$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/708aafaf-00b4-485b-854c-0b32ca30f57b/manifest.mft File: manifest.mft (raw, json) Hash identifier: 0+SDKtpD3nM1+Zk+iU5FnoV6OQ22Fny3ew/my1EuhfY= Subject key identifier: 24:DA:A6:84:CA:B3:68:43:32:E3:48:EE:E1:ED:A5:46:01:3E:EF:D4 Authority key identifier: E7:CA:DA:5F:08:81:D7:7B:EA:48:B0:76:8A:37:66:B5:00:65:AF:08 Certificate issuer: /CN=A918806F0000/serialNumber=E7CADA5F0881D77BEA48B0768A3766B50065AF08 Certificate serial: 6267ED16038A24CCE76011CC6B295201AF5DB1CB Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/58raXwiB13vqSLB2ijdmtQBlrwg.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/708aafaf-00b4-485b-854c-0b32ca30f57b/manifest.mft Manifest number: 0662 Signing time: Fri 31 Jul 2026 00:03:31 +0000 Manifest this update: Fri 31 Jul 2026 00:03:31 +0000 Manifest next update: Tue 04 Aug 2026 00:03:31 +0000 Files and hashes: 1: 12e59001-35ac-4abf-858f-37b955a24b3f.crl (hash: OSldJWb2LATKlZ7ULVfls2oGoHFZelwRku61AzWD33k=) 2: 381fc6e6-5d49-41bc-b584-d9437c68e3cd.roa (hash: M+i7XpsJD4p5Tk2yVGdLmGjDs5xTMXCNLVAUi3YO9fw=) 3: 49119734-9dbc-4bd4-98be-57e4ce078928.roa (hash: 0OedyNMwjL1I1p7rzryfdYD0nslES0i+43AbthFPFmE=) 4: 5663bf34-10ed-4309-a236-7466afd6f02f.roa (hash: aoaRIM84eruV/ISWBs3PJCPQb0sEmsLtTOcu1EdbsFA=) 5: cc2f7093-21a6-400f-9db1-93c2fe02bc1c.roa (hash: vbtxuyfgx9e6lLFR0CnUGCC1kgCTySw+Ljt4yM1fDb4=) 6: ea1d02aa-6d25-4b36-b42e-ba837d49e261.roa (hash: q5bh3h1LHQcXwRDCiiiYn6TP5+N60E0SyV4QnQBQL8c=) Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/708aafaf-00b4-485b-854c-0b32ca30f57b/12e59001-35ac-4abf-858f-37b955a24b3f.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/708aafaf-00b4-485b-854c-0b32ca30f57b/manifest.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/58raXwiB13vqSLB2ijdmtQBlrwg.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 04 Aug 2026 00:03:31 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 62:67:ed:16:03:8a:24:cc:e7:60:11:cc:6b:29:52:01:af:5d:b1:cb Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A918806F0000, serialNumber=E7CADA5F0881D77BEA48B0768A3766B50065AF08 Validity Not Before: Jul 31 00:03:31 2026 GMT Not After : Aug 4 00:03:31 2026 GMT Subject: serialNumber=6754b1658256b33af6ecc9278c4c2a7cc338202a2580dd9c40df43393251015b, CN=bb9a9116-f615-462e-a680-5266b327e0fa Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:df:2c:24:ab:dd:fd:29:4b:72:c1:42:ef:b6:fd: b1:c0:19:2a:25:cf:84:ae:f7:3f:2d:03:96:39:aa: 45:2e:b6:c3:fa:38:02:ac:ac:a1:31:23:68:a8:e8: 06:0c:7b:75:e5:73:d4:90:2a:3a:ab:98:0f:42:9a: 8c:fa:9d:f3:91:ec:ce:ce:1f:7b:d2:12:f5:aa:57: 43:65:42:8a:d5:95:83:bd:0b:2b:6a:5c:45:d0:83: cf:ba:40:09:55:5b:73:ae:9d:4f:01:28:9b:65:e3: 9d:18:b5:a6:17:6d:e6:b8:e2:3b:50:bc:b3:49:fd: dc:c3:88:fb:90:e0:8b:dc:d4:cf:9f:a4:8a:7f:3f: 8d:fe:b5:5e:73:16:eb:48:72:76:31:c2:57:19:f9: 3f:da:2c:3c:9f:ec:60:0e:ca:86:bc:c6:1d:c5:9e: 18:ec:71:40:0c:68:dd:10:48:6d:6c:8a:a7:1e:18: da:3e:54:95:fc:13:47:cf:40:3a:22:a8:dd:eb:be: 39:8e:5d:d0:9f:ff:08:1c:a9:87:fb:91:ec:4a:7b: 67:e5:b6:77:85:64:90:af:50:50:54:8b:83:a0:b0: f2:bb:9d:df:c9:ed:7d:e1:66:4c:07:c9:2d:77:bd: 3d:c7:d4:fb:0a:f2:9c:f6:e0:97:eb:9a:dd:a5:ab: eb:57 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 24:DA:A6:84:CA:B3:68:43:32:E3:48:EE:E1:ED:A5:46:01:3E:EF:D4 X509v3 Authority Key Identifier: keyid:E7:CA:DA:5F:08:81:D7:7B:EA:48:B0:76:8A:37:66:B5:00:65:AF:08 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/58raXwiB13vqSLB2ijdmtQBlrwg.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/708aafaf-00b4-485b-854c-0b32ca30f57b/manifest.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/708aafaf-00b4-485b-854c-0b32ca30f57b/12e59001-35ac-4abf-858f-37b955a24b3f.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 1a:d6:68:ae:57:d9:68:39:5a:8a:69:c8:4f:e6:20:19:bc:ec: ab:53:ef:ad:61:cf:5e:12:cf:df:ef:a2:3b:b4:79:74:ee:80: 3a:c4:4c:c1:cf:2f:f5:2a:39:f9:c5:81:97:cc:5a:12:cb:59: 9a:ec:80:f7:f7:bf:4a:6c:7c:14:c3:c2:90:9a:62:1a:25:ae: 68:c0:dd:cb:6b:24:cc:d9:3f:3a:37:e1:58:57:5b:09:3b:0f: fd:33:1a:6c:00:32:2c:4e:f7:b2:46:a9:6a:0a:aa:fb:56:0a: 33:9a:91:05:a0:20:f0:9d:f4:dc:0d:c3:23:06:fa:37:53:a0: 32:c9:27:02:9b:f1:3c:93:94:78:16:aa:5b:5f:13:28:3d:bb: e7:c3:71:42:e6:23:51:b3:97:38:01:bf:55:79:b4:5d:b3:74: 1e:c3:29:47:3a:29:86:05:2f:46:e0:d1:f2:7b:ef:ee:84:9c: 7e:4d:52:1c:f3:5a:d3:b7:1d:95:21:74:3b:6a:38:5a:a8:97: 67:ec:fd:a6:bc:06:10:ae:9f:93:a2:ec:72:59:ac:a3:29:97: c1:d1:2f:92:bc:29:55:10:2e:0e:1c:27:fc:df:fb:9a:cc:14: d6:a3:34:b1:77:8e:70:5e:58:fc:b5:5d:fd:98:53:19:af:1b: 61:5b:d5:50 -----BEGIN CERTIFICATE----- MIIFlTCCBH2gAwIBAgIUYmftFgOKJMznYBHMaylSAa9dscswDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODgwNkYwMDAwMTEwLwYDVQQFEyhFN0NBREE1RjA4 ODFENzdCRUE0OEIwNzY4QTM3NjZCNTAwNjVBRjA4MB4XDTI2MDczMTAwMDMzMVoX DTI2MDgwNDAwMDMzMVowejFJMEcGA1UEBRNANjc1NGIxNjU4MjU2YjMzYWY2ZWNj OTI3OGM0YzJhN2NjMzM4MjAyYTI1ODBkZDljNDBkZjQzMzkzMjUxMDE1YjEtMCsG A1UEAxMkYmI5YTkxMTYtZjYxNS00NjJlLWE2ODAtNTI2NmIzMjdlMGZhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3ywkq939KUtywULvtv2xwBkqJc+E rvc/LQOWOapFLrbD+jgCrKyhMSNoqOgGDHt15XPUkCo6q5gPQpqM+p3zkezOzh97 0hL1qldDZUKK1ZWDvQsralxF0IPPukAJVVtzrp1PASibZeOdGLWmF23muOI7ULyz Sf3cw4j7kOCL3NTPn6SKfz+N/rVecxbrSHJ2McJXGfk/2iw8n+xgDsqGvMYdxZ4Y 7HFADGjdEEhtbIqnHhjaPlSV/BNHz0A6Iqjd6745jl3Qn/8IHKmH+5HsSntn5bZ3 hWSQr1BQVIuDoLDyu53fye194WZMB8ktd709x9T7CvKc9uCX65rdpavrVwIDAQAB o4ICQTCCAj0wHQYDVR0OBBYEFCTapoTKs2hDMuNI7uHtpUYBPu/UMB8GA1UdIwQY MBaAFOfK2l8Igdd76kiwdoo3ZrUAZa8IMA4GA1UdDwEB/wQEAwIHgDB+BggrBgEF BQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVw b3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi81OHJhWHdp QjEzdnFTTEIyaWpkbXRRQmxyd2cuY2VyMH8GCCsGAQUFBwELBHMwcTBvBggrBgEF BQcwC4ZjcnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5hbWF6b25hd3MuY29t L3ZvbHVtZS83MDhhYWZhZi0wMGI0LTQ4NWItODU0Yy0wYjMyY2EzMGY1N2IvbWFu aWZlc3QubWZ0MIGVBgNVHR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnBraS1y c3luYy51cy1lYXN0LTIuYW1hem9uYXdzLmNvbS92b2x1bWUvNzA4YWFmYWYtMDBi NC00ODViLTg1NGMtMGIzMmNhMzBmNTdiLzEyZTU5MDAxLTM1YWMtNGFiZi04NThm LTM3Yjk1NWEyNGIzZi5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggr BgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYw BKACBQAwDQYJKoZIhvcNAQELBQADggEBABrWaK5X2Wg5WoppyE/mIBm87KtT761h z14Sz9/voju0eXTugDrETMHPL/UqOfnFgZfMWhLLWZrsgPf3v0psfBTDwpCaYhol rmjA3ctrJMzZPzo34VhXWwk7D/0zGmwAMixO97JGqWoKqvtWCjOakQWgIPCd9NwN wyMG+jdToDLJJwKb8TyTlHgWqltfEyg9u+fDcULmI1GzlzgBv1V5tF2zdB7DKUc6 KYYFL0bg0fJ77+6EnH5NUhzzWtO3HZUhdDtqOFqol2fs/aa8BhCun5Oi7HJZrKMp l8HRL5K8KVUQLg4cJ/zf+5rMFNajNLF3jnBeWPy1Xf2YUxmvG2Fb1VA= -----END CERTIFICATE-----Generated at Fri Jul 31 15:02:59 2026 by rpki-client