$ rpki-client -vvvf rpki-rsync.us-east-2.amazonaws.com/volume/db9a372a-09bc-4a32-bfe4-8c48e5dbd219/manifest.mft File: manifest.mft (raw, json) Hash identifier: CiKYqr4hQw2l2fBN7Mk4tyWUosb5dlqw+DuDYal2pq4= Subject key identifier: 21:A4:BA:B6:AC:F6:8E:29:0B:31:DF:0E:BD:69:B9:D7:21:D4:E2:4B Authority key identifier: 16:F5:24:F8:E0:EC:7C:AE:07:69:C4:2E:50:FF:B3:A2:B5:64:A6:AC Certificate issuer: /CN=A91509EC0000/serialNumber=16F524F8E0EC7CAE0769C42E50FFB3A2B564A6AC Certificate serial: 44A9EB191A222A86069BF2FAAB8C57ADE2A996E2 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FvUk-ODsfK4HacQuUP-zorVkpqw.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/db9a372a-09bc-4a32-bfe4-8c48e5dbd219/manifest.mft Manifest number: 0650 Signing time: Thu 05 Nov 2026 00:05:11 +0000 Manifest this update: Thu 05 Nov 2026 00:05:11 +0000 Manifest next update: Mon 09 Nov 2026 00:05:11 +0000 Files and hashes: 1: 05bc8dbb-c70a-48da-b45b-4448364614ff.roa (hash: GzrrAfumHEMPi4ACEsRqcf2EBNjWevtrlZjHnMAFDks=) 2: 0bf15d3f-c546-4bb6-a764-82165c384d37.roa (hash: 6ESbmpYd7H+0YV5LqCGCwBRmIUQlbPsgFEVkrcgvI6A=) 3: 0c5c54ff-f977-4b96-8ce9-a1eaf082fe9c.roa (hash: tt4cYUE6Kg8jt0O69Zb567gWFoo5rjLLM97F4/aSiTA=) 4: 2f47dcdd-c384-4eb2-aefd-f4ad64f26cce.roa (hash: +a466zVwESTdjxfgtVGtNTJoIjBPUJ9uv2Bs/ijyO9Y=) 5: 3407e5b6-a83d-4668-898f-fdbb23092502.roa (hash: ctv+s5liGUupTIOcwnKFBRlwhuBF5BgXDx/DcStRkH4=) 6: 3b940d14-b8c4-4c3d-978f-a1a3b7a0a82c.roa (hash: U7qwuCrz1VnCc4jL9xa+4gQpFF8nN1gLyrdZ/L63EFo=) 7: 48a67156-122e-41d4-a2a8-8046cc5ecc41.roa (hash: AuAujhXdgm5mBGRTRbp9PUBSto8ttdqG3SjYXkZJhNU=) 8: 6cf57aa6-6ba3-43af-bbd5-44485e3b9f67.roa (hash: k7pzzb7UOogLzyI+ALFcZaO4Qks0yCOFh766YQdmoGM=) 9: 6ecb3cca-488d-43b9-a50b-d37c0c55a9e1.crl (hash: 1MY5CVsDEcf/HcfiGgnPCmmNke6cwcsz9fRmB7OugRQ=) 10: 74efe8b3-d39c-4a8b-9b7b-5994aa4c8d82.roa (hash: e1DBvmMaPGpJSh8i8g0PuQJn1YYGKeTyLpjn4SuF59M=) 11: 7a646ec3-fc0e-40e7-adb4-82d5fd83f029.roa (hash: yynW230gtjoHe64VdAtkS5LYRTOFwLp0sflgw8zSW1g=) 12: 82456ff2-f8c4-4c5a-9458-82d909f83f7d.roa (hash: b3WbF1oNV58mWBREtuTQNy22jE820qPWck/kuIxmC1c=) 13: 9b59fbe4-f242-4dbf-9964-15048c3da996.roa (hash: ebFkf49zM5vj6p8bvgwDY4iblS2Eu/OC9RTEbXIZXLY=) 14: 9b8e963e-7fa2-4ba1-a78a-4d1fd7989b32.roa (hash: wjxc0bk+R6A/Qa3pHhsyRWed5/iyieBQym3MXX6RyzY=) 15: a78b90df-233b-4ec6-89d2-de27ac2dc044.roa (hash: 7/m/Cx18xbuwPUSrgdH7o86spQdYaPb/GIoOb3+ub70=) 16: b3ba338e-4843-454b-abe5-65f09756225a.roa (hash: ej5Jl8WN8vpG/jtiHBYWjgJxmlZgso4oyf4xH338b+c=) 17: c1564659-f3aa-4021-a7a5-8f4b1c2c4963.roa (hash: c3ibl3WQRyfORjyV2jtV99MlRLv/+v4zO7ir01Gms8M=) 18: cc671c79-21f0-4fff-b898-595966ecd1a9.roa (hash: bCxmHdL+unu38R9ml+09zoVGrJd1Ey3pw4pz0o5BVp0=) Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/db9a372a-09bc-4a32-bfe4-8c48e5dbd219/6ecb3cca-488d-43b9-a50b-d37c0c55a9e1.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/db9a372a-09bc-4a32-bfe4-8c48e5dbd219/manifest.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FvUk-ODsfK4HacQuUP-zorVkpqw.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 09 Nov 2026 00:05:11 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 44:a9:eb:19:1a:22:2a:86:06:9b:f2:fa:ab:8c:57:ad:e2:a9:96:e2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91509EC0000, serialNumber=16F524F8E0EC7CAE0769C42E50FFB3A2B564A6AC Validity Not Before: Nov 5 00:05:11 2026 GMT Not After : Nov 9 00:05:11 2026 GMT Subject: serialNumber=21e95a71f48926c44fb7b7f917a8b99cf346d2a3e1b418bcbf5ac2daf1b75d06, CN=58810403-9ba0-403a-809b-c78252ab7f5d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:76:13:37:d1:3c:ac:5c:b8:53:03:55:33:02: 25:77:73:29:db:28:df:25:61:6b:0a:cb:f7:1b:4d: 9e:19:85:55:8b:6d:01:33:a9:d0:cc:21:68:d2:e2: ad:38:d6:ed:01:a7:ac:e0:6b:f8:84:13:68:6c:df: 0c:57:4c:52:ed:7b:3e:ef:8e:17:53:25:f8:6f:98: bf:38:40:05:73:aa:0d:70:c9:16:45:73:d5:df:ae: d5:5f:63:ed:c9:c3:5e:40:09:9f:5e:99:25:ea:f7: 47:77:71:7c:94:83:5d:6e:d9:6a:42:31:ef:87:07: 62:48:16:e7:16:c0:84:6f:16:e4:9a:fe:3d:0e:ef: cf:d3:50:4a:61:7a:ce:75:f6:19:e8:5a:e1:e3:ae: 09:f4:dd:5f:fc:33:5b:1e:d6:54:17:f4:38:62:85: f1:ba:c4:ec:7d:b7:87:7a:a5:74:7a:76:54:c3:6d: e8:35:81:a6:1e:78:47:75:a9:9f:70:43:0c:ef:0f: 63:44:01:fc:32:01:9d:2b:b5:13:68:35:5f:99:14: 03:df:da:dc:11:e3:74:59:d1:e4:9a:0c:ba:80:c9: af:ce:2b:b2:6d:68:bf:e2:0a:4b:31:7c:d9:5d:2d: 43:59:1c:7c:b9:cc:2f:54:89:7d:1f:53:d4:aa:1c: 1c:b5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 21:A4:BA:B6:AC:F6:8E:29:0B:31:DF:0E:BD:69:B9:D7:21:D4:E2:4B X509v3 Authority Key Identifier: keyid:16:F5:24:F8:E0:EC:7C:AE:07:69:C4:2E:50:FF:B3:A2:B5:64:A6:AC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FvUk-ODsfK4HacQuUP-zorVkpqw.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/db9a372a-09bc-4a32-bfe4-8c48e5dbd219/manifest.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/db9a372a-09bc-4a32-bfe4-8c48e5dbd219/6ecb3cca-488d-43b9-a50b-d37c0c55a9e1.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 03:e3:55:f4:f8:93:f4:fe:d5:e7:a1:e1:92:68:dd:34:ee:0b: 08:68:9c:28:ef:a7:6c:ec:26:04:33:b1:72:cd:51:b9:88:c1: 8c:2c:92:7a:9c:36:b1:2b:ea:3b:fa:96:92:fa:65:52:4b:7c: f2:e7:79:4d:50:e3:61:99:a7:1d:ec:d3:c1:e2:57:a8:68:98: 51:57:2a:96:56:c3:7f:77:9a:19:2c:54:38:86:39:9e:c9:f7: a6:55:87:1e:6b:19:85:c8:b0:43:a1:90:ef:6e:37:74:05:c7: 8e:a1:a1:27:bc:f8:d2:d2:09:6a:f1:d1:b2:9b:1a:a6:a8:09: 92:4d:f1:11:d7:f0:ce:f0:f1:24:95:95:b0:2e:a6:c3:7e:65: 92:4a:37:d9:74:f6:c3:5e:b5:c5:8d:34:75:e8:89:d2:8e:f8: 6e:49:2f:98:24:69:ed:9b:1e:d3:d3:79:91:23:b5:75:52:9e: fb:e8:a3:46:34:ca:28:18:20:f3:13:f7:ba:b4:d8:e3:c8:e2: 5a:8e:76:94:7f:3a:16:ab:ac:eb:b8:b2:7d:6b:0f:30:6f:48: d8:57:e5:94:47:a8:4d:f0:73:ef:6b:0d:f9:4d:ef:48:96:df: e0:94:12:06:23:fe:02:cb:c9:0a:68:33:90:67:a2:3a:fa:54: 14:3e:3d:ea -----BEGIN CERTIFICATE----- MIIFlTCCBH2gAwIBAgIURKnrGRoiKoYGm/L6q4xXreKpluIwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxNTA5RUMwMDAwMTEwLwYDVQQFEygxNkY1MjRGOEUw RUM3Q0FFMDc2OUM0MkU1MEZGQjNBMkI1NjRBNkFDMB4XDTI2MTEwNTAwMDUxMVoX DTI2MTEwOTAwMDUxMVowejFJMEcGA1UEBRNAMjFlOTVhNzFmNDg5MjZjNDRmYjdi N2Y5MTdhOGI5OWNmMzQ2ZDJhM2UxYjQxOGJjYmY1YWMyZGFmMWI3NWQwNjEtMCsG A1UEAxMkNTg4MTA0MDMtOWJhMC00MDNhLTgwOWItYzc4MjUyYWI3ZjVkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxXYTN9E8rFy4UwNVMwIld3Mp2yjf JWFrCsv3G02eGYVVi20BM6nQzCFo0uKtONbtAaes4Gv4hBNobN8MV0xS7Xs+744X UyX4b5i/OEAFc6oNcMkWRXPV367VX2PtycNeQAmfXpkl6vdHd3F8lINdbtlqQjHv hwdiSBbnFsCEbxbkmv49Du/P01BKYXrOdfYZ6Frh464J9N1f/DNbHtZUF/Q4YoXx usTsfbeHeqV0enZUw23oNYGmHnhHdamfcEMM7w9jRAH8MgGdK7UTaDVfmRQD39rc EeN0WdHkmgy6gMmvziuybWi/4gpLMXzZXS1DWRx8ucwvVIl9H1PUqhwctQIDAQAB o4ICQTCCAj0wHQYDVR0OBBYEFCGkuras9o4pCzHfDr1pudch1OJLMB8GA1UdIwQY MBaAFBb1JPjg7HyuB2nELlD/s6K1ZKasMA4GA1UdDwEB/wQEAwIHgDB+BggrBgEF BQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVw b3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9GdlVrLU9E c2ZLNEhhY1F1VVAtem9yVmtwcXcuY2VyMH8GCCsGAQUFBwELBHMwcTBvBggrBgEF BQcwC4ZjcnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5hbWF6b25hd3MuY29t L3ZvbHVtZS9kYjlhMzcyYS0wOWJjLTRhMzItYmZlNC04YzQ4ZTVkYmQyMTkvbWFu aWZlc3QubWZ0MIGVBgNVHR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnBraS1y c3luYy51cy1lYXN0LTIuYW1hem9uYXdzLmNvbS92b2x1bWUvZGI5YTM3MmEtMDli Yy00YTMyLWJmZTQtOGM0OGU1ZGJkMjE5LzZlY2IzY2NhLTQ4OGQtNDNiOS1hNTBi LWQzN2MwYzU1YTllMS5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggr BgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYw BKACBQAwDQYJKoZIhvcNAQELBQADggEBAAPjVfT4k/T+1eeh4ZJo3TTuCwhonCjv p2zsJgQzsXLNUbmIwYwsknqcNrEr6jv6lpL6ZVJLfPLneU1Q42GZpx3s08HiV6ho mFFXKpZWw393mhksVDiGOZ7J96ZVhx5rGYXIsEOhkO9uN3QFx46hoSe8+NLSCWrx 0bKbGqaoCZJN8RHX8M7w8SSVlbAupsN+ZZJKN9l09sNetcWNNHXoidKO+G5JL5gk ae2bHtPTeZEjtXVSnvvoo0Y0yigYIPMT97q02OPI4lqOdpR/OharrOu4sn1rDzBv SNhX5ZRHqE3wc+9rDflN70iW3+CUEgYj/gLLyQpoM5Bnojr6VBQ+Peo= -----END CERTIFICATE-----Generated at Thu Nov 5 05:11:24 2026 by rpki-client