$ rpki-client -vvvf rpki-rsync.us-east-2.amazonaws.com/volume/bd48a1fa-3471-4ab2-8508-ad36b96813e4/manifest.mft File: manifest.mft (raw, json) Hash identifier: 4ol4KAcKSUlUbmyJFYe8lxLDvlGg1E3WueC+1LKnw+4= Subject key identifier: 58:6E:A2:07:23:82:D3:34:62:4C:76:37:EA:C0:22:6D:76:13:02:5C Authority key identifier: BC:E9:BA:11:29:2F:84:75:12:C0:A8:41:2E:51:E6:E3:BA:0D:99:1D Certificate issuer: /CN=A91609040001/serialNumber=BCE9BA11292F847512C0A8412E51E6E3BA0D991D Certificate serial: 26ACA6B0B07A159EA009E3E224BD01C9FA2E6258 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vOm6ESkvhHUSwKhBLlHm47oNmR0.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/bd48a1fa-3471-4ab2-8508-ad36b96813e4/manifest.mft Manifest number: 066B Signing time: Mon 02 Nov 2026 00:04:33 +0000 Manifest this update: Mon 02 Nov 2026 00:04:33 +0000 Manifest next update: Fri 06 Nov 2026 00:04:33 +0000 Files and hashes: 1: 177c9702-ee39-42d1-b76f-6cee77f4fb45.roa (hash: qfDCFklRSZy6qF1O8iPPjm/XUZaPn2bJ4RCH80bO8Ds=) 2: 197500e2-3802-44b2-a561-ca3dad01e209.roa (hash: D5YEv6LFdnrwCbRsDwsjGzEGVDM0zNLpwOMVcfpsT/4=) 3: 1dffeac8-b779-49ef-ba27-58bc19891e60.roa (hash: NxX/MXQMovzDhtOcN1Ualt1jzu+CQuLZP6OVMjVCqGY=) 4: 220cee0c-6002-409a-8194-38e216c0096c.crl (hash: FdwCgbUwNDargKBP/NP5JPanwishAQjHJyzCW/56eDY=) 5: 22707524-2248-48ea-815f-578f49b19436.roa (hash: IVXOKGD/y2rb9u1H3/BWvT6KdJrZ0agT6J4RwPkkmZE=) 6: 22d6913e-5f3d-4f99-9a60-48579f471838.roa (hash: FeWmM+81FaxGCqi3Z8xlNfnQF9/++CmzRc0yQVpy4Ug=) 7: 245fa4eb-6d0d-4df7-9e2d-29a7d39adcb9.roa (hash: 0Ow/tXW/884bxSmoDwoaOxFCu76VvuFVmDcjm/jKwzk=) 8: 3684e50c-c50f-4ebb-b327-e0759241197e.roa (hash: 0pOnvLYmCbOW9EEsTFAM1rwk9uutW+KDZmI6ZLNElkE=) 9: 3b8557c0-d5ee-4f9d-80ac-e41a37ffff27.roa (hash: yO/KAD+R+KaLntC+OyXpcsv5ZpgV6OnQ6rm8Yu/lFts=) 10: 42932dd4-2720-47b3-a472-fc2c8a50a46c.roa (hash: HX/o6GxzgaMFoEMJPlKFYgUrY8GHtzFeK3bEzPMtmJg=) 11: 43fd8687-12d4-49b5-9958-8536ce8160b4.roa (hash: yUFVs7G9ZqzDLfeTCAjmkwMZmDvB73NtVAJ5XVUWySg=) 12: 6b15abb6-10b7-4ecd-9947-c96012f824c6.roa (hash: p2qlrxKOzHV1Yg2Ojiz+vteawVmE4JZvAGOuIgdnMSs=) 13: 7b26d410-17d7-4310-bb58-41c465f8eef2.roa (hash: oqlTBc9CyIuYE9KYbNhsYqPdNnoMBzZX0D85Is+ml2c=) 14: 882a767c-0faf-4e71-a224-ecec47d98fcb.roa (hash: SVSc41yZpRl+8hUxmtgPb3tEXqrY9F94PCliWCC4azA=) 15: 8c170584-7c9b-414b-8cba-a934a0a79bbe.roa (hash: UKpKb7F6DnogywTjRW9bL/BVu11vhO7eAo9PeWFaxwc=) 16: 9e37f855-48bf-420a-a86c-5eeb4fc1f790.roa (hash: wv/XALieHNmWHJ4L6VooZmXjZEEkgxXVG9hW7kw4pts=) 17: adf75e2e-9d2c-4718-a49d-ad44079b266b.roa (hash: apbAlPjREJfBENsgX4/Ksr5U9F4BPlPVIurE6j4dAfU=) 18: cb2e5a8c-21f1-4679-a372-617732fc3ea6.roa (hash: r8VAzanebv6VsWYSGca7K8iteZUKfAuyOUsaaKmFn7Y=) 19: cebef322-460c-4f6e-8a8a-2f4b41debd9b.roa (hash: +ugoeW2aHUE1wrHqoRYbCRE9DM5hBHnRChNFGKznhmo=) 20: d953b731-7921-47dd-abf3-b7b8cc367900.roa (hash: iT10xNsnTtRY1ERCphH+uAprsrdQVfqvip4KbdMDwm0=) 21: e32c9cbd-a241-4df6-99bb-e7d15abe4b3b.roa (hash: 03hhECJ7vS9Ham5IQUTT91pPnI7nDorpnE1KUY87MYo=) 22: fcd6adab-06f0-4676-9568-6d4d48f7658c.roa (hash: UzPB51oYtAUm/8DkRY3gj1W4BpUt2oKlqQuyel4fjA8=) Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/bd48a1fa-3471-4ab2-8508-ad36b96813e4/220cee0c-6002-409a-8194-38e216c0096c.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/bd48a1fa-3471-4ab2-8508-ad36b96813e4/manifest.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vOm6ESkvhHUSwKhBLlHm47oNmR0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 06 Nov 2026 00:04:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 26:ac:a6:b0:b0:7a:15:9e:a0:09:e3:e2:24:bd:01:c9:fa:2e:62:58 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91609040001, serialNumber=BCE9BA11292F847512C0A8412E51E6E3BA0D991D Validity Not Before: Nov 2 00:04:33 2026 GMT Not After : Nov 6 00:04:33 2026 GMT Subject: serialNumber=ad9bb95bf37509432893bfe5f133ac13bd6e1b8236570705560f298c5f38b24a, CN=1684111e-31c1-42e6-8f20-fc9ab8b5cf57 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:db:42:23:d7:7e:b3:8f:b8:15:54:03:d0:f9:6c: ce:6b:0b:6a:32:59:8c:7d:1c:d7:e2:75:ec:ab:ce: 91:4e:7a:ef:2c:fd:36:bd:4f:92:8b:87:b8:22:e3: 76:0a:c6:05:cd:73:d6:1c:0f:89:8e:03:5a:9f:0a: 0f:72:75:b1:16:35:08:02:e6:8b:96:ff:c7:44:8b: 0b:06:40:53:93:68:96:da:5e:a6:14:27:9c:2d:71: 82:8f:d8:48:11:22:e8:7e:0f:4e:71:7b:00:85:0d: f9:65:c6:d2:3b:28:69:e8:86:e2:7e:2b:be:70:76: 3a:a4:d9:90:13:ce:98:c3:ab:fd:4d:f4:2d:9e:49: 8b:e8:c4:30:5d:f8:20:54:ca:00:d0:23:1b:dd:3b: bd:71:0a:da:a7:30:6b:14:98:85:26:96:0c:92:54: 55:cf:0b:bd:44:86:f5:85:d1:8f:ae:7b:f1:d0:ec: a2:8f:13:57:1b:44:39:20:7b:21:af:a2:43:ad:77: 15:b1:37:82:11:30:f8:7d:80:05:a2:d2:5b:69:ab: ec:4b:37:ea:c0:95:6e:89:ac:d1:da:43:d9:5c:fd: ba:1a:18:14:fc:0b:22:c4:05:f1:ef:1c:03:b0:16: 10:a2:d6:87:f5:6a:f6:6b:95:ff:57:23:6a:f3:0a: c3:57 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 58:6E:A2:07:23:82:D3:34:62:4C:76:37:EA:C0:22:6D:76:13:02:5C X509v3 Authority Key Identifier: keyid:BC:E9:BA:11:29:2F:84:75:12:C0:A8:41:2E:51:E6:E3:BA:0D:99:1D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vOm6ESkvhHUSwKhBLlHm47oNmR0.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/bd48a1fa-3471-4ab2-8508-ad36b96813e4/manifest.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/bd48a1fa-3471-4ab2-8508-ad36b96813e4/220cee0c-6002-409a-8194-38e216c0096c.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption d9:93:01:a3:7c:c9:2f:82:de:a6:69:f1:b5:66:6d:2d:3c:ba: 95:5b:34:d1:7e:c9:63:cd:ac:2a:ef:eb:94:05:3e:a6:33:93: 77:9b:1c:6a:14:1c:e7:ae:d2:30:4e:b5:f4:3e:34:15:cc:7a: 8d:f4:21:d1:ea:b8:48:16:b4:b7:28:8c:ce:2c:9c:33:91:50: f0:c9:65:56:ca:1d:cd:fd:e2:2a:0b:0e:65:f9:c4:e1:cd:94: 2e:c0:b0:83:e4:f9:5d:e3:ea:70:2f:5f:67:e3:d4:89:b8:b8: 86:ae:96:4c:b3:cd:f2:01:c8:49:70:9b:e7:a8:1a:78:fc:84: 34:1a:85:25:e4:b6:56:72:fa:07:52:6c:92:9b:10:38:44:e2: 9e:19:97:b9:6f:69:03:e7:80:05:6e:a6:cb:06:7a:64:d5:65: 80:09:ec:96:1c:05:3b:e7:11:ea:0a:01:12:36:c2:fc:86:8c: 58:89:d5:04:93:24:b2:e6:23:a7:15:f4:77:ca:eb:d5:5a:51: 06:d2:77:70:1f:6d:53:77:05:b6:87:be:2d:37:e7:63:eb:e9: d6:83:90:79:5e:84:dd:29:18:80:7a:90:7f:b5:13:81:13:ff: 66:ec:2c:b9:26:0b:2c:a3:e8:b0:0b:11:ef:9f:9c:5d:86:10: 09:cf:c9:81 -----BEGIN CERTIFICATE----- MIIFlTCCBH2gAwIBAgIUJqymsLB6FZ6gCePiJL0ByfouYlgwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxNjA5MDQwMDAxMTEwLwYDVQQFEyhCQ0U5QkExMTI5 MkY4NDc1MTJDMEE4NDEyRTUxRTZFM0JBMEQ5OTFEMB4XDTI2MTEwMjAwMDQzM1oX DTI2MTEwNjAwMDQzM1owejFJMEcGA1UEBRNAYWQ5YmI5NWJmMzc1MDk0MzI4OTNi ZmU1ZjEzM2FjMTNiZDZlMWI4MjM2NTcwNzA1NTYwZjI5OGM1ZjM4YjI0YTEtMCsG A1UEAxMkMTY4NDExMWUtMzFjMS00MmU2LThmMjAtZmM5YWI4YjVjZjU3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA20Ij136zj7gVVAPQ+WzOawtqMlmM fRzX4nXsq86RTnrvLP02vU+Si4e4IuN2CsYFzXPWHA+JjgNanwoPcnWxFjUIAuaL lv/HRIsLBkBTk2iW2l6mFCecLXGCj9hIESLofg9OcXsAhQ35ZcbSOyhp6Ibifiu+ cHY6pNmQE86Yw6v9TfQtnkmL6MQwXfggVMoA0CMb3Tu9cQrapzBrFJiFJpYMklRV zwu9RIb1hdGPrnvx0OyijxNXG0Q5IHshr6JDrXcVsTeCETD4fYAFotJbaavsSzfq wJVuiazR2kPZXP26GhgU/AsixAXx7xwDsBYQotaH9Wr2a5X/VyNq8wrDVwIDAQAB o4ICQTCCAj0wHQYDVR0OBBYEFFhuogcjgtM0Ykx2N+rAIm12EwJcMB8GA1UdIwQY MBaAFLzpuhEpL4R1EsCoQS5R5uO6DZkdMA4GA1UdDwEB/wQEAwIHgDB+BggrBgEF BQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVw b3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi92T202RVNr dmhIVVN3S2hCTGxIbTQ3b05tUjAuY2VyMH8GCCsGAQUFBwELBHMwcTBvBggrBgEF BQcwC4ZjcnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5hbWF6b25hd3MuY29t L3ZvbHVtZS9iZDQ4YTFmYS0zNDcxLTRhYjItODUwOC1hZDM2Yjk2ODEzZTQvbWFu aWZlc3QubWZ0MIGVBgNVHR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnBraS1y c3luYy51cy1lYXN0LTIuYW1hem9uYXdzLmNvbS92b2x1bWUvYmQ0OGExZmEtMzQ3 MS00YWIyLTg1MDgtYWQzNmI5NjgxM2U0LzIyMGNlZTBjLTYwMDItNDA5YS04MTk0 LTM4ZTIxNmMwMDk2Yy5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggr BgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYw BKACBQAwDQYJKoZIhvcNAQELBQADggEBANmTAaN8yS+C3qZp8bVmbS08upVbNNF+ yWPNrCrv65QFPqYzk3ebHGoUHOeu0jBOtfQ+NBXMeo30IdHquEgWtLcojM4snDOR UPDJZVbKHc394ioLDmX5xOHNlC7AsIPk+V3j6nAvX2fj1Im4uIaulkyzzfIByElw m+eoGnj8hDQahSXktlZy+gdSbJKbEDhE4p4Zl7lvaQPngAVupssGemTVZYAJ7JYc BTvnEeoKARI2wvyGjFiJ1QSTJLLmI6cV9HfK69VaUQbSd3AfbVN3BbaHvi0352Pr 6daDkHlehN0pGIB6kH+1E4ET/2bsLLkmCyyj6LALEe+fnF2GEAnPyYE= -----END CERTIFICATE-----Generated at Mon Nov 2 20:47:28 2026 by rpki-client