$ rpki-client -vvvf rpki-rsync.us-east-2.amazonaws.com/volume/708aafaf-00b4-485b-854c-0b32ca30f57b/manifest.mft File: manifest.mft (raw, json) Hash identifier: 3PjFO88KOOtbIonWOxncmWEPZEjZmt7Jo+iXveetvBA= Subject key identifier: 7F:35:95:9E:54:3A:40:27:DE:FB:C7:4E:CE:55:10:56:D1:C4:F6:F8 Authority key identifier: E7:CA:DA:5F:08:81:D7:7B:EA:48:B0:76:8A:37:66:B5:00:65:AF:08 Certificate issuer: /CN=A918806F0000/serialNumber=E7CADA5F0881D77BEA48B0768A3766B50065AF08 Certificate serial: 07337D64E7A32DCAAC0EDF2BA058675C6ED27CB9 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/58raXwiB13vqSLB2ijdmtQBlrwg.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/708aafaf-00b4-485b-854c-0b32ca30f57b/manifest.mft Manifest number: 0694 Signing time: Sat 19 Sep 2026 00:08:30 +0000 Manifest this update: Sat 19 Sep 2026 00:08:30 +0000 Manifest next update: Wed 23 Sep 2026 00:08:30 +0000 Files and hashes: 1: 12e59001-35ac-4abf-858f-37b955a24b3f.crl (hash: yO3esxE4XUHgdMigtG2aCE4fuxAYIsGvORd/915HrQ8=) 2: 381fc6e6-5d49-41bc-b584-d9437c68e3cd.roa (hash: 8QqQOxAj3sRai6/BzOB2kV66/okkk7p8TzKsBaSwcWA=) 3: 49119734-9dbc-4bd4-98be-57e4ce078928.roa (hash: 0OedyNMwjL1I1p7rzryfdYD0nslES0i+43AbthFPFmE=) 4: 5663bf34-10ed-4309-a236-7466afd6f02f.roa (hash: aoaRIM84eruV/ISWBs3PJCPQb0sEmsLtTOcu1EdbsFA=) 5: cc2f7093-21a6-400f-9db1-93c2fe02bc1c.roa (hash: vbtxuyfgx9e6lLFR0CnUGCC1kgCTySw+Ljt4yM1fDb4=) 6: ea1d02aa-6d25-4b36-b42e-ba837d49e261.roa (hash: q5bh3h1LHQcXwRDCiiiYn6TP5+N60E0SyV4QnQBQL8c=) Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/708aafaf-00b4-485b-854c-0b32ca30f57b/12e59001-35ac-4abf-858f-37b955a24b3f.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/708aafaf-00b4-485b-854c-0b32ca30f57b/manifest.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/58raXwiB13vqSLB2ijdmtQBlrwg.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 23 Sep 2026 00:08:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 07:33:7d:64:e7:a3:2d:ca:ac:0e:df:2b:a0:58:67:5c:6e:d2:7c:b9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A918806F0000, serialNumber=E7CADA5F0881D77BEA48B0768A3766B50065AF08 Validity Not Before: Sep 19 00:08:30 2026 GMT Not After : Sep 23 00:08:30 2026 GMT Subject: serialNumber=57f4efcbcaa4da0da42cc76af7e459c288bceb6b9c7605d9879c33d80bc3445b, CN=bb9a9116-f615-462e-a680-5266b327e0fa Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a6:a6:44:05:84:b9:d5:18:00:fe:04:8c:c0:14: 66:9d:b6:d3:3e:1a:eb:59:3c:fa:e8:72:5e:a0:c4: db:eb:f0:52:ec:18:40:2e:b3:cb:1b:d8:c6:6e:0e: 52:83:bb:03:40:61:53:87:8e:a4:ca:3f:a7:51:cf: 71:12:c3:ba:e7:bc:c9:07:e3:37:3a:eb:cc:54:b3: cd:ad:ff:3f:72:51:d9:b1:0c:8d:cd:b4:13:26:48: 9c:71:2e:7e:5c:a9:4b:21:81:d1:f0:74:6e:34:4d: 10:2c:35:63:f2:22:ba:2d:d2:a5:30:54:e8:ae:a7: 0f:24:20:89:8c:65:ab:ca:b2:8e:f3:8c:d3:1c:bc: 22:cf:78:c6:e9:39:5c:dd:b2:77:dc:6a:bd:d5:fb: 93:7c:d3:9a:75:d7:b6:dd:ea:38:54:45:eb:3e:f5: 86:6f:c4:fa:08:d8:76:11:62:a3:16:25:b5:96:a6: c6:f6:16:73:f8:73:45:16:fc:c6:93:71:72:8b:98: 1c:c8:91:40:54:bd:e4:e0:4e:d7:a3:f5:f9:3b:a0: 89:3a:74:e3:7d:43:c0:42:1d:4b:e0:85:ac:c7:ee: 13:ac:3a:59:3c:d6:be:6e:11:fd:f4:c0:dc:4b:62: be:e8:cf:03:2a:24:c1:68:ca:af:b8:0f:ae:3e:ee: 5a:ed Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7F:35:95:9E:54:3A:40:27:DE:FB:C7:4E:CE:55:10:56:D1:C4:F6:F8 X509v3 Authority Key Identifier: keyid:E7:CA:DA:5F:08:81:D7:7B:EA:48:B0:76:8A:37:66:B5:00:65:AF:08 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/58raXwiB13vqSLB2ijdmtQBlrwg.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/708aafaf-00b4-485b-854c-0b32ca30f57b/manifest.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/708aafaf-00b4-485b-854c-0b32ca30f57b/12e59001-35ac-4abf-858f-37b955a24b3f.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 7a:b0:d7:ff:1b:01:bd:48:21:6c:17:28:2f:81:de:74:8d:ca: 14:da:3a:77:2a:60:94:58:00:99:cd:38:4d:db:90:01:33:3c: 22:ad:cb:91:a8:2d:8f:aa:b0:6c:82:3d:c8:b0:cc:66:d9:cd: 90:d7:25:7c:9d:67:ed:5a:fd:11:82:bc:63:64:e2:39:c5:f4: 9f:93:9b:69:e4:d5:51:18:e3:87:85:56:50:d7:7f:bb:8e:0f: fa:60:1c:07:fc:19:67:85:1d:19:89:d8:25:fd:3e:58:56:97: 0a:a0:74:12:c7:27:46:a3:d8:67:a1:e2:7b:31:cf:b7:b5:e4: 76:11:56:54:16:03:b2:39:4f:68:b3:db:3d:4b:ea:9f:c6:22: a5:d5:8e:2d:eb:88:96:00:ef:88:9f:b0:59:80:2a:ca:03:4f: 07:67:95:f8:30:d2:f2:35:af:c1:54:23:95:68:c2:8a:53:4f: 8f:17:11:08:57:01:84:d2:36:02:b3:5e:e3:dc:2e:95:21:04: 55:2e:10:55:81:2b:e7:91:94:d4:c9:55:29:5b:5c:77:32:34: ce:24:2c:6f:84:66:bf:05:de:ae:d7:46:90:f7:24:38:56:5a: 9b:e1:f9:ba:61:f0:6b:4f:ce:77:5c:3b:b5:e9:b0:8e:ef:1f: 1a:30:e6:03 -----BEGIN CERTIFICATE----- MIIFlTCCBH2gAwIBAgIUBzN9ZOejLcqsDt8roFhnXG7SfLkwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODgwNkYwMDAwMTEwLwYDVQQFEyhFN0NBREE1RjA4 ODFENzdCRUE0OEIwNzY4QTM3NjZCNTAwNjVBRjA4MB4XDTI2MDkxOTAwMDgzMFoX DTI2MDkyMzAwMDgzMFowejFJMEcGA1UEBRNANTdmNGVmY2JjYWE0ZGEwZGE0MmNj NzZhZjdlNDU5YzI4OGJjZWI2YjljNzYwNWQ5ODc5YzMzZDgwYmMzNDQ1YjEtMCsG A1UEAxMkYmI5YTkxMTYtZjYxNS00NjJlLWE2ODAtNTI2NmIzMjdlMGZhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApqZEBYS51RgA/gSMwBRmnbbTPhrr WTz66HJeoMTb6/BS7BhALrPLG9jGbg5Sg7sDQGFTh46kyj+nUc9xEsO657zJB+M3 OuvMVLPNrf8/clHZsQyNzbQTJkiccS5+XKlLIYHR8HRuNE0QLDVj8iK6LdKlMFTo rqcPJCCJjGWryrKO84zTHLwiz3jG6Tlc3bJ33Gq91fuTfNOadde23eo4VEXrPvWG b8T6CNh2EWKjFiW1lqbG9hZz+HNFFvzGk3Fyi5gcyJFAVL3k4E7Xo/X5O6CJOnTj fUPAQh1L4IWsx+4TrDpZPNa+bhH99MDcS2K+6M8DKiTBaMqvuA+uPu5a7QIDAQAB o4ICQTCCAj0wHQYDVR0OBBYEFH81lZ5UOkAn3vvHTs5VEFbRxPb4MB8GA1UdIwQY MBaAFOfK2l8Igdd76kiwdoo3ZrUAZa8IMA4GA1UdDwEB/wQEAwIHgDB+BggrBgEF BQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVw b3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi81OHJhWHdp QjEzdnFTTEIyaWpkbXRRQmxyd2cuY2VyMH8GCCsGAQUFBwELBHMwcTBvBggrBgEF BQcwC4ZjcnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5hbWF6b25hd3MuY29t L3ZvbHVtZS83MDhhYWZhZi0wMGI0LTQ4NWItODU0Yy0wYjMyY2EzMGY1N2IvbWFu aWZlc3QubWZ0MIGVBgNVHR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnBraS1y c3luYy51cy1lYXN0LTIuYW1hem9uYXdzLmNvbS92b2x1bWUvNzA4YWFmYWYtMDBi NC00ODViLTg1NGMtMGIzMmNhMzBmNTdiLzEyZTU5MDAxLTM1YWMtNGFiZi04NThm LTM3Yjk1NWEyNGIzZi5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggr BgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYw BKACBQAwDQYJKoZIhvcNAQELBQADggEBAHqw1/8bAb1IIWwXKC+B3nSNyhTaOncq YJRYAJnNOE3bkAEzPCKty5GoLY+qsGyCPciwzGbZzZDXJXydZ+1a/RGCvGNk4jnF 9J+Tm2nk1VEY44eFVlDXf7uOD/pgHAf8GWeFHRmJ2CX9PlhWlwqgdBLHJ0aj2Geh 4nsxz7e15HYRVlQWA7I5T2iz2z1L6p/GIqXVji3riJYA74ifsFmAKsoDTwdnlfgw 0vI1r8FUI5VowopTT48XEQhXAYTSNgKzXuPcLpUhBFUuEFWBK+eRlNTJVSlbXHcy NM4kLG+EZr8F3q7XRpD3JDhWWpvh+bph8GtPzndcO7XpsI7vHxow5gM= -----END CERTIFICATE-----Generated at Sat Sep 19 23:21:59 2026 by rpki-client