$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/708aafaf-00b4-485b-854c-0b32ca30f57b/manifest.mft File: manifest.mft (raw, json) Hash identifier: 456b8dBBAFYssELpmEiSZCJCFaFkAPd4Xl9BcfabAPg= Subject key identifier: 9A:87:DD:05:ED:36:33:73:E8:70:54:D8:9B:3E:FD:30:B6:BF:9E:25 Authority key identifier: E7:CA:DA:5F:08:81:D7:7B:EA:48:B0:76:8A:37:66:B5:00:65:AF:08 Certificate issuer: /CN=A918806F0000/serialNumber=E7CADA5F0881D77BEA48B0768A3766B50065AF08 Certificate serial: 2E48795097F6A77217569B1F63C759A55985130D Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/58raXwiB13vqSLB2ijdmtQBlrwg.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/708aafaf-00b4-485b-854c-0b32ca30f57b/manifest.mft Manifest number: 065E Signing time: Mon 27 Jul 2026 00:02:49 +0000 Manifest this update: Mon 27 Jul 2026 00:02:49 +0000 Manifest next update: Fri 31 Jul 2026 00:02:49 +0000 Files and hashes: 1: 12e59001-35ac-4abf-858f-37b955a24b3f.crl (hash: EGxBLH/ujOXOHOjHHyQ87ueNgnxJV99f/KOv7AOD+U0=) 2: 381fc6e6-5d49-41bc-b584-d9437c68e3cd.roa (hash: M+i7XpsJD4p5Tk2yVGdLmGjDs5xTMXCNLVAUi3YO9fw=) 3: 49119734-9dbc-4bd4-98be-57e4ce078928.roa (hash: 0OedyNMwjL1I1p7rzryfdYD0nslES0i+43AbthFPFmE=) 4: 5663bf34-10ed-4309-a236-7466afd6f02f.roa (hash: aoaRIM84eruV/ISWBs3PJCPQb0sEmsLtTOcu1EdbsFA=) 5: cc2f7093-21a6-400f-9db1-93c2fe02bc1c.roa (hash: vbtxuyfgx9e6lLFR0CnUGCC1kgCTySw+Ljt4yM1fDb4=) 6: ea1d02aa-6d25-4b36-b42e-ba837d49e261.roa (hash: q5bh3h1LHQcXwRDCiiiYn6TP5+N60E0SyV4QnQBQL8c=) Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/708aafaf-00b4-485b-854c-0b32ca30f57b/12e59001-35ac-4abf-858f-37b955a24b3f.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/708aafaf-00b4-485b-854c-0b32ca30f57b/manifest.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/58raXwiB13vqSLB2ijdmtQBlrwg.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 31 Jul 2026 00:02:49 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2e:48:79:50:97:f6:a7:72:17:56:9b:1f:63:c7:59:a5:59:85:13:0d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A918806F0000, serialNumber=E7CADA5F0881D77BEA48B0768A3766B50065AF08 Validity Not Before: Jul 27 00:02:49 2026 GMT Not After : Jul 31 00:02:49 2026 GMT Subject: serialNumber=01538db922ee4fb191282ef57a7e7bf24f4393ac543c5d02e8816b7057ccedc7, CN=bb9a9116-f615-462e-a680-5266b327e0fa Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e2:ac:ba:bd:94:7d:fc:a2:43:83:f1:ec:83:39: 1f:39:94:0e:3e:f8:b1:44:62:23:3a:ba:02:24:4c: 9f:b4:32:a0:9f:94:a0:64:26:3e:85:9f:db:fc:66: 0b:6f:3d:f7:00:83:4d:21:cc:c5:75:a5:73:ed:1d: f0:6b:4f:bf:aa:b5:7c:0a:2c:57:75:37:84:b7:c0: 9b:79:07:e6:14:63:37:d0:94:cd:89:ec:96:de:54: f8:e6:a6:bc:b6:bf:16:e4:ec:42:7a:41:96:f0:b7: 3e:e4:f6:1e:cf:8c:1e:16:55:76:04:58:e6:31:78: fb:bc:90:df:b6:1a:cd:dc:e4:20:9e:6e:3e:e2:cf: ca:ee:5a:c6:4f:32:09:16:05:59:aa:bf:a3:01:3b: 2c:f8:fd:64:fc:dd:03:d4:46:46:b1:5f:33:5f:db: f0:e2:19:ff:c1:89:d7:66:ce:05:33:59:18:c2:ed: ca:63:c6:db:34:0b:fd:6a:f7:f8:da:47:3c:b7:cf: d2:86:3a:83:39:2e:5d:ef:1f:ec:7c:ec:38:7b:ea: 29:f1:c9:9d:8a:68:96:e5:d2:65:60:42:df:80:78: 55:72:89:dd:a1:9c:e3:f5:14:25:6a:93:53:1d:ef: e5:c3:57:d0:a2:cf:08:35:14:7e:b2:c9:96:91:43: 50:3b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9A:87:DD:05:ED:36:33:73:E8:70:54:D8:9B:3E:FD:30:B6:BF:9E:25 X509v3 Authority Key Identifier: keyid:E7:CA:DA:5F:08:81:D7:7B:EA:48:B0:76:8A:37:66:B5:00:65:AF:08 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/58raXwiB13vqSLB2ijdmtQBlrwg.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/708aafaf-00b4-485b-854c-0b32ca30f57b/manifest.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/708aafaf-00b4-485b-854c-0b32ca30f57b/12e59001-35ac-4abf-858f-37b955a24b3f.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 77:11:5f:1d:8c:82:30:5b:ea:7b:27:42:e5:ae:da:81:f9:8f: 8e:62:ab:7c:3e:1a:c5:66:1e:d0:f7:83:cb:0b:c7:da:b0:5e: 7b:95:28:44:e9:f3:3e:c6:9f:f1:f3:fe:f3:a1:7b:31:97:f5: e1:9f:19:0a:14:87:2a:6e:36:68:54:8b:7d:6d:b6:98:75:ee: ca:31:86:df:68:7d:1d:40:61:59:db:89:39:cc:38:1c:62:cd: 6b:e8:58:a0:02:b9:69:82:dc:e6:ef:50:3c:09:20:33:08:af: af:cf:be:01:2d:6e:a1:3e:ad:84:93:4f:b2:fc:6d:ed:6a:96: 54:09:f3:c7:36:30:b8:2b:0a:5b:0f:7d:f1:3e:40:94:70:8c: a0:33:d9:68:17:4d:34:c7:e5:2a:b6:c9:93:88:2a:1a:7a:86: d0:a1:f1:7d:05:9f:35:13:92:05:89:3f:6e:2d:f1:71:07:41: 51:75:7c:62:7f:48:b1:ed:a0:c7:4c:fd:37:cb:dd:9f:36:56: 61:8b:df:1f:34:91:4e:cd:48:41:db:0d:66:e2:a0:05:d3:95: cd:a0:31:af:90:71:5c:54:84:4c:4a:ef:c4:cf:10:eb:a2:0a: e2:5e:00:af:6b:70:82:11:98:d0:45:3e:78:9b:5e:21:90:96: b0:26:94:c8 -----BEGIN CERTIFICATE----- MIIFlTCCBH2gAwIBAgIULkh5UJf2p3IXVpsfY8dZpVmFEw0wDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODgwNkYwMDAwMTEwLwYDVQQFEyhFN0NBREE1RjA4 ODFENzdCRUE0OEIwNzY4QTM3NjZCNTAwNjVBRjA4MB4XDTI2MDcyNzAwMDI0OVoX DTI2MDczMTAwMDI0OVowejFJMEcGA1UEBRNAMDE1MzhkYjkyMmVlNGZiMTkxMjgy ZWY1N2E3ZTdiZjI0ZjQzOTNhYzU0M2M1ZDAyZTg4MTZiNzA1N2NjZWRjNzEtMCsG A1UEAxMkYmI5YTkxMTYtZjYxNS00NjJlLWE2ODAtNTI2NmIzMjdlMGZhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4qy6vZR9/KJDg/HsgzkfOZQOPvix RGIjOroCJEyftDKgn5SgZCY+hZ/b/GYLbz33AINNIczFdaVz7R3wa0+/qrV8CixX dTeEt8CbeQfmFGM30JTNieyW3lT45qa8tr8W5OxCekGW8Lc+5PYez4weFlV2BFjm MXj7vJDfthrN3OQgnm4+4s/K7lrGTzIJFgVZqr+jATss+P1k/N0D1EZGsV8zX9vw 4hn/wYnXZs4FM1kYwu3KY8bbNAv9avf42kc8t8/ShjqDOS5d7x/sfOw4e+op8cmd imiW5dJlYELfgHhVcondoZzj9RQlapNTHe/lw1fQos8INRR+ssmWkUNQOwIDAQAB o4ICQTCCAj0wHQYDVR0OBBYEFJqH3QXtNjNz6HBU2Js+/TC2v54lMB8GA1UdIwQY MBaAFOfK2l8Igdd76kiwdoo3ZrUAZa8IMA4GA1UdDwEB/wQEAwIHgDB+BggrBgEF BQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVw b3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi81OHJhWHdp QjEzdnFTTEIyaWpkbXRRQmxyd2cuY2VyMH8GCCsGAQUFBwELBHMwcTBvBggrBgEF BQcwC4ZjcnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5hbWF6b25hd3MuY29t L3ZvbHVtZS83MDhhYWZhZi0wMGI0LTQ4NWItODU0Yy0wYjMyY2EzMGY1N2IvbWFu aWZlc3QubWZ0MIGVBgNVHR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnBraS1y c3luYy51cy1lYXN0LTIuYW1hem9uYXdzLmNvbS92b2x1bWUvNzA4YWFmYWYtMDBi NC00ODViLTg1NGMtMGIzMmNhMzBmNTdiLzEyZTU5MDAxLTM1YWMtNGFiZi04NThm LTM3Yjk1NWEyNGIzZi5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggr BgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYw BKACBQAwDQYJKoZIhvcNAQELBQADggEBAHcRXx2MgjBb6nsnQuWu2oH5j45iq3w+ GsVmHtD3g8sLx9qwXnuVKETp8z7Gn/Hz/vOhezGX9eGfGQoUhypuNmhUi31ttph1 7soxht9ofR1AYVnbiTnMOBxizWvoWKACuWmC3ObvUDwJIDMIr6/PvgEtbqE+rYST T7L8be1qllQJ88c2MLgrClsPffE+QJRwjKAz2WgXTTTH5Sq2yZOIKhp6htCh8X0F nzUTkgWJP24t8XEHQVF1fGJ/SLHtoMdM/TfL3Z82VmGL3x80kU7NSEHbDWbioAXT lc2gMa+QcVxUhExK78TPEOuiCuJeAK9rcIIRmNBFPnibXiGQlrAmlMg= -----END CERTIFICATE-----Generated at Mon Jul 27 19:24:40 2026 by rpki-client