$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/bd48a1fa-3471-4ab2-8508-ad36b96813e4/manifest.mft File: manifest.mft (raw, json) Hash identifier: zQKo+abiI8LrF/5n6fV/oDySzkX3Ax8oBReQskflXE8= Subject key identifier: 5D:89:73:62:8D:C1:45:6E:2E:31:08:A3:DC:8D:60:DC:B3:A4:11:94 Authority key identifier: BC:E9:BA:11:29:2F:84:75:12:C0:A8:41:2E:51:E6:E3:BA:0D:99:1D Certificate issuer: /CN=A91609040001/serialNumber=BCE9BA11292F847512C0A8412E51E6E3BA0D991D Certificate serial: 74A3E842735FECD97D0D39E1ADE971659E002E75 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vOm6ESkvhHUSwKhBLlHm47oNmR0.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/bd48a1fa-3471-4ab2-8508-ad36b96813e4/manifest.mft Manifest number: 0595 Signing time: Sun 05 Apr 2026 00:09:55 +0000 Manifest this update: Sun 05 Apr 2026 00:09:55 +0000 Manifest next update: Thu 09 Apr 2026 00:09:55 +0000 Files and hashes: 1: 177c9702-ee39-42d1-b76f-6cee77f4fb45.roa (hash: 0e0o/tkj5uh6jJbrl8YvGeNAneNpldaUPLcDYFgyoBI=) 2: 197500e2-3802-44b2-a561-ca3dad01e209.roa (hash: 1l+gLwyU/H4HNaQ0uYL3F1eW99PrBxN74OxZSMVTb64=) 3: 1dffeac8-b779-49ef-ba27-58bc19891e60.roa (hash: cBXtNI3VbGLGZEDX6FlUDTPJNJ35d5uKk0qGRhvviKM=) 4: 220cee0c-6002-409a-8194-38e216c0096c.crl (hash: 87Jzx6SWSXmGME59wglp7TBmfSOqwJsW5pXtik/TN0c=) 5: 22707524-2248-48ea-815f-578f49b19436.roa (hash: n8mdK97d/Vw0NB0uqE1Lu/NAcKYHksxdIYeyBefJ5e0=) 6: 22d6913e-5f3d-4f99-9a60-48579f471838.roa (hash: VNTjv8zj56XPQscVA1nVjmEH4qZHD6SH0x107VrlxlE=) 7: 245fa4eb-6d0d-4df7-9e2d-29a7d39adcb9.roa (hash: uyHF6RDXBqu8/m5/rxS9tqyNKt4hFLLacYUMWBiJ3LY=) 8: 3684e50c-c50f-4ebb-b327-e0759241197e.roa (hash: zmCV/d5bpLoSS+zvApJ7r/z/pnc55m95Bh5MUhoeQPU=) 9: 3b8557c0-d5ee-4f9d-80ac-e41a37ffff27.roa (hash: 46SkQknDcBfOGQwbNRfMD6C/4bRPxr72VMFVTNETTU8=) 10: 42932dd4-2720-47b3-a472-fc2c8a50a46c.roa (hash: iNY6C3I93M/b88ycFa4wj9iSAtZRjCOVsp9Gf/bWmT8=) 11: 43fd8687-12d4-49b5-9958-8536ce8160b4.roa (hash: pklnbVub/fuu34AybFXOGT+PdGgA5UEdWQ9SFNOmiw4=) 12: 6b15abb6-10b7-4ecd-9947-c96012f824c6.roa (hash: doGDeV/JZpETUW2CE9tY+Z4Pwxu5xmhr4Vl+a0gqJU8=) 13: 7b26d410-17d7-4310-bb58-41c465f8eef2.roa (hash: zZSdfeX8NNWn6l7ff8TltCcHKYzcM1IAhXvaT99erpc=) 14: 882a767c-0faf-4e71-a224-ecec47d98fcb.roa (hash: SbC+1TuCvU+jX8YVK+7obHcSTkPpgYNWlTlRRoFqGKo=) 15: 8c170584-7c9b-414b-8cba-a934a0a79bbe.roa (hash: 6SXvrQCVtJ9I7yKXy5cpiG6IXfqjfmiQZzvT8SNuDyE=) 16: 9e37f855-48bf-420a-a86c-5eeb4fc1f790.roa (hash: ZLXxMwM4vDfoBdxGaRhMGTm+FfO6E/g3I0EGSRmBbYY=) 17: adf75e2e-9d2c-4718-a49d-ad44079b266b.roa (hash: fB2mXgwfTDMHGU9TN7w89E4Dzg6sh/SSFtPBROFGSJg=) 18: cb2e5a8c-21f1-4679-a372-617732fc3ea6.roa (hash: zVg+chZsOqM0G5PhFIXsidezF7tDS/5injSaQlsHP78=) 19: cebef322-460c-4f6e-8a8a-2f4b41debd9b.roa (hash: NlFUv6dJwsR3RjMmUp1VN/OlvhJ1TaIgnS+8Z9Ov1Us=) 20: d953b731-7921-47dd-abf3-b7b8cc367900.roa (hash: +2Ox8MRpSKcyTvXMAxijBxiUi8rZJNCBj7CY+0WEQd4=) 21: e32c9cbd-a241-4df6-99bb-e7d15abe4b3b.roa (hash: EbVvusiwIRiiG6aIZrh85ZC5dtWbNE/O92xrlXFEtg0=) 22: fcd6adab-06f0-4676-9568-6d4d48f7658c.roa (hash: kOpfYh9nuQ7s0H/UIYwh+6amJBF7Bcdr+fTO2DNuSiA=) Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/bd48a1fa-3471-4ab2-8508-ad36b96813e4/220cee0c-6002-409a-8194-38e216c0096c.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/bd48a1fa-3471-4ab2-8508-ad36b96813e4/manifest.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vOm6ESkvhHUSwKhBLlHm47oNmR0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 09 Apr 2026 00:09:55 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 74:a3:e8:42:73:5f:ec:d9:7d:0d:39:e1:ad:e9:71:65:9e:00:2e:75 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91609040001, serialNumber=BCE9BA11292F847512C0A8412E51E6E3BA0D991D Validity Not Before: Apr 5 00:09:55 2026 GMT Not After : Apr 9 00:09:55 2026 GMT Subject: serialNumber=8a809e9304d650610cc442e62bb369120924ac6de7bed203bd50bf33372b0cc0, CN=1684111e-31c1-42e6-8f20-fc9ab8b5cf57 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:a3:63:bc:9c:4c:13:be:1b:a1:92:bb:0b:3b: f8:b8:76:98:78:8b:ca:25:1a:cc:4c:9a:b4:43:ca: 41:f0:cd:1d:f0:07:cf:78:73:fb:4b:03:9b:68:73: b0:55:32:65:e9:52:3b:9c:42:16:d6:1b:3c:29:19: 27:f0:bb:6e:ce:89:e0:2d:21:23:95:6a:ca:84:6d: ee:0e:a9:89:e0:77:0a:5f:61:70:0b:f6:00:15:35: 62:21:fc:ce:1a:f3:bb:76:ba:9d:6f:f3:32:ab:00: 08:3f:8d:f4:65:74:a0:ec:e6:b6:6e:06:f8:80:4a: 2f:93:8f:f7:14:ae:3b:75:14:ba:a5:7b:5d:a6:53: f5:fa:77:8e:b5:1b:9a:be:5d:b0:e3:16:3e:0d:f0: de:93:06:57:e7:94:f3:0e:91:42:e6:e5:f2:da:c6: 28:2e:bc:84:ed:23:ef:81:d4:8b:87:85:89:60:c6: 09:7d:44:ce:e9:9a:a1:ad:f8:e1:ae:00:9a:c6:51: e6:13:1e:b9:82:06:db:a6:9f:19:34:36:ca:59:73: cc:a0:a9:48:fa:0b:fb:11:88:da:5d:d1:f4:f9:1b: fc:56:df:18:50:db:b5:55:c7:57:53:1d:4d:5c:13: db:e7:70:65:05:0d:c6:81:63:1e:76:3e:3e:54:4e: 4c:89 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5D:89:73:62:8D:C1:45:6E:2E:31:08:A3:DC:8D:60:DC:B3:A4:11:94 X509v3 Authority Key Identifier: keyid:BC:E9:BA:11:29:2F:84:75:12:C0:A8:41:2E:51:E6:E3:BA:0D:99:1D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vOm6ESkvhHUSwKhBLlHm47oNmR0.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/bd48a1fa-3471-4ab2-8508-ad36b96813e4/manifest.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/bd48a1fa-3471-4ab2-8508-ad36b96813e4/220cee0c-6002-409a-8194-38e216c0096c.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 4d:1d:79:92:55:ea:a0:27:9d:89:5e:40:50:48:83:ff:4f:b1: 09:9f:d9:d6:5d:8a:84:04:2f:48:93:d2:ed:7f:cb:f3:9e:53: e8:ba:4e:3f:ed:94:e7:25:0b:3d:99:db:52:4c:1f:2a:ba:67: 40:2b:36:a5:91:6f:69:d8:05:88:dc:5a:64:d8:4d:87:21:8b: e4:4c:ee:1e:74:63:ca:5d:0b:43:5c:f4:14:aa:1e:21:7d:66: 57:28:6b:84:c1:69:25:72:ad:2b:33:71:a1:10:5f:03:f0:1b: 83:6c:a8:95:8d:b3:37:48:60:8b:f9:30:84:c6:99:98:ac:34: bb:64:d6:52:66:28:35:2c:f9:31:e3:13:a3:fa:71:9f:52:5a: bd:f9:f2:10:bb:ca:11:31:63:cb:70:f0:98:66:6a:9c:82:d0: 77:23:c6:2a:c7:e0:56:a1:bb:20:58:94:dd:27:5b:8e:25:b0: 90:d5:13:75:ff:e1:00:00:da:2d:45:79:0a:56:95:89:ae:a5: c4:52:13:7d:09:e7:4a:e2:56:98:f1:67:b9:aa:92:38:e1:e7: 87:71:7e:7d:25:d5:fc:04:3c:22:ea:5b:4e:c4:fd:03:71:31: 3d:de:94:81:65:f3:f1:8c:db:0e:98:6d:fb:35:81:7a:81:4d: 43:7a:3b:9d -----BEGIN CERTIFICATE----- MIIFlTCCBH2gAwIBAgIUdKPoQnNf7Nl9DTnhrelxZZ4ALnUwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxNjA5MDQwMDAxMTEwLwYDVQQFEyhCQ0U5QkExMTI5 MkY4NDc1MTJDMEE4NDEyRTUxRTZFM0JBMEQ5OTFEMB4XDTI2MDQwNTAwMDk1NVoX DTI2MDQwOTAwMDk1NVowejFJMEcGA1UEBRNAOGE4MDllOTMwNGQ2NTA2MTBjYzQ0 MmU2MmJiMzY5MTIwOTI0YWM2ZGU3YmVkMjAzYmQ1MGJmMzMzNzJiMGNjMDEtMCsG A1UEAxMkMTY4NDExMWUtMzFjMS00MmU2LThmMjAtZmM5YWI4YjVjZjU3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwqNjvJxME74boZK7Czv4uHaYeIvK JRrMTJq0Q8pB8M0d8AfPeHP7SwObaHOwVTJl6VI7nEIW1hs8KRkn8LtuzongLSEj lWrKhG3uDqmJ4HcKX2FwC/YAFTViIfzOGvO7drqdb/MyqwAIP430ZXSg7Oa2bgb4 gEovk4/3FK47dRS6pXtdplP1+neOtRuavl2w4xY+DfDekwZX55TzDpFC5uXy2sYo LryE7SPvgdSLh4WJYMYJfUTO6ZqhrfjhrgCaxlHmEx65ggbbpp8ZNDbKWXPMoKlI +gv7EYjaXdH0+Rv8Vt8YUNu1VcdXUx1NXBPb53BlBQ3GgWMedj4+VE5MiQIDAQAB o4ICQTCCAj0wHQYDVR0OBBYEFF2Jc2KNwUVuLjEIo9yNYNyzpBGUMB8GA1UdIwQY MBaAFLzpuhEpL4R1EsCoQS5R5uO6DZkdMA4GA1UdDwEB/wQEAwIHgDB+BggrBgEF BQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVw b3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi92T202RVNr dmhIVVN3S2hCTGxIbTQ3b05tUjAuY2VyMH8GCCsGAQUFBwELBHMwcTBvBggrBgEF BQcwC4ZjcnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5hbWF6b25hd3MuY29t L3ZvbHVtZS9iZDQ4YTFmYS0zNDcxLTRhYjItODUwOC1hZDM2Yjk2ODEzZTQvbWFu aWZlc3QubWZ0MIGVBgNVHR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnBraS1y c3luYy51cy1lYXN0LTIuYW1hem9uYXdzLmNvbS92b2x1bWUvYmQ0OGExZmEtMzQ3 MS00YWIyLTg1MDgtYWQzNmI5NjgxM2U0LzIyMGNlZTBjLTYwMDItNDA5YS04MTk0 LTM4ZTIxNmMwMDk2Yy5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggr BgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYw BKACBQAwDQYJKoZIhvcNAQELBQADggEBAE0deZJV6qAnnYleQFBIg/9PsQmf2dZd ioQEL0iT0u1/y/OeU+i6Tj/tlOclCz2Z21JMHyq6Z0ArNqWRb2nYBYjcWmTYTYch i+RM7h50Y8pdC0Nc9BSqHiF9Zlcoa4TBaSVyrSszcaEQXwPwG4NsqJWNszdIYIv5 MITGmZisNLtk1lJmKDUs+THjE6P6cZ9SWr358hC7yhExY8tw8JhmapyC0HcjxirH 4FahuyBYlN0nW44lsJDVE3X/4QAA2i1FeQpWlYmupcRSE30J50riVpjxZ7mqkjjh 54dxfn0l1fwEPCLqW07E/QNxMT3elIFl8/GM2w6Ybfs1gXqBTUN6O50= -----END CERTIFICATE-----Generated at Sun Apr 5 15:38:32 2026 by rpki-client