$ rpki-client -vvvf rpki-rsync.us-east-2.amazonaws.com/volume/db9a372a-09bc-4a32-bfe4-8c48e5dbd219/manifest.mft File: manifest.mft (raw, json) Hash identifier: UL8vhsf3xoZMqCJ0qi42NadSN90WRlvZ1LoyPGdAWO4= Subject key identifier: B0:17:4E:2D:3D:69:3E:D4:FA:62:43:6F:52:AF:A3:DB:FF:DF:8A:31 Authority key identifier: 16:F5:24:F8:E0:EC:7C:AE:07:69:C4:2E:50:FF:B3:A2:B5:64:A6:AC Certificate issuer: /CN=A91509EC0000/serialNumber=16F524F8E0EC7CAE0769C42E50FFB3A2B564A6AC Certificate serial: 7B30E42B30E8D0C8AA0A67F5E7B57683871AF103 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FvUk-ODsfK4HacQuUP-zorVkpqw.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/db9a372a-09bc-4a32-bfe4-8c48e5dbd219/manifest.mft Manifest number: 0644 Signing time: Sat 24 Oct 2026 00:03:01 +0000 Manifest this update: Sat 24 Oct 2026 00:03:01 +0000 Manifest next update: Wed 28 Oct 2026 00:03:01 +0000 Files and hashes: 1: 05bc8dbb-c70a-48da-b45b-4448364614ff.roa (hash: GzrrAfumHEMPi4ACEsRqcf2EBNjWevtrlZjHnMAFDks=) 2: 0bf15d3f-c546-4bb6-a764-82165c384d37.roa (hash: 6ESbmpYd7H+0YV5LqCGCwBRmIUQlbPsgFEVkrcgvI6A=) 3: 0c5c54ff-f977-4b96-8ce9-a1eaf082fe9c.roa (hash: tt4cYUE6Kg8jt0O69Zb567gWFoo5rjLLM97F4/aSiTA=) 4: 2f47dcdd-c384-4eb2-aefd-f4ad64f26cce.roa (hash: +a466zVwESTdjxfgtVGtNTJoIjBPUJ9uv2Bs/ijyO9Y=) 5: 3407e5b6-a83d-4668-898f-fdbb23092502.roa (hash: ctv+s5liGUupTIOcwnKFBRlwhuBF5BgXDx/DcStRkH4=) 6: 3b940d14-b8c4-4c3d-978f-a1a3b7a0a82c.roa (hash: U7qwuCrz1VnCc4jL9xa+4gQpFF8nN1gLyrdZ/L63EFo=) 7: 48a67156-122e-41d4-a2a8-8046cc5ecc41.roa (hash: AuAujhXdgm5mBGRTRbp9PUBSto8ttdqG3SjYXkZJhNU=) 8: 6cf57aa6-6ba3-43af-bbd5-44485e3b9f67.roa (hash: k7pzzb7UOogLzyI+ALFcZaO4Qks0yCOFh766YQdmoGM=) 9: 6ecb3cca-488d-43b9-a50b-d37c0c55a9e1.crl (hash: ok4fV2zkZvk4lw9w5Yyf/1n8I4b6SbOu7RgT6b5ubzk=) 10: 74efe8b3-d39c-4a8b-9b7b-5994aa4c8d82.roa (hash: e1DBvmMaPGpJSh8i8g0PuQJn1YYGKeTyLpjn4SuF59M=) 11: 7a646ec3-fc0e-40e7-adb4-82d5fd83f029.roa (hash: yynW230gtjoHe64VdAtkS5LYRTOFwLp0sflgw8zSW1g=) 12: 82456ff2-f8c4-4c5a-9458-82d909f83f7d.roa (hash: b3WbF1oNV58mWBREtuTQNy22jE820qPWck/kuIxmC1c=) 13: 9b59fbe4-f242-4dbf-9964-15048c3da996.roa (hash: ebFkf49zM5vj6p8bvgwDY4iblS2Eu/OC9RTEbXIZXLY=) 14: 9b8e963e-7fa2-4ba1-a78a-4d1fd7989b32.roa (hash: wjxc0bk+R6A/Qa3pHhsyRWed5/iyieBQym3MXX6RyzY=) 15: a78b90df-233b-4ec6-89d2-de27ac2dc044.roa (hash: 7/m/Cx18xbuwPUSrgdH7o86spQdYaPb/GIoOb3+ub70=) 16: b3ba338e-4843-454b-abe5-65f09756225a.roa (hash: ej5Jl8WN8vpG/jtiHBYWjgJxmlZgso4oyf4xH338b+c=) 17: c1564659-f3aa-4021-a7a5-8f4b1c2c4963.roa (hash: c3ibl3WQRyfORjyV2jtV99MlRLv/+v4zO7ir01Gms8M=) 18: cc671c79-21f0-4fff-b898-595966ecd1a9.roa (hash: bCxmHdL+unu38R9ml+09zoVGrJd1Ey3pw4pz0o5BVp0=) Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/db9a372a-09bc-4a32-bfe4-8c48e5dbd219/6ecb3cca-488d-43b9-a50b-d37c0c55a9e1.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/db9a372a-09bc-4a32-bfe4-8c48e5dbd219/manifest.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FvUk-ODsfK4HacQuUP-zorVkpqw.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 28 Oct 2026 00:03:01 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7b:30:e4:2b:30:e8:d0:c8:aa:0a:67:f5:e7:b5:76:83:87:1a:f1:03 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91509EC0000, serialNumber=16F524F8E0EC7CAE0769C42E50FFB3A2B564A6AC Validity Not Before: Oct 24 00:03:01 2026 GMT Not After : Oct 28 00:03:01 2026 GMT Subject: serialNumber=c7b20581b622d5bf8c9e4d4adff530893918895854f66458ae3c62d675afab3f, CN=58810403-9ba0-403a-809b-c78252ab7f5d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:98:de:ec:e3:56:e6:4b:5c:fd:b5:2f:0a:b3:7a: a6:5a:e5:97:16:09:71:3e:64:6f:83:95:02:2a:80: 21:c5:05:3e:01:6a:f5:ad:a4:f4:18:30:4b:f9:1b: 09:9f:5a:6c:07:50:45:54:1c:24:f6:c4:04:a8:4d: 28:36:ef:9d:38:e0:53:1c:fa:66:12:6a:5e:4c:a0: 0c:eb:18:03:16:5f:fb:a9:cd:a8:54:a3:ad:3f:85: 1f:1f:d1:d8:57:31:2c:00:aa:a8:67:a9:23:21:14: 80:e6:4f:29:de:c9:f5:0c:4d:29:73:02:19:49:eb: 34:25:cd:04:8a:79:ed:a0:57:e3:83:f1:fb:a7:9c: 82:29:e8:f5:cd:4b:42:b4:23:7f:aa:43:4f:65:79: 6e:9a:ff:44:7f:52:1b:83:aa:60:3e:bd:26:8f:d5: 00:7c:12:fb:11:f3:89:a9:b7:bc:16:1d:53:20:9b: a5:c1:11:1d:c1:fe:e8:57:78:34:15:f1:7a:50:e7: 26:ce:5b:7e:61:7e:38:ec:43:f1:df:0f:87:54:47: c8:21:3c:a8:f0:1d:f0:f8:a5:51:c1:9b:9b:8c:59: f0:3a:2b:9e:08:00:47:ac:b1:43:c7:cf:f0:46:69: 9e:a1:a7:17:f8:b9:5f:2b:f7:07:87:92:76:ff:5f: 8a:d9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B0:17:4E:2D:3D:69:3E:D4:FA:62:43:6F:52:AF:A3:DB:FF:DF:8A:31 X509v3 Authority Key Identifier: keyid:16:F5:24:F8:E0:EC:7C:AE:07:69:C4:2E:50:FF:B3:A2:B5:64:A6:AC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FvUk-ODsfK4HacQuUP-zorVkpqw.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/db9a372a-09bc-4a32-bfe4-8c48e5dbd219/manifest.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/db9a372a-09bc-4a32-bfe4-8c48e5dbd219/6ecb3cca-488d-43b9-a50b-d37c0c55a9e1.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 89:57:5f:be:3b:64:b9:89:fd:fa:2c:c9:6a:de:0b:e2:64:4e: 44:52:07:99:bd:3c:32:1d:cb:53:db:6e:c3:66:84:47:85:83: 00:25:66:04:a3:c3:41:ee:8b:9a:ed:3b:0e:3b:4f:5a:5d:e4: 21:58:4b:d4:04:1a:90:01:92:68:66:93:83:a6:f7:f3:53:85: 80:01:af:61:3b:22:fc:06:50:aa:ec:10:5c:d0:6e:ef:c5:9d: 01:f1:26:52:8c:bc:74:50:a8:a5:3c:bd:aa:10:e5:4b:f0:95: fb:65:27:45:8d:f6:44:c0:74:67:24:37:fa:e3:46:99:14:9f: ed:4f:70:f5:2f:04:f3:a7:4a:0e:bb:7f:2b:2f:bf:88:d4:00: 71:a9:0c:d6:66:e0:1f:cf:ea:a9:e4:07:48:b5:da:c1:f2:82: 82:90:8f:f4:17:74:58:32:21:a0:9c:35:32:a5:d5:53:26:4e: 72:b9:5b:bc:59:b8:e4:07:e4:e8:86:5b:12:aa:9e:04:a3:98: f4:bd:61:8f:8a:e6:5d:66:32:04:08:2a:e4:ff:d0:87:ee:0b: 2a:2a:4e:69:22:62:6f:c7:44:63:93:67:23:a2:65:05:db:54: 97:e7:52:b0:42:a2:78:6f:e7:83:4d:91:91:44:4d:56:0d:91: d4:43:2f:35 -----BEGIN CERTIFICATE----- MIIFlTCCBH2gAwIBAgIUezDkKzDo0MiqCmf157V2g4ca8QMwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxNTA5RUMwMDAwMTEwLwYDVQQFEygxNkY1MjRGOEUw RUM3Q0FFMDc2OUM0MkU1MEZGQjNBMkI1NjRBNkFDMB4XDTI2MTAyNDAwMDMwMVoX DTI2MTAyODAwMDMwMVowejFJMEcGA1UEBRNAYzdiMjA1ODFiNjIyZDViZjhjOWU0 ZDRhZGZmNTMwODkzOTE4ODk1ODU0ZjY2NDU4YWUzYzYyZDY3NWFmYWIzZjEtMCsG A1UEAxMkNTg4MTA0MDMtOWJhMC00MDNhLTgwOWItYzc4MjUyYWI3ZjVkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmN7s41bmS1z9tS8Ks3qmWuWXFglx PmRvg5UCKoAhxQU+AWr1raT0GDBL+RsJn1psB1BFVBwk9sQEqE0oNu+dOOBTHPpm EmpeTKAM6xgDFl/7qc2oVKOtP4UfH9HYVzEsAKqoZ6kjIRSA5k8p3sn1DE0pcwIZ Ses0Jc0EinntoFfjg/H7p5yCKej1zUtCtCN/qkNPZXlumv9Ef1Ibg6pgPr0mj9UA fBL7EfOJqbe8Fh1TIJulwREdwf7oV3g0FfF6UOcmzlt+YX447EPx3w+HVEfIITyo 8B3w+KVRwZubjFnwOiueCABHrLFDx8/wRmmeoacX+LlfK/cHh5J2/1+K2QIDAQAB o4ICQTCCAj0wHQYDVR0OBBYEFLAXTi09aT7U+mJDb1Kvo9v/34oxMB8GA1UdIwQY MBaAFBb1JPjg7HyuB2nELlD/s6K1ZKasMA4GA1UdDwEB/wQEAwIHgDB+BggrBgEF BQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVw b3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9GdlVrLU9E c2ZLNEhhY1F1VVAtem9yVmtwcXcuY2VyMH8GCCsGAQUFBwELBHMwcTBvBggrBgEF BQcwC4ZjcnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5hbWF6b25hd3MuY29t L3ZvbHVtZS9kYjlhMzcyYS0wOWJjLTRhMzItYmZlNC04YzQ4ZTVkYmQyMTkvbWFu aWZlc3QubWZ0MIGVBgNVHR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnBraS1y c3luYy51cy1lYXN0LTIuYW1hem9uYXdzLmNvbS92b2x1bWUvZGI5YTM3MmEtMDli Yy00YTMyLWJmZTQtOGM0OGU1ZGJkMjE5LzZlY2IzY2NhLTQ4OGQtNDNiOS1hNTBi LWQzN2MwYzU1YTllMS5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggr BgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYw BKACBQAwDQYJKoZIhvcNAQELBQADggEBAIlXX747ZLmJ/fosyWreC+JkTkRSB5m9 PDIdy1PbbsNmhEeFgwAlZgSjw0Hui5rtOw47T1pd5CFYS9QEGpABkmhmk4Om9/NT hYABr2E7IvwGUKrsEFzQbu/FnQHxJlKMvHRQqKU8vaoQ5UvwlftlJ0WN9kTAdGck N/rjRpkUn+1PcPUvBPOnSg67fysvv4jUAHGpDNZm4B/P6qnkB0i12sHygoKQj/QX dFgyIaCcNTKl1VMmTnK5W7xZuOQH5OiGWxKqngSjmPS9YY+K5l1mMgQIKuT/0Ifu CyoqTmkiYm/HRGOTZyOiZQXbVJfnUrBConhv54NNkZFETVYNkdRDLzU= -----END CERTIFICATE-----Generated at Sat Oct 24 20:32:03 2026 by rpki-client