$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/bd48a1fa-3471-4ab2-8508-ad36b96813e4/manifest.mft File: manifest.mft (raw, json) Hash identifier: sN9xEQDqycr5SrYbzPCUAbMmCgg++Fv1zN/NdJ0+f6g= Subject key identifier: 4A:F0:FA:EE:6E:87:DB:38:B4:D2:3C:45:8D:35:55:F9:2B:85:AD:75 Authority key identifier: BC:E9:BA:11:29:2F:84:75:12:C0:A8:41:2E:51:E6:E3:BA:0D:99:1D Certificate issuer: /CN=A91609040001/serialNumber=BCE9BA11292F847512C0A8412E51E6E3BA0D991D Certificate serial: 5A90CCC6777B5D507C24D9850348D44C4010539C Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vOm6ESkvhHUSwKhBLlHm47oNmR0.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/bd48a1fa-3471-4ab2-8508-ad36b96813e4/manifest.mft Manifest number: 05A5 Signing time: Tue 21 Apr 2026 00:13:36 +0000 Manifest this update: Tue 21 Apr 2026 00:13:36 +0000 Manifest next update: Sat 25 Apr 2026 00:13:36 +0000 Files and hashes: 1: 177c9702-ee39-42d1-b76f-6cee77f4fb45.roa (hash: 0e0o/tkj5uh6jJbrl8YvGeNAneNpldaUPLcDYFgyoBI=) 2: 197500e2-3802-44b2-a561-ca3dad01e209.roa (hash: 1l+gLwyU/H4HNaQ0uYL3F1eW99PrBxN74OxZSMVTb64=) 3: 1dffeac8-b779-49ef-ba27-58bc19891e60.roa (hash: cBXtNI3VbGLGZEDX6FlUDTPJNJ35d5uKk0qGRhvviKM=) 4: 220cee0c-6002-409a-8194-38e216c0096c.crl (hash: 751MZjxAbCmELC3FvLj9Sg3YWixSE9VY4oAp/v4HH78=) 5: 22707524-2248-48ea-815f-578f49b19436.roa (hash: n8mdK97d/Vw0NB0uqE1Lu/NAcKYHksxdIYeyBefJ5e0=) 6: 22d6913e-5f3d-4f99-9a60-48579f471838.roa (hash: VNTjv8zj56XPQscVA1nVjmEH4qZHD6SH0x107VrlxlE=) 7: 245fa4eb-6d0d-4df7-9e2d-29a7d39adcb9.roa (hash: uyHF6RDXBqu8/m5/rxS9tqyNKt4hFLLacYUMWBiJ3LY=) 8: 3684e50c-c50f-4ebb-b327-e0759241197e.roa (hash: zmCV/d5bpLoSS+zvApJ7r/z/pnc55m95Bh5MUhoeQPU=) 9: 3b8557c0-d5ee-4f9d-80ac-e41a37ffff27.roa (hash: 46SkQknDcBfOGQwbNRfMD6C/4bRPxr72VMFVTNETTU8=) 10: 42932dd4-2720-47b3-a472-fc2c8a50a46c.roa (hash: iNY6C3I93M/b88ycFa4wj9iSAtZRjCOVsp9Gf/bWmT8=) 11: 43fd8687-12d4-49b5-9958-8536ce8160b4.roa (hash: pklnbVub/fuu34AybFXOGT+PdGgA5UEdWQ9SFNOmiw4=) 12: 6b15abb6-10b7-4ecd-9947-c96012f824c6.roa (hash: doGDeV/JZpETUW2CE9tY+Z4Pwxu5xmhr4Vl+a0gqJU8=) 13: 7b26d410-17d7-4310-bb58-41c465f8eef2.roa (hash: zZSdfeX8NNWn6l7ff8TltCcHKYzcM1IAhXvaT99erpc=) 14: 882a767c-0faf-4e71-a224-ecec47d98fcb.roa (hash: SbC+1TuCvU+jX8YVK+7obHcSTkPpgYNWlTlRRoFqGKo=) 15: 8c170584-7c9b-414b-8cba-a934a0a79bbe.roa (hash: 6SXvrQCVtJ9I7yKXy5cpiG6IXfqjfmiQZzvT8SNuDyE=) 16: 9e37f855-48bf-420a-a86c-5eeb4fc1f790.roa (hash: ZLXxMwM4vDfoBdxGaRhMGTm+FfO6E/g3I0EGSRmBbYY=) 17: adf75e2e-9d2c-4718-a49d-ad44079b266b.roa (hash: fB2mXgwfTDMHGU9TN7w89E4Dzg6sh/SSFtPBROFGSJg=) 18: cb2e5a8c-21f1-4679-a372-617732fc3ea6.roa (hash: zVg+chZsOqM0G5PhFIXsidezF7tDS/5injSaQlsHP78=) 19: cebef322-460c-4f6e-8a8a-2f4b41debd9b.roa (hash: NlFUv6dJwsR3RjMmUp1VN/OlvhJ1TaIgnS+8Z9Ov1Us=) 20: d953b731-7921-47dd-abf3-b7b8cc367900.roa (hash: +2Ox8MRpSKcyTvXMAxijBxiUi8rZJNCBj7CY+0WEQd4=) 21: e32c9cbd-a241-4df6-99bb-e7d15abe4b3b.roa (hash: EbVvusiwIRiiG6aIZrh85ZC5dtWbNE/O92xrlXFEtg0=) 22: fcd6adab-06f0-4676-9568-6d4d48f7658c.roa (hash: kOpfYh9nuQ7s0H/UIYwh+6amJBF7Bcdr+fTO2DNuSiA=) Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/bd48a1fa-3471-4ab2-8508-ad36b96813e4/220cee0c-6002-409a-8194-38e216c0096c.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/bd48a1fa-3471-4ab2-8508-ad36b96813e4/manifest.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vOm6ESkvhHUSwKhBLlHm47oNmR0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 25 Apr 2026 00:13:36 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5a:90:cc:c6:77:7b:5d:50:7c:24:d9:85:03:48:d4:4c:40:10:53:9c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91609040001, serialNumber=BCE9BA11292F847512C0A8412E51E6E3BA0D991D Validity Not Before: Apr 21 00:13:36 2026 GMT Not After : Apr 25 00:13:36 2026 GMT Subject: serialNumber=0e66f67ab6216dd334c6f30f5a70d844c873ef23c599f2b38740d94f2a8c6961, CN=1684111e-31c1-42e6-8f20-fc9ab8b5cf57 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:df:fa:df:67:93:06:a9:a8:47:28:e4:e7:29: 20:68:46:da:a2:b6:84:33:c2:b1:8c:ab:d6:14:af: a4:17:d9:9a:94:0f:2f:86:b3:c8:a9:b8:4a:92:8f: 24:7d:d5:71:3d:61:c4:4b:e2:63:31:df:e1:10:fe: 20:bf:21:88:fc:01:2a:87:90:cf:70:48:12:32:bd: fd:80:ba:c9:2e:54:f0:7d:5e:c8:6d:8c:0e:68:3e: d1:63:11:02:cc:a5:da:c6:04:c9:96:bd:a2:ff:37: e0:44:b8:ff:a4:0b:99:37:1f:46:4b:b5:bc:5a:3e: 70:29:45:21:5e:d8:97:4b:93:e6:8e:4d:df:a9:cf: 35:a8:18:c8:5e:28:df:95:82:0e:95:e0:1c:e2:cb: 20:65:02:50:c9:e7:5e:4c:ef:f8:b1:78:02:64:e0: 26:45:46:0a:48:86:ad:45:1f:58:23:64:0b:13:36: e0:e1:b0:67:bc:fd:be:b9:25:c7:c0:a4:b8:bf:fb: 00:9a:0b:3b:bd:94:97:e7:fe:da:b9:b7:43:22:17: eb:7d:c6:e0:a5:ff:78:c1:40:4a:8b:d6:be:8c:2f: 6a:cc:87:f9:8e:2d:b2:f2:7a:9e:ba:79:96:0c:54: c6:2e:dc:d4:84:84:43:1f:b4:f9:be:65:dc:ef:bb: 26:bb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4A:F0:FA:EE:6E:87:DB:38:B4:D2:3C:45:8D:35:55:F9:2B:85:AD:75 X509v3 Authority Key Identifier: keyid:BC:E9:BA:11:29:2F:84:75:12:C0:A8:41:2E:51:E6:E3:BA:0D:99:1D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vOm6ESkvhHUSwKhBLlHm47oNmR0.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/bd48a1fa-3471-4ab2-8508-ad36b96813e4/manifest.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/bd48a1fa-3471-4ab2-8508-ad36b96813e4/220cee0c-6002-409a-8194-38e216c0096c.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 9f:0a:40:cb:7d:1b:03:90:c5:79:a6:a6:f6:91:0a:fb:a6:c3: c0:db:48:3b:66:62:09:5d:06:10:39:a6:13:5b:85:5e:4b:87: 36:97:06:dc:55:d1:83:c7:b6:27:73:7c:3f:bf:00:ec:50:70: 13:16:dc:9a:a3:d2:ad:5d:c9:bb:0b:39:ea:e8:dd:cd:2a:25: d5:ca:2e:d0:f3:2a:0f:1d:28:0d:68:6b:ed:62:c4:0a:82:37: 0b:99:da:c6:8b:fa:5c:7b:25:97:db:58:4a:6c:98:c8:f5:51: 3f:2f:31:b8:70:35:dc:a8:79:3e:9d:49:26:13:b2:bb:35:9e: 7b:b7:67:0d:e2:bf:1c:c6:10:42:b5:f6:18:eb:f6:0a:cc:c5: 66:2a:38:23:b5:65:c6:d3:19:51:ff:a4:fb:91:d4:3c:33:89: 03:47:b2:88:f8:cb:4c:a6:64:eb:d6:38:16:1e:b9:40:59:6f: 33:49:76:d5:f7:f3:16:0b:21:e0:bb:db:ee:78:78:9b:a1:cd: 0a:97:8a:1b:60:2c:09:55:45:4c:f4:73:af:62:69:69:b6:72: 2c:d1:13:49:a5:e5:eb:37:70:96:23:b0:e0:3d:52:0b:d5:7a: d6:d8:b3:d1:a8:5b:f5:d3:f9:6e:56:82:a8:3e:c2:f7:3f:24: dd:6d:c1:10 -----BEGIN CERTIFICATE----- MIIFlTCCBH2gAwIBAgIUWpDMxnd7XVB8JNmFA0jUTEAQU5wwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxNjA5MDQwMDAxMTEwLwYDVQQFEyhCQ0U5QkExMTI5 MkY4NDc1MTJDMEE4NDEyRTUxRTZFM0JBMEQ5OTFEMB4XDTI2MDQyMTAwMTMzNloX DTI2MDQyNTAwMTMzNlowejFJMEcGA1UEBRNAMGU2NmY2N2FiNjIxNmRkMzM0YzZm MzBmNWE3MGQ4NDRjODczZWYyM2M1OTlmMmIzODc0MGQ5NGYyYThjNjk2MTEtMCsG A1UEAxMkMTY4NDExMWUtMzFjMS00MmU2LThmMjAtZmM5YWI4YjVjZjU3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvd/632eTBqmoRyjk5ykgaEbaoraE M8KxjKvWFK+kF9malA8vhrPIqbhKko8kfdVxPWHES+JjMd/hEP4gvyGI/AEqh5DP cEgSMr39gLrJLlTwfV7IbYwOaD7RYxECzKXaxgTJlr2i/zfgRLj/pAuZNx9GS7W8 Wj5wKUUhXtiXS5Pmjk3fqc81qBjIXijflYIOleAc4ssgZQJQyedeTO/4sXgCZOAm RUYKSIatRR9YI2QLEzbg4bBnvP2+uSXHwKS4v/sAmgs7vZSX5/7aubdDIhfrfcbg pf94wUBKi9a+jC9qzIf5ji2y8nqeunmWDFTGLtzUhIRDH7T5vmXc77smuwIDAQAB o4ICQTCCAj0wHQYDVR0OBBYEFErw+u5uh9s4tNI8RY01Vfkrha11MB8GA1UdIwQY MBaAFLzpuhEpL4R1EsCoQS5R5uO6DZkdMA4GA1UdDwEB/wQEAwIHgDB+BggrBgEF BQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVw b3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi92T202RVNr dmhIVVN3S2hCTGxIbTQ3b05tUjAuY2VyMH8GCCsGAQUFBwELBHMwcTBvBggrBgEF BQcwC4ZjcnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5hbWF6b25hd3MuY29t L3ZvbHVtZS9iZDQ4YTFmYS0zNDcxLTRhYjItODUwOC1hZDM2Yjk2ODEzZTQvbWFu aWZlc3QubWZ0MIGVBgNVHR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnBraS1y c3luYy51cy1lYXN0LTIuYW1hem9uYXdzLmNvbS92b2x1bWUvYmQ0OGExZmEtMzQ3 MS00YWIyLTg1MDgtYWQzNmI5NjgxM2U0LzIyMGNlZTBjLTYwMDItNDA5YS04MTk0 LTM4ZTIxNmMwMDk2Yy5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggr BgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYw BKACBQAwDQYJKoZIhvcNAQELBQADggEBAJ8KQMt9GwOQxXmmpvaRCvumw8DbSDtm YgldBhA5phNbhV5LhzaXBtxV0YPHtidzfD+/AOxQcBMW3Jqj0q1dybsLOero3c0q JdXKLtDzKg8dKA1oa+1ixAqCNwuZ2saL+lx7JZfbWEpsmMj1UT8vMbhwNdyoeT6d SSYTsrs1nnu3Zw3ivxzGEEK19hjr9grMxWYqOCO1ZcbTGVH/pPuR1DwziQNHsoj4 y0ymZOvWOBYeuUBZbzNJdtX38xYLIeC72+54eJuhzQqXihtgLAlVRUz0c69iaWm2 cizRE0ml5es3cJYjsOA9UgvVetbYs9GoW/XT+W5Wgqg+wvc/JN1twRA= -----END CERTIFICATE-----Generated at Tue Apr 21 06:52:17 2026 by rpki-client