$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/manifest.mft File: manifest.mft (raw, json) Hash identifier: w3p1TGGNOCZtoglYbHe9aIdjQKMvfPsjS7NiTMR6yAw= Subject key identifier: 44:CC:17:F4:D6:32:5F:D1:27:D4:6D:86:DC:23:E1:FB:28:F6:67:6E Authority key identifier: 53:DC:22:12:5F:A3:4F:39:86:CB:F1:24:22:E3:4F:9B:9C:66:1B:E7 Certificate issuer: /CN=A91F635F0000/serialNumber=53DC22125FA34F3986CBF12422E34F9B9C661BE7 Certificate serial: 238123D19E3762F67E8D90CEA2EB5EDD4D08DADE Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/U9wiEl-jTzmGy_EkIuNPm5xmG-c.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/manifest.mft Manifest number: 0615 Signing time: Tue 28 Jul 2026 00:01:17 +0000 Manifest this update: Tue 28 Jul 2026 00:01:17 +0000 Manifest next update: Sat 01 Aug 2026 00:01:17 +0000 Files and hashes: 1: 2e40ee0b-9aa9-4919-a079-9712212e127c.roa (hash: Grb3erG38UbpyYsT3rOw4xl8udj5pUp3uk3wNuteHbg=) 2: 32bf2c39-b536-43d0-b557-f68d8ee64091.roa (hash: R/QKXPq5qLhFIabDpt7jqk1FIjprU0/TFPidwEL+QgA=) 3: 3d1fb1c7-6140-4c57-928f-1a59586f9e2b.roa (hash: 4ERa0OLBAsTdhNR7PKjNbLOEoi7QlFl+HL77jxvD1Y0=) 4: 40956690-3661-49f2-8ebc-2fa5a47a98ad.roa (hash: SMLBbDSomO7mEapTkw4/On1vpbT/Fseuwss9zz9v5cQ=) 5: 4cb3e9f9-46a2-41eb-a4b7-75b53d791f33.roa (hash: e73sGTbu5FZ2lz0mPWzoXcq+IxeUu4jdraf1fBClxjY=) 6: 55d6cbae-8b7f-45a9-8d9b-458d10a9b1ca.roa (hash: cN5Dt6FayyiAKQcY6Lfn/GGbMLbZidxIe56c5AQO0tk=) 7: 565f9740-389f-45ac-956e-b96e19889315.roa (hash: 8UX4MeSRd7upoffLe62HCmWqH9tHPe92Ibwf6x5JZ+A=) 8: 840736df-cd98-4b5b-a4f2-5615993fc74d.roa (hash: sjhedanhIT69u3QGXMV3XtJ1G9qRnmR8tianfLbCBKc=) 9: a5b01bdd-cdeb-4cfc-8c93-7e70c5e09306.crl (hash: MDojN5jGL6hPhzNim7/U7xBGxb1vF8daOv16y/3VVKM=) 10: b51d6a60-7601-45c2-8839-f2002dfa8409.roa (hash: 5MDlGu3GRi6oA3CVqqCU79t2Bn0udJla1Ad5oQeQB1o=) 11: c18b0845-fc95-41d6-b476-af4e1e466849.roa (hash: O8R9fDsm2qIOaEx3u8c5fKh+n/zWMwHcNzLgCHsKkGw=) 12: e5ffe65e-7287-4628-8759-7c141866ee12.roa (hash: rNf1YrXcxiwazHFFa/XOYIwqL9UKy6EAFGqESc8O0Oo=) Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/a5b01bdd-cdeb-4cfc-8c93-7e70c5e09306.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/manifest.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/U9wiEl-jTzmGy_EkIuNPm5xmG-c.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 01 Aug 2026 00:01:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 23:81:23:d1:9e:37:62:f6:7e:8d:90:ce:a2:eb:5e:dd:4d:08:da:de Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F635F0000, serialNumber=53DC22125FA34F3986CBF12422E34F9B9C661BE7 Validity Not Before: Jul 28 00:01:17 2026 GMT Not After : Aug 1 00:01:17 2026 GMT Subject: serialNumber=764d10571d4d4cff6ffa4573c684ff54f9d2d3f529a55199c64866900cae5d3b, CN=c0bf0fe8-717c-4f72-9b45-c9c519132a81 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d0:f4:07:9e:8c:4b:84:ba:48:cc:68:c0:cc:06: 64:94:4a:0e:fd:79:95:13:3f:c6:1b:d7:68:a7:f0: 38:9c:d3:b9:fc:80:ba:9b:37:6a:c4:e5:13:1d:02: f4:51:26:74:5f:44:d7:21:88:f9:af:43:3e:df:1f: 50:b5:4e:de:47:57:15:1a:ff:0c:5b:d2:af:57:bc: 31:7a:b9:a3:19:52:5c:ff:b6:44:40:60:9a:d1:1e: a7:d2:63:fc:fa:25:9e:b6:4b:c1:20:68:23:59:35: 66:3c:19:a4:10:b4:20:b1:bc:e2:26:20:4f:8b:74: 1c:70:52:fe:76:fa:68:0b:10:e0:64:40:07:fd:5d: a4:4e:87:2d:00:b5:d9:fe:86:f5:bf:d2:20:2a:32: 4b:b6:2c:4d:b6:94:c0:59:06:72:6b:7b:2f:88:be: 21:33:ab:78:ba:2c:b5:56:c0:25:bd:cb:de:fe:95: 41:0a:cc:8e:40:62:ec:83:1a:0c:90:66:50:f9:07: 33:f9:ac:b8:ff:76:f7:9d:38:5c:80:41:cc:a8:2d: 69:a1:b5:42:e9:7b:88:97:cb:07:e1:26:8c:19:9d: 85:f8:50:dd:75:08:fc:21:8e:3b:b0:ca:35:d3:ae: 17:46:8c:7e:da:1f:ac:40:95:a4:43:53:2f:58:fc: f3:8f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 44:CC:17:F4:D6:32:5F:D1:27:D4:6D:86:DC:23:E1:FB:28:F6:67:6E X509v3 Authority Key Identifier: keyid:53:DC:22:12:5F:A3:4F:39:86:CB:F1:24:22:E3:4F:9B:9C:66:1B:E7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/U9wiEl-jTzmGy_EkIuNPm5xmG-c.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/manifest.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/a5b01bdd-cdeb-4cfc-8c93-7e70c5e09306.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 5f:c3:27:8e:de:8b:b5:19:b3:74:5a:b1:70:01:72:3c:98:94: 93:c9:be:9c:9e:35:ca:9e:ad:19:9f:44:99:eb:c9:d9:ef:07: 0b:49:ea:c2:a2:b0:bd:02:5d:58:73:70:22:01:59:fc:55:54: b7:1f:d2:2c:49:09:8c:a5:19:4c:6f:df:31:c7:43:cf:3e:f3: f6:b9:8f:f4:64:6f:16:b0:60:69:17:ef:71:c5:5b:ed:f2:78: 64:b5:bc:e0:b7:cc:97:fc:47:c3:86:7b:d9:52:33:6d:27:f4: 75:0f:f6:18:fb:1e:5e:6f:27:f7:b5:bd:22:de:79:b3:95:b3: 17:39:10:55:4f:4e:85:52:2a:23:b5:77:40:0d:46:0e:c8:ef: 70:fe:7d:8c:a3:9d:ea:a7:87:b4:d8:7d:28:44:e8:c2:28:43: e7:76:38:7e:64:0c:0e:b9:40:a9:a8:58:03:52:88:c0:69:4b: 07:1c:f2:2f:c1:9e:f0:10:5f:83:e0:41:d3:29:23:b3:0b:2f: 02:cd:09:54:05:4c:b6:3f:bf:fe:05:ab:c4:5e:8e:66:7b:70: d2:dd:74:16:29:3d:dd:be:42:cb:31:0b:d2:90:c9:a9:62:24: c6:ff:54:cd:52:b9:c6:5e:1a:64:de:38:ec:16:1e:48:2d:30: d4:a0:5e:2d -----BEGIN CERTIFICATE----- MIIFlTCCBH2gAwIBAgIUI4Ej0Z43YvZ+jZDOoute3U0I2t4wDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxRjYzNUYwMDAwMTEwLwYDVQQFEyg1M0RDMjIxMjVG QTM0RjM5ODZDQkYxMjQyMkUzNEY5QjlDNjYxQkU3MB4XDTI2MDcyODAwMDExN1oX DTI2MDgwMTAwMDExN1owejFJMEcGA1UEBRNANzY0ZDEwNTcxZDRkNGNmZjZmZmE0 NTczYzY4NGZmNTRmOWQyZDNmNTI5YTU1MTk5YzY0ODY2OTAwY2FlNWQzYjEtMCsG A1UEAxMkYzBiZjBmZTgtNzE3Yy00ZjcyLTliNDUtYzljNTE5MTMyYTgxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0PQHnoxLhLpIzGjAzAZklEoO/XmV Ez/GG9dop/A4nNO5/IC6mzdqxOUTHQL0USZ0X0TXIYj5r0M+3x9QtU7eR1cVGv8M W9KvV7wxermjGVJc/7ZEQGCa0R6n0mP8+iWetkvBIGgjWTVmPBmkELQgsbziJiBP i3QccFL+dvpoCxDgZEAH/V2kToctALXZ/ob1v9IgKjJLtixNtpTAWQZya3sviL4h M6t4uiy1VsAlvcve/pVBCsyOQGLsgxoMkGZQ+Qcz+ay4/3b3nThcgEHMqC1pobVC 6XuIl8sH4SaMGZ2F+FDddQj8IY47sMo1064XRox+2h+sQJWkQ1MvWPzzjwIDAQAB o4ICQTCCAj0wHQYDVR0OBBYEFETMF/TWMl/RJ9Rthtwj4fso9mduMB8GA1UdIwQY MBaAFFPcIhJfo085hsvxJCLjT5ucZhvnMA4GA1UdDwEB/wQEAwIHgDB+BggrBgEF BQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVw b3NpdG9yeS9CM0EyNEYyMDFENjYxMUUyOEFDODgzN0M3MkZEMUZGMi9VOXdpRWwt alR6bUd5X0VrSXVOUG01eG1HLWMuY2VyMH8GCCsGAQUFBwELBHMwcTBvBggrBgEF BQcwC4ZjcnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5hbWF6b25hd3MuY29t L3ZvbHVtZS8wOGMyZjI2NC0yM2Y5LTQ5ZmItOWQ0My1mOGI1MGJlYzkyNjEvbWFu aWZlc3QubWZ0MIGVBgNVHR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnBraS1y c3luYy51cy1lYXN0LTIuYW1hem9uYXdzLmNvbS92b2x1bWUvMDhjMmYyNjQtMjNm OS00OWZiLTlkNDMtZjhiNTBiZWM5MjYxL2E1YjAxYmRkLWNkZWItNGNmYy04Yzkz LTdlNzBjNWUwOTMwNi5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggr BgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYw BKACBQAwDQYJKoZIhvcNAQELBQADggEBAF/DJ47ei7UZs3RasXABcjyYlJPJvpye NcqerRmfRJnrydnvBwtJ6sKisL0CXVhzcCIBWfxVVLcf0ixJCYylGUxv3zHHQ88+ 8/a5j/RkbxawYGkX73HFW+3yeGS1vOC3zJf8R8OGe9lSM20n9HUP9hj7Hl5vJ/e1 vSLeebOVsxc5EFVPToVSKiO1d0ANRg7I73D+fYyjneqnh7TYfShE6MIoQ+d2OH5k DA65QKmoWANSiMBpSwcc8i/BnvAQX4PgQdMpI7MLLwLNCVQFTLY/v/4Fq8RejmZ7 cNLddBYpPd2+QssxC9KQyaliJMb/VM1SucZeGmTeOOwWHkgtMNSgXi0= -----END CERTIFICATE-----Generated at Tue Jul 28 19:20:45 2026 by rpki-client