$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/708aafaf-00b4-485b-854c-0b32ca30f57b/manifest.mft File: manifest.mft (raw, json) Hash identifier: B/CXPBy3cMhKDz3kGFHsmEHMkWmQhgaciaetJ+ZkB/k= Subject key identifier: 97:B0:22:9F:2C:E3:B0:C7:E4:EA:1B:1D:88:97:8E:BC:8E:EC:65:18 Authority key identifier: E7:CA:DA:5F:08:81:D7:7B:EA:48:B0:76:8A:37:66:B5:00:65:AF:08 Certificate issuer: /CN=A918806F0000/serialNumber=E7CADA5F0881D77BEA48B0768A3766B50065AF08 Certificate serial: 399A52E90CEFA637603607543916618E9029C790 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/58raXwiB13vqSLB2ijdmtQBlrwg.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/708aafaf-00b4-485b-854c-0b32ca30f57b/manifest.mft Manifest number: 0659 Signing time: Wed 22 Jul 2026 00:02:05 +0000 Manifest this update: Wed 22 Jul 2026 00:02:05 +0000 Manifest next update: Sun 26 Jul 2026 00:02:05 +0000 Files and hashes: 1: 12e59001-35ac-4abf-858f-37b955a24b3f.crl (hash: mn1Xd+FQj0vME0ILCVvgcDv2iQ92ZQg5hOKU55NVNaE=) 2: 381fc6e6-5d49-41bc-b584-d9437c68e3cd.roa (hash: M+i7XpsJD4p5Tk2yVGdLmGjDs5xTMXCNLVAUi3YO9fw=) 3: 49119734-9dbc-4bd4-98be-57e4ce078928.roa (hash: 0OedyNMwjL1I1p7rzryfdYD0nslES0i+43AbthFPFmE=) 4: 5663bf34-10ed-4309-a236-7466afd6f02f.roa (hash: aoaRIM84eruV/ISWBs3PJCPQb0sEmsLtTOcu1EdbsFA=) 5: cc2f7093-21a6-400f-9db1-93c2fe02bc1c.roa (hash: vbtxuyfgx9e6lLFR0CnUGCC1kgCTySw+Ljt4yM1fDb4=) 6: ea1d02aa-6d25-4b36-b42e-ba837d49e261.roa (hash: q5bh3h1LHQcXwRDCiiiYn6TP5+N60E0SyV4QnQBQL8c=) Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/708aafaf-00b4-485b-854c-0b32ca30f57b/12e59001-35ac-4abf-858f-37b955a24b3f.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/708aafaf-00b4-485b-854c-0b32ca30f57b/manifest.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/58raXwiB13vqSLB2ijdmtQBlrwg.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 26 Jul 2026 00:02:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 39:9a:52:e9:0c:ef:a6:37:60:36:07:54:39:16:61:8e:90:29:c7:90 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A918806F0000, serialNumber=E7CADA5F0881D77BEA48B0768A3766B50065AF08 Validity Not Before: Jul 22 00:02:05 2026 GMT Not After : Jul 26 00:02:05 2026 GMT Subject: serialNumber=23c10bf3bf084670af6ffb173abbbf9f1eb1f2ddc171a3515d90b97f32558e66, CN=bb9a9116-f615-462e-a680-5266b327e0fa Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:92:1d:e0:47:40:d1:61:7c:21:15:5a:55:15:c1: b9:07:1a:29:e2:e8:15:3e:de:0e:e1:b2:ab:a9:f2: 01:a4:e6:93:9f:03:f2:6c:9b:85:04:a9:a9:dd:54: 12:12:e6:6c:67:bf:16:a7:bf:c1:c9:1b:b6:2b:a8: 20:e9:67:54:22:22:47:82:5c:c2:f2:13:f5:02:b4: 4f:90:40:ae:6c:6e:ad:96:40:d6:e6:81:59:e4:bc: bc:6f:81:bf:99:a9:44:6e:1c:2d:8c:47:b4:36:f2: d5:7c:fe:5f:d8:11:43:7e:9a:2e:b4:e5:d3:73:1b: 42:da:d5:e4:88:42:b5:f3:ee:6b:3d:37:8a:ae:1d: c7:2a:01:14:48:c1:fc:4d:81:f5:1f:be:72:3d:09: 27:17:cb:29:a9:a5:08:c6:d3:49:d7:a0:a6:17:5c: b7:4e:0a:c1:04:01:30:28:49:24:a7:e4:c9:42:7d: c9:d2:57:ca:fc:4c:32:4c:79:f4:48:19:1f:e5:c9: ba:47:8b:d8:9f:34:96:81:03:fb:20:09:d2:d8:97: 91:26:74:91:5a:14:0f:6e:b8:50:e7:78:f8:51:75: fa:de:f8:fa:27:07:b2:03:70:e4:d1:01:65:c3:0e: c9:79:7e:ec:4d:ce:1b:fc:be:e4:58:91:9c:93:84: 49:21 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 97:B0:22:9F:2C:E3:B0:C7:E4:EA:1B:1D:88:97:8E:BC:8E:EC:65:18 X509v3 Authority Key Identifier: keyid:E7:CA:DA:5F:08:81:D7:7B:EA:48:B0:76:8A:37:66:B5:00:65:AF:08 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/58raXwiB13vqSLB2ijdmtQBlrwg.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/708aafaf-00b4-485b-854c-0b32ca30f57b/manifest.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/708aafaf-00b4-485b-854c-0b32ca30f57b/12e59001-35ac-4abf-858f-37b955a24b3f.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 32:c8:08:42:cd:d7:47:11:16:7b:2d:8d:a3:a6:8c:dc:89:10: 8f:ec:78:eb:6b:6a:ee:10:cf:50:cf:21:19:12:c8:01:6c:27: 33:96:1f:bb:83:ae:1a:1d:1a:01:a2:73:4e:0b:b4:d5:56:ec: 23:4e:1b:bf:53:4d:f5:c4:f7:d8:85:a5:99:79:80:9b:3e:5c: fc:82:97:91:95:f0:73:31:de:df:22:e3:6b:dc:a8:3e:18:5c: 59:89:bd:ca:06:4d:1d:4d:41:01:c3:08:2b:81:21:5f:e2:8c: fe:79:78:f8:d9:c6:e9:b0:88:53:29:e0:e1:52:a3:14:17:2f: 72:f4:21:09:de:9d:3e:62:b8:4b:e4:46:3d:4f:b6:57:fa:9e: a2:0b:a9:ed:35:fb:fb:e0:fc:1b:0d:83:a5:c9:da:c8:f5:eb: e9:29:2a:f4:8c:f5:33:74:e7:4e:4b:1a:9d:9e:34:45:87:79: 02:54:b9:68:65:70:01:e5:33:5e:01:ca:96:e3:35:de:6c:5a: 55:24:5d:fb:6c:cf:84:fb:7c:17:bd:d7:7c:66:c2:d6:38:da: a9:69:33:d4:27:bf:24:19:13:ae:d0:ca:44:d7:52:4b:f9:6c: 0a:b2:4b:e3:7b:a4:4e:54:ec:9a:f1:7c:13:68:b3:bb:67:9c: 6a:19:34:f6 -----BEGIN CERTIFICATE----- MIIFlTCCBH2gAwIBAgIUOZpS6QzvpjdgNgdUORZhjpApx5AwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODgwNkYwMDAwMTEwLwYDVQQFEyhFN0NBREE1RjA4 ODFENzdCRUE0OEIwNzY4QTM3NjZCNTAwNjVBRjA4MB4XDTI2MDcyMjAwMDIwNVoX DTI2MDcyNjAwMDIwNVowejFJMEcGA1UEBRNAMjNjMTBiZjNiZjA4NDY3MGFmNmZm YjE3M2FiYmJmOWYxZWIxZjJkZGMxNzFhMzUxNWQ5MGI5N2YzMjU1OGU2NjEtMCsG A1UEAxMkYmI5YTkxMTYtZjYxNS00NjJlLWE2ODAtNTI2NmIzMjdlMGZhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkh3gR0DRYXwhFVpVFcG5Bxop4ugV Pt4O4bKrqfIBpOaTnwPybJuFBKmp3VQSEuZsZ78Wp7/ByRu2K6gg6WdUIiJHglzC 8hP1ArRPkECubG6tlkDW5oFZ5Ly8b4G/malEbhwtjEe0NvLVfP5f2BFDfpoutOXT cxtC2tXkiEK18+5rPTeKrh3HKgEUSMH8TYH1H75yPQknF8spqaUIxtNJ16CmF1y3 TgrBBAEwKEkkp+TJQn3J0lfK/EwyTHn0SBkf5cm6R4vYnzSWgQP7IAnS2JeRJnSR WhQPbrhQ53j4UXX63vj6JweyA3Dk0QFlww7JeX7sTc4b/L7kWJGck4RJIQIDAQAB o4ICQTCCAj0wHQYDVR0OBBYEFJewIp8s47DH5OobHYiXjryO7GUYMB8GA1UdIwQY MBaAFOfK2l8Igdd76kiwdoo3ZrUAZa8IMA4GA1UdDwEB/wQEAwIHgDB+BggrBgEF BQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVw b3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi81OHJhWHdp QjEzdnFTTEIyaWpkbXRRQmxyd2cuY2VyMH8GCCsGAQUFBwELBHMwcTBvBggrBgEF BQcwC4ZjcnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5hbWF6b25hd3MuY29t L3ZvbHVtZS83MDhhYWZhZi0wMGI0LTQ4NWItODU0Yy0wYjMyY2EzMGY1N2IvbWFu aWZlc3QubWZ0MIGVBgNVHR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnBraS1y c3luYy51cy1lYXN0LTIuYW1hem9uYXdzLmNvbS92b2x1bWUvNzA4YWFmYWYtMDBi NC00ODViLTg1NGMtMGIzMmNhMzBmNTdiLzEyZTU5MDAxLTM1YWMtNGFiZi04NThm LTM3Yjk1NWEyNGIzZi5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggr BgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYw BKACBQAwDQYJKoZIhvcNAQELBQADggEBADLICELN10cRFnstjaOmjNyJEI/seOtr au4Qz1DPIRkSyAFsJzOWH7uDrhodGgGic04LtNVW7CNOG79TTfXE99iFpZl5gJs+ XPyCl5GV8HMx3t8i42vcqD4YXFmJvcoGTR1NQQHDCCuBIV/ijP55ePjZxumwiFMp 4OFSoxQXL3L0IQnenT5iuEvkRj1Ptlf6nqILqe01+/vg/BsNg6XJ2sj16+kpKvSM 9TN0505LGp2eNEWHeQJUuWhlcAHlM14BypbjNd5sWlUkXftsz4T7fBe913xmwtY4 2qlpM9QnvyQZE67QykTXUkv5bAqyS+N7pE5U7JrxfBNos7tnnGoZNPY= -----END CERTIFICATE-----Generated at Wed Jul 22 20:26:54 2026 by rpki-client