$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/708aafaf-00b4-485b-854c-0b32ca30f57b/manifest.mft File: manifest.mft (raw, json) Hash identifier: rTOgZLnbg7oRLGg+HR4bIg3/B02i8AxYFYHIz5XmjkE= Subject key identifier: 82:78:E0:BC:62:0E:4C:6F:B5:D2:F0:C5:F9:59:39:A1:69:3F:08:27 Authority key identifier: E7:CA:DA:5F:08:81:D7:7B:EA:48:B0:76:8A:37:66:B5:00:65:AF:08 Certificate issuer: /CN=A918806F0000/serialNumber=E7CADA5F0881D77BEA48B0768A3766B50065AF08 Certificate serial: 5DE4B9F3C81060749A2126801432C5ADDB40C6E9 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/58raXwiB13vqSLB2ijdmtQBlrwg.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/708aafaf-00b4-485b-854c-0b32ca30f57b/manifest.mft Manifest number: 0675 Signing time: Wed 19 Aug 2026 00:03:04 +0000 Manifest this update: Wed 19 Aug 2026 00:03:04 +0000 Manifest next update: Sun 23 Aug 2026 00:03:04 +0000 Files and hashes: 1: 12e59001-35ac-4abf-858f-37b955a24b3f.crl (hash: JgqkClknyqAJQIRvEEfTgXDT4rvGWBCAqBiPQYKzoAo=) 2: 381fc6e6-5d49-41bc-b584-d9437c68e3cd.roa (hash: 8QqQOxAj3sRai6/BzOB2kV66/okkk7p8TzKsBaSwcWA=) 3: 49119734-9dbc-4bd4-98be-57e4ce078928.roa (hash: 0OedyNMwjL1I1p7rzryfdYD0nslES0i+43AbthFPFmE=) 4: 5663bf34-10ed-4309-a236-7466afd6f02f.roa (hash: aoaRIM84eruV/ISWBs3PJCPQb0sEmsLtTOcu1EdbsFA=) 5: cc2f7093-21a6-400f-9db1-93c2fe02bc1c.roa (hash: vbtxuyfgx9e6lLFR0CnUGCC1kgCTySw+Ljt4yM1fDb4=) 6: ea1d02aa-6d25-4b36-b42e-ba837d49e261.roa (hash: q5bh3h1LHQcXwRDCiiiYn6TP5+N60E0SyV4QnQBQL8c=) Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/708aafaf-00b4-485b-854c-0b32ca30f57b/12e59001-35ac-4abf-858f-37b955a24b3f.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/708aafaf-00b4-485b-854c-0b32ca30f57b/manifest.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/58raXwiB13vqSLB2ijdmtQBlrwg.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 23 Aug 2026 00:03:04 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5d:e4:b9:f3:c8:10:60:74:9a:21:26:80:14:32:c5:ad:db:40:c6:e9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A918806F0000, serialNumber=E7CADA5F0881D77BEA48B0768A3766B50065AF08 Validity Not Before: Aug 19 00:03:04 2026 GMT Not After : Aug 23 00:03:04 2026 GMT Subject: serialNumber=eccd91c4e5bc3d2d1cc4b0bc9ebeab95115c3f1e3cd13199e2ddd52d21bb2fe5, CN=bb9a9116-f615-462e-a680-5266b327e0fa Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:ab:09:4d:12:23:71:0f:9e:fc:e2:8d:22:67: 61:bf:e1:87:41:9c:a3:0a:fd:a6:1d:ca:58:c5:76: 6d:8e:60:fa:81:9a:aa:9c:53:21:dd:62:f8:0c:49: 76:8d:c0:bf:2a:b2:f1:af:f6:15:be:e7:e6:66:95: 71:ef:6a:98:69:9d:6c:76:e2:c2:de:ac:91:93:8c: 11:67:5d:51:eb:9f:b5:86:da:fb:bf:0d:29:db:15: be:ef:b9:6f:23:5b:eb:b4:b8:f4:39:19:6c:4a:3b: 62:0f:40:d8:b6:13:ed:20:de:54:51:91:63:36:84: 84:fb:78:0a:b3:5a:82:ef:b2:28:54:a3:74:fb:f2: 00:d7:87:c4:76:01:a5:fe:8d:d4:d6:44:1a:bd:ae: 36:f9:f0:14:09:6b:99:99:fb:a6:32:ba:a2:44:17: 70:17:be:2a:a9:32:e0:8b:be:5c:27:7b:52:13:ad: 96:a7:79:62:96:4a:d2:d4:de:c6:9a:90:ca:c9:31: 2c:ca:4b:54:b3:0a:5a:17:c4:3f:3f:09:74:43:ad: 53:42:99:cd:48:ef:12:9f:e6:99:07:84:80:9f:fe: ba:77:a1:96:ad:21:78:b0:7d:79:5c:c9:4f:9b:98: bc:e2:58:1f:9b:e8:68:fe:f6:87:71:91:af:3f:77: 12:ff Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 82:78:E0:BC:62:0E:4C:6F:B5:D2:F0:C5:F9:59:39:A1:69:3F:08:27 X509v3 Authority Key Identifier: keyid:E7:CA:DA:5F:08:81:D7:7B:EA:48:B0:76:8A:37:66:B5:00:65:AF:08 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/58raXwiB13vqSLB2ijdmtQBlrwg.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/708aafaf-00b4-485b-854c-0b32ca30f57b/manifest.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/708aafaf-00b4-485b-854c-0b32ca30f57b/12e59001-35ac-4abf-858f-37b955a24b3f.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 55:4e:12:de:6b:d6:76:d1:1e:23:df:c9:82:38:71:f5:d9:d3: 4a:fc:a6:1d:57:80:3c:0d:9a:c9:05:92:82:e1:a5:6f:44:40: 4c:f0:aa:fb:e4:5e:84:9e:42:05:79:26:af:e3:03:6e:61:c7: 41:52:b5:94:5e:86:36:91:64:83:ea:13:6a:a1:04:13:b4:21: 27:6c:f6:98:6d:cd:02:66:83:e7:56:7f:35:a1:88:03:59:4c: d3:06:f4:da:bf:04:d9:81:c9:20:0e:2c:57:d5:4d:42:29:c4: b2:34:88:26:4a:a9:65:52:99:d2:80:a3:54:bf:29:94:9e:65: ff:e9:55:28:2c:70:7b:89:3b:0f:0b:cc:66:d4:d9:8d:c0:f2: 47:31:cd:8a:3c:3c:7b:d3:02:46:e8:6d:2e:7a:3a:a3:37:aa: 13:cb:d5:1e:38:56:43:2d:d6:c0:d2:fd:0f:48:b0:20:1f:a9: 0f:9c:e8:ea:12:e8:a0:aa:09:4e:b0:b2:af:10:9c:fc:d4:32: a5:09:cd:79:c5:b4:76:69:4e:65:e5:5c:78:86:62:ee:cc:08: bf:12:8a:bb:57:c0:14:f3:2b:0b:54:a4:80:4c:37:e0:c7:01: af:e2:61:dc:a6:d6:e3:53:7f:4a:1a:8f:f7:64:91:e5:98:27: 37:d2:46:9d -----BEGIN CERTIFICATE----- MIIFlTCCBH2gAwIBAgIUXeS588gQYHSaISaAFDLFrdtAxukwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODgwNkYwMDAwMTEwLwYDVQQFEyhFN0NBREE1RjA4 ODFENzdCRUE0OEIwNzY4QTM3NjZCNTAwNjVBRjA4MB4XDTI2MDgxOTAwMDMwNFoX DTI2MDgyMzAwMDMwNFowejFJMEcGA1UEBRNAZWNjZDkxYzRlNWJjM2QyZDFjYzRi MGJjOWViZWFiOTUxMTVjM2YxZTNjZDEzMTk5ZTJkZGQ1MmQyMWJiMmZlNTEtMCsG A1UEAxMkYmI5YTkxMTYtZjYxNS00NjJlLWE2ODAtNTI2NmIzMjdlMGZhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvKsJTRIjcQ+e/OKNImdhv+GHQZyj Cv2mHcpYxXZtjmD6gZqqnFMh3WL4DEl2jcC/KrLxr/YVvufmZpVx72qYaZ1sduLC 3qyRk4wRZ11R65+1htr7vw0p2xW+77lvI1vrtLj0ORlsSjtiD0DYthPtIN5UUZFj NoSE+3gKs1qC77IoVKN0+/IA14fEdgGl/o3U1kQava42+fAUCWuZmfumMrqiRBdw F74qqTLgi75cJ3tSE62Wp3lilkrS1N7GmpDKyTEsyktUswpaF8Q/Pwl0Q61TQpnN SO8Sn+aZB4SAn/66d6GWrSF4sH15XMlPm5i84lgfm+ho/vaHcZGvP3cS/wIDAQAB o4ICQTCCAj0wHQYDVR0OBBYEFIJ44LxiDkxvtdLwxflZOaFpPwgnMB8GA1UdIwQY MBaAFOfK2l8Igdd76kiwdoo3ZrUAZa8IMA4GA1UdDwEB/wQEAwIHgDB+BggrBgEF BQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVw b3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi81OHJhWHdp QjEzdnFTTEIyaWpkbXRRQmxyd2cuY2VyMH8GCCsGAQUFBwELBHMwcTBvBggrBgEF BQcwC4ZjcnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5hbWF6b25hd3MuY29t L3ZvbHVtZS83MDhhYWZhZi0wMGI0LTQ4NWItODU0Yy0wYjMyY2EzMGY1N2IvbWFu aWZlc3QubWZ0MIGVBgNVHR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnBraS1y c3luYy51cy1lYXN0LTIuYW1hem9uYXdzLmNvbS92b2x1bWUvNzA4YWFmYWYtMDBi NC00ODViLTg1NGMtMGIzMmNhMzBmNTdiLzEyZTU5MDAxLTM1YWMtNGFiZi04NThm LTM3Yjk1NWEyNGIzZi5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggr BgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYw BKACBQAwDQYJKoZIhvcNAQELBQADggEBAFVOEt5r1nbRHiPfyYI4cfXZ00r8ph1X gDwNmskFkoLhpW9EQEzwqvvkXoSeQgV5Jq/jA25hx0FStZRehjaRZIPqE2qhBBO0 ISds9phtzQJmg+dWfzWhiANZTNMG9Nq/BNmBySAOLFfVTUIpxLI0iCZKqWVSmdKA o1S/KZSeZf/pVSgscHuJOw8LzGbU2Y3A8kcxzYo8PHvTAkbobS56OqM3qhPL1R44 VkMt1sDS/Q9IsCAfqQ+c6OoS6KCqCU6wsq8QnPzUMqUJzXnFtHZpTmXlXHiGYu7M CL8SirtXwBTzKwtUpIBMN+DHAa/iYdym1uNTf0oaj/dkkeWYJzfSRp0= -----END CERTIFICATE-----Generated at Wed Aug 19 12:29:07 2026 by rpki-client