$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/708aafaf-00b4-485b-854c-0b32ca30f57b/manifest.mft File: manifest.mft (raw, json) Hash identifier: C4MkfLq2TJa/Yxu+4nxH4ZoDlU361smpaWE+kSzeMKA= Subject key identifier: 15:93:F1:D0:95:A9:31:30:93:C8:F3:EA:FF:4D:00:16:D7:1C:E6:EF Authority key identifier: E7:CA:DA:5F:08:81:D7:7B:EA:48:B0:76:8A:37:66:B5:00:65:AF:08 Certificate issuer: /CN=A918806F0000/serialNumber=E7CADA5F0881D77BEA48B0768A3766B50065AF08 Certificate serial: 0220DC58EE28EABEB877907498A57FB47613C292 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/58raXwiB13vqSLB2ijdmtQBlrwg.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/708aafaf-00b4-485b-854c-0b32ca30f57b/manifest.mft Manifest number: 0668 Signing time: Thu 06 Aug 2026 00:00:34 +0000 Manifest this update: Thu 06 Aug 2026 00:00:34 +0000 Manifest next update: Mon 10 Aug 2026 00:00:34 +0000 Files and hashes: 1: 12e59001-35ac-4abf-858f-37b955a24b3f.crl (hash: IBObtPGBW+6CeJ8GSM0iPl09ORfF1CK3qB3sIxxb49I=) 2: 381fc6e6-5d49-41bc-b584-d9437c68e3cd.roa (hash: 8QqQOxAj3sRai6/BzOB2kV66/okkk7p8TzKsBaSwcWA=) 3: 49119734-9dbc-4bd4-98be-57e4ce078928.roa (hash: 0OedyNMwjL1I1p7rzryfdYD0nslES0i+43AbthFPFmE=) 4: 5663bf34-10ed-4309-a236-7466afd6f02f.roa (hash: aoaRIM84eruV/ISWBs3PJCPQb0sEmsLtTOcu1EdbsFA=) 5: cc2f7093-21a6-400f-9db1-93c2fe02bc1c.roa (hash: vbtxuyfgx9e6lLFR0CnUGCC1kgCTySw+Ljt4yM1fDb4=) 6: ea1d02aa-6d25-4b36-b42e-ba837d49e261.roa (hash: q5bh3h1LHQcXwRDCiiiYn6TP5+N60E0SyV4QnQBQL8c=) Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/708aafaf-00b4-485b-854c-0b32ca30f57b/12e59001-35ac-4abf-858f-37b955a24b3f.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/708aafaf-00b4-485b-854c-0b32ca30f57b/manifest.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/58raXwiB13vqSLB2ijdmtQBlrwg.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 10 Aug 2026 00:00:34 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 02:20:dc:58:ee:28:ea:be:b8:77:90:74:98:a5:7f:b4:76:13:c2:92 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A918806F0000, serialNumber=E7CADA5F0881D77BEA48B0768A3766B50065AF08 Validity Not Before: Aug 6 00:00:34 2026 GMT Not After : Aug 10 00:00:34 2026 GMT Subject: serialNumber=61ad647adfa62dcf1b1d38c1372c461d9039e76b62527a4080e1fd858ad3a85c, CN=bb9a9116-f615-462e-a680-5266b327e0fa Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ca:f4:4b:a9:2e:34:74:02:bb:e1:10:ea:87:d0: 49:81:58:bd:03:10:0c:67:64:3b:4b:8e:bf:3d:ec: 03:b7:ef:89:6d:cd:5a:e2:94:21:ab:eb:72:1d:14: ac:a2:93:61:87:9c:be:77:72:d0:42:b3:9d:6c:f7: bc:6f:86:64:a0:74:65:2d:44:eb:a4:55:da:76:56: f0:60:8b:9f:94:da:ed:b4:01:90:ae:10:b8:24:b5: f5:82:5f:26:fb:f5:0a:51:0e:72:89:36:89:24:99: 4b:ad:b7:d0:af:67:74:b1:7d:3f:b2:e9:3c:aa:b4: 89:30:50:a4:4f:05:c6:37:5c:44:48:9d:37:dc:cc: 57:e0:46:c4:fc:e9:78:30:58:51:a5:e6:9e:30:fd: b7:5d:4d:68:e3:04:3b:3f:a7:87:5e:66:aa:57:25: 73:6c:55:b8:d7:54:af:44:b8:23:57:db:f9:1c:a3: 8b:51:1b:76:d2:9e:7a:3e:2c:02:c7:97:25:45:63: fc:26:20:d5:a3:ec:c8:4e:0b:42:be:d4:8c:05:6b: d4:96:6d:5d:ae:22:90:c7:f9:07:d3:fc:a8:75:ce: 1a:87:50:ef:c5:59:f3:83:3e:fc:40:3a:c1:4a:36: 69:3e:ea:bd:37:81:64:ed:e4:76:e2:63:0d:d5:9c: 82:1d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 15:93:F1:D0:95:A9:31:30:93:C8:F3:EA:FF:4D:00:16:D7:1C:E6:EF X509v3 Authority Key Identifier: keyid:E7:CA:DA:5F:08:81:D7:7B:EA:48:B0:76:8A:37:66:B5:00:65:AF:08 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/58raXwiB13vqSLB2ijdmtQBlrwg.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/708aafaf-00b4-485b-854c-0b32ca30f57b/manifest.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/708aafaf-00b4-485b-854c-0b32ca30f57b/12e59001-35ac-4abf-858f-37b955a24b3f.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 2b:8a:7a:87:97:be:d5:4a:90:1d:a5:2c:dc:42:58:7a:8e:a2: 78:4e:67:16:a0:57:b2:04:95:57:0a:be:67:55:8a:63:2a:c3: b5:bb:27:a1:d7:92:8a:9d:f4:0f:34:63:82:6c:ab:f6:15:ee: 54:8e:4e:5a:b6:52:53:5b:44:32:89:77:b9:83:a4:3f:62:c4: 11:90:0e:d4:35:3f:5e:1c:24:26:98:49:05:27:35:de:85:04: df:1a:12:28:00:23:13:72:6b:09:bf:0c:bc:3d:a1:1b:ed:00: 23:18:f0:6e:e3:38:29:b5:c2:cd:15:f4:7f:9d:ee:d4:24:bc: 52:2a:62:d2:f7:c3:54:1c:b6:d1:34:82:13:b7:c7:9d:36:94: 43:de:b1:b4:fe:fd:e1:6d:3a:39:3b:44:af:b2:f4:e3:74:4f: 2f:78:3b:b6:c5:09:7a:a1:11:76:09:bc:45:25:f4:43:6d:0f: cc:0a:ca:80:6e:df:4d:1f:c2:bf:b8:e2:24:ae:9b:ab:d4:fe: 75:42:50:ad:06:55:5e:ea:1d:90:97:15:f3:19:ec:5e:f2:a4: a1:85:9d:9d:e7:89:12:cf:df:98:0a:35:19:03:4b:be:94:4d: 99:cc:1d:26:0f:45:ff:8c:b8:93:62:7c:72:88:97:71:1d:a5: 54:a7:bc:84 -----BEGIN CERTIFICATE----- MIIFlTCCBH2gAwIBAgIUAiDcWO4o6r64d5B0mKV/tHYTwpIwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODgwNkYwMDAwMTEwLwYDVQQFEyhFN0NBREE1RjA4 ODFENzdCRUE0OEIwNzY4QTM3NjZCNTAwNjVBRjA4MB4XDTI2MDgwNjAwMDAzNFoX DTI2MDgxMDAwMDAzNFowejFJMEcGA1UEBRNANjFhZDY0N2FkZmE2MmRjZjFiMWQz OGMxMzcyYzQ2MWQ5MDM5ZTc2YjYyNTI3YTQwODBlMWZkODU4YWQzYTg1YzEtMCsG A1UEAxMkYmI5YTkxMTYtZjYxNS00NjJlLWE2ODAtNTI2NmIzMjdlMGZhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyvRLqS40dAK74RDqh9BJgVi9AxAM Z2Q7S46/PewDt++Jbc1a4pQhq+tyHRSsopNhh5y+d3LQQrOdbPe8b4ZkoHRlLUTr pFXadlbwYIuflNrttAGQrhC4JLX1gl8m+/UKUQ5yiTaJJJlLrbfQr2d0sX0/suk8 qrSJMFCkTwXGN1xESJ033MxX4EbE/Ol4MFhRpeaeMP23XU1o4wQ7P6eHXmaqVyVz bFW411SvRLgjV9v5HKOLURt20p56PiwCx5clRWP8JiDVo+zITgtCvtSMBWvUlm1d riKQx/kH0/yodc4ah1DvxVnzgz78QDrBSjZpPuq9N4Fk7eR24mMN1ZyCHQIDAQAB o4ICQTCCAj0wHQYDVR0OBBYEFBWT8dCVqTEwk8jz6v9NABbXHObvMB8GA1UdIwQY MBaAFOfK2l8Igdd76kiwdoo3ZrUAZa8IMA4GA1UdDwEB/wQEAwIHgDB+BggrBgEF BQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVw b3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi81OHJhWHdp QjEzdnFTTEIyaWpkbXRRQmxyd2cuY2VyMH8GCCsGAQUFBwELBHMwcTBvBggrBgEF BQcwC4ZjcnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5hbWF6b25hd3MuY29t L3ZvbHVtZS83MDhhYWZhZi0wMGI0LTQ4NWItODU0Yy0wYjMyY2EzMGY1N2IvbWFu aWZlc3QubWZ0MIGVBgNVHR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnBraS1y c3luYy51cy1lYXN0LTIuYW1hem9uYXdzLmNvbS92b2x1bWUvNzA4YWFmYWYtMDBi NC00ODViLTg1NGMtMGIzMmNhMzBmNTdiLzEyZTU5MDAxLTM1YWMtNGFiZi04NThm LTM3Yjk1NWEyNGIzZi5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggr BgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYw BKACBQAwDQYJKoZIhvcNAQELBQADggEBACuKeoeXvtVKkB2lLNxCWHqOonhOZxag V7IElVcKvmdVimMqw7W7J6HXkoqd9A80Y4Jsq/YV7lSOTlq2UlNbRDKJd7mDpD9i xBGQDtQ1P14cJCaYSQUnNd6FBN8aEigAIxNyawm/DLw9oRvtACMY8G7jOCm1ws0V 9H+d7tQkvFIqYtL3w1QcttE0ghO3x502lEPesbT+/eFtOjk7RK+y9ON0Ty94O7bF CXqhEXYJvEUl9ENtD8wKyoBu300fwr+44iSum6vU/nVCUK0GVV7qHZCXFfMZ7F7y pKGFnZ3niRLP35gKNRkDS76UTZnMHSYPRf+MuJNifHKIl3EdpVSnvIQ= -----END CERTIFICATE-----Generated at Thu Aug 6 06:49:53 2026 by rpki-client