$ rpki-client -vvvf rpki-rsync.us-east-2.amazonaws.com/volume/db9a372a-09bc-4a32-bfe4-8c48e5dbd219/manifest.mft File: manifest.mft (raw, json) Hash identifier: vrj7KKQf54lFTUkpJhbPjVGdCdGUnBNQsD00n6QVWjI= Subject key identifier: 36:4B:FC:4C:56:76:41:0C:F3:68:55:F5:87:36:B8:BF:03:DB:81:8B Authority key identifier: 16:F5:24:F8:E0:EC:7C:AE:07:69:C4:2E:50:FF:B3:A2:B5:64:A6:AC Certificate issuer: /CN=A91509EC0000/serialNumber=16F524F8E0EC7CAE0769C42E50FFB3A2B564A6AC Certificate serial: 66059870FFE7A090207A5CB6EABA1B68E9A27414 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FvUk-ODsfK4HacQuUP-zorVkpqw.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/db9a372a-09bc-4a32-bfe4-8c48e5dbd219/manifest.mft Manifest number: 0622 Signing time: Mon 21 Sep 2026 00:09:58 +0000 Manifest this update: Mon 21 Sep 2026 00:09:58 +0000 Manifest next update: Fri 25 Sep 2026 00:09:58 +0000 Files and hashes: 1: 05bc8dbb-c70a-48da-b45b-4448364614ff.roa (hash: lY4T+SAC/eq1lqcLwr6+duWXCWoI/25yj9GloUcLqnc=) 2: 0bf15d3f-c546-4bb6-a764-82165c384d37.roa (hash: pAUau9W2Q1n8bkWgMJqn69Gjg4QnMvogj11ziiAugt0=) 3: 0c5c54ff-f977-4b96-8ce9-a1eaf082fe9c.roa (hash: Nti5XZ3SZ/5X5vml90GJptxj5wU4R5TflY4EtGcxI/E=) 4: 2f47dcdd-c384-4eb2-aefd-f4ad64f26cce.roa (hash: mGCP92ndXqtbWgc35vK8fF+nQmakA/RqaYIANAYMDts=) 5: 3407e5b6-a83d-4668-898f-fdbb23092502.roa (hash: SBbAMoRoCEcPLDNU3aRXyoFbsg+b2tGAIka8WO5y1qA=) 6: 3b940d14-b8c4-4c3d-978f-a1a3b7a0a82c.roa (hash: 7DQ1BBqI+YGQodqSp/9cow4A6cRx6MURcx/z2L1uszc=) 7: 48a67156-122e-41d4-a2a8-8046cc5ecc41.roa (hash: 08q2O5O5oVmNxk4BNjhuMscxxtdmm3vZP0iC3ZndTbU=) 8: 6cf57aa6-6ba3-43af-bbd5-44485e3b9f67.roa (hash: NV3yneSLI5yJGt7cnV3Ta6BrskfYvxCuGX94eQwyA2M=) 9: 6ecb3cca-488d-43b9-a50b-d37c0c55a9e1.crl (hash: lPUrHc6/d5l4CZDz8qzxfmEy1aiFXrfjJnJskf7J3hA=) 10: 74efe8b3-d39c-4a8b-9b7b-5994aa4c8d82.roa (hash: EYImvr29ra2F/O4KTQhRVqHeXq3TuWtI5rObt3hFbnA=) 11: 7a646ec3-fc0e-40e7-adb4-82d5fd83f029.roa (hash: SmhnWkJlgRO1ZNn792ZwOUn8Tem6AvtEchsHWxmpNlg=) 12: 82456ff2-f8c4-4c5a-9458-82d909f83f7d.roa (hash: Q826nO8V91uH1JkWDv8cfHhS+jZDK8fx34H9LEGu0ug=) 13: 9b59fbe4-f242-4dbf-9964-15048c3da996.roa (hash: QhnxFBgjUxHiRKLTJPQ2sIaTKqb14Jbu69kbxZumNEw=) 14: 9b8e963e-7fa2-4ba1-a78a-4d1fd7989b32.roa (hash: Dcm8WyP+tRkJzCNAbotVujAO0N7AZKefgHJLgDm17rM=) 15: a78b90df-233b-4ec6-89d2-de27ac2dc044.roa (hash: yLQ60Vu1aG8yLvN50aTCpkr3v59yQOtQsDjF9xdyhPU=) 16: b3ba338e-4843-454b-abe5-65f09756225a.roa (hash: Mf2NIJH9IfPzZ7oAHeUn9AKZQZwtos7P5QRYym1AnzM=) 17: c1564659-f3aa-4021-a7a5-8f4b1c2c4963.roa (hash: 33hPW4gI2TGJ5byNnROxUh04t/0LZvEPOiok6H/PYmk=) 18: cc671c79-21f0-4fff-b898-595966ecd1a9.roa (hash: Pa8aH+K3CqvEc4N5b1Bw5FQ7b2xwh+Ahb5pfwMJk73M=) Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/db9a372a-09bc-4a32-bfe4-8c48e5dbd219/6ecb3cca-488d-43b9-a50b-d37c0c55a9e1.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/db9a372a-09bc-4a32-bfe4-8c48e5dbd219/manifest.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FvUk-ODsfK4HacQuUP-zorVkpqw.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 24 Sep 2026 23:01:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 66:05:98:70:ff:e7:a0:90:20:7a:5c:b6:ea:ba:1b:68:e9:a2:74:14 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91509EC0000, serialNumber=16F524F8E0EC7CAE0769C42E50FFB3A2B564A6AC Validity Not Before: Sep 21 00:09:58 2026 GMT Not After : Sep 25 00:09:58 2026 GMT Subject: serialNumber=5b5638b87b1847be2e98100cecd18a8b280154e931cdb4ad6cffbccfaa53f0bd, CN=58810403-9ba0-403a-809b-c78252ab7f5d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dd:3f:af:a2:7a:7b:1b:cf:4e:82:8c:3e:3e:d5: 05:a8:4f:8a:ab:46:4d:fc:2f:5e:c3:41:ed:91:00: 6d:3b:08:0c:54:b3:99:2b:7e:67:92:9a:e4:df:25: ee:d5:13:2b:86:e5:d9:ae:5a:0a:b3:14:4a:93:87: cf:51:d9:0b:f5:1a:2f:69:6d:f0:29:d9:b1:89:2d: c6:dd:1c:d7:53:05:92:df:58:16:67:e8:9e:72:ff: 7b:ba:57:d2:cd:2f:68:81:44:0d:c3:e2:bd:31:a2: a0:75:2f:db:34:79:a4:25:27:d9:ce:54:21:12:83: d7:07:d8:7c:1b:18:90:19:20:ac:a7:ed:d4:07:08: 38:f5:19:b2:db:16:3c:4a:2a:12:ec:34:60:a2:e9: bb:01:55:6f:8f:77:3c:55:20:e8:9f:80:bb:45:59: 45:09:2a:a3:14:bc:7c:06:c3:14:1c:d1:26:42:98: 38:7c:67:75:93:ed:b5:40:63:e6:91:77:91:4f:86: 49:ff:94:eb:6e:dd:7f:be:40:85:73:5b:d9:9a:4f: 09:16:fb:3b:da:23:08:3c:de:5e:b1:41:87:c1:bf: 49:84:81:81:f8:e3:4f:68:5d:c5:47:48:b5:ea:c0: d7:25:1b:a1:1b:5e:44:6d:49:07:94:e4:18:e2:81: f3:83 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 36:4B:FC:4C:56:76:41:0C:F3:68:55:F5:87:36:B8:BF:03:DB:81:8B X509v3 Authority Key Identifier: keyid:16:F5:24:F8:E0:EC:7C:AE:07:69:C4:2E:50:FF:B3:A2:B5:64:A6:AC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FvUk-ODsfK4HacQuUP-zorVkpqw.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/db9a372a-09bc-4a32-bfe4-8c48e5dbd219/manifest.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/db9a372a-09bc-4a32-bfe4-8c48e5dbd219/6ecb3cca-488d-43b9-a50b-d37c0c55a9e1.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a2:2c:96:6a:6b:ea:dc:3e:b4:b9:73:7e:13:52:9f:6c:78:d8: 5b:6f:9d:2d:84:46:b6:0a:a5:6a:6d:ce:0d:e2:6d:c4:f6:f0: b7:ed:35:a2:47:09:4c:47:77:d5:64:c0:a2:ca:3f:41:c1:e7: 49:c8:71:20:1c:68:05:20:6a:71:fb:dd:c3:dc:6e:fb:35:cf: 5c:71:fe:2b:6e:17:68:f8:eb:45:4c:aa:ab:65:98:44:b7:d4: f7:ed:a7:b1:4c:d0:c8:45:64:a8:e7:68:ce:3d:29:0f:b5:3a: c4:34:31:77:8a:24:1d:d8:8b:13:b1:24:bf:b5:5b:75:3a:76: ad:70:f9:a2:a0:4a:07:98:b5:41:83:29:b3:c7:1a:b5:ac:50: 39:cb:0f:47:05:f5:e2:3d:aa:87:7a:23:cb:f9:65:75:d9:d5: 6b:ef:1d:af:ec:9f:61:c7:f6:ca:08:fd:3a:ea:f0:82:ac:87: 8b:bc:bb:25:ce:dc:6b:40:ab:50:fa:98:04:f7:a6:9d:71:5c: 5b:53:d4:dd:d7:57:3f:04:4b:94:b8:8b:44:89:d2:8e:59:cb: 98:c1:f6:3f:18:8f:67:30:75:99:37:40:e2:ad:82:ae:b0:ba: b0:a5:83:b5:27:4e:5f:1d:fd:4d:d1:08:27:f9:5b:af:15:ef: 5c:d2:6d:54 -----BEGIN CERTIFICATE----- MIIFlTCCBH2gAwIBAgIUZgWYcP/noJAgely26robaOmidBQwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxNTA5RUMwMDAwMTEwLwYDVQQFEygxNkY1MjRGOEUw RUM3Q0FFMDc2OUM0MkU1MEZGQjNBMkI1NjRBNkFDMB4XDTI2MDkyMTAwMDk1OFoX DTI2MDkyNTAwMDk1OFowejFJMEcGA1UEBRNANWI1NjM4Yjg3YjE4NDdiZTJlOTgx MDBjZWNkMThhOGIyODAxNTRlOTMxY2RiNGFkNmNmZmJjY2ZhYTUzZjBiZDEtMCsG A1UEAxMkNTg4MTA0MDMtOWJhMC00MDNhLTgwOWItYzc4MjUyYWI3ZjVkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3T+vonp7G89Ogow+PtUFqE+Kq0ZN /C9ew0HtkQBtOwgMVLOZK35nkprk3yXu1RMrhuXZrloKsxRKk4fPUdkL9RovaW3w KdmxiS3G3RzXUwWS31gWZ+iecv97ulfSzS9ogUQNw+K9MaKgdS/bNHmkJSfZzlQh EoPXB9h8GxiQGSCsp+3UBwg49Rmy2xY8SioS7DRgoum7AVVvj3c8VSDon4C7RVlF CSqjFLx8BsMUHNEmQpg4fGd1k+21QGPmkXeRT4ZJ/5Trbt1/vkCFc1vZmk8JFvs7 2iMIPN5esUGHwb9JhIGB+ONPaF3FR0i16sDXJRuhG15EbUkHlOQY4oHzgwIDAQAB o4ICQTCCAj0wHQYDVR0OBBYEFDZL/ExWdkEM82hV9Yc2uL8D24GLMB8GA1UdIwQY MBaAFBb1JPjg7HyuB2nELlD/s6K1ZKasMA4GA1UdDwEB/wQEAwIHgDB+BggrBgEF BQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVw b3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9GdlVrLU9E c2ZLNEhhY1F1VVAtem9yVmtwcXcuY2VyMH8GCCsGAQUFBwELBHMwcTBvBggrBgEF BQcwC4ZjcnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5hbWF6b25hd3MuY29t L3ZvbHVtZS9kYjlhMzcyYS0wOWJjLTRhMzItYmZlNC04YzQ4ZTVkYmQyMTkvbWFu aWZlc3QubWZ0MIGVBgNVHR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnBraS1y c3luYy51cy1lYXN0LTIuYW1hem9uYXdzLmNvbS92b2x1bWUvZGI5YTM3MmEtMDli Yy00YTMyLWJmZTQtOGM0OGU1ZGJkMjE5LzZlY2IzY2NhLTQ4OGQtNDNiOS1hNTBi LWQzN2MwYzU1YTllMS5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggr BgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYw BKACBQAwDQYJKoZIhvcNAQELBQADggEBAKIslmpr6tw+tLlzfhNSn2x42FtvnS2E RrYKpWptzg3ibcT28LftNaJHCUxHd9VkwKLKP0HB50nIcSAcaAUganH73cPcbvs1 z1xx/ituF2j460VMqqtlmES31Pftp7FM0MhFZKjnaM49KQ+1OsQ0MXeKJB3YixOx JL+1W3U6dq1w+aKgSgeYtUGDKbPHGrWsUDnLD0cF9eI9qod6I8v5ZXXZ1WvvHa/s n2HH9soI/Trq8IKsh4u8uyXO3GtAq1D6mAT3pp1xXFtT1N3XVz8ES5S4i0SJ0o5Z y5jB9j8Yj2cwdZk3QOKtgq6wurClg7UnTl8d/U3RCCf5W68V71zSbVQ= -----END CERTIFICATE-----Generated at Mon Sep 21 03:51:52 2026 by rpki-client