$ rpki-client -vvvf rpki-rsync.us-east-2.amazonaws.com/volume/708aafaf-00b4-485b-854c-0b32ca30f57b/manifest.mft File: manifest.mft (raw, json) Hash identifier: knCXH4zVfoVnPvRg5dyJgivFlgYeIGG/TDx/buJEZjQ= Subject key identifier: 7E:00:60:4B:EC:E8:29:90:AA:F9:50:BC:67:88:27:4B:FF:47:8B:6C Authority key identifier: E7:CA:DA:5F:08:81:D7:7B:EA:48:B0:76:8A:37:66:B5:00:65:AF:08 Certificate issuer: /CN=A918806F0000/serialNumber=E7CADA5F0881D77BEA48B0768A3766B50065AF08 Certificate serial: 7C13256B5A9AB85D29D12FD1099CA57E74F9EFF3 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/58raXwiB13vqSLB2ijdmtQBlrwg.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/708aafaf-00b4-485b-854c-0b32ca30f57b/manifest.mft Manifest number: 067B Signing time: Tue 25 Aug 2026 00:04:24 +0000 Manifest this update: Tue 25 Aug 2026 00:04:24 +0000 Manifest next update: Sat 29 Aug 2026 00:04:24 +0000 Files and hashes: 1: 12e59001-35ac-4abf-858f-37b955a24b3f.crl (hash: WXgjRU44sb2/3/buzIad/YDNj1MSWtwMHSvq/8g8HTM=) 2: 381fc6e6-5d49-41bc-b584-d9437c68e3cd.roa (hash: 8QqQOxAj3sRai6/BzOB2kV66/okkk7p8TzKsBaSwcWA=) 3: 49119734-9dbc-4bd4-98be-57e4ce078928.roa (hash: 0OedyNMwjL1I1p7rzryfdYD0nslES0i+43AbthFPFmE=) 4: 5663bf34-10ed-4309-a236-7466afd6f02f.roa (hash: aoaRIM84eruV/ISWBs3PJCPQb0sEmsLtTOcu1EdbsFA=) 5: cc2f7093-21a6-400f-9db1-93c2fe02bc1c.roa (hash: vbtxuyfgx9e6lLFR0CnUGCC1kgCTySw+Ljt4yM1fDb4=) 6: ea1d02aa-6d25-4b36-b42e-ba837d49e261.roa (hash: q5bh3h1LHQcXwRDCiiiYn6TP5+N60E0SyV4QnQBQL8c=) Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/708aafaf-00b4-485b-854c-0b32ca30f57b/12e59001-35ac-4abf-858f-37b955a24b3f.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/708aafaf-00b4-485b-854c-0b32ca30f57b/manifest.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/58raXwiB13vqSLB2ijdmtQBlrwg.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 29 Aug 2026 00:04:24 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7c:13:25:6b:5a:9a:b8:5d:29:d1:2f:d1:09:9c:a5:7e:74:f9:ef:f3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A918806F0000, serialNumber=E7CADA5F0881D77BEA48B0768A3766B50065AF08 Validity Not Before: Aug 25 00:04:24 2026 GMT Not After : Aug 29 00:04:24 2026 GMT Subject: serialNumber=9a3ee95a9214c2b1bf1535ec96d948338e0e229cb3ebc531996b035ecaf49f3b, CN=bb9a9116-f615-462e-a680-5266b327e0fa Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:b8:62:02:2a:89:b2:1f:a6:cc:56:02:10:67: ac:4f:21:98:26:cd:f4:8a:1e:cd:a5:18:3f:07:2c: ba:99:b0:5a:91:24:80:d8:3d:cb:6f:88:73:3e:5e: 6b:db:f3:22:9f:d1:d0:c7:81:f5:40:c5:d6:3c:f8: 04:b4:b2:2f:58:2f:6a:e2:be:4f:4e:c9:74:84:c2: 27:40:b9:bb:9a:2f:6f:38:ec:7e:12:24:96:c6:7a: 6d:07:fd:df:78:cb:76:8b:27:94:6b:c4:1a:c1:c5: 1c:b1:cb:36:f3:7a:37:9e:1d:5a:52:41:99:19:a4: 1e:c4:51:55:d9:8c:b3:c5:0c:64:cc:74:14:f7:ef: 64:a8:29:28:86:92:6d:42:66:0f:1d:d2:e9:9d:d6: 9e:db:c4:fe:bf:60:a0:d1:61:51:d8:2e:7c:ef:4b: 8b:c2:c9:91:e9:a8:19:04:b3:9f:53:88:01:24:c1: 88:5b:ab:d2:f5:bb:d4:ac:45:f4:96:d1:f4:c3:69: 58:05:85:52:6f:01:23:b5:1e:0e:c8:46:b5:6f:ab: d4:b2:65:92:84:74:02:18:9f:fa:49:34:d7:33:62: f3:4a:2d:b6:34:48:c6:24:26:ee:fa:b3:27:8d:f9: 40:00:eb:38:b4:29:76:4f:87:84:30:8d:0c:bc:9c: 35:cb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7E:00:60:4B:EC:E8:29:90:AA:F9:50:BC:67:88:27:4B:FF:47:8B:6C X509v3 Authority Key Identifier: keyid:E7:CA:DA:5F:08:81:D7:7B:EA:48:B0:76:8A:37:66:B5:00:65:AF:08 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/58raXwiB13vqSLB2ijdmtQBlrwg.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/708aafaf-00b4-485b-854c-0b32ca30f57b/manifest.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/708aafaf-00b4-485b-854c-0b32ca30f57b/12e59001-35ac-4abf-858f-37b955a24b3f.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 0a:88:35:5d:b8:ec:d0:df:56:da:ef:1d:48:22:19:a9:89:9c: 27:78:53:eb:5d:fe:b2:48:59:75:e8:61:ad:9a:a0:44:e2:30: 53:6c:4c:45:a9:01:27:75:25:30:1a:f0:dd:44:83:66:9d:30: 5d:e7:9b:70:69:e8:6d:bf:4a:11:2f:f3:76:67:31:a2:7f:60: fe:91:c6:eb:4c:96:54:0f:34:38:5c:55:e4:25:fc:b9:25:36: a1:c6:15:b0:90:eb:bd:9f:ec:76:d5:00:a3:9e:b6:57:db:89: fe:af:61:0b:73:aa:17:4a:c5:33:2f:eb:d1:49:9e:4a:67:33: e9:ed:80:84:bb:ad:c7:97:56:88:d7:ef:8f:58:e5:0b:62:e0: 60:c0:e7:cd:8a:d1:4e:1a:22:f6:4f:0d:9c:88:9e:81:9d:6b: 84:06:8e:63:73:2d:65:95:c6:2f:6b:c7:55:8f:2f:84:81:58: 91:44:da:d1:80:2a:9f:b6:60:50:69:d3:be:e3:62:83:b0:aa: 01:8c:93:d5:53:f2:a8:5e:34:97:31:a9:48:03:6b:1e:dd:87: 97:98:bd:11:3a:42:41:a6:36:99:df:ba:ce:74:45:30:87:4f: 51:27:ab:ea:4b:6d:76:13:39:e7:94:2a:f6:c5:82:3f:35:e9: 3b:be:7c:42 -----BEGIN CERTIFICATE----- MIIFlTCCBH2gAwIBAgIUfBMla1qauF0p0S/RCZylfnT57/MwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODgwNkYwMDAwMTEwLwYDVQQFEyhFN0NBREE1RjA4 ODFENzdCRUE0OEIwNzY4QTM3NjZCNTAwNjVBRjA4MB4XDTI2MDgyNTAwMDQyNFoX DTI2MDgyOTAwMDQyNFowejFJMEcGA1UEBRNAOWEzZWU5NWE5MjE0YzJiMWJmMTUz NWVjOTZkOTQ4MzM4ZTBlMjI5Y2IzZWJjNTMxOTk2YjAzNWVjYWY0OWYzYjEtMCsG A1UEAxMkYmI5YTkxMTYtZjYxNS00NjJlLWE2ODAtNTI2NmIzMjdlMGZhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAr7hiAiqJsh+mzFYCEGesTyGYJs30 ih7NpRg/Byy6mbBakSSA2D3Lb4hzPl5r2/Min9HQx4H1QMXWPPgEtLIvWC9q4r5P Tsl0hMInQLm7mi9vOOx+EiSWxnptB/3feMt2iyeUa8QawcUcscs283o3nh1aUkGZ GaQexFFV2YyzxQxkzHQU9+9kqCkohpJtQmYPHdLpndae28T+v2Cg0WFR2C5870uL wsmR6agZBLOfU4gBJMGIW6vS9bvUrEX0ltH0w2lYBYVSbwEjtR4OyEa1b6vUsmWS hHQCGJ/6STTXM2LzSi22NEjGJCbu+rMnjflAAOs4tCl2T4eEMI0MvJw1ywIDAQAB o4ICQTCCAj0wHQYDVR0OBBYEFH4AYEvs6CmQqvlQvGeIJ0v/R4tsMB8GA1UdIwQY MBaAFOfK2l8Igdd76kiwdoo3ZrUAZa8IMA4GA1UdDwEB/wQEAwIHgDB+BggrBgEF BQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVw b3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi81OHJhWHdp QjEzdnFTTEIyaWpkbXRRQmxyd2cuY2VyMH8GCCsGAQUFBwELBHMwcTBvBggrBgEF BQcwC4ZjcnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5hbWF6b25hd3MuY29t L3ZvbHVtZS83MDhhYWZhZi0wMGI0LTQ4NWItODU0Yy0wYjMyY2EzMGY1N2IvbWFu aWZlc3QubWZ0MIGVBgNVHR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnBraS1y c3luYy51cy1lYXN0LTIuYW1hem9uYXdzLmNvbS92b2x1bWUvNzA4YWFmYWYtMDBi NC00ODViLTg1NGMtMGIzMmNhMzBmNTdiLzEyZTU5MDAxLTM1YWMtNGFiZi04NThm LTM3Yjk1NWEyNGIzZi5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggr BgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYw BKACBQAwDQYJKoZIhvcNAQELBQADggEBAAqINV247NDfVtrvHUgiGamJnCd4U+td /rJIWXXoYa2aoETiMFNsTEWpASd1JTAa8N1Eg2adMF3nm3Bp6G2/ShEv83ZnMaJ/ YP6RxutMllQPNDhcVeQl/LklNqHGFbCQ672f7HbVAKOetlfbif6vYQtzqhdKxTMv 69FJnkpnM+ntgIS7rceXVojX749Y5Qti4GDA582K0U4aIvZPDZyInoGda4QGjmNz LWWVxi9rx1WPL4SBWJFE2tGAKp+2YFBp077jYoOwqgGMk9VT8qheNJcxqUgDax7d h5eYvRE6QkGmNpnfus50RTCHT1Enq+pLbXYTOeeUKvbFgj816Tu+fEI= -----END CERTIFICATE-----Generated at Tue Aug 25 04:16:10 2026 by rpki-client