$ rpki-client -vvvf rpki-rsync.us-east-2.amazonaws.com/volume/708aafaf-00b4-485b-854c-0b32ca30f57b/manifest.mft File: manifest.mft (raw, json) Hash identifier: Zbp+jrZI2ZJjWkYK7KW6MRkuBfmm4cOqB5ZaZRIAWj0= Subject key identifier: EB:26:C6:E0:B8:B4:24:AD:18:AE:17:3D:66:EE:75:81:C9:8D:19:72 Authority key identifier: E7:CA:DA:5F:08:81:D7:7B:EA:48:B0:76:8A:37:66:B5:00:65:AF:08 Certificate issuer: /CN=A918806F0000/serialNumber=E7CADA5F0881D77BEA48B0768A3766B50065AF08 Certificate serial: 0D17A5A796F0D453EA4B181F43A02C5CE9C839BF Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/58raXwiB13vqSLB2ijdmtQBlrwg.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/708aafaf-00b4-485b-854c-0b32ca30f57b/manifest.mft Manifest number: 068D Signing time: Sat 12 Sep 2026 00:07:23 +0000 Manifest this update: Sat 12 Sep 2026 00:07:23 +0000 Manifest next update: Wed 16 Sep 2026 00:07:23 +0000 Files and hashes: 1: 12e59001-35ac-4abf-858f-37b955a24b3f.crl (hash: ZEKUbNJnWaQSY7gcyyFUxT0nU12pSZvkRDfcN3NakN4=) 2: 381fc6e6-5d49-41bc-b584-d9437c68e3cd.roa (hash: 8QqQOxAj3sRai6/BzOB2kV66/okkk7p8TzKsBaSwcWA=) 3: 49119734-9dbc-4bd4-98be-57e4ce078928.roa (hash: 0OedyNMwjL1I1p7rzryfdYD0nslES0i+43AbthFPFmE=) 4: 5663bf34-10ed-4309-a236-7466afd6f02f.roa (hash: aoaRIM84eruV/ISWBs3PJCPQb0sEmsLtTOcu1EdbsFA=) 5: cc2f7093-21a6-400f-9db1-93c2fe02bc1c.roa (hash: vbtxuyfgx9e6lLFR0CnUGCC1kgCTySw+Ljt4yM1fDb4=) 6: ea1d02aa-6d25-4b36-b42e-ba837d49e261.roa (hash: q5bh3h1LHQcXwRDCiiiYn6TP5+N60E0SyV4QnQBQL8c=) Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/708aafaf-00b4-485b-854c-0b32ca30f57b/12e59001-35ac-4abf-858f-37b955a24b3f.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/708aafaf-00b4-485b-854c-0b32ca30f57b/manifest.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/58raXwiB13vqSLB2ijdmtQBlrwg.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 16 Sep 2026 00:07:23 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0d:17:a5:a7:96:f0:d4:53:ea:4b:18:1f:43:a0:2c:5c:e9:c8:39:bf Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A918806F0000, serialNumber=E7CADA5F0881D77BEA48B0768A3766B50065AF08 Validity Not Before: Sep 12 00:07:23 2026 GMT Not After : Sep 16 00:07:23 2026 GMT Subject: serialNumber=4f5a64501b6c6d330dc89653f13261943a78b256769ed4674df360a1eba5ab23, CN=bb9a9116-f615-462e-a680-5266b327e0fa Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:de:cf:81:ac:84:a1:e7:97:74:0a:72:57:9d:68: 3b:78:3e:dc:00:c1:57:8e:b0:f3:83:40:25:5c:ce: ce:5a:1a:0c:0a:be:a2:54:bb:ed:52:35:7c:2b:31: 22:d6:3d:ad:4e:3f:a1:c3:65:16:65:10:72:1c:60: d9:5b:79:1e:29:19:cd:1a:db:b1:73:f6:ed:0f:b9: 90:cb:d0:ea:43:a5:99:fb:ac:06:ae:e3:75:14:6a: 9d:c4:f9:f8:c6:69:d3:47:16:18:27:f6:77:e6:cd: 8f:b3:c1:bf:17:c2:6d:36:03:23:f3:e1:cb:19:c5: 3a:73:2d:ed:14:56:5e:75:64:bf:34:f5:ba:46:20: 91:54:99:cc:1d:25:fa:3e:75:cb:26:e0:b6:ab:60: d8:59:87:6a:9c:1a:9a:50:72:c3:9a:2d:c9:dc:08: a7:dc:f9:b6:86:ea:40:5b:2d:43:07:14:19:2b:d3: ab:e4:57:bc:e7:9d:17:df:ae:55:24:69:50:f0:32: 35:8d:dd:e7:62:9b:19:18:a7:76:0c:5b:f8:5f:33: 7e:9e:b5:f1:cf:50:d3:2d:70:11:9b:d3:3f:ae:f6: 85:60:6c:4e:14:a0:2b:a1:9f:26:60:6b:60:77:66: fc:61:cd:9e:bc:a8:0a:c8:68:21:ef:cd:81:6e:fe: 24:f7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EB:26:C6:E0:B8:B4:24:AD:18:AE:17:3D:66:EE:75:81:C9:8D:19:72 X509v3 Authority Key Identifier: keyid:E7:CA:DA:5F:08:81:D7:7B:EA:48:B0:76:8A:37:66:B5:00:65:AF:08 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/58raXwiB13vqSLB2ijdmtQBlrwg.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/708aafaf-00b4-485b-854c-0b32ca30f57b/manifest.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/708aafaf-00b4-485b-854c-0b32ca30f57b/12e59001-35ac-4abf-858f-37b955a24b3f.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 23:a4:dd:fb:19:b1:55:fd:ac:17:c3:32:57:e1:16:1f:08:c6: 8f:43:0e:d3:9d:6d:88:85:2b:da:df:f7:1b:bd:d0:e9:91:89: 06:4d:26:b7:d4:30:b5:16:c5:dc:d2:43:ed:70:c7:39:34:e9: 76:e5:6a:5a:2f:be:24:dd:c9:d6:a4:7b:ac:b9:8c:ce:1d:86: 73:8a:34:44:9b:9b:f0:8a:9b:b3:12:0d:a7:c0:d0:c8:06:34: 88:f3:e0:bb:6c:33:e6:cb:34:c8:45:8d:c8:a9:70:2d:cf:2b: 5c:0c:3e:c6:1d:e2:a5:c5:d7:b5:a3:6f:d8:0a:3a:4b:3a:29: 3f:79:f6:9a:9a:9d:77:90:c9:be:db:88:a8:95:7a:ec:d0:eb: ec:d0:bb:42:b0:6f:93:24:89:ca:92:99:52:1e:dc:e2:ff:83: a3:e0:00:94:bb:df:5a:4a:a7:d9:f9:29:f1:3b:8a:f6:45:82: 97:ef:5d:2c:3b:07:7c:36:f3:56:97:f0:7d:54:ac:3e:3e:60: 98:8b:c6:54:48:f8:b9:f7:e5:1b:9d:00:33:4c:e0:13:91:3c: 64:f4:31:de:48:14:75:e7:64:c9:ab:76:6a:e8:25:21:14:66: 92:72:df:04:10:7f:04:a1:20:45:46:fe:fe:d3:5f:05:e1:c2: a8:94:83:d0 -----BEGIN CERTIFICATE----- MIIFlTCCBH2gAwIBAgIUDRelp5bw1FPqSxgfQ6AsXOnIOb8wDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODgwNkYwMDAwMTEwLwYDVQQFEyhFN0NBREE1RjA4 ODFENzdCRUE0OEIwNzY4QTM3NjZCNTAwNjVBRjA4MB4XDTI2MDkxMjAwMDcyM1oX DTI2MDkxNjAwMDcyM1owejFJMEcGA1UEBRNANGY1YTY0NTAxYjZjNmQzMzBkYzg5 NjUzZjEzMjYxOTQzYTc4YjI1Njc2OWVkNDY3NGRmMzYwYTFlYmE1YWIyMzEtMCsG A1UEAxMkYmI5YTkxMTYtZjYxNS00NjJlLWE2ODAtNTI2NmIzMjdlMGZhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3s+BrISh55d0CnJXnWg7eD7cAMFX jrDzg0AlXM7OWhoMCr6iVLvtUjV8KzEi1j2tTj+hw2UWZRByHGDZW3keKRnNGtux c/btD7mQy9DqQ6WZ+6wGruN1FGqdxPn4xmnTRxYYJ/Z35s2Ps8G/F8JtNgMj8+HL GcU6cy3tFFZedWS/NPW6RiCRVJnMHSX6PnXLJuC2q2DYWYdqnBqaUHLDmi3J3Ain 3Pm2hupAWy1DBxQZK9Or5Fe8550X365VJGlQ8DI1jd3nYpsZGKd2DFv4XzN+nrXx z1DTLXARm9M/rvaFYGxOFKAroZ8mYGtgd2b8Yc2evKgKyGgh782Bbv4k9wIDAQAB o4ICQTCCAj0wHQYDVR0OBBYEFOsmxuC4tCStGK4XPWbudYHJjRlyMB8GA1UdIwQY MBaAFOfK2l8Igdd76kiwdoo3ZrUAZa8IMA4GA1UdDwEB/wQEAwIHgDB+BggrBgEF BQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVw b3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi81OHJhWHdp QjEzdnFTTEIyaWpkbXRRQmxyd2cuY2VyMH8GCCsGAQUFBwELBHMwcTBvBggrBgEF BQcwC4ZjcnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5hbWF6b25hd3MuY29t L3ZvbHVtZS83MDhhYWZhZi0wMGI0LTQ4NWItODU0Yy0wYjMyY2EzMGY1N2IvbWFu aWZlc3QubWZ0MIGVBgNVHR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnBraS1y c3luYy51cy1lYXN0LTIuYW1hem9uYXdzLmNvbS92b2x1bWUvNzA4YWFmYWYtMDBi NC00ODViLTg1NGMtMGIzMmNhMzBmNTdiLzEyZTU5MDAxLTM1YWMtNGFiZi04NThm LTM3Yjk1NWEyNGIzZi5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggr BgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYw BKACBQAwDQYJKoZIhvcNAQELBQADggEBACOk3fsZsVX9rBfDMlfhFh8Ixo9DDtOd bYiFK9rf9xu90OmRiQZNJrfUMLUWxdzSQ+1wxzk06XblalovviTdydake6y5jM4d hnOKNESbm/CKm7MSDafA0MgGNIjz4LtsM+bLNMhFjcipcC3PK1wMPsYd4qXF17Wj b9gKOks6KT959pqanXeQyb7biKiVeuzQ6+zQu0Kwb5MkicqSmVIe3OL/g6PgAJS7 31pKp9n5KfE7ivZFgpfvXSw7B3w281aX8H1UrD4+YJiLxlRI+Ln35RudADNM4BOR PGT0Md5IFHXnZMmrdmroJSEUZpJy3wQQfwShIEVG/v7TXwXhwqiUg9A= -----END CERTIFICATE-----Generated at Sat Sep 12 05:10:09 2026 by rpki-client