$ rpki-client -vvvf rpki-rsync.us-east-2.amazonaws.com/volume/db9a372a-09bc-4a32-bfe4-8c48e5dbd219/manifest.mft File: manifest.mft (raw, json) Hash identifier: 5202x3ezKLfBY5YD+XjErBDZNDWkshRkZ4t+syrJ/P4= Subject key identifier: F4:19:2C:31:92:E5:F5:3F:D4:DF:28:26:77:06:0B:8A:CD:CC:20:6A Authority key identifier: 16:F5:24:F8:E0:EC:7C:AE:07:69:C4:2E:50:FF:B3:A2:B5:64:A6:AC Certificate issuer: /CN=A91509EC0000/serialNumber=16F524F8E0EC7CAE0769C42E50FFB3A2B564A6AC Certificate serial: 0CE508F0FB178C5B1A7F7E8E2CF1CF50A7D38435 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FvUk-ODsfK4HacQuUP-zorVkpqw.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/db9a372a-09bc-4a32-bfe4-8c48e5dbd219/manifest.mft Manifest number: 0621 Signing time: Sun 20 Sep 2026 00:09:46 +0000 Manifest this update: Sun 20 Sep 2026 00:09:46 +0000 Manifest next update: Thu 24 Sep 2026 00:09:46 +0000 Files and hashes: 1: 05bc8dbb-c70a-48da-b45b-4448364614ff.roa (hash: lY4T+SAC/eq1lqcLwr6+duWXCWoI/25yj9GloUcLqnc=) 2: 0bf15d3f-c546-4bb6-a764-82165c384d37.roa (hash: pAUau9W2Q1n8bkWgMJqn69Gjg4QnMvogj11ziiAugt0=) 3: 0c5c54ff-f977-4b96-8ce9-a1eaf082fe9c.roa (hash: Nti5XZ3SZ/5X5vml90GJptxj5wU4R5TflY4EtGcxI/E=) 4: 2f47dcdd-c384-4eb2-aefd-f4ad64f26cce.roa (hash: mGCP92ndXqtbWgc35vK8fF+nQmakA/RqaYIANAYMDts=) 5: 3407e5b6-a83d-4668-898f-fdbb23092502.roa (hash: SBbAMoRoCEcPLDNU3aRXyoFbsg+b2tGAIka8WO5y1qA=) 6: 3b940d14-b8c4-4c3d-978f-a1a3b7a0a82c.roa (hash: 7DQ1BBqI+YGQodqSp/9cow4A6cRx6MURcx/z2L1uszc=) 7: 48a67156-122e-41d4-a2a8-8046cc5ecc41.roa (hash: 08q2O5O5oVmNxk4BNjhuMscxxtdmm3vZP0iC3ZndTbU=) 8: 6cf57aa6-6ba3-43af-bbd5-44485e3b9f67.roa (hash: NV3yneSLI5yJGt7cnV3Ta6BrskfYvxCuGX94eQwyA2M=) 9: 6ecb3cca-488d-43b9-a50b-d37c0c55a9e1.crl (hash: Lls6pygP+ksTwOr3Y72ZjQ/TspY90TQNf3LQa2pPTXM=) 10: 74efe8b3-d39c-4a8b-9b7b-5994aa4c8d82.roa (hash: EYImvr29ra2F/O4KTQhRVqHeXq3TuWtI5rObt3hFbnA=) 11: 7a646ec3-fc0e-40e7-adb4-82d5fd83f029.roa (hash: SmhnWkJlgRO1ZNn792ZwOUn8Tem6AvtEchsHWxmpNlg=) 12: 82456ff2-f8c4-4c5a-9458-82d909f83f7d.roa (hash: Q826nO8V91uH1JkWDv8cfHhS+jZDK8fx34H9LEGu0ug=) 13: 9b59fbe4-f242-4dbf-9964-15048c3da996.roa (hash: QhnxFBgjUxHiRKLTJPQ2sIaTKqb14Jbu69kbxZumNEw=) 14: 9b8e963e-7fa2-4ba1-a78a-4d1fd7989b32.roa (hash: Dcm8WyP+tRkJzCNAbotVujAO0N7AZKefgHJLgDm17rM=) 15: a78b90df-233b-4ec6-89d2-de27ac2dc044.roa (hash: yLQ60Vu1aG8yLvN50aTCpkr3v59yQOtQsDjF9xdyhPU=) 16: b3ba338e-4843-454b-abe5-65f09756225a.roa (hash: Mf2NIJH9IfPzZ7oAHeUn9AKZQZwtos7P5QRYym1AnzM=) 17: c1564659-f3aa-4021-a7a5-8f4b1c2c4963.roa (hash: 33hPW4gI2TGJ5byNnROxUh04t/0LZvEPOiok6H/PYmk=) 18: cc671c79-21f0-4fff-b898-595966ecd1a9.roa (hash: Pa8aH+K3CqvEc4N5b1Bw5FQ7b2xwh+Ahb5pfwMJk73M=) Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/db9a372a-09bc-4a32-bfe4-8c48e5dbd219/6ecb3cca-488d-43b9-a50b-d37c0c55a9e1.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/db9a372a-09bc-4a32-bfe4-8c48e5dbd219/manifest.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FvUk-ODsfK4HacQuUP-zorVkpqw.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 24 Sep 2026 00:09:46 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0c:e5:08:f0:fb:17:8c:5b:1a:7f:7e:8e:2c:f1:cf:50:a7:d3:84:35 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91509EC0000, serialNumber=16F524F8E0EC7CAE0769C42E50FFB3A2B564A6AC Validity Not Before: Sep 20 00:09:46 2026 GMT Not After : Sep 24 00:09:46 2026 GMT Subject: serialNumber=5821be64a9c2150a9bb4aa5e377d4e71229d8bb67bcfb7b3c0eeba026489808e, CN=58810403-9ba0-403a-809b-c78252ab7f5d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ca:16:35:5e:d4:0c:63:c4:a6:45:97:bb:db:d1: 63:ce:f2:c5:3c:c9:f6:ed:31:1f:b9:29:2e:09:54: 4b:ca:24:29:f8:82:bc:fb:08:7a:20:e9:c5:51:80: 9e:3d:7d:e2:51:bd:c3:d2:c0:80:1f:f8:b0:04:b8: 9e:9b:a4:cb:8f:6e:d1:b8:1b:0e:b0:8f:57:87:b0: a7:1c:c0:9f:a4:d8:11:12:02:69:9f:ce:ae:e7:33: 2c:29:9c:33:e5:bd:7d:4f:e8:b2:e7:89:12:8a:1f: f6:3f:5f:f5:4d:8e:e5:e7:e6:e4:77:bb:1c:12:c9: 7f:dc:ce:4b:95:5a:e1:d4:7e:58:82:12:35:c1:93: 42:b5:02:31:78:97:c0:aa:aa:c7:42:c4:8b:13:66: 4d:3f:a9:b2:3d:ba:4f:14:dd:f2:79:77:00:87:9f: 61:3a:05:a3:63:3e:ac:6c:e5:91:64:15:26:71:30: 80:9e:46:49:12:a9:e9:1b:f9:63:e8:1e:68:7e:18: f2:07:eb:4c:32:d4:fd:c4:be:d6:79:68:01:26:64: 34:c3:9b:b1:5d:1e:9f:fc:94:b7:f1:bf:73:59:fe: 81:ae:13:d8:fb:98:22:44:1c:23:01:5f:dd:fd:c8: f1:61:3e:ef:7b:27:08:a4:32:b4:f7:2e:34:7c:d6: e7:11 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F4:19:2C:31:92:E5:F5:3F:D4:DF:28:26:77:06:0B:8A:CD:CC:20:6A X509v3 Authority Key Identifier: keyid:16:F5:24:F8:E0:EC:7C:AE:07:69:C4:2E:50:FF:B3:A2:B5:64:A6:AC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FvUk-ODsfK4HacQuUP-zorVkpqw.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/db9a372a-09bc-4a32-bfe4-8c48e5dbd219/manifest.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/db9a372a-09bc-4a32-bfe4-8c48e5dbd219/6ecb3cca-488d-43b9-a50b-d37c0c55a9e1.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 6a:3a:75:c1:c9:bb:43:0b:3a:00:e4:d2:99:4c:6b:02:18:40: 73:77:6c:3a:18:b6:87:8c:82:a3:b7:8c:d5:4a:c6:c5:cb:26: b9:94:42:78:f3:ec:e3:99:a7:47:04:d0:d8:5a:62:22:52:a1: ba:1c:c1:e7:ee:58:f5:37:6e:ba:f6:6a:31:3e:4c:8c:38:a9: ec:77:54:78:05:3c:93:6d:79:0a:10:eb:7b:70:b7:07:c0:7d: b0:55:0a:13:7b:25:a8:8f:29:74:60:05:ee:de:75:5c:dc:c8: da:d8:4d:6a:65:c6:39:95:b0:9c:3c:3f:32:d5:01:b0:65:7e: 10:39:08:94:2e:3f:a0:bc:9f:79:a5:9b:ca:3d:76:2b:95:e5: be:39:e1:d3:a1:08:5b:5d:52:58:36:30:d9:eb:86:52:8d:54: e6:53:98:d9:64:ee:62:07:c0:59:d4:47:a1:f7:c0:ee:d0:8e: 60:96:2c:9c:c0:27:37:7f:53:7b:63:d3:de:f9:fd:9c:a2:11: 73:7e:85:aa:ab:e2:cf:d1:dc:96:c0:6a:a6:69:f8:1f:ad:32: f5:6d:7f:97:35:8f:de:ea:56:ac:1f:3d:f3:8d:11:5a:e3:8f: 9c:47:0c:c6:aa:ca:05:77:4a:65:19:8b:85:dd:cb:b6:7f:c3: 8b:66:a8:db -----BEGIN CERTIFICATE----- MIIFlTCCBH2gAwIBAgIUDOUI8PsXjFsaf36OLPHPUKfThDUwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxNTA5RUMwMDAwMTEwLwYDVQQFEygxNkY1MjRGOEUw RUM3Q0FFMDc2OUM0MkU1MEZGQjNBMkI1NjRBNkFDMB4XDTI2MDkyMDAwMDk0NloX DTI2MDkyNDAwMDk0NlowejFJMEcGA1UEBRNANTgyMWJlNjRhOWMyMTUwYTliYjRh YTVlMzc3ZDRlNzEyMjlkOGJiNjdiY2ZiN2IzYzBlZWJhMDI2NDg5ODA4ZTEtMCsG A1UEAxMkNTg4MTA0MDMtOWJhMC00MDNhLTgwOWItYzc4MjUyYWI3ZjVkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyhY1XtQMY8SmRZe729FjzvLFPMn2 7TEfuSkuCVRLyiQp+IK8+wh6IOnFUYCePX3iUb3D0sCAH/iwBLiem6TLj27RuBsO sI9Xh7CnHMCfpNgREgJpn86u5zMsKZwz5b19T+iy54kSih/2P1/1TY7l5+bkd7sc Esl/3M5LlVrh1H5YghI1wZNCtQIxeJfAqqrHQsSLE2ZNP6myPbpPFN3yeXcAh59h OgWjYz6sbOWRZBUmcTCAnkZJEqnpG/lj6B5ofhjyB+tMMtT9xL7WeWgBJmQ0w5ux XR6f/JS38b9zWf6BrhPY+5giRBwjAV/d/cjxYT7veycIpDK09y40fNbnEQIDAQAB o4ICQTCCAj0wHQYDVR0OBBYEFPQZLDGS5fU/1N8oJncGC4rNzCBqMB8GA1UdIwQY MBaAFBb1JPjg7HyuB2nELlD/s6K1ZKasMA4GA1UdDwEB/wQEAwIHgDB+BggrBgEF BQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVw b3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9GdlVrLU9E c2ZLNEhhY1F1VVAtem9yVmtwcXcuY2VyMH8GCCsGAQUFBwELBHMwcTBvBggrBgEF BQcwC4ZjcnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5hbWF6b25hd3MuY29t L3ZvbHVtZS9kYjlhMzcyYS0wOWJjLTRhMzItYmZlNC04YzQ4ZTVkYmQyMTkvbWFu aWZlc3QubWZ0MIGVBgNVHR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnBraS1y c3luYy51cy1lYXN0LTIuYW1hem9uYXdzLmNvbS92b2x1bWUvZGI5YTM3MmEtMDli Yy00YTMyLWJmZTQtOGM0OGU1ZGJkMjE5LzZlY2IzY2NhLTQ4OGQtNDNiOS1hNTBi LWQzN2MwYzU1YTllMS5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggr BgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYw BKACBQAwDQYJKoZIhvcNAQELBQADggEBAGo6dcHJu0MLOgDk0plMawIYQHN3bDoY toeMgqO3jNVKxsXLJrmUQnjz7OOZp0cE0NhaYiJSobocwefuWPU3brr2ajE+TIw4 qex3VHgFPJNteQoQ63twtwfAfbBVChN7JaiPKXRgBe7edVzcyNrYTWplxjmVsJw8 PzLVAbBlfhA5CJQuP6C8n3mlm8o9diuV5b454dOhCFtdUlg2MNnrhlKNVOZTmNlk 7mIHwFnUR6H3wO7QjmCWLJzAJzd/U3tj0975/ZyiEXN+haqr4s/R3JbAaqZp+B+t MvVtf5c1j97qVqwfPfONEVrjj5xHDMaqygV3SmUZi4Xdy7Z/w4tmqNs= -----END CERTIFICATE-----Generated at Mon Sep 21 01:56:13 2026 by rpki-client