$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/bd48a1fa-3471-4ab2-8508-ad36b96813e4/manifest.mft File: manifest.mft (raw, json) Hash identifier: JB9F4f5XUPCLyHI0ut5+s0B3d2nQF3mKJ0RZ10e75wU= Subject key identifier: 1E:1F:95:A9:F2:60:9C:F3:15:E9:90:AB:E4:A6:23:FA:77:5F:FA:F6 Authority key identifier: BC:E9:BA:11:29:2F:84:75:12:C0:A8:41:2E:51:E6:E3:BA:0D:99:1D Certificate issuer: /CN=A91609040001/serialNumber=BCE9BA11292F847512C0A8412E51E6E3BA0D991D Certificate serial: 0A663A474291B69AB98B4485FE2252DBA544A1A6 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vOm6ESkvhHUSwKhBLlHm47oNmR0.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/bd48a1fa-3471-4ab2-8508-ad36b96813e4/manifest.mft Manifest number: 0599 Signing time: Thu 09 Apr 2026 00:10:43 +0000 Manifest this update: Thu 09 Apr 2026 00:10:43 +0000 Manifest next update: Mon 13 Apr 2026 00:10:43 +0000 Files and hashes: 1: 177c9702-ee39-42d1-b76f-6cee77f4fb45.roa (hash: 0e0o/tkj5uh6jJbrl8YvGeNAneNpldaUPLcDYFgyoBI=) 2: 197500e2-3802-44b2-a561-ca3dad01e209.roa (hash: 1l+gLwyU/H4HNaQ0uYL3F1eW99PrBxN74OxZSMVTb64=) 3: 1dffeac8-b779-49ef-ba27-58bc19891e60.roa (hash: cBXtNI3VbGLGZEDX6FlUDTPJNJ35d5uKk0qGRhvviKM=) 4: 220cee0c-6002-409a-8194-38e216c0096c.crl (hash: W0DHbA4L/8zn33nF1zJTfeAMGN/Cv4t8Ii4wBAchhlU=) 5: 22707524-2248-48ea-815f-578f49b19436.roa (hash: n8mdK97d/Vw0NB0uqE1Lu/NAcKYHksxdIYeyBefJ5e0=) 6: 22d6913e-5f3d-4f99-9a60-48579f471838.roa (hash: VNTjv8zj56XPQscVA1nVjmEH4qZHD6SH0x107VrlxlE=) 7: 245fa4eb-6d0d-4df7-9e2d-29a7d39adcb9.roa (hash: uyHF6RDXBqu8/m5/rxS9tqyNKt4hFLLacYUMWBiJ3LY=) 8: 3684e50c-c50f-4ebb-b327-e0759241197e.roa (hash: zmCV/d5bpLoSS+zvApJ7r/z/pnc55m95Bh5MUhoeQPU=) 9: 3b8557c0-d5ee-4f9d-80ac-e41a37ffff27.roa (hash: 46SkQknDcBfOGQwbNRfMD6C/4bRPxr72VMFVTNETTU8=) 10: 42932dd4-2720-47b3-a472-fc2c8a50a46c.roa (hash: iNY6C3I93M/b88ycFa4wj9iSAtZRjCOVsp9Gf/bWmT8=) 11: 43fd8687-12d4-49b5-9958-8536ce8160b4.roa (hash: pklnbVub/fuu34AybFXOGT+PdGgA5UEdWQ9SFNOmiw4=) 12: 6b15abb6-10b7-4ecd-9947-c96012f824c6.roa (hash: doGDeV/JZpETUW2CE9tY+Z4Pwxu5xmhr4Vl+a0gqJU8=) 13: 7b26d410-17d7-4310-bb58-41c465f8eef2.roa (hash: zZSdfeX8NNWn6l7ff8TltCcHKYzcM1IAhXvaT99erpc=) 14: 882a767c-0faf-4e71-a224-ecec47d98fcb.roa (hash: SbC+1TuCvU+jX8YVK+7obHcSTkPpgYNWlTlRRoFqGKo=) 15: 8c170584-7c9b-414b-8cba-a934a0a79bbe.roa (hash: 6SXvrQCVtJ9I7yKXy5cpiG6IXfqjfmiQZzvT8SNuDyE=) 16: 9e37f855-48bf-420a-a86c-5eeb4fc1f790.roa (hash: ZLXxMwM4vDfoBdxGaRhMGTm+FfO6E/g3I0EGSRmBbYY=) 17: adf75e2e-9d2c-4718-a49d-ad44079b266b.roa (hash: fB2mXgwfTDMHGU9TN7w89E4Dzg6sh/SSFtPBROFGSJg=) 18: cb2e5a8c-21f1-4679-a372-617732fc3ea6.roa (hash: zVg+chZsOqM0G5PhFIXsidezF7tDS/5injSaQlsHP78=) 19: cebef322-460c-4f6e-8a8a-2f4b41debd9b.roa (hash: NlFUv6dJwsR3RjMmUp1VN/OlvhJ1TaIgnS+8Z9Ov1Us=) 20: d953b731-7921-47dd-abf3-b7b8cc367900.roa (hash: +2Ox8MRpSKcyTvXMAxijBxiUi8rZJNCBj7CY+0WEQd4=) 21: e32c9cbd-a241-4df6-99bb-e7d15abe4b3b.roa (hash: EbVvusiwIRiiG6aIZrh85ZC5dtWbNE/O92xrlXFEtg0=) 22: fcd6adab-06f0-4676-9568-6d4d48f7658c.roa (hash: kOpfYh9nuQ7s0H/UIYwh+6amJBF7Bcdr+fTO2DNuSiA=) Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/bd48a1fa-3471-4ab2-8508-ad36b96813e4/220cee0c-6002-409a-8194-38e216c0096c.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/bd48a1fa-3471-4ab2-8508-ad36b96813e4/manifest.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vOm6ESkvhHUSwKhBLlHm47oNmR0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 13 Apr 2026 00:10:43 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0a:66:3a:47:42:91:b6:9a:b9:8b:44:85:fe:22:52:db:a5:44:a1:a6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91609040001, serialNumber=BCE9BA11292F847512C0A8412E51E6E3BA0D991D Validity Not Before: Apr 9 00:10:43 2026 GMT Not After : Apr 13 00:10:43 2026 GMT Subject: serialNumber=269121e35ec039c8333e7c4681160357a5c88527c543b409446ea5ec4445208e, CN=1684111e-31c1-42e6-8f20-fc9ab8b5cf57 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ce:a1:10:74:25:a2:01:31:4d:57:8b:63:c1:a3: 5b:81:51:65:62:73:19:68:dc:f5:68:8c:2c:f0:39: ba:1f:df:8d:11:9e:11:ba:35:31:89:c8:7a:cf:e2: b5:4c:db:9b:31:6b:b8:cc:55:d1:c1:d6:f1:04:c5: 23:bf:9c:82:96:86:44:3a:02:39:c6:83:3b:75:ef: 49:e7:2b:21:13:a0:c9:29:ce:a5:b8:0b:0f:f3:0f: ae:31:0f:b1:db:44:ec:3d:c1:b6:79:f8:8b:77:91: 52:72:04:2c:09:12:96:b2:56:6c:9a:b9:4a:75:5e: 87:bc:90:90:95:77:eb:9e:c9:a6:98:81:0d:a8:c3: a8:37:f3:cd:46:a3:2a:f7:c6:9a:e1:b9:b9:c3:33: 3e:d1:69:b2:3f:9a:75:76:a8:45:93:09:d4:2f:87: ab:26:2e:0b:b7:32:80:d2:3d:a3:b6:07:70:6e:31: a7:be:e4:a6:14:d0:22:48:3c:ac:df:f5:35:3e:ba: 98:dd:8f:cb:82:55:1e:d7:95:ab:48:4b:e2:de:90: 5b:5b:f3:1c:fe:92:30:06:78:b4:8a:47:db:78:db: 70:90:2e:c5:94:a2:7d:07:e6:0b:95:37:36:bb:c6: 45:78:1c:1b:32:86:36:d4:ad:12:8d:c7:c0:e9:e8: bb:09 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1E:1F:95:A9:F2:60:9C:F3:15:E9:90:AB:E4:A6:23:FA:77:5F:FA:F6 X509v3 Authority Key Identifier: keyid:BC:E9:BA:11:29:2F:84:75:12:C0:A8:41:2E:51:E6:E3:BA:0D:99:1D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vOm6ESkvhHUSwKhBLlHm47oNmR0.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/bd48a1fa-3471-4ab2-8508-ad36b96813e4/manifest.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/bd48a1fa-3471-4ab2-8508-ad36b96813e4/220cee0c-6002-409a-8194-38e216c0096c.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption d8:42:53:d4:43:00:1a:7c:93:7f:97:19:12:9e:f2:26:d5:d3: 7f:88:d6:93:b2:3f:d3:71:ec:d6:4e:3c:4b:39:7e:b3:ab:df: b4:ac:ac:35:61:1b:1e:19:22:a3:33:a7:7f:15:07:a2:d5:38: 2e:ee:16:88:37:43:8a:7f:28:d6:df:0e:8b:f0:2d:66:f4:82: d4:db:6f:7f:04:bc:4b:33:aa:c9:ef:7e:87:be:65:6b:14:ae: dc:1e:dd:ba:5b:eb:4c:bf:e9:e4:73:d8:f8:2b:94:83:d1:d3: f8:68:d0:10:41:19:1a:f9:f0:a9:5c:a6:37:e0:91:ff:88:9f: 38:f4:fd:5a:c5:b1:31:5e:0a:fa:a1:df:8e:28:59:a4:7d:16: 9c:ce:12:65:d2:2f:53:cf:7b:1d:b6:58:2f:c1:d5:79:11:dc: 5a:43:ea:8b:db:9c:24:45:9d:89:0b:15:8e:69:9e:e9:70:8d: b0:91:97:f4:b9:04:ed:4e:84:cb:92:49:36:74:9a:c7:3b:fb: a8:da:45:33:24:b0:a2:28:35:b6:d9:1c:6a:81:49:f3:48:28: 9c:37:33:7e:c4:cc:43:69:b5:09:cc:41:f5:10:b1:96:a8:ac: f9:53:9f:49:99:1d:aa:ac:99:14:4b:cc:da:c4:4a:38:37:96: b4:57:bb:13 -----BEGIN CERTIFICATE----- MIIFlTCCBH2gAwIBAgIUCmY6R0KRtpq5i0SF/iJS26VEoaYwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxNjA5MDQwMDAxMTEwLwYDVQQFEyhCQ0U5QkExMTI5 MkY4NDc1MTJDMEE4NDEyRTUxRTZFM0JBMEQ5OTFEMB4XDTI2MDQwOTAwMTA0M1oX DTI2MDQxMzAwMTA0M1owejFJMEcGA1UEBRNAMjY5MTIxZTM1ZWMwMzljODMzM2U3 YzQ2ODExNjAzNTdhNWM4ODUyN2M1NDNiNDA5NDQ2ZWE1ZWM0NDQ1MjA4ZTEtMCsG A1UEAxMkMTY4NDExMWUtMzFjMS00MmU2LThmMjAtZmM5YWI4YjVjZjU3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzqEQdCWiATFNV4tjwaNbgVFlYnMZ aNz1aIws8Dm6H9+NEZ4RujUxich6z+K1TNubMWu4zFXRwdbxBMUjv5yCloZEOgI5 xoM7de9J5yshE6DJKc6luAsP8w+uMQ+x20TsPcG2efiLd5FScgQsCRKWslZsmrlK dV6HvJCQlXfrnsmmmIENqMOoN/PNRqMq98aa4bm5wzM+0WmyP5p1dqhFkwnUL4er Ji4LtzKA0j2jtgdwbjGnvuSmFNAiSDys3/U1PrqY3Y/LglUe15WrSEvi3pBbW/Mc /pIwBni0ikfbeNtwkC7FlKJ9B+YLlTc2u8ZFeBwbMoY21K0SjcfA6ei7CQIDAQAB o4ICQTCCAj0wHQYDVR0OBBYEFB4flanyYJzzFemQq+SmI/p3X/r2MB8GA1UdIwQY MBaAFLzpuhEpL4R1EsCoQS5R5uO6DZkdMA4GA1UdDwEB/wQEAwIHgDB+BggrBgEF BQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVw b3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi92T202RVNr dmhIVVN3S2hCTGxIbTQ3b05tUjAuY2VyMH8GCCsGAQUFBwELBHMwcTBvBggrBgEF BQcwC4ZjcnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5hbWF6b25hd3MuY29t L3ZvbHVtZS9iZDQ4YTFmYS0zNDcxLTRhYjItODUwOC1hZDM2Yjk2ODEzZTQvbWFu aWZlc3QubWZ0MIGVBgNVHR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnBraS1y c3luYy51cy1lYXN0LTIuYW1hem9uYXdzLmNvbS92b2x1bWUvYmQ0OGExZmEtMzQ3 MS00YWIyLTg1MDgtYWQzNmI5NjgxM2U0LzIyMGNlZTBjLTYwMDItNDA5YS04MTk0 LTM4ZTIxNmMwMDk2Yy5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggr BgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYw BKACBQAwDQYJKoZIhvcNAQELBQADggEBANhCU9RDABp8k3+XGRKe8ibV03+I1pOy P9Nx7NZOPEs5frOr37SsrDVhGx4ZIqMzp38VB6LVOC7uFog3Q4p/KNbfDovwLWb0 gtTbb38EvEszqsnvfoe+ZWsUrtwe3bpb60y/6eRz2PgrlIPR0/ho0BBBGRr58Klc pjfgkf+Inzj0/VrFsTFeCvqh344oWaR9FpzOEmXSL1PPex22WC/B1XkR3FpD6ovb nCRFnYkLFY5pnulwjbCRl/S5BO1OhMuSSTZ0msc7+6jaRTMksKIoNbbZHGqBSfNI KJw3M37EzENptQnMQfUQsZaorPlTn0mZHaqsmRRLzNrESjg3lrRXuxM= -----END CERTIFICATE-----Generated at Thu Apr 9 02:25:58 2026 by rpki-client