$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/bd48a1fa-3471-4ab2-8508-ad36b96813e4/manifest.mft File: manifest.mft (raw, json) Hash identifier: lQv9DXIMVOy1gFto8hLobXfiELlJ3EiWsftzlvS6ZIw= Subject key identifier: 3E:AA:0C:6F:14:AB:A6:1C:3F:F4:79:EE:02:E7:B9:65:CD:36:41:56 Authority key identifier: BC:E9:BA:11:29:2F:84:75:12:C0:A8:41:2E:51:E6:E3:BA:0D:99:1D Certificate issuer: /CN=A91609040001/serialNumber=BCE9BA11292F847512C0A8412E51E6E3BA0D991D Certificate serial: 0A64E348CB1A7679A41B606C0E7C26E862FB0F2C Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vOm6ESkvhHUSwKhBLlHm47oNmR0.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/bd48a1fa-3471-4ab2-8508-ad36b96813e4/manifest.mft Manifest number: 057F Signing time: Sat 14 Mar 2026 00:04:29 +0000 Manifest this update: Sat 14 Mar 2026 00:04:29 +0000 Manifest next update: Wed 18 Mar 2026 00:04:29 +0000 Files and hashes: 1: 177c9702-ee39-42d1-b76f-6cee77f4fb45.roa (hash: 0e0o/tkj5uh6jJbrl8YvGeNAneNpldaUPLcDYFgyoBI=) 2: 197500e2-3802-44b2-a561-ca3dad01e209.roa (hash: 1l+gLwyU/H4HNaQ0uYL3F1eW99PrBxN74OxZSMVTb64=) 3: 1dffeac8-b779-49ef-ba27-58bc19891e60.roa (hash: cBXtNI3VbGLGZEDX6FlUDTPJNJ35d5uKk0qGRhvviKM=) 4: 220cee0c-6002-409a-8194-38e216c0096c.crl (hash: S4uRvD+77HEGFvdDOMMTRHZaj7OPDrxfVEOFnlbhPyw=) 5: 22707524-2248-48ea-815f-578f49b19436.roa (hash: n8mdK97d/Vw0NB0uqE1Lu/NAcKYHksxdIYeyBefJ5e0=) 6: 22d6913e-5f3d-4f99-9a60-48579f471838.roa (hash: VNTjv8zj56XPQscVA1nVjmEH4qZHD6SH0x107VrlxlE=) 7: 245fa4eb-6d0d-4df7-9e2d-29a7d39adcb9.roa (hash: uyHF6RDXBqu8/m5/rxS9tqyNKt4hFLLacYUMWBiJ3LY=) 8: 3684e50c-c50f-4ebb-b327-e0759241197e.roa (hash: zmCV/d5bpLoSS+zvApJ7r/z/pnc55m95Bh5MUhoeQPU=) 9: 3b8557c0-d5ee-4f9d-80ac-e41a37ffff27.roa (hash: 46SkQknDcBfOGQwbNRfMD6C/4bRPxr72VMFVTNETTU8=) 10: 42932dd4-2720-47b3-a472-fc2c8a50a46c.roa (hash: iNY6C3I93M/b88ycFa4wj9iSAtZRjCOVsp9Gf/bWmT8=) 11: 43fd8687-12d4-49b5-9958-8536ce8160b4.roa (hash: pklnbVub/fuu34AybFXOGT+PdGgA5UEdWQ9SFNOmiw4=) 12: 6b15abb6-10b7-4ecd-9947-c96012f824c6.roa (hash: doGDeV/JZpETUW2CE9tY+Z4Pwxu5xmhr4Vl+a0gqJU8=) 13: 7b26d410-17d7-4310-bb58-41c465f8eef2.roa (hash: zZSdfeX8NNWn6l7ff8TltCcHKYzcM1IAhXvaT99erpc=) 14: 882a767c-0faf-4e71-a224-ecec47d98fcb.roa (hash: SbC+1TuCvU+jX8YVK+7obHcSTkPpgYNWlTlRRoFqGKo=) 15: 8c170584-7c9b-414b-8cba-a934a0a79bbe.roa (hash: 6SXvrQCVtJ9I7yKXy5cpiG6IXfqjfmiQZzvT8SNuDyE=) 16: 9e37f855-48bf-420a-a86c-5eeb4fc1f790.roa (hash: ZLXxMwM4vDfoBdxGaRhMGTm+FfO6E/g3I0EGSRmBbYY=) 17: adf75e2e-9d2c-4718-a49d-ad44079b266b.roa (hash: fB2mXgwfTDMHGU9TN7w89E4Dzg6sh/SSFtPBROFGSJg=) 18: cb2e5a8c-21f1-4679-a372-617732fc3ea6.roa (hash: zVg+chZsOqM0G5PhFIXsidezF7tDS/5injSaQlsHP78=) 19: cebef322-460c-4f6e-8a8a-2f4b41debd9b.roa (hash: NlFUv6dJwsR3RjMmUp1VN/OlvhJ1TaIgnS+8Z9Ov1Us=) 20: d953b731-7921-47dd-abf3-b7b8cc367900.roa (hash: +2Ox8MRpSKcyTvXMAxijBxiUi8rZJNCBj7CY+0WEQd4=) 21: e32c9cbd-a241-4df6-99bb-e7d15abe4b3b.roa (hash: EbVvusiwIRiiG6aIZrh85ZC5dtWbNE/O92xrlXFEtg0=) 22: fcd6adab-06f0-4676-9568-6d4d48f7658c.roa (hash: kOpfYh9nuQ7s0H/UIYwh+6amJBF7Bcdr+fTO2DNuSiA=) Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/bd48a1fa-3471-4ab2-8508-ad36b96813e4/220cee0c-6002-409a-8194-38e216c0096c.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/bd48a1fa-3471-4ab2-8508-ad36b96813e4/manifest.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vOm6ESkvhHUSwKhBLlHm47oNmR0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 18 Mar 2026 00:04:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0a:64:e3:48:cb:1a:76:79:a4:1b:60:6c:0e:7c:26:e8:62:fb:0f:2c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91609040001, serialNumber=BCE9BA11292F847512C0A8412E51E6E3BA0D991D Validity Not Before: Mar 14 00:04:29 2026 GMT Not After : Mar 18 00:04:29 2026 GMT Subject: serialNumber=b3a5a210c7163fff02f96c46a782db700106fb604fda99207e09e203e42c77a3, CN=1684111e-31c1-42e6-8f20-fc9ab8b5cf57 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:32:ee:de:18:9b:83:ba:0d:c4:db:84:a7:f3: 52:88:13:ef:bf:b0:c5:e0:03:db:90:86:e8:1c:3c: 66:df:b0:1b:21:7f:7d:56:29:ae:45:36:a0:04:2c: 13:82:30:42:a5:62:ad:f8:7c:88:16:ee:a2:a2:3e: 46:ef:bd:fd:8b:57:ab:1f:9c:e5:6f:9b:96:fe:47: df:3e:77:df:59:28:c3:91:f7:a7:85:43:0b:d1:be: 79:e7:2d:5f:c0:8e:bb:20:92:a4:d8:90:29:2c:31: bc:70:bb:43:25:df:51:4a:9f:51:26:9b:61:28:90: 03:90:df:8e:69:5d:7b:3a:20:c6:d2:60:6e:83:74: 61:6a:e1:85:71:57:bd:9a:45:48:81:ec:ab:33:8b: d2:d8:c5:37:bf:6f:90:4f:88:aa:f1:e4:d8:45:08: 81:18:38:fa:39:8f:44:da:86:9c:4e:11:e7:ff:19: eb:e6:59:72:6b:d3:6b:d3:dd:d4:99:31:5e:65:27: 87:70:ab:7b:f8:9e:88:ab:ab:1d:22:eb:86:7f:8b: 0a:50:dd:bb:30:20:f9:17:51:a1:96:02:91:bb:f4: c8:cb:68:b1:6a:18:32:96:83:62:0a:96:03:5b:87: 34:f7:55:3d:e5:db:da:89:14:b6:40:b1:ce:1a:86: 86:f5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3E:AA:0C:6F:14:AB:A6:1C:3F:F4:79:EE:02:E7:B9:65:CD:36:41:56 X509v3 Authority Key Identifier: keyid:BC:E9:BA:11:29:2F:84:75:12:C0:A8:41:2E:51:E6:E3:BA:0D:99:1D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vOm6ESkvhHUSwKhBLlHm47oNmR0.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/bd48a1fa-3471-4ab2-8508-ad36b96813e4/manifest.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/bd48a1fa-3471-4ab2-8508-ad36b96813e4/220cee0c-6002-409a-8194-38e216c0096c.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 57:d8:05:01:83:00:43:f1:b9:18:ed:92:3c:90:bf:d4:62:f9: bf:94:e4:6f:1c:04:2b:3a:51:88:3d:7d:3d:df:d1:43:82:8f: e2:67:18:81:00:4a:51:d1:94:71:e1:5e:4c:00:12:67:4a:64: d1:c3:5c:5f:0c:64:18:6a:86:fb:01:29:1e:a5:88:8d:15:8e: 4b:62:35:09:4c:2f:5e:9d:1c:ff:d2:e4:a7:4d:1f:28:e2:2d: 4f:1e:66:07:c1:65:e2:58:32:58:bd:c1:a3:fb:c7:be:b8:77: 6c:b0:6c:74:24:2f:f3:61:7c:ac:d4:20:a7:50:9b:28:fe:f3: 93:df:8c:ee:78:34:a3:ea:7a:45:1d:01:fb:64:4b:5a:7c:bd: da:db:ba:c4:c5:ff:d7:07:31:3c:5d:82:bb:55:fb:8b:0a:6d: 97:57:70:6e:08:b7:08:e9:b1:f2:1a:3a:a9:bf:5d:54:b1:fd: bc:94:4b:99:ed:f2:da:c3:4f:29:39:47:86:49:2f:da:f9:f5: 2f:75:22:05:44:d6:fb:cd:f6:b8:eb:78:b5:71:3e:3c:5a:2b: 11:44:9d:9b:29:7c:8d:74:de:ff:42:71:f4:22:5e:2e:ff:1a: 8b:32:4c:dc:29:69:05:03:13:4e:e1:91:00:31:b7:f4:c1:07: 1e:f4:a7:3c -----BEGIN CERTIFICATE----- MIIFlTCCBH2gAwIBAgIUCmTjSMsadnmkG2BsDnwm6GL7DywwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxNjA5MDQwMDAxMTEwLwYDVQQFEyhCQ0U5QkExMTI5 MkY4NDc1MTJDMEE4NDEyRTUxRTZFM0JBMEQ5OTFEMB4XDTI2MDMxNDAwMDQyOVoX DTI2MDMxODAwMDQyOVowejFJMEcGA1UEBRNAYjNhNWEyMTBjNzE2M2ZmZjAyZjk2 YzQ2YTc4MmRiNzAwMTA2ZmI2MDRmZGE5OTIwN2UwOWUyMDNlNDJjNzdhMzEtMCsG A1UEAxMkMTY4NDExMWUtMzFjMS00MmU2LThmMjAtZmM5YWI4YjVjZjU3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxTLu3hibg7oNxNuEp/NSiBPvv7DF 4APbkIboHDxm37AbIX99VimuRTagBCwTgjBCpWKt+HyIFu6ioj5G7739i1erH5zl b5uW/kffPnffWSjDkfenhUML0b555y1fwI67IJKk2JApLDG8cLtDJd9RSp9RJpth KJADkN+OaV17OiDG0mBug3RhauGFcVe9mkVIgeyrM4vS2MU3v2+QT4iq8eTYRQiB GDj6OY9E2oacThHn/xnr5llya9Nr093UmTFeZSeHcKt7+J6Iq6sdIuuGf4sKUN27 MCD5F1GhlgKRu/TIy2ixahgyloNiCpYDW4c091U95dvaiRS2QLHOGoaG9QIDAQAB o4ICQTCCAj0wHQYDVR0OBBYEFD6qDG8Uq6YcP/R57gLnuWXNNkFWMB8GA1UdIwQY MBaAFLzpuhEpL4R1EsCoQS5R5uO6DZkdMA4GA1UdDwEB/wQEAwIHgDB+BggrBgEF BQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVw b3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi92T202RVNr dmhIVVN3S2hCTGxIbTQ3b05tUjAuY2VyMH8GCCsGAQUFBwELBHMwcTBvBggrBgEF BQcwC4ZjcnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5hbWF6b25hd3MuY29t L3ZvbHVtZS9iZDQ4YTFmYS0zNDcxLTRhYjItODUwOC1hZDM2Yjk2ODEzZTQvbWFu aWZlc3QubWZ0MIGVBgNVHR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnBraS1y c3luYy51cy1lYXN0LTIuYW1hem9uYXdzLmNvbS92b2x1bWUvYmQ0OGExZmEtMzQ3 MS00YWIyLTg1MDgtYWQzNmI5NjgxM2U0LzIyMGNlZTBjLTYwMDItNDA5YS04MTk0 LTM4ZTIxNmMwMDk2Yy5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggr BgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYw BKACBQAwDQYJKoZIhvcNAQELBQADggEBAFfYBQGDAEPxuRjtkjyQv9Ri+b+U5G8c BCs6UYg9fT3f0UOCj+JnGIEASlHRlHHhXkwAEmdKZNHDXF8MZBhqhvsBKR6liI0V jktiNQlML16dHP/S5KdNHyjiLU8eZgfBZeJYMli9waP7x764d2ywbHQkL/NhfKzU IKdQmyj+85PfjO54NKPqekUdAftkS1p8vdrbusTF/9cHMTxdgrtV+4sKbZdXcG4I twjpsfIaOqm/XVSx/byUS5nt8trDTyk5R4ZJL9r59S91IgVE1vvN9rjreLVxPjxa KxFEnZspfI103v9CcfQiXi7/GosyTNwpaQUDE07hkQAxt/TBBx70pzw= -----END CERTIFICATE-----Generated at Sat Mar 14 18:41:35 2026 by rpki-client