifier: /HEkUQo3Ya0BRQc4+LjAHc4M+O5JRxSGfPKpfTnA5Qk= Subject key identifier: 8E:A7:DB:12:94:91:D0:2E:93:1F:98:B7:33:B5:60:A9:0E:7E:7F:C2 Authority key identifier: E7:CA:DA:5F:08:81:D7:7B:EA:48:B0:76:8A:37:66:B5:00:65:AF:08 Certificate issuer: /CN=A918806F0000/serialNumber=E7CADA5F0881D77BEA48B0768A3766B50065AF08 Certificate serial: 2FE295F70A5E54D7027F1C37D5CBB74A3D2310CA Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/58raXwiB13vqSLB2ijdmtQBlrwg.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/708aafaf-00b4-485b-854c-0b32ca30f57b/manifest.mft Manifest number: 0679 Signing time: Sun 23 Aug 2026 00:04:02 +0000 Manifest this update: Sun 23 Aug 2026 00:04:02 +0000 Manifest next update: Thu 27 Aug 2026 00:04:02 +0000 Files and hashes: 1: 12e59001-35ac-4abf-858f-37b955a24b3f.crl (hash: TDHQLou7RRY+peqp32RXIalK9UzYVtbFWU18vShxXus=) 2: 381fc6e6-5d49-41bc-b584-d9437c68e3cd.roa (hash: 8QqQOxAj3sRai6/BzOB2kV66/okkk7p8TzKsBaSwcWA=) 3: 49119734-9dbc-4bd4-98be-57e4ce078928.roa (hash: 0OedyNMwjL1I1p7rzryfdYD0nslES0i+43AbthFPFmE=) 4: 5663bf34-10ed-4309-a236-7466afd6f02f.roa (hash: aoaRIM84eruV/ISWBs3PJCPQb0sEmsLtTOcu1EdbsFA=) 5: cc2f7093-21a6-400f-9db1-93c2fe02bc1c.roa (hash: vbtxuyfgx9e6lLFR0CnUGCC1kgCTySw+Ljt4yM1fDb4=) 6: ea1d02aa-6d25-4b36-b42e-ba837d49e261.roa (hash: q5bh3h1LHQcXwRDCiiiYn6TP5+N60E0SyV4QnQBQL8c=) Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/708aafaf-00b4-485b-854c-0b32ca30f57b/12e59001-35ac-4abf-858f-37b955a24b3f.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/708aafaf-00b4-485b-854c-0b32ca30f57b/manifest.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/58raXwiB13vqSLB2ijdmtQBlrwg.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 27 Aug 2026 00:04:02 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2f:e2:95:f7:0a:5e:54:d7:02:7f:1c:37:d5:cb:b7:4a:3d:23:10:ca Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A918806F0000, serialNumber=E7CADA5F0881D77BEA48B0768A3766B50065AF08 Validity Not Before: Aug 23 00:04:02 2026 GMT Not After : Aug 27 00:04:02 2026 GMT Subject: serialNumber=3ca9b27600903da88116d66f8ed2fb3cb6fa9b36ee2f24716087aea7aabb9e7e, CN=bb9a9116-f615-462e-a680-5266b327e0fa Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:97:92:1b:9c:db:58:c5:a5:16:88:71:de:f9: e0:a4:97:e4:f2:80:62:8e:12:6f:62:4d:06:62:f7: 3f:00:24:55:62:cf:52:da:4f:6a:bc:29:9d:7b:4f: 38:dc:32:f3:7c:3f:7f:a4:fc:71:d4:e8:b6:bf:4c: fd:e4:ed:90:3b:5f:0b:4c:4c:cb:78:f0:47:f9:58: 0b:1c:50:5a:9a:f4:28:67:85:b2:45:01:36:fa:3a: 03:4d:d7:79:57:c4:64:53:41:4c:dd:66:46:5f:c6: 1e:36:d4:33:f1:37:f7:7f:b3:39:a9:6c:8e:18:8c: e3:58:ad:4c:fd:8a:22:f7:97:93:81:27:5d:75:b5: ba:d5:12:52:87:82:16:89:82:c7:99:f8:c3:d0:ce: ce:ca:50:25:26:3a:3f:9a:e0:8e:2b:2e:fb:8b:6c: 03:1a:c1:45:c8:85:21:6f:ed:ce:86:09:db:a9:f3: 22:b4:93:1f:25:5e:1b:f1:22:e5:fa:ba:48:32:13: 32:cc:ac:cd:a0:4e:7d:83:78:16:dd:3a:eb:95:3d: c3:01:28:c6:6d:c0:87:d7:ca:8a:16:3c:d2:ae:e6: 02:48:10:b3:d3:a6:d2:60:a6:74:59:05:e6:95:11: dc:aa:66:ce:aa:42:26:59:d4:b2:a7:e1:2b:e2:36: db:17 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8E:A7:DB:12:94:91:D0:2E:93:1F:98:B7:33:B5:60:A9:0E:7E:7F:C2 X509v3 Authority Key Identifier: keyid:E7:CA:DA:5F:08:81:D7:7B:EA:48:B0:76:8A:37:66:B5:00:65:AF:08 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/58raXwiB13vqSLB2ijdmtQBlrwg.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/708aafaf-00b4-485b-854c-0b32ca30f57b/manifest.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/708aafaf-00b4-485b-854c-0b32ca30f57b/12e59001-35ac-4abf-858f-37b955a24b3f.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 86:bd:f9:79:94:ab:9e:8c:1e:35:dc:f3:63:43:bf:54:41:46: de:e9:44:16:ee:62:19:d3:33:fc:6f:43:3a:4a:62:8f:46:b5: 21:26:2c:fc:63:ef:36:31:b1:f3:84:9c:24:73:77:62:33:8f: 65:83:e3:ad:df:78:fe:ff:d6:25:63:ee:c3:e0:23:cf:d0:74: f2:04:7c:bc:d1:b5:80:a5:5f:dc:67:b0:d1:0e:49:06:05:7e: 21:20:d7:2a:db:90:76:a0:dc:2b:d9:28:3d:27:60:e9:a5:9e: ad:58:58:90:5f:49:33:5e:42:ab:64:2e:c8:14:fd:99:5b:f7: a8:75:ae:0b:d2:18:7a:df:77:ed:b4:0b:f4:ea:0d:f9:c9:49: ec:7d:0d:49:a2:2e:40:a1:6a:c1:5f:56:91:43:d9:2c:ae:f8: 8c:d7:f4:0a:d9:2c:1c:b2:50:38:4d:e9:60:61:df:3a:90:a0: e3:33:df:5d:c5:cb:95:7d:28:2e:2e:3a:99:99:9e:09:8e:95: 9a:c8:05:38:ae:96:bb:16:63:0d:63:54:4a:07:a6:51:c6:82: 88:c7:3a:d5:e0:d6:bd:9f:9b:1b:c7:a5:43:85:56:c3:51:bb: 25:92:f9:99:5c:3f:a8:a9:74:89:af:47:19:9e:d2:68:d5:03: c0:15:3b:ff -----BEGIN CERTIFICATE----- MIIFlTCCBH2gAwIBAgIUL+KV9wpeVNcCfxw31cu3Sj0jEMowDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODgwNkYwMDAwMTEwLwYDVQQFEyhFN0NBREE1RjA4 ODFENzdCRUE0OEIwNzY4QTM3NjZCNTAwNjVBRjA4MB4XDTI2MDgyMzAwMDQwMloX DTI2MDgyNzAwMDQwMlowejFJMEcGA1UEBRNAM2NhOWIyNzYwMDkwM2RhODgxMTZk NjZmOGVkMmZiM2NiNmZhOWIzNmVlMmYyNDcxNjA4N2FlYTdhYWJiOWU3ZTEtMCsG A1UEAxMkYmI5YTkxMTYtZjYxNS00NjJlLWE2ODAtNTI2NmIzMjdlMGZhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvJeSG5zbWMWlFohx3vngpJfk8oBi jhJvYk0GYvc/ACRVYs9S2k9qvCmde0843DLzfD9/pPxx1Oi2v0z95O2QO18LTEzL ePBH+VgLHFBamvQoZ4WyRQE2+joDTdd5V8RkU0FM3WZGX8YeNtQz8Tf3f7M5qWyO GIzjWK1M/Yoi95eTgSdddbW61RJSh4IWiYLHmfjD0M7OylAlJjo/muCOKy77i2wD GsFFyIUhb+3OhgnbqfMitJMfJV4b8SLl+rpIMhMyzKzNoE59g3gW3TrrlT3DASjG bcCH18qKFjzSruYCSBCz06bSYKZ0WQXmlRHcqmbOqkImWdSyp+Er4jbbFwIDAQAB o4ICQTCCAj0wHQYDVR0OBBYEFI6n2xKUkdAukx+YtzO1YKkOfn/CMB8GA1UdIwQY MBaAFOfK2l8Igdd76kiwdoo3ZrUAZa8IMA4GA1UdDwEB/wQEAwIHgDB+BggrBgEF BQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVw b3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi81OHJhWHdp QjEzdnFTTEIyaWpkbXRRQmxyd2cuY2VyMH8GCCsGAQUFBwELBHMwcTBvBggrBgEF BQcwC4ZjcnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5hbWF6b25hd3MuY29t L3ZvbHVtZS83MDhhYWZhZi0wMGI0LTQ4NWItODU0Yy0wYjMyY2EzMGY1N2IvbWFu aWZlc3QubWZ0MIGVBgNVHR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnBraS1y c3luYy51cy1lYXN0LTIuYW1hem9uYXdzLmNvbS92b2x1bWUvNzA4YWFmYWYtMDBi NC00ODViLTg1NGMtMGIzMmNhMzBmNTdiLzEyZTU5MDAxLTM1YWMtNGFiZi04NThm LTM3Yjk1NWEyNGIzZi5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggr BgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYw BKACBQAwDQYJKoZIhvcNAQELBQADggEBAIa9+XmUq56MHjXc82NDv1RBRt7pRBbu YhnTM/xvQzpKYo9GtSEmLPxj7zYxsfOEnCRzd2Izj2WD463feP7/1iVj7sPgI8/Q dPIEfLzRtYClX9xnsNEOSQYFfiEg1yrbkHag3CvZKD0nYOmlnq1YWJBfSTNeQqtk LsgU/Zlb96h1rgvSGHrfd+20C/TqDfnJSex9DUmiLkChasFfVpFD2Syu+IzX9ArZ LByyUDhN6WBh3zqQoOMz313Fy5V9KC4uOpmZngmOlZrIBTiulrsWYw1jVEoHplHG gojHOtXg1r2fmxvHpUOFVsNRuyWS+ZlcP6ipdImvRxme0mjVA8AVO/8= -----END CERTIFICATE-----Generated at Sun Aug 23 14:56:16 2026 by rpki-client