$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/bd48a1fa-3471-4ab2-8508-ad36b96813e4/manifest.mft File: manifest.mft (raw, json) Hash identifier: JnAxIiNsgF0PS4DyCSptBIj2DeowadTkm0V3vICHzGE= Subject key identifier: 45:7C:93:F8:20:84:28:40:4E:A8:C9:89:8C:48:E2:5C:BC:BE:46:16 Authority key identifier: BC:E9:BA:11:29:2F:84:75:12:C0:A8:41:2E:51:E6:E3:BA:0D:99:1D Certificate issuer: /CN=A91609040001/serialNumber=BCE9BA11292F847512C0A8412E51E6E3BA0D991D Certificate serial: 0B6F262E7C5C3B2B49E3857154C0992F061FA01F Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vOm6ESkvhHUSwKhBLlHm47oNmR0.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/bd48a1fa-3471-4ab2-8508-ad36b96813e4/manifest.mft Manifest number: 0608 Signing time: Tue 28 Jul 2026 00:03:17 +0000 Manifest this update: Tue 28 Jul 2026 00:03:17 +0000 Manifest next update: Sat 01 Aug 2026 00:03:17 +0000 Files and hashes: 1: 177c9702-ee39-42d1-b76f-6cee77f4fb45.roa (hash: ccwt1CBQMyS3892sZdcXMVVzywZdW2vC4hnvlBXhQmc=) 2: 197500e2-3802-44b2-a561-ca3dad01e209.roa (hash: 9noVsp+SlXMaVtRYLZ2UsgHXOR8yBZrfK7uKc6w2RU0=) 3: 1dffeac8-b779-49ef-ba27-58bc19891e60.roa (hash: LWW7G4vSgrTVoC49iuj/jpZ5T5IkSgMBRFaAY/6AWUQ=) 4: 220cee0c-6002-409a-8194-38e216c0096c.crl (hash: Vj3ik1oG8WmMG2Ilh+hp52/OrE//yqrjPj39uKsLYV0=) 5: 22707524-2248-48ea-815f-578f49b19436.roa (hash: gWQW94UchMXKpAitMYpF39jPrIGeNpor2yQqW1vclFo=) 6: 22d6913e-5f3d-4f99-9a60-48579f471838.roa (hash: 8F7U3HuBEHAbZxeotbZdxHhB0w+z61KRGEVZWZ1NOPA=) 7: 245fa4eb-6d0d-4df7-9e2d-29a7d39adcb9.roa (hash: Wr+c6Q1I10v8ZDHa1kskBEdqqsWESS2cYOTf7oQrhuo=) 8: 3684e50c-c50f-4ebb-b327-e0759241197e.roa (hash: 1t03EChjZYkK077vk6ZH3a5qPnl5WndlNpd+mVGJaPM=) 9: 3b8557c0-d5ee-4f9d-80ac-e41a37ffff27.roa (hash: SekGmHDfoGXj5vE4Zm57ePrlctkbgwVHEgjShmndD3o=) 10: 42932dd4-2720-47b3-a472-fc2c8a50a46c.roa (hash: NMamOf9rJQLEFcxePu5jji6CzEB+kU961XK/hVBXFrA=) 11: 43fd8687-12d4-49b5-9958-8536ce8160b4.roa (hash: 56ohyAlTtw3nDjDnI6PeLZ9qx5aGxhIqza4yGFF5fkk=) 12: 6b15abb6-10b7-4ecd-9947-c96012f824c6.roa (hash: sgve8SNnpJRICXi56BMuftrBFNrW8ZCffoMP5NfnWZg=) 13: 7b26d410-17d7-4310-bb58-41c465f8eef2.roa (hash: e7DgUMtp6AoSqdNYLBl9ON3HVwaVdFMx/vALGOr1yFY=) 14: 882a767c-0faf-4e71-a224-ecec47d98fcb.roa (hash: MUN3E1NLiG+U9TN+LvMQxVmbYWbeCf+Yz3FFqM07XUk=) 15: 8c170584-7c9b-414b-8cba-a934a0a79bbe.roa (hash: aWTrNq1G+utWB6tkA4hz4DH0ZMMJfiIsmt+vshKxw30=) 16: 9e37f855-48bf-420a-a86c-5eeb4fc1f790.roa (hash: mmDjTVF7uC6IcLTQiEaOr33xzbFkcnbXUdIc6xa3iKs=) 17: adf75e2e-9d2c-4718-a49d-ad44079b266b.roa (hash: NBLGSURJiomLlOLBraVQVdoTSr6bS+7HxfARclWtYgE=) 18: cb2e5a8c-21f1-4679-a372-617732fc3ea6.roa (hash: KpdoMD0r6LzGsIFEnqxHdIGwAQfhLRI49qdtI7ZZKXk=) 19: cebef322-460c-4f6e-8a8a-2f4b41debd9b.roa (hash: rDQw2NlaITAzyDgBs7YI0l4weL1704mjzjFsg+xw0kE=) 20: d953b731-7921-47dd-abf3-b7b8cc367900.roa (hash: eemEEY86nS8bPyiVDFi6ZCQhg151yZIJ5Mn0I+PMcdc=) 21: e32c9cbd-a241-4df6-99bb-e7d15abe4b3b.roa (hash: Hi54Gbhw3DEMbkLoHk2FXWg76N5z+6Fx0yPf7AZ7FXk=) 22: fcd6adab-06f0-4676-9568-6d4d48f7658c.roa (hash: k9kJTRHzieVUKtUJcCU58vrFuecAYruUDN3npMtxG8E=) Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/bd48a1fa-3471-4ab2-8508-ad36b96813e4/220cee0c-6002-409a-8194-38e216c0096c.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/bd48a1fa-3471-4ab2-8508-ad36b96813e4/manifest.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vOm6ESkvhHUSwKhBLlHm47oNmR0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 01 Aug 2026 00:03:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0b:6f:26:2e:7c:5c:3b:2b:49:e3:85:71:54:c0:99:2f:06:1f:a0:1f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91609040001, serialNumber=BCE9BA11292F847512C0A8412E51E6E3BA0D991D Validity Not Before: Jul 28 00:03:17 2026 GMT Not After : Aug 1 00:03:17 2026 GMT Subject: serialNumber=3e32b602115635807b7bb6f82611bbf284749d506f23b96605e1c1f984eb0bc7, CN=1684111e-31c1-42e6-8f20-fc9ab8b5cf57 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d0:a7:c0:e8:80:c4:03:58:95:cf:61:1f:14:73: 28:60:f2:16:26:20:e8:ce:9a:76:ce:33:d8:07:f2: 2c:64:a8:37:fb:17:e8:65:20:81:da:1c:3f:e7:85: 6d:9f:92:a9:40:7c:c1:02:e6:e1:1a:07:45:24:97: fa:9c:f5:35:4c:46:51:0e:14:19:7a:a2:39:d5:04: 3a:14:e6:85:00:49:03:78:fd:07:b1:84:bc:bb:38: c2:a8:96:d9:9e:21:24:ab:7d:35:92:01:fa:0f:ed: f2:c2:5f:2b:b6:05:fc:f8:a3:47:c1:0d:55:e1:26: 6f:15:aa:17:75:44:77:ea:88:da:f1:9f:51:7b:af: 27:2e:db:13:3e:8b:b0:66:bc:51:90:67:18:ed:aa: 2b:8b:75:70:c2:fc:d7:f7:a6:21:ae:b9:73:7c:9b: 57:c0:8f:36:41:cc:78:3d:ae:15:00:eb:9c:9f:a2: 62:5c:6a:d4:9e:31:7a:f6:5e:d1:8b:b2:31:94:74: 42:4e:80:63:12:97:22:be:d0:4c:29:35:c5:d1:e2: 81:b9:db:03:c2:f2:4e:db:88:38:08:14:62:28:17: 2d:8e:30:66:a9:0e:32:21:d7:6f:cd:3c:aa:7d:7b: ad:c2:86:27:4b:24:fb:3a:63:95:69:b6:6a:38:9a: 89:1f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 45:7C:93:F8:20:84:28:40:4E:A8:C9:89:8C:48:E2:5C:BC:BE:46:16 X509v3 Authority Key Identifier: keyid:BC:E9:BA:11:29:2F:84:75:12:C0:A8:41:2E:51:E6:E3:BA:0D:99:1D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vOm6ESkvhHUSwKhBLlHm47oNmR0.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/bd48a1fa-3471-4ab2-8508-ad36b96813e4/manifest.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/bd48a1fa-3471-4ab2-8508-ad36b96813e4/220cee0c-6002-409a-8194-38e216c0096c.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 21:66:71:02:1c:1b:e9:ff:81:7f:36:d7:07:14:d4:1f:95:d8: 54:8b:78:83:14:ed:7e:8d:4b:e9:ac:0b:4d:65:3a:26:f7:7a: 37:ed:20:df:82:0a:df:c6:2c:0d:63:37:4f:30:3b:b0:1f:60: ab:74:75:c7:f9:cb:38:02:44:e6:76:c1:70:ad:8c:97:58:b5: be:46:de:64:49:90:e8:c3:56:b6:90:a0:31:f8:dd:40:63:b2: b3:d5:e5:13:57:9e:02:fb:b7:61:9c:8d:e2:55:24:4d:f5:ad: ec:c1:01:ab:fd:97:00:12:9b:0a:92:82:13:9e:93:42:26:bf: 53:5a:ff:07:e2:bc:b4:74:f7:0a:be:2a:4b:e3:76:5d:e4:1c: 49:c4:42:96:46:11:54:d8:74:cd:6c:e9:51:78:b0:2f:29:98: 78:19:a6:4f:6b:1e:f3:b6:2b:71:e8:5c:e3:9d:b4:3f:e9:d9: 49:18:02:80:a4:78:48:e1:f0:f3:48:a0:b0:3b:7c:58:de:cb: e0:36:7d:b8:91:76:7e:03:f7:e8:84:90:17:48:f5:b1:7a:2a: 8e:62:2f:4b:e9:15:f3:4b:d0:ca:4f:49:16:d4:98:bd:b7:c1: 45:f7:26:2d:b2:23:49:d3:8c:65:18:bc:d5:ee:5d:8e:48:2a: ef:75:7a:ed -----BEGIN CERTIFICATE----- MIIFlTCCBH2gAwIBAgIUC28mLnxcOytJ44VxVMCZLwYfoB8wDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxNjA5MDQwMDAxMTEwLwYDVQQFEyhCQ0U5QkExMTI5 MkY4NDc1MTJDMEE4NDEyRTUxRTZFM0JBMEQ5OTFEMB4XDTI2MDcyODAwMDMxN1oX DTI2MDgwMTAwMDMxN1owejFJMEcGA1UEBRNAM2UzMmI2MDIxMTU2MzU4MDdiN2Ji NmY4MjYxMWJiZjI4NDc0OWQ1MDZmMjNiOTY2MDVlMWMxZjk4NGViMGJjNzEtMCsG A1UEAxMkMTY4NDExMWUtMzFjMS00MmU2LThmMjAtZmM5YWI4YjVjZjU3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0KfA6IDEA1iVz2EfFHMoYPIWJiDo zpp2zjPYB/IsZKg3+xfoZSCB2hw/54Vtn5KpQHzBAubhGgdFJJf6nPU1TEZRDhQZ eqI51QQ6FOaFAEkDeP0HsYS8uzjCqJbZniEkq301kgH6D+3ywl8rtgX8+KNHwQ1V 4SZvFaoXdUR36oja8Z9Re68nLtsTPouwZrxRkGcY7aori3VwwvzX96YhrrlzfJtX wI82Qcx4Pa4VAOucn6JiXGrUnjF69l7Ri7IxlHRCToBjEpcivtBMKTXF0eKBudsD wvJO24g4CBRiKBctjjBmqQ4yIddvzTyqfXutwoYnSyT7OmOVabZqOJqJHwIDAQAB o4ICQTCCAj0wHQYDVR0OBBYEFEV8k/gghChATqjJiYxI4ly8vkYWMB8GA1UdIwQY MBaAFLzpuhEpL4R1EsCoQS5R5uO6DZkdMA4GA1UdDwEB/wQEAwIHgDB+BggrBgEF BQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVw b3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi92T202RVNr dmhIVVN3S2hCTGxIbTQ3b05tUjAuY2VyMH8GCCsGAQUFBwELBHMwcTBvBggrBgEF BQcwC4ZjcnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5hbWF6b25hd3MuY29t L3ZvbHVtZS9iZDQ4YTFmYS0zNDcxLTRhYjItODUwOC1hZDM2Yjk2ODEzZTQvbWFu aWZlc3QubWZ0MIGVBgNVHR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnBraS1y c3luYy51cy1lYXN0LTIuYW1hem9uYXdzLmNvbS92b2x1bWUvYmQ0OGExZmEtMzQ3 MS00YWIyLTg1MDgtYWQzNmI5NjgxM2U0LzIyMGNlZTBjLTYwMDItNDA5YS04MTk0 LTM4ZTIxNmMwMDk2Yy5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggr BgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYw BKACBQAwDQYJKoZIhvcNAQELBQADggEBACFmcQIcG+n/gX821wcU1B+V2FSLeIMU 7X6NS+msC01lOib3ejftIN+CCt/GLA1jN08wO7AfYKt0dcf5yzgCROZ2wXCtjJdY tb5G3mRJkOjDVraQoDH43UBjsrPV5RNXngL7t2GcjeJVJE31rezBAav9lwASmwqS ghOek0Imv1Na/wfivLR09wq+Kkvjdl3kHEnEQpZGEVTYdM1s6VF4sC8pmHgZpk9r HvO2K3HoXOOdtD/p2UkYAoCkeEjh8PNIoLA7fFjey+A2fbiRdn4D9+iEkBdI9bF6 Ko5iL0vpFfNL0MpPSRbUmL23wUX3Ji2yI0nTjGUYvNXuXY5IKu91eu0= -----END CERTIFICATE-----Generated at Tue Jul 28 20:12:56 2026 by rpki-client