$ rpki-client -vvvf rpki-rsync.us-east-2.amazonaws.com/volume/db9a372a-09bc-4a32-bfe4-8c48e5dbd219/manifest.mft File: manifest.mft (raw, json) Hash identifier: ixxnFCxihG2qRBpR+4lotZA01jNkZwfGgfe7Csjifno= Subject key identifier: 66:73:D3:88:04:04:ED:6E:35:5F:AA:BD:66:9C:77:F2:AC:6D:FE:48 Authority key identifier: 16:F5:24:F8:E0:EC:7C:AE:07:69:C4:2E:50:FF:B3:A2:B5:64:A6:AC Certificate issuer: /CN=A91509EC0000/serialNumber=16F524F8E0EC7CAE0769C42E50FFB3A2B564A6AC Certificate serial: 657E0C193F7C5EBFB584000F261C9BE35630FE25 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FvUk-ODsfK4HacQuUP-zorVkpqw.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/db9a372a-09bc-4a32-bfe4-8c48e5dbd219/manifest.mft Manifest number: 0612 Signing time: Sat 05 Sep 2026 00:07:08 +0000 Manifest this update: Sat 05 Sep 2026 00:07:08 +0000 Manifest next update: Wed 09 Sep 2026 00:07:08 +0000 Files and hashes: 1: 05bc8dbb-c70a-48da-b45b-4448364614ff.roa (hash: lY4T+SAC/eq1lqcLwr6+duWXCWoI/25yj9GloUcLqnc=) 2: 0bf15d3f-c546-4bb6-a764-82165c384d37.roa (hash: pAUau9W2Q1n8bkWgMJqn69Gjg4QnMvogj11ziiAugt0=) 3: 0c5c54ff-f977-4b96-8ce9-a1eaf082fe9c.roa (hash: Nti5XZ3SZ/5X5vml90GJptxj5wU4R5TflY4EtGcxI/E=) 4: 2f47dcdd-c384-4eb2-aefd-f4ad64f26cce.roa (hash: mGCP92ndXqtbWgc35vK8fF+nQmakA/RqaYIANAYMDts=) 5: 3407e5b6-a83d-4668-898f-fdbb23092502.roa (hash: SBbAMoRoCEcPLDNU3aRXyoFbsg+b2tGAIka8WO5y1qA=) 6: 3b940d14-b8c4-4c3d-978f-a1a3b7a0a82c.roa (hash: 7DQ1BBqI+YGQodqSp/9cow4A6cRx6MURcx/z2L1uszc=) 7: 48a67156-122e-41d4-a2a8-8046cc5ecc41.roa (hash: 08q2O5O5oVmNxk4BNjhuMscxxtdmm3vZP0iC3ZndTbU=) 8: 6cf57aa6-6ba3-43af-bbd5-44485e3b9f67.roa (hash: NV3yneSLI5yJGt7cnV3Ta6BrskfYvxCuGX94eQwyA2M=) 9: 6ecb3cca-488d-43b9-a50b-d37c0c55a9e1.crl (hash: iq9ate7Ar1G1T5yv4cLE3BY/M+aONcrdk6q+vZ9ovzg=) 10: 74efe8b3-d39c-4a8b-9b7b-5994aa4c8d82.roa (hash: EYImvr29ra2F/O4KTQhRVqHeXq3TuWtI5rObt3hFbnA=) 11: 7a646ec3-fc0e-40e7-adb4-82d5fd83f029.roa (hash: SmhnWkJlgRO1ZNn792ZwOUn8Tem6AvtEchsHWxmpNlg=) 12: 82456ff2-f8c4-4c5a-9458-82d909f83f7d.roa (hash: Q826nO8V91uH1JkWDv8cfHhS+jZDK8fx34H9LEGu0ug=) 13: 9b59fbe4-f242-4dbf-9964-15048c3da996.roa (hash: QhnxFBgjUxHiRKLTJPQ2sIaTKqb14Jbu69kbxZumNEw=) 14: 9b8e963e-7fa2-4ba1-a78a-4d1fd7989b32.roa (hash: Dcm8WyP+tRkJzCNAbotVujAO0N7AZKefgHJLgDm17rM=) 15: a78b90df-233b-4ec6-89d2-de27ac2dc044.roa (hash: yLQ60Vu1aG8yLvN50aTCpkr3v59yQOtQsDjF9xdyhPU=) 16: b3ba338e-4843-454b-abe5-65f09756225a.roa (hash: Mf2NIJH9IfPzZ7oAHeUn9AKZQZwtos7P5QRYym1AnzM=) 17: c1564659-f3aa-4021-a7a5-8f4b1c2c4963.roa (hash: 33hPW4gI2TGJ5byNnROxUh04t/0LZvEPOiok6H/PYmk=) 18: cc671c79-21f0-4fff-b898-595966ecd1a9.roa (hash: Pa8aH+K3CqvEc4N5b1Bw5FQ7b2xwh+Ahb5pfwMJk73M=) Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/db9a372a-09bc-4a32-bfe4-8c48e5dbd219/6ecb3cca-488d-43b9-a50b-d37c0c55a9e1.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/db9a372a-09bc-4a32-bfe4-8c48e5dbd219/manifest.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FvUk-ODsfK4HacQuUP-zorVkpqw.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 09 Sep 2026 00:07:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 65:7e:0c:19:3f:7c:5e:bf:b5:84:00:0f:26:1c:9b:e3:56:30:fe:25 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91509EC0000, serialNumber=16F524F8E0EC7CAE0769C42E50FFB3A2B564A6AC Validity Not Before: Sep 5 00:07:08 2026 GMT Not After : Sep 9 00:07:08 2026 GMT Subject: serialNumber=14a8ec618501e59261b8178a44efb9fd6e5620144836319984f90052bfd6becb, CN=58810403-9ba0-403a-809b-c78252ab7f5d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a3:ea:5d:9d:7e:07:91:3d:0a:84:c3:ac:fa:2b: 6c:e4:4e:78:e3:43:b9:bd:33:48:b2:36:ea:15:4a: 9d:16:a3:d6:a4:ba:92:82:d7:40:ac:fb:63:06:a8: 77:c0:81:1c:e8:6d:e2:89:4f:de:38:17:fe:be:14: f6:d7:3f:52:c8:a6:b9:59:85:36:e5:b6:d5:49:e3: 7b:dd:f9:3e:62:c3:c3:d6:c5:44:d5:c9:5d:2f:c2: c4:6e:7d:ca:d5:55:26:44:17:78:77:d4:ff:d9:68: 1e:b9:4e:66:71:bd:d5:3d:54:62:bb:ce:ed:7b:69: b9:64:c2:19:39:67:f6:a7:a2:93:9c:bf:75:e8:a3: 5d:f8:e3:18:c8:56:88:95:48:82:77:88:66:63:bb: 93:f5:96:23:33:b2:9d:2a:8e:54:c9:3e:c8:18:62: 57:78:9a:4e:41:2f:c1:89:44:92:cd:7b:a8:c7:b2: 73:e2:eb:72:b9:9b:2d:bf:ed:b6:cd:4e:b4:a0:a2: ca:db:3e:3a:ef:8c:73:69:42:08:03:b1:86:5d:90: 74:42:94:89:18:34:86:0b:fd:bf:53:2a:9f:81:a6: b3:b0:99:ee:00:dc:a8:2f:7d:d1:d6:30:85:07:de: 71:d7:0b:bd:d4:5e:0b:b1:6f:48:10:a2:67:51:0f: ea:cb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 66:73:D3:88:04:04:ED:6E:35:5F:AA:BD:66:9C:77:F2:AC:6D:FE:48 X509v3 Authority Key Identifier: keyid:16:F5:24:F8:E0:EC:7C:AE:07:69:C4:2E:50:FF:B3:A2:B5:64:A6:AC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FvUk-ODsfK4HacQuUP-zorVkpqw.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/db9a372a-09bc-4a32-bfe4-8c48e5dbd219/manifest.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/db9a372a-09bc-4a32-bfe4-8c48e5dbd219/6ecb3cca-488d-43b9-a50b-d37c0c55a9e1.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 71:e7:25:c2:8c:fe:da:28:ee:3f:f5:d8:86:9d:c2:e3:67:9d: 95:d7:64:17:32:cc:c4:6e:29:ed:e9:8e:47:d4:e0:f3:ed:4e: 43:b3:3d:a9:58:4d:b2:3c:c7:2e:9a:36:3f:33:20:35:48:6e: 68:5c:72:dc:35:81:15:7e:4e:fe:fe:62:5b:67:32:b4:1f:83: 64:d7:2d:f3:d2:df:03:70:4b:07:1e:2a:3d:e4:03:48:bb:b5: 0f:e2:70:fc:89:84:13:52:30:1b:25:28:d6:2b:97:42:c2:9d: 2f:bb:61:4a:6d:84:a7:5d:96:00:0f:bd:2e:40:0b:fe:f4:ea: 6b:f9:59:a0:f4:43:ae:87:5e:b1:87:2b:8e:f5:b7:cc:5d:57: a4:a6:bd:c5:0a:8e:a5:6b:80:56:f5:1b:c1:06:63:6b:50:5c: 02:df:ac:ba:a3:25:b7:ed:1f:71:75:9c:5a:3d:36:0e:b9:bf: 26:c3:bc:ad:dd:46:63:14:aa:36:a1:e7:e9:f7:bf:f6:41:58: e6:7b:54:bc:42:ae:bb:a1:2a:3a:f7:56:02:81:51:fd:e4:e2: 74:f6:81:de:49:60:10:64:42:97:85:3f:d2:e6:8a:79:85:bc: 3f:4c:d3:91:22:74:e4:dd:b8:3d:d1:e7:5b:81:19:4d:df:6f: 4c:73:eb:09 -----BEGIN CERTIFICATE----- MIIFlTCCBH2gAwIBAgIUZX4MGT98Xr+1hAAPJhyb41Yw/iUwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxNTA5RUMwMDAwMTEwLwYDVQQFEygxNkY1MjRGOEUw RUM3Q0FFMDc2OUM0MkU1MEZGQjNBMkI1NjRBNkFDMB4XDTI2MDkwNTAwMDcwOFoX DTI2MDkwOTAwMDcwOFowejFJMEcGA1UEBRNAMTRhOGVjNjE4NTAxZTU5MjYxYjgx NzhhNDRlZmI5ZmQ2ZTU2MjAxNDQ4MzYzMTk5ODRmOTAwNTJiZmQ2YmVjYjEtMCsG A1UEAxMkNTg4MTA0MDMtOWJhMC00MDNhLTgwOWItYzc4MjUyYWI3ZjVkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAo+pdnX4HkT0KhMOs+its5E5440O5 vTNIsjbqFUqdFqPWpLqSgtdArPtjBqh3wIEc6G3iiU/eOBf+vhT21z9SyKa5WYU2 5bbVSeN73fk+YsPD1sVE1cldL8LEbn3K1VUmRBd4d9T/2WgeuU5mcb3VPVRiu87t e2m5ZMIZOWf2p6KTnL916KNd+OMYyFaIlUiCd4hmY7uT9ZYjM7KdKo5UyT7IGGJX eJpOQS/BiUSSzXuox7Jz4utyuZstv+22zU60oKLK2z4674xzaUIIA7GGXZB0QpSJ GDSGC/2/UyqfgaazsJnuANyoL33R1jCFB95x1wu91F4LsW9IEKJnUQ/qywIDAQAB o4ICQTCCAj0wHQYDVR0OBBYEFGZz04gEBO1uNV+qvWacd/Ksbf5IMB8GA1UdIwQY MBaAFBb1JPjg7HyuB2nELlD/s6K1ZKasMA4GA1UdDwEB/wQEAwIHgDB+BggrBgEF BQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVw b3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9GdlVrLU9E c2ZLNEhhY1F1VVAtem9yVmtwcXcuY2VyMH8GCCsGAQUFBwELBHMwcTBvBggrBgEF BQcwC4ZjcnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5hbWF6b25hd3MuY29t L3ZvbHVtZS9kYjlhMzcyYS0wOWJjLTRhMzItYmZlNC04YzQ4ZTVkYmQyMTkvbWFu aWZlc3QubWZ0MIGVBgNVHR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnBraS1y c3luYy51cy1lYXN0LTIuYW1hem9uYXdzLmNvbS92b2x1bWUvZGI5YTM3MmEtMDli Yy00YTMyLWJmZTQtOGM0OGU1ZGJkMjE5LzZlY2IzY2NhLTQ4OGQtNDNiOS1hNTBi LWQzN2MwYzU1YTllMS5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggr BgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYw BKACBQAwDQYJKoZIhvcNAQELBQADggEBAHHnJcKM/too7j/12IadwuNnnZXXZBcy zMRuKe3pjkfU4PPtTkOzPalYTbI8xy6aNj8zIDVIbmhcctw1gRV+Tv7+YltnMrQf g2TXLfPS3wNwSwceKj3kA0i7tQ/icPyJhBNSMBslKNYrl0LCnS+7YUpthKddlgAP vS5AC/706mv5WaD0Q66HXrGHK471t8xdV6SmvcUKjqVrgFb1G8EGY2tQXALfrLqj JbftH3F1nFo9Ng65vybDvK3dRmMUqjah5+n3v/ZBWOZ7VLxCrruhKjr3VgKBUf3k 4nT2gd5JYBBkQpeFP9LminmFvD9M05EidOTduD3R51uBGU3fb0xz6wk= -----END CERTIFICATE-----Generated at Sat Sep 5 08:05:52 2026 by rpki-client