$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/bd48a1fa-3471-4ab2-8508-ad36b96813e4/manifest.mft File: manifest.mft (raw, json) Hash identifier: +dI4xhtapKhKvU6CD4trhiZQK6rPwl7th7WiGDyaICI= Subject key identifier: DA:E9:F8:0F:7C:99:93:9B:57:28:99:78:AA:AD:F1:6C:F3:90:51:C5 Authority key identifier: BC:E9:BA:11:29:2F:84:75:12:C0:A8:41:2E:51:E6:E3:BA:0D:99:1D Certificate issuer: /CN=A91609040001/serialNumber=BCE9BA11292F847512C0A8412E51E6E3BA0D991D Certificate serial: 0E5470A9292FF81F95BB3846C50B399F1F51D525 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vOm6ESkvhHUSwKhBLlHm47oNmR0.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/bd48a1fa-3471-4ab2-8508-ad36b96813e4/manifest.mft Manifest number: 05B0 Signing time: Sat 02 May 2026 00:01:33 +0000 Manifest this update: Sat 02 May 2026 00:01:33 +0000 Manifest next update: Wed 06 May 2026 00:01:33 +0000 Files and hashes: 1: 177c9702-ee39-42d1-b76f-6cee77f4fb45.roa (hash: 0e0o/tkj5uh6jJbrl8YvGeNAneNpldaUPLcDYFgyoBI=) 2: 197500e2-3802-44b2-a561-ca3dad01e209.roa (hash: 1l+gLwyU/H4HNaQ0uYL3F1eW99PrBxN74OxZSMVTb64=) 3: 1dffeac8-b779-49ef-ba27-58bc19891e60.roa (hash: cBXtNI3VbGLGZEDX6FlUDTPJNJ35d5uKk0qGRhvviKM=) 4: 220cee0c-6002-409a-8194-38e216c0096c.crl (hash: DoG+Cvk3YRb9+v7f+1lZL0g9cgikPiRPDj0JpIggLdQ=) 5: 22707524-2248-48ea-815f-578f49b19436.roa (hash: n8mdK97d/Vw0NB0uqE1Lu/NAcKYHksxdIYeyBefJ5e0=) 6: 22d6913e-5f3d-4f99-9a60-48579f471838.roa (hash: VNTjv8zj56XPQscVA1nVjmEH4qZHD6SH0x107VrlxlE=) 7: 245fa4eb-6d0d-4df7-9e2d-29a7d39adcb9.roa (hash: uyHF6RDXBqu8/m5/rxS9tqyNKt4hFLLacYUMWBiJ3LY=) 8: 3684e50c-c50f-4ebb-b327-e0759241197e.roa (hash: zmCV/d5bpLoSS+zvApJ7r/z/pnc55m95Bh5MUhoeQPU=) 9: 3b8557c0-d5ee-4f9d-80ac-e41a37ffff27.roa (hash: 46SkQknDcBfOGQwbNRfMD6C/4bRPxr72VMFVTNETTU8=) 10: 42932dd4-2720-47b3-a472-fc2c8a50a46c.roa (hash: iNY6C3I93M/b88ycFa4wj9iSAtZRjCOVsp9Gf/bWmT8=) 11: 43fd8687-12d4-49b5-9958-8536ce8160b4.roa (hash: pklnbVub/fuu34AybFXOGT+PdGgA5UEdWQ9SFNOmiw4=) 12: 6b15abb6-10b7-4ecd-9947-c96012f824c6.roa (hash: doGDeV/JZpETUW2CE9tY+Z4Pwxu5xmhr4Vl+a0gqJU8=) 13: 7b26d410-17d7-4310-bb58-41c465f8eef2.roa (hash: zZSdfeX8NNWn6l7ff8TltCcHKYzcM1IAhXvaT99erpc=) 14: 882a767c-0faf-4e71-a224-ecec47d98fcb.roa (hash: SbC+1TuCvU+jX8YVK+7obHcSTkPpgYNWlTlRRoFqGKo=) 15: 8c170584-7c9b-414b-8cba-a934a0a79bbe.roa (hash: 6SXvrQCVtJ9I7yKXy5cpiG6IXfqjfmiQZzvT8SNuDyE=) 16: 9e37f855-48bf-420a-a86c-5eeb4fc1f790.roa (hash: ZLXxMwM4vDfoBdxGaRhMGTm+FfO6E/g3I0EGSRmBbYY=) 17: adf75e2e-9d2c-4718-a49d-ad44079b266b.roa (hash: fB2mXgwfTDMHGU9TN7w89E4Dzg6sh/SSFtPBROFGSJg=) 18: cb2e5a8c-21f1-4679-a372-617732fc3ea6.roa (hash: zVg+chZsOqM0G5PhFIXsidezF7tDS/5injSaQlsHP78=) 19: cebef322-460c-4f6e-8a8a-2f4b41debd9b.roa (hash: kIQquhGVEcAvabpPXVXZt+As4t5sh2W4yCXCsbRhSVc=) 20: d953b731-7921-47dd-abf3-b7b8cc367900.roa (hash: +2Ox8MRpSKcyTvXMAxijBxiUi8rZJNCBj7CY+0WEQd4=) 21: e32c9cbd-a241-4df6-99bb-e7d15abe4b3b.roa (hash: EbVvusiwIRiiG6aIZrh85ZC5dtWbNE/O92xrlXFEtg0=) 22: fcd6adab-06f0-4676-9568-6d4d48f7658c.roa (hash: yfq8iFfIcDeAU+un+cEPlZiZth6uF29SsXYSk1FGweo=) Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/bd48a1fa-3471-4ab2-8508-ad36b96813e4/220cee0c-6002-409a-8194-38e216c0096c.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/bd48a1fa-3471-4ab2-8508-ad36b96813e4/manifest.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vOm6ESkvhHUSwKhBLlHm47oNmR0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 06 May 2026 00:01:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0e:54:70:a9:29:2f:f8:1f:95:bb:38:46:c5:0b:39:9f:1f:51:d5:25 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91609040001, serialNumber=BCE9BA11292F847512C0A8412E51E6E3BA0D991D Validity Not Before: May 2 00:01:33 2026 GMT Not After : May 6 00:01:33 2026 GMT Subject: serialNumber=e0f58f2a9e681482e5e1c2b5976afbb562e6e18a8a4b1020d2b40f65bf86e73d, CN=1684111e-31c1-42e6-8f20-fc9ab8b5cf57 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:42:9e:4a:f0:23:47:e5:d0:93:96:71:a8:b0: c8:82:16:c5:ed:88:5d:a4:b9:d4:49:13:51:f7:ec: 75:5e:31:ee:7c:1e:3e:14:92:7f:c8:30:43:c2:4b: 76:21:af:3a:aa:4e:13:30:21:3e:e0:d5:2e:ea:12: 91:9e:f8:4c:f7:02:f5:eb:a3:ff:ab:df:30:6f:26: 71:b9:fe:b8:cd:b2:e4:4e:25:36:39:96:3c:a8:e3: 9e:e0:e3:da:d7:58:ee:85:70:51:50:5e:5c:35:ef: e4:3e:99:a2:76:aa:a2:38:a5:2a:6d:ed:ab:78:1d: 65:47:c1:1d:b3:c8:c3:59:7a:fa:15:78:78:cd:07: 04:c3:f7:70:5d:df:10:6f:2f:e5:e6:f4:24:d6:9d: 38:e4:15:58:e5:1e:0c:7e:12:32:20:0e:f8:17:ac: ae:2a:4e:4c:a1:16:a9:4f:6b:44:c3:44:c3:e2:c7: 7f:02:38:3f:b1:3e:1b:83:52:5e:e9:a1:dc:1e:66: 6f:28:3d:5b:35:2c:ba:47:9b:a5:75:d5:ff:8a:09: 1d:d6:81:22:ae:ce:04:e2:0c:8c:1b:30:4a:fe:44: 4c:37:88:32:5c:95:a7:54:af:22:9d:bd:f6:9f:d5: 1f:61:de:d3:b0:d1:80:3b:b6:b8:ad:80:21:a9:a2: 24:8b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DA:E9:F8:0F:7C:99:93:9B:57:28:99:78:AA:AD:F1:6C:F3:90:51:C5 X509v3 Authority Key Identifier: keyid:BC:E9:BA:11:29:2F:84:75:12:C0:A8:41:2E:51:E6:E3:BA:0D:99:1D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vOm6ESkvhHUSwKhBLlHm47oNmR0.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/bd48a1fa-3471-4ab2-8508-ad36b96813e4/manifest.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/bd48a1fa-3471-4ab2-8508-ad36b96813e4/220cee0c-6002-409a-8194-38e216c0096c.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 61:9e:a1:96:a9:d2:28:89:d6:ab:22:fc:5f:7c:67:93:fb:4b: da:4b:1b:4c:6d:9f:27:3e:ba:fa:cb:bd:fd:53:f1:5c:77:a5: f5:8e:d2:a1:49:7f:79:42:db:09:7b:f3:c8:83:5c:51:72:c7: 52:94:65:37:f6:f9:0a:a3:cb:fe:8b:f5:80:c2:04:0e:b3:1c: e0:25:c9:c5:ac:57:81:68:d1:c7:c4:8c:97:38:95:d5:3f:ec: 1c:75:79:07:07:36:3e:df:d4:49:fa:9b:60:5a:8e:ef:00:2d: 53:9a:67:f4:fd:e2:ca:56:16:77:47:c9:c8:4d:4f:af:0c:ed: 47:87:83:52:66:c4:71:cf:ca:0a:04:63:66:47:86:21:68:bf: 61:db:43:1f:ce:52:ae:18:2e:fb:5f:60:64:dc:16:b1:d6:bd: a5:de:0c:e5:32:35:ba:23:0b:c0:c2:0e:39:5e:f8:8b:c0:4a: 2f:c3:1c:d5:8c:bc:49:58:f3:f0:bf:85:18:e3:e1:da:b3:f4: 5d:bc:be:7b:d0:7f:d5:ac:91:b6:8e:82:e2:bb:27:62:89:cc: 7b:93:c4:e4:ae:9b:61:14:04:51:8e:29:d8:8e:57:12:9f:57: 4e:86:86:bd:f3:13:b2:2f:5e:a4:db:82:0c:ee:a2:d6:3f:50: 94:6b:84:06 -----BEGIN CERTIFICATE----- MIIFlTCCBH2gAwIBAgIUDlRwqSkv+B+VuzhGxQs5nx9R1SUwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxNjA5MDQwMDAxMTEwLwYDVQQFEyhCQ0U5QkExMTI5 MkY4NDc1MTJDMEE4NDEyRTUxRTZFM0JBMEQ5OTFEMB4XDTI2MDUwMjAwMDEzM1oX DTI2MDUwNjAwMDEzM1owejFJMEcGA1UEBRNAZTBmNThmMmE5ZTY4MTQ4MmU1ZTFj MmI1OTc2YWZiYjU2MmU2ZTE4YThhNGIxMDIwZDJiNDBmNjViZjg2ZTczZDEtMCsG A1UEAxMkMTY4NDExMWUtMzFjMS00MmU2LThmMjAtZmM5YWI4YjVjZjU3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqEKeSvAjR+XQk5ZxqLDIghbF7Yhd pLnUSRNR9+x1XjHufB4+FJJ/yDBDwkt2Ia86qk4TMCE+4NUu6hKRnvhM9wL166P/ q98wbyZxuf64zbLkTiU2OZY8qOOe4OPa11juhXBRUF5cNe/kPpmidqqiOKUqbe2r eB1lR8Eds8jDWXr6FXh4zQcEw/dwXd8Qby/l5vQk1p045BVY5R4MfhIyIA74F6yu Kk5MoRapT2tEw0TD4sd/Ajg/sT4bg1Je6aHcHmZvKD1bNSy6R5ulddX/igkd1oEi rs4E4gyMGzBK/kRMN4gyXJWnVK8inb32n9UfYd7TsNGAO7a4rYAhqaIkiwIDAQAB o4ICQTCCAj0wHQYDVR0OBBYEFNrp+A98mZObVyiZeKqt8WzzkFHFMB8GA1UdIwQY MBaAFLzpuhEpL4R1EsCoQS5R5uO6DZkdMA4GA1UdDwEB/wQEAwIHgDB+BggrBgEF BQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVw b3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi92T202RVNr dmhIVVN3S2hCTGxIbTQ3b05tUjAuY2VyMH8GCCsGAQUFBwELBHMwcTBvBggrBgEF BQcwC4ZjcnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5hbWF6b25hd3MuY29t L3ZvbHVtZS9iZDQ4YTFmYS0zNDcxLTRhYjItODUwOC1hZDM2Yjk2ODEzZTQvbWFu aWZlc3QubWZ0MIGVBgNVHR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnBraS1y c3luYy51cy1lYXN0LTIuYW1hem9uYXdzLmNvbS92b2x1bWUvYmQ0OGExZmEtMzQ3 MS00YWIyLTg1MDgtYWQzNmI5NjgxM2U0LzIyMGNlZTBjLTYwMDItNDA5YS04MTk0 LTM4ZTIxNmMwMDk2Yy5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggr BgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYw BKACBQAwDQYJKoZIhvcNAQELBQADggEBAGGeoZap0iiJ1qsi/F98Z5P7S9pLG0xt nyc+uvrLvf1T8Vx3pfWO0qFJf3lC2wl788iDXFFyx1KUZTf2+Qqjy/6L9YDCBA6z HOAlycWsV4Fo0cfEjJc4ldU/7Bx1eQcHNj7f1En6m2Baju8ALVOaZ/T94spWFndH ychNT68M7UeHg1JmxHHPygoEY2ZHhiFov2HbQx/OUq4YLvtfYGTcFrHWvaXeDOUy NbojC8DCDjle+IvASi/DHNWMvElY8/C/hRjj4dqz9F28vnvQf9WskbaOguK7J2KJ zHuTxOSum2EUBFGOKdiOVxKfV06Ghr3zE7IvXqTbggzuotY/UJRrhAY= -----END CERTIFICATE-----Generated at Sun May 3 00:42:27 2026 by rpki-client