$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/708aafaf-00b4-485b-854c-0b32ca30f57b/manifest.mft File: manifest.mft (raw, json) Hash identifier: iEVgDYgvpgvdZ6NKVk2Il3dmYvJLoG1LkON9iRvhje8= Subject key identifier: 29:5D:0C:FA:8D:2F:7A:6B:2A:62:3B:5B:3A:37:18:03:F5:B0:7A:D7 Authority key identifier: E7:CA:DA:5F:08:81:D7:7B:EA:48:B0:76:8A:37:66:B5:00:65:AF:08 Certificate issuer: /CN=A918806F0000/serialNumber=E7CADA5F0881D77BEA48B0768A3766B50065AF08 Certificate serial: 7657287A574209B87F407522C0DDA322FB657F20 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/58raXwiB13vqSLB2ijdmtQBlrwg.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/708aafaf-00b4-485b-854c-0b32ca30f57b/manifest.mft Manifest number: 065F Signing time: Tue 28 Jul 2026 00:02:57 +0000 Manifest this update: Tue 28 Jul 2026 00:02:57 +0000 Manifest next update: Sat 01 Aug 2026 00:02:57 +0000 Files and hashes: 1: 12e59001-35ac-4abf-858f-37b955a24b3f.crl (hash: 9u5s1hazWZV3X1iw+2yziay0lALWNk1A+NOrrpCH6kQ=) 2: 381fc6e6-5d49-41bc-b584-d9437c68e3cd.roa (hash: M+i7XpsJD4p5Tk2yVGdLmGjDs5xTMXCNLVAUi3YO9fw=) 3: 49119734-9dbc-4bd4-98be-57e4ce078928.roa (hash: 0OedyNMwjL1I1p7rzryfdYD0nslES0i+43AbthFPFmE=) 4: 5663bf34-10ed-4309-a236-7466afd6f02f.roa (hash: aoaRIM84eruV/ISWBs3PJCPQb0sEmsLtTOcu1EdbsFA=) 5: cc2f7093-21a6-400f-9db1-93c2fe02bc1c.roa (hash: vbtxuyfgx9e6lLFR0CnUGCC1kgCTySw+Ljt4yM1fDb4=) 6: ea1d02aa-6d25-4b36-b42e-ba837d49e261.roa (hash: q5bh3h1LHQcXwRDCiiiYn6TP5+N60E0SyV4QnQBQL8c=) Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/708aafaf-00b4-485b-854c-0b32ca30f57b/12e59001-35ac-4abf-858f-37b955a24b3f.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/708aafaf-00b4-485b-854c-0b32ca30f57b/manifest.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/58raXwiB13vqSLB2ijdmtQBlrwg.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 01 Aug 2026 00:02:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 76:57:28:7a:57:42:09:b8:7f:40:75:22:c0:dd:a3:22:fb:65:7f:20 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A918806F0000, serialNumber=E7CADA5F0881D77BEA48B0768A3766B50065AF08 Validity Not Before: Jul 28 00:02:57 2026 GMT Not After : Aug 1 00:02:57 2026 GMT Subject: serialNumber=762486c40c93edb368292147b092b3396fed16f68c54ebb75c8c48185ef89641, CN=bb9a9116-f615-462e-a680-5266b327e0fa Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:df:59:44:d6:47:b4:35:9d:15:38:ab:8e:1a:4b: 8b:83:a3:87:06:48:62:6e:c7:ce:bc:15:a7:f4:bc: 41:08:0c:0f:15:75:14:e0:49:41:5b:7e:82:c2:db: a2:56:9c:63:5e:82:29:a6:0d:40:bf:cd:01:85:36: 25:08:67:b6:33:c5:ec:3b:a1:2f:9a:1c:a0:a2:63: d8:09:d8:28:c0:4e:4d:44:b1:5b:da:34:72:80:9c: cf:92:3f:8a:d2:bc:f2:66:4e:4f:f4:3b:b6:38:6e: bb:e8:47:2a:fe:3e:6e:bc:07:3c:78:d4:b9:7e:c6: 71:29:e9:c8:e8:6c:28:d2:e6:ae:33:cf:b6:66:63: 2a:ec:98:23:3d:88:27:72:2b:6e:26:b8:02:04:4b: 1c:ac:92:69:1f:f6:74:96:77:1d:96:a5:a5:94:81: 7d:7c:69:e9:4a:09:b0:90:dd:73:cc:76:17:4c:47: 44:72:7f:5c:44:56:a7:ed:43:09:bb:d4:3c:d9:48: c4:f9:67:e8:49:08:56:55:c3:fb:5e:48:39:a7:b8: d0:e1:d4:8e:2b:67:f9:9c:01:db:87:b5:03:86:6b: f8:c3:c0:dc:6d:64:89:3d:8b:3f:4c:2c:2a:7a:2c: a9:3b:21:fd:76:a6:d4:60:36:01:a2:34:ac:32:b5: 64:a7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 29:5D:0C:FA:8D:2F:7A:6B:2A:62:3B:5B:3A:37:18:03:F5:B0:7A:D7 X509v3 Authority Key Identifier: keyid:E7:CA:DA:5F:08:81:D7:7B:EA:48:B0:76:8A:37:66:B5:00:65:AF:08 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/58raXwiB13vqSLB2ijdmtQBlrwg.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/708aafaf-00b4-485b-854c-0b32ca30f57b/manifest.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/708aafaf-00b4-485b-854c-0b32ca30f57b/12e59001-35ac-4abf-858f-37b955a24b3f.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 8e:34:29:45:c8:a8:e8:e2:f8:64:a1:c3:73:b6:95:01:3f:12: 2d:7d:33:9a:4d:42:08:07:2c:95:6f:ac:bb:7d:83:2b:07:f5: 19:ef:85:0a:08:83:06:5f:ce:b7:08:9e:95:ad:e3:2b:47:1e: 65:c8:d5:18:e8:9f:9b:ec:cc:27:65:4d:28:4e:ce:9a:97:88: f2:4d:80:03:38:2d:66:58:81:0b:f9:07:94:04:e3:9b:01:3c: d7:8c:24:58:53:39:8a:23:4e:55:44:bd:8c:4e:d1:0b:1b:b5: 41:76:be:1c:0f:92:2f:38:32:ba:82:b9:46:17:68:75:9c:cb: 88:42:1c:10:e0:e1:e8:ca:5d:0c:ba:11:00:04:a3:1b:09:3a: 96:4c:a1:a9:71:23:86:ad:2f:4d:66:d7:9c:3b:98:c2:c1:53: bd:34:a4:ee:77:d1:39:aa:52:d3:ab:f8:8f:74:47:71:fb:72: f4:0c:bd:0e:a1:35:dc:e4:0f:f9:c2:93:82:89:1b:64:bf:9f: b6:0f:7d:2f:da:39:cd:4b:4e:f6:8c:01:b9:7f:94:4c:d0:75: 45:e6:ee:41:44:d8:e7:52:f7:fc:36:1f:6e:be:76:e9:55:40: a4:65:29:79:f0:ab:2e:60:5c:5c:dd:f3:b9:5d:ae:35:fa:7e: 9c:73:e4:d5 -----BEGIN CERTIFICATE----- MIIFlTCCBH2gAwIBAgIUdlcoeldCCbh/QHUiwN2jIvtlfyAwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODgwNkYwMDAwMTEwLwYDVQQFEyhFN0NBREE1RjA4 ODFENzdCRUE0OEIwNzY4QTM3NjZCNTAwNjVBRjA4MB4XDTI2MDcyODAwMDI1N1oX DTI2MDgwMTAwMDI1N1owejFJMEcGA1UEBRNANzYyNDg2YzQwYzkzZWRiMzY4Mjky MTQ3YjA5MmIzMzk2ZmVkMTZmNjhjNTRlYmI3NWM4YzQ4MTg1ZWY4OTY0MTEtMCsG A1UEAxMkYmI5YTkxMTYtZjYxNS00NjJlLWE2ODAtNTI2NmIzMjdlMGZhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA31lE1ke0NZ0VOKuOGkuLg6OHBkhi bsfOvBWn9LxBCAwPFXUU4ElBW36CwtuiVpxjXoIppg1Av80BhTYlCGe2M8XsO6Ev mhygomPYCdgowE5NRLFb2jRygJzPkj+K0rzyZk5P9Du2OG676Ecq/j5uvAc8eNS5 fsZxKenI6Gwo0uauM8+2ZmMq7JgjPYgncituJrgCBEscrJJpH/Z0lncdlqWllIF9 fGnpSgmwkN1zzHYXTEdEcn9cRFan7UMJu9Q82UjE+WfoSQhWVcP7Xkg5p7jQ4dSO K2f5nAHbh7UDhmv4w8DcbWSJPYs/TCwqeiypOyH9dqbUYDYBojSsMrVkpwIDAQAB o4ICQTCCAj0wHQYDVR0OBBYEFCldDPqNL3prKmI7Wzo3GAP1sHrXMB8GA1UdIwQY MBaAFOfK2l8Igdd76kiwdoo3ZrUAZa8IMA4GA1UdDwEB/wQEAwIHgDB+BggrBgEF BQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVw b3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi81OHJhWHdp QjEzdnFTTEIyaWpkbXRRQmxyd2cuY2VyMH8GCCsGAQUFBwELBHMwcTBvBggrBgEF BQcwC4ZjcnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5hbWF6b25hd3MuY29t L3ZvbHVtZS83MDhhYWZhZi0wMGI0LTQ4NWItODU0Yy0wYjMyY2EzMGY1N2IvbWFu aWZlc3QubWZ0MIGVBgNVHR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnBraS1y c3luYy51cy1lYXN0LTIuYW1hem9uYXdzLmNvbS92b2x1bWUvNzA4YWFmYWYtMDBi NC00ODViLTg1NGMtMGIzMmNhMzBmNTdiLzEyZTU5MDAxLTM1YWMtNGFiZi04NThm LTM3Yjk1NWEyNGIzZi5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggr BgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYw BKACBQAwDQYJKoZIhvcNAQELBQADggEBAI40KUXIqOji+GShw3O2lQE/Ei19M5pN QggHLJVvrLt9gysH9RnvhQoIgwZfzrcInpWt4ytHHmXI1Rjon5vszCdlTShOzpqX iPJNgAM4LWZYgQv5B5QE45sBPNeMJFhTOYojTlVEvYxO0QsbtUF2vhwPki84MrqC uUYXaHWcy4hCHBDg4ejKXQy6EQAEoxsJOpZMoalxI4atL01m15w7mMLBU700pO53 0TmqUtOr+I90R3H7cvQMvQ6hNdzkD/nCk4KJG2S/n7YPfS/aOc1LTvaMAbl/lEzQ dUXm7kFE2OdS9/w2H26+dulVQKRlKXnwqy5gXFzd87ldrjX6fpxz5NU= -----END CERTIFICATE-----Generated at Tue Jul 28 20:12:38 2026 by rpki-client