$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/708aafaf-00b4-485b-854c-0b32ca30f57b/manifest.mft File: manifest.mft (raw, json) Hash identifier: 3vx3uzLLF9zg+DHIWtb/D4n+fmjyVu40BPrT21AJFPk= Subject key identifier: 41:D0:C4:B9:B2:AD:90:2C:73:44:24:CB:DB:2E:71:34:5B:2D:75:79 Authority key identifier: E7:CA:DA:5F:08:81:D7:7B:EA:48:B0:76:8A:37:66:B5:00:65:AF:08 Certificate issuer: /CN=A918806F0000/serialNumber=E7CADA5F0881D77BEA48B0768A3766B50065AF08 Certificate serial: 53077C8DA7A2C406DAE4AB78B31C086D247019C6 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/58raXwiB13vqSLB2ijdmtQBlrwg.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/708aafaf-00b4-485b-854c-0b32ca30f57b/manifest.mft Manifest number: 066A Signing time: Sat 08 Aug 2026 00:01:01 +0000 Manifest this update: Sat 08 Aug 2026 00:01:01 +0000 Manifest next update: Wed 12 Aug 2026 00:01:01 +0000 Files and hashes: 1: 12e59001-35ac-4abf-858f-37b955a24b3f.crl (hash: 2kC+ltEUM2ZdMx5n6JmePIjCeVzjzAuggWbqww37ppY=) 2: 381fc6e6-5d49-41bc-b584-d9437c68e3cd.roa (hash: 8QqQOxAj3sRai6/BzOB2kV66/okkk7p8TzKsBaSwcWA=) 3: 49119734-9dbc-4bd4-98be-57e4ce078928.roa (hash: 0OedyNMwjL1I1p7rzryfdYD0nslES0i+43AbthFPFmE=) 4: 5663bf34-10ed-4309-a236-7466afd6f02f.roa (hash: aoaRIM84eruV/ISWBs3PJCPQb0sEmsLtTOcu1EdbsFA=) 5: cc2f7093-21a6-400f-9db1-93c2fe02bc1c.roa (hash: vbtxuyfgx9e6lLFR0CnUGCC1kgCTySw+Ljt4yM1fDb4=) 6: ea1d02aa-6d25-4b36-b42e-ba837d49e261.roa (hash: q5bh3h1LHQcXwRDCiiiYn6TP5+N60E0SyV4QnQBQL8c=) Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/708aafaf-00b4-485b-854c-0b32ca30f57b/12e59001-35ac-4abf-858f-37b955a24b3f.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/708aafaf-00b4-485b-854c-0b32ca30f57b/manifest.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/58raXwiB13vqSLB2ijdmtQBlrwg.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 12 Aug 2026 00:01:01 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 53:07:7c:8d:a7:a2:c4:06:da:e4:ab:78:b3:1c:08:6d:24:70:19:c6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A918806F0000, serialNumber=E7CADA5F0881D77BEA48B0768A3766B50065AF08 Validity Not Before: Aug 8 00:01:01 2026 GMT Not After : Aug 12 00:01:01 2026 GMT Subject: serialNumber=2219a7d63a4f9cfc0f7a31e43452e95f57dcfdbe74a995847aba3cd93fd3116b, CN=bb9a9116-f615-462e-a680-5266b327e0fa Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:93:ad:8b:ca:d8:f7:20:49:d6:dd:c7:7d:42:59: 1d:d6:64:16:c8:89:69:86:b0:11:87:ae:68:e1:a3: 71:42:4c:7a:7a:36:dd:1e:b6:d6:12:d9:3e:88:41: 5c:29:8b:23:b4:27:e6:ea:15:2f:ce:b3:a3:f2:8a: ed:7a:5b:63:b6:bd:f6:64:25:0f:0c:3c:d4:19:f7: 63:39:b1:03:17:30:41:2b:30:de:34:33:e3:82:1e: dd:6b:d0:8d:2e:9a:7b:e2:83:e5:a2:eb:8d:ba:d5: 68:d7:54:79:6d:3d:2d:66:7e:39:77:23:ab:93:df: 71:12:88:77:57:c6:c9:a5:13:e6:95:63:91:d3:d3: c3:1b:12:7b:10:94:07:a7:42:73:36:1f:9a:84:cb: 4f:38:4d:90:0a:b2:40:d5:a1:e0:91:dd:1b:d0:08: 87:1d:48:63:55:eb:19:53:1f:af:28:cb:81:80:81: fe:8a:48:e3:2b:cf:35:25:0d:62:8a:23:33:fc:d7: 94:4f:5d:cf:7e:ea:05:92:5c:b9:c1:fe:c7:53:28: 49:e4:9b:89:44:11:47:3f:c9:be:3a:82:54:36:0e: 45:35:38:cf:31:4e:eb:de:f2:6a:1b:d8:84:39:dc: 8b:23:57:3d:e8:b0:34:13:93:ec:43:60:ae:aa:ad: 72:d9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 41:D0:C4:B9:B2:AD:90:2C:73:44:24:CB:DB:2E:71:34:5B:2D:75:79 X509v3 Authority Key Identifier: keyid:E7:CA:DA:5F:08:81:D7:7B:EA:48:B0:76:8A:37:66:B5:00:65:AF:08 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/58raXwiB13vqSLB2ijdmtQBlrwg.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/708aafaf-00b4-485b-854c-0b32ca30f57b/manifest.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/708aafaf-00b4-485b-854c-0b32ca30f57b/12e59001-35ac-4abf-858f-37b955a24b3f.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 85:67:1c:d9:6b:ce:9c:85:55:58:35:b5:ec:bf:09:27:8b:9b: 97:51:4d:f9:63:0e:f0:ed:7d:77:20:fe:c8:34:92:f9:14:7f: 5b:78:7a:0f:15:ed:51:f0:8a:88:9e:e5:26:c1:a2:9b:c6:9d: 86:59:cb:a3:08:d5:91:b3:64:e3:a9:3a:39:c9:cc:4d:02:8f: 1e:4d:37:7f:49:dd:6b:b2:15:cc:5d:dd:82:28:df:93:28:a0: 94:fd:40:15:3c:8c:c7:af:33:2c:f0:d7:e2:b3:b2:ee:70:3b: 0d:5a:69:8a:cb:ba:e4:8b:21:f0:f1:ca:30:55:57:2f:cf:fb: 74:7a:92:7b:d9:bb:55:52:66:89:a0:a4:bd:65:12:cf:f2:43: 4b:ba:71:e0:e1:d8:ba:7b:c4:3b:c5:57:5f:b9:7c:62:c7:0f: ae:bc:3c:66:d5:7b:01:1b:7a:00:e6:77:46:c4:13:3d:ec:64: b0:f3:2d:7e:04:2e:f6:a0:5f:15:7c:b4:e4:f7:88:31:a3:32: 7b:6c:d2:33:83:07:a9:a2:1f:69:b0:47:fe:7f:ac:08:b0:6f: c3:81:b3:a7:6d:ba:d2:1f:a2:68:78:ed:bc:a7:84:83:9d:ad: 17:2c:9e:55:ae:59:c5:47:22:f2:85:d3:a3:38:cd:9a:9d:b7: 6f:d6:a8:e7 -----BEGIN CERTIFICATE----- MIIFlTCCBH2gAwIBAgIUUwd8jaeixAba5Kt4sxwIbSRwGcYwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODgwNkYwMDAwMTEwLwYDVQQFEyhFN0NBREE1RjA4 ODFENzdCRUE0OEIwNzY4QTM3NjZCNTAwNjVBRjA4MB4XDTI2MDgwODAwMDEwMVoX DTI2MDgxMjAwMDEwMVowejFJMEcGA1UEBRNAMjIxOWE3ZDYzYTRmOWNmYzBmN2Ez MWU0MzQ1MmU5NWY1N2RjZmRiZTc0YTk5NTg0N2FiYTNjZDkzZmQzMTE2YjEtMCsG A1UEAxMkYmI5YTkxMTYtZjYxNS00NjJlLWE2ODAtNTI2NmIzMjdlMGZhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAk62Lytj3IEnW3cd9Qlkd1mQWyIlp hrARh65o4aNxQkx6ejbdHrbWEtk+iEFcKYsjtCfm6hUvzrOj8orteltjtr32ZCUP DDzUGfdjObEDFzBBKzDeNDPjgh7da9CNLpp74oPlouuNutVo11R5bT0tZn45dyOr k99xEoh3V8bJpRPmlWOR09PDGxJ7EJQHp0JzNh+ahMtPOE2QCrJA1aHgkd0b0AiH HUhjVesZUx+vKMuBgIH+ikjjK881JQ1iiiMz/NeUT13PfuoFkly5wf7HUyhJ5JuJ RBFHP8m+OoJUNg5FNTjPMU7r3vJqG9iEOdyLI1c96LA0E5PsQ2Cuqq1y2QIDAQAB o4ICQTCCAj0wHQYDVR0OBBYEFEHQxLmyrZAsc0Qky9sucTRbLXV5MB8GA1UdIwQY MBaAFOfK2l8Igdd76kiwdoo3ZrUAZa8IMA4GA1UdDwEB/wQEAwIHgDB+BggrBgEF BQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVw b3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi81OHJhWHdp QjEzdnFTTEIyaWpkbXRRQmxyd2cuY2VyMH8GCCsGAQUFBwELBHMwcTBvBggrBgEF BQcwC4ZjcnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5hbWF6b25hd3MuY29t L3ZvbHVtZS83MDhhYWZhZi0wMGI0LTQ4NWItODU0Yy0wYjMyY2EzMGY1N2IvbWFu aWZlc3QubWZ0MIGVBgNVHR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnBraS1y c3luYy51cy1lYXN0LTIuYW1hem9uYXdzLmNvbS92b2x1bWUvNzA4YWFmYWYtMDBi NC00ODViLTg1NGMtMGIzMmNhMzBmNTdiLzEyZTU5MDAxLTM1YWMtNGFiZi04NThm LTM3Yjk1NWEyNGIzZi5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggr BgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYw BKACBQAwDQYJKoZIhvcNAQELBQADggEBAIVnHNlrzpyFVVg1tey/CSeLm5dRTflj DvDtfXcg/sg0kvkUf1t4eg8V7VHwioie5SbBopvGnYZZy6MI1ZGzZOOpOjnJzE0C jx5NN39J3WuyFcxd3YIo35MooJT9QBU8jMevMyzw1+Kzsu5wOw1aaYrLuuSLIfDx yjBVVy/P+3R6knvZu1VSZomgpL1lEs/yQ0u6ceDh2Lp7xDvFV1+5fGLHD668PGbV ewEbegDmd0bEEz3sZLDzLX4ELvagXxV8tOT3iDGjMnts0jODB6miH2mwR/5/rAiw b8OBs6dtutIfomh47bynhIOdrRcsnlWuWcVHIvKF06M4zZqdt2/WqOc= -----END CERTIFICATE-----Generated at Sat Aug 8 04:45:16 2026 by rpki-client