$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/db9a372a-09bc-4a32-bfe4-8c48e5dbd219/manifest.mft File: manifest.mft (raw, json) Hash identifier: 0p0U2+sFfPAjJyStNueVlYIIgeXNNVQh87AbIOrs9Dc= Subject key identifier: FD:ED:96:C6:E9:43:4D:0D:76:DB:93:4D:A6:7D:4C:3B:87:7E:48:70 Authority key identifier: 16:F5:24:F8:E0:EC:7C:AE:07:69:C4:2E:50:FF:B3:A2:B5:64:A6:AC Certificate issuer: /CN=A91509EC0000/serialNumber=16F524F8E0EC7CAE0769C42E50FFB3A2B564A6AC Certificate serial: 228EFA343F213F3DE7E5012DF15057F409E24F54 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FvUk-ODsfK4HacQuUP-zorVkpqw.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/db9a372a-09bc-4a32-bfe4-8c48e5dbd219/manifest.mft Manifest number: 05A6 Signing time: Thu 21 May 2026 00:01:30 +0000 Manifest this update: Thu 21 May 2026 00:01:30 +0000 Manifest next update: Mon 25 May 2026 00:01:30 +0000 Files and hashes: 1: 05bc8dbb-c70a-48da-b45b-4448364614ff.roa (hash: Tq3fF/a7OvBkU3g4aoOjzGeIopJptNOAvtshIuCffME=) 2: 0bf15d3f-c546-4bb6-a764-82165c384d37.roa (hash: IybdQRuGKUz+LbkBrptFU/9JKaJTr8Dn8X3VCAKzJNE=) 3: 0c5c54ff-f977-4b96-8ce9-a1eaf082fe9c.roa (hash: 5JBx3U3yROg9e1Wa4wZ6pBktVXmoZ2pDGJ03dT+dcwg=) 4: 2f47dcdd-c384-4eb2-aefd-f4ad64f26cce.roa (hash: sweULcZjHPT8IwxPRaLVa8xz7kL7MLaA+OqEV/RFsD8=) 5: 3407e5b6-a83d-4668-898f-fdbb23092502.roa (hash: sqmhzfAuFPlH4QoK2na+v+GfhV8fLLG3moxK2B9Pkoc=) 6: 3b940d14-b8c4-4c3d-978f-a1a3b7a0a82c.roa (hash: gvyzuHo1Rq2CUm3xPRJ3/SMJriiWd/xSrtjuBGswy9A=) 7: 48a67156-122e-41d4-a2a8-8046cc5ecc41.roa (hash: QG3zvrKKXmxLv+GVXi5B7E0Z2ufvNvdW7NKfX0GmA4U=) 8: 6cf57aa6-6ba3-43af-bbd5-44485e3b9f67.roa (hash: fYYnNyZky/qrlLWP5S8zSm2v17ULDsXYq5Y9Nh1hza0=) 9: 6ecb3cca-488d-43b9-a50b-d37c0c55a9e1.crl (hash: fxC5i0UBRt1GvNWJtbMW7Ki++GOLn3A4M9FkRkGkdvI=) 10: 74efe8b3-d39c-4a8b-9b7b-5994aa4c8d82.roa (hash: 4UuC+OYJXwgl+ZOhdImkz2/tYQnFq/fxM6y2ExbbwJc=) 11: 7a646ec3-fc0e-40e7-adb4-82d5fd83f029.roa (hash: t5iHZ0YZekzmfq0y+PhVUngf/qO+t6VtPofs+84y//8=) 12: 82456ff2-f8c4-4c5a-9458-82d909f83f7d.roa (hash: uA3ZeD81Ey+SQMUY6max8Ur1zQBSW7JWHCluKDYrMdY=) 13: 9b59fbe4-f242-4dbf-9964-15048c3da996.roa (hash: 8rTp6mbrD5rf+jzY3ic4O1UnEJSQtRUpgFi5WUndeBY=) 14: 9b8e963e-7fa2-4ba1-a78a-4d1fd7989b32.roa (hash: IFPWZLYqICCTZpiAlPV0uS3SJy8BLcnhhBvheTkomoI=) 15: a78b90df-233b-4ec6-89d2-de27ac2dc044.roa (hash: Gc4Egy67JM0d/HEcfrgEvgnyi7RS8L58SIDhvgQi9/c=) 16: b3ba338e-4843-454b-abe5-65f09756225a.roa (hash: 8rR2NDI380wGgc15cYW7w6lGnHDb3tV92XlKn9SGrDM=) 17: c1564659-f3aa-4021-a7a5-8f4b1c2c4963.roa (hash: boMsB6m0tXlf5cEYATl81Y1PhDlDlwgP1NKoYJsEPT0=) 18: cc671c79-21f0-4fff-b898-595966ecd1a9.roa (hash: v33jq27fZuv6YhlnQHJUjBHiUrUIsq6Hlil/qH2vUro=) Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/db9a372a-09bc-4a32-bfe4-8c48e5dbd219/6ecb3cca-488d-43b9-a50b-d37c0c55a9e1.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/db9a372a-09bc-4a32-bfe4-8c48e5dbd219/manifest.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FvUk-ODsfK4HacQuUP-zorVkpqw.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 25 May 2026 00:01:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 22:8e:fa:34:3f:21:3f:3d:e7:e5:01:2d:f1:50:57:f4:09:e2:4f:54 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91509EC0000, serialNumber=16F524F8E0EC7CAE0769C42E50FFB3A2B564A6AC Validity Not Before: May 21 00:01:30 2026 GMT Not After : May 25 00:01:30 2026 GMT Subject: serialNumber=95deb454d77b34997d00252bc1cdf81178deb50ca785e23124a5e79d14c7227b, CN=58810403-9ba0-403a-809b-c78252ab7f5d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:5c:0d:68:13:23:27:27:bc:00:fc:fc:e6:0c: 72:5f:56:30:d3:fc:ec:03:97:17:2f:54:9c:ef:09: c6:ca:00:c6:b0:0a:52:1f:69:73:c0:8c:84:c2:8b: 21:00:47:1f:f0:09:65:47:0c:26:32:16:62:35:f4: 27:ce:61:ff:c6:12:3d:ab:16:c4:c0:94:e9:d4:30: 11:44:ba:b4:58:61:aa:fc:1e:ca:ca:9c:37:dc:76: 26:a4:8d:58:44:1c:d8:75:98:2c:7d:bf:b5:0f:f4: fc:85:b6:6f:9e:bd:27:04:72:d3:06:66:fd:bd:7c: be:74:d8:2c:18:a2:84:46:42:7a:c9:61:73:3b:ac: 6d:ea:a7:f8:24:47:fa:ef:e7:60:8f:d1:c3:ed:f3: 80:65:bf:7a:44:34:e5:4c:80:6b:f2:44:e4:2b:7c: e3:e2:c1:7c:7e:13:90:b7:4a:1b:5e:18:44:8c:77: 87:38:56:6f:6f:7f:d7:f9:4d:26:1c:40:4d:e6:a6: b8:cd:d7:d4:30:ca:89:18:39:5b:57:51:2a:a0:67: 9e:c6:5c:05:12:70:3e:0a:5c:18:08:83:e6:53:09: b1:dd:70:9c:ac:e5:e7:f2:fb:7e:4d:42:4a:9b:11: 38:d1:14:66:11:33:b4:fc:51:b8:5b:fd:ca:dc:41: bd:9d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FD:ED:96:C6:E9:43:4D:0D:76:DB:93:4D:A6:7D:4C:3B:87:7E:48:70 X509v3 Authority Key Identifier: keyid:16:F5:24:F8:E0:EC:7C:AE:07:69:C4:2E:50:FF:B3:A2:B5:64:A6:AC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FvUk-ODsfK4HacQuUP-zorVkpqw.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/db9a372a-09bc-4a32-bfe4-8c48e5dbd219/manifest.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/db9a372a-09bc-4a32-bfe4-8c48e5dbd219/6ecb3cca-488d-43b9-a50b-d37c0c55a9e1.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 62:1c:e4:90:99:c5:72:cb:e3:d3:37:62:81:42:96:f8:73:0e: 16:ad:1c:71:b6:6b:6a:3e:16:93:12:06:b7:cd:ce:12:04:8e: 81:24:78:c7:f6:29:69:1f:fc:58:c6:ad:e6:b1:1b:49:f6:48: 98:e5:ff:e8:d1:2a:19:02:15:9a:e6:92:cd:de:f8:b7:d7:71: 7c:33:ed:11:4c:44:1c:d0:5f:4e:61:75:bf:d0:05:23:75:16: fd:86:7c:d4:92:70:c0:95:8c:0c:36:10:eb:38:9d:d1:54:cc: 14:de:e2:4f:39:09:84:36:11:7d:38:d8:13:9e:1e:27:77:2d: c3:90:c8:76:6f:dd:79:b7:50:90:9a:fc:f8:30:ba:46:2a:98: 30:af:73:44:ef:24:24:48:eb:4e:e3:27:11:18:67:c2:57:fd: ef:6b:77:ce:3b:e7:8b:71:74:f5:51:ac:8d:65:9c:82:de:1f: 4f:a4:7c:6c:1a:ab:ef:35:f5:65:7b:60:05:98:9e:7e:9c:73: fc:c5:b0:73:59:b6:ec:a8:92:3f:41:61:38:8b:00:21:ee:2d: 71:82:54:d5:16:9b:93:57:b2:c1:8d:9d:0e:ae:81:3c:0f:dd: 9a:ec:a1:fe:8e:b4:49:b7:78:5e:51:39:79:e1:de:5c:53:47: 42:42:64:cd -----BEGIN CERTIFICATE----- MIIFlTCCBH2gAwIBAgIUIo76ND8hPz3n5QEt8VBX9AniT1QwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxNTA5RUMwMDAwMTEwLwYDVQQFEygxNkY1MjRGOEUw RUM3Q0FFMDc2OUM0MkU1MEZGQjNBMkI1NjRBNkFDMB4XDTI2MDUyMTAwMDEzMFoX DTI2MDUyNTAwMDEzMFowejFJMEcGA1UEBRNAOTVkZWI0NTRkNzdiMzQ5OTdkMDAy NTJiYzFjZGY4MTE3OGRlYjUwY2E3ODVlMjMxMjRhNWU3OWQxNGM3MjI3YjEtMCsG A1UEAxMkNTg4MTA0MDMtOWJhMC00MDNhLTgwOWItYzc4MjUyYWI3ZjVkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwFwNaBMjJye8APz85gxyX1Yw0/zs A5cXL1Sc7wnGygDGsApSH2lzwIyEwoshAEcf8AllRwwmMhZiNfQnzmH/xhI9qxbE wJTp1DARRLq0WGGq/B7Kypw33HYmpI1YRBzYdZgsfb+1D/T8hbZvnr0nBHLTBmb9 vXy+dNgsGKKERkJ6yWFzO6xt6qf4JEf67+dgj9HD7fOAZb96RDTlTIBr8kTkK3zj 4sF8fhOQt0obXhhEjHeHOFZvb3/X+U0mHEBN5qa4zdfUMMqJGDlbV1EqoGeexlwF EnA+ClwYCIPmUwmx3XCcrOXn8vt+TUJKmxE40RRmETO0/FG4W/3K3EG9nQIDAQAB o4ICQTCCAj0wHQYDVR0OBBYEFP3tlsbpQ00NdtuTTaZ9TDuHfkhwMB8GA1UdIwQY MBaAFBb1JPjg7HyuB2nELlD/s6K1ZKasMA4GA1UdDwEB/wQEAwIHgDB+BggrBgEF BQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVw b3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9GdlVrLU9E c2ZLNEhhY1F1VVAtem9yVmtwcXcuY2VyMH8GCCsGAQUFBwELBHMwcTBvBggrBgEF BQcwC4ZjcnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5hbWF6b25hd3MuY29t L3ZvbHVtZS9kYjlhMzcyYS0wOWJjLTRhMzItYmZlNC04YzQ4ZTVkYmQyMTkvbWFu aWZlc3QubWZ0MIGVBgNVHR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnBraS1y c3luYy51cy1lYXN0LTIuYW1hem9uYXdzLmNvbS92b2x1bWUvZGI5YTM3MmEtMDli Yy00YTMyLWJmZTQtOGM0OGU1ZGJkMjE5LzZlY2IzY2NhLTQ4OGQtNDNiOS1hNTBi LWQzN2MwYzU1YTllMS5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggr BgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYw BKACBQAwDQYJKoZIhvcNAQELBQADggEBAGIc5JCZxXLL49M3YoFClvhzDhatHHG2 a2o+FpMSBrfNzhIEjoEkeMf2KWkf/FjGreaxG0n2SJjl/+jRKhkCFZrmks3e+LfX cXwz7RFMRBzQX05hdb/QBSN1Fv2GfNSScMCVjAw2EOs4ndFUzBTe4k85CYQ2EX04 2BOeHid3LcOQyHZv3Xm3UJCa/PgwukYqmDCvc0TvJCRI607jJxEYZ8JX/e9rd847 54txdPVRrI1lnILeH0+kfGwaq+819WV7YAWYnn6cc/zFsHNZtuyokj9BYTiLACHu LXGCVNUWm5NXssGNnQ6ugTwP3Zrsof6OtEm3eF5ROXnh3lxTR0JCZM0= -----END CERTIFICATE-----Generated at Thu May 21 10:26:21 2026 by rpki-client